@baseplate-dev/plugin-auth 0.1.3 → 0.6.3

package/dist/auth/generators/fastify/auth-module/templates/services/user-session.service.ts

@@ -1,251 +0,0 @@
-// @ts-nocheck
-
-import type { AuthUserSessionInfo } from '%authContextImports';
-import type { AuthRole } from '%authRolesImports';
-import type { RequestServiceContext } from '%requestServiceContextImports';
-import type {
-  UserSessionPayload,
-  UserSessionService,
-} from '%userSessionTypesImports';
-import type { CookieSerializeOptions } from '@fastify/cookie';
-import type { FastifyReply, FastifyRequest } from 'fastify';
-
-import { InvalidSessionError } from '%authContextImports';
-import { DEFAULT_USER_ROLES } from '%authRolesImports';
-import { config } from '%configServiceImports';
-import { ForbiddenError } from '%errorHandlerServiceImports';
-import { randomBytes } from 'node:crypto';
-
-import {
-  USER_SESSION_DURATION_SEC,
-  USER_SESSION_MAX_LIFETIME_SEC,
-  USER_SESSION_RENEWAL_THRESHOLD_SEC,
-} from '../constants/user-session.constants.js';
-import { signObject, unsignObject } from '../utils/cookie-signer.js';
-import { getUserSessionCookieName } from '../utils/session-cookie.js';
-import { verifyRequestOrigin } from '../utils/verify-request-origin.js';
-
-interface SessionCookieValue {
-  // Session token
-  token: string;
-}
-
-const COOKIE_OPTIONS: CookieSerializeOptions = {
-  httpOnly: true,
-  sameSite: 'lax',
-  secure: config.APP_ENVIRONMENT !== 'development',
-  maxAge: USER_SESSION_DURATION_SEC,
-  path: '/',
-};
-
-/**
- * Validates the expiry of a user session and determines if it needs to be renewed.
- *
- * @param currentDate The current date and time.
- * @param userSession The session details.
- * @param userSession.expiresAt The date and time when the session expires.
- * @param userSession.createdAt The date and time when the session was created.
- * @param userSession.renewedAt The date and time when the session was last renewed.
- * @returns The validity of the session and the new expiry date if applicable.
- */
-function validateSessionExpiry(
-  currentDate: Date,
-  userSession: {
-    expiresAt: Date;
-    createdAt: Date;
-    renewedAt: Date;
-  },
-): { valid: boolean; newExpiry: Date | null } {
-  // check if session is expired
-  if (userSession.expiresAt < currentDate) {
-    return { valid: false, newExpiry: null };
-  }
-
-  // check if session needs renewal
-  const shouldRenewBy =
-    userSession.renewedAt.getTime() + USER_SESSION_RENEWAL_THRESHOLD_SEC * 1000;
-
-  if (shouldRenewBy < currentDate.getTime()) {
-    const newExpiry = currentDate.getTime() + USER_SESSION_DURATION_SEC * 1000;
-    const maxExpiry =
-      USER_SESSION_MAX_LIFETIME_SEC === 0
-        ? undefined
-        : userSession.createdAt.getTime() +
-          USER_SESSION_MAX_LIFETIME_SEC * 1000;
-    return {
-      valid: true,
-      newExpiry: new Date(Math.min(newExpiry, maxExpiry ?? newExpiry)),
-    };
-  }
-
-  return { valid: true, newExpiry: null };
-}
-
-/**
- * Generates a session token
- *
- * @returns The session token
- */
-function generateSessionToken(): string {
-  return randomBytes(16).toString('base64url');
-}
-
-export class CookieUserSessionService implements UserSessionService {
-  /**
-   * Creates a user session cookie and sets it in the response.
-   *
-   * @param userId The ID of the user for whom the session is being created.
-   * @param context The request service context
-   * @param currentDate The current date and time. Defaults to the current date and time.
-   * @returns The session payload
-   */
-  async createSession(
-    userId: string,
-    context: RequestServiceContext,
-    currentDate: Date = new Date(),
-  ): Promise<UserSessionPayload> {
-    const token = generateSessionToken();
-    const expiresAt = new Date(
-      currentDate.getTime() + USER_SESSION_DURATION_SEC * 1000,
-    );
-
-    await TPL_PRISMA_USER_SESSION.create({
-      data: {
-        user: { connect: { id: userId } },
-        token,
-        expiresAt,
-      },
-    });
-
-    const cookieName = getUserSessionCookieName(context.reqInfo.headers);
-    const cookieValue = signObject({ token }, config.AUTH_SECRET);
-
-    context.cookieStore.set(cookieName, cookieValue, COOKIE_OPTIONS);
-
-    return { userId, expiresAt };
-  }
-
-  /**
-   * Ends the user session by clearing the session cookie and deleting the session from the database.
-   *
-   * @param sessionInfo The session info
-   * @param context The request service context
-   */
-  async clearSession(
-    sessionInfo: AuthUserSessionInfo,
-    context: RequestServiceContext,
-  ): Promise<void> {
-    await TPL_PRISMA_USER_SESSION.delete({
-      where: { id: sessionInfo.id },
-    });
-
-    const cookieName = getUserSessionCookieName(context.reqInfo.headers);
-    context.cookieStore.clear(cookieName);
-  }
-
-  /**
-   * Retrieves the user session information from the request.
-   *
-   * @param req - The Fastify request object containing the cookies.
-   * @param reply - The Fastify reply object used to set or clear cookies.
-   * @param currentDate - The current date used for session validation. Defaults to the current date and time.
-   * @returns A promise that resolves to the authenticated user session information or null if the session is invalid.
-   * @throws {InvalidSessionError} If the session is invalid or expired.
-   */
-  async getSessionInfoFromRequest(
-    req: FastifyRequest,
-    reply?: FastifyReply,
-  ): Promise<AuthUserSessionInfo | undefined> {
-    const currentDate = new Date();
-
-    // Check Origin header for non-GET/HEAD requests to prevent CSRF attacks
-    if (
-      (req.method !== 'GET' ||
-        req.headers.upgrade?.toLowerCase() === 'websocket') &&
-      req.method !== 'HEAD' &&
-      !verifyRequestOrigin(req, [req.host])
-    ) {
-      throw new ForbiddenError('Invalid Origin header');
-    }
-
-    const cookieName = getUserSessionCookieName(req.headers);
-    try {
-      // Check if the session cookie is present
-      const sessionCookieValue = req.cookies[cookieName];
-      if (!sessionCookieValue) return undefined;
-
-      // Unsign the session cookie
-      const sessionCookieResult = unsignObject(
-        sessionCookieValue,
-        config.AUTH_SECRET,
-      ) as SessionCookieValue | undefined;
-      if (!sessionCookieResult) throw new InvalidSessionError();
-
-      const { token } = sessionCookieResult;
-      if (typeof token !== 'string') throw new InvalidSessionError();
-
-      // Fetch and validate user session
-      const userSession = await TPL_PRISMA_USER_SESSION.findUnique({
-        where: { token },
-        include: { user: { select: { id: true, roles: true } } },
-      });
-      if (!userSession) throw new InvalidSessionError();
-
-      const sessionExpiryResult = validateSessionExpiry(
-        currentDate,
-        userSession,
-      );
-      if (!sessionExpiryResult.valid)
-        throw new InvalidSessionError('Session expired');
-
-      // renew the session if needed
-      if (sessionExpiryResult.newExpiry && reply) {
-        await TPL_PRISMA_USER_SESSION.update({
-          where: { id: userSession.id },
-          data: {
-            renewedAt: currentDate,
-            expiresAt: sessionExpiryResult.newExpiry,
-          },
-        });
-        const newSignedCookie = signObject({ token }, config.AUTH_SECRET);
-        reply.setCookie(cookieName, newSignedCookie, COOKIE_OPTIONS);
-      }
-
-      const { user } = userSession;
-      const expiresAt = sessionExpiryResult.newExpiry ?? userSession.expiresAt;
-
-      return {
-        id: userSession.id,
-        type: 'user',
-        roles: [
-          ...DEFAULT_USER_ROLES,
-          ...user.roles.map((role) => role.role as AuthRole),
-        ],
-        userId: user.id,
-        expiresAt,
-      };
-    } catch (err) {
-      // clear the cookie if it's invalid
-      if (err instanceof InvalidSessionError && reply) {
-        reply.clearCookie(cookieName);
-      }
-      throw err;
-    }
-  }
-
-  /**
-   * Retrieves the user session information from the authentication token
-   *
-   * Note: Since we use cookies, we ignore the authToken parameter
-   *
-   * @param req The request object
-   * @returns The session info or undefined if no session is found
-   */
-  async getSessionInfoFromToken(
-    req: FastifyRequest,
-  ): Promise<AuthUserSessionInfo | undefined> {
-    return this.getSessionInfoFromRequest(req, undefined);
-  }
-}
-
-export const userSessionService = new CookieUserSessionService();

package/dist/auth/generators/fastify/auth-module/templates/user-session.service.ts

@@ -1,101 +0,0 @@
-// @ts-nocheck
-
-import type { AuthUserSessionInfo } from '%authContextImports';
-import type { AuthRole } from '%authRolesImports';
-import type { UserSessionService } from '%userSessionTypesImports';
-import type { FastifyRequest } from 'fastify';
-
-import { DEFAULT_USER_ROLES } from '%authRolesImports';
-
-const USER_ID_CLAIM = 'https://app.com/user_id';
-const EMAIL_CLAIM = 'https://app.com/email';
-const EMAIL_VERIFIED_CLAIM = 'https://app.com/email_verified';
-const ROLES_CLAIM = 'https://app.com/roles';
-
-interface AuthJwt {
-  [USER_ID_CLAIM]?: string;
-  [EMAIL_CLAIM]?: string;
-  [EMAIL_VERIFIED_CLAIM]?: boolean;
-  [ROLES_CLAIM]?: string[];
-  sub: string;
-  email: string;
-  exp: number;
-}
-
-export class AuthUserSessionService implements UserSessionService {
-  /**
-   * Retrieves the user session information from the request.
-   *
-   * @param req - The Fastify request object containing the cookies.
-   * @param reply - The Fastify reply object used to set or clear cookies.
-   * @param currentDate - The current date used for session validation. Defaults to the current date and time.
-   * @returns A promise that resolves to the authenticated user session information or null if the session is invalid.
-   * @throws {InvalidSessionError} If the session is invalid or expired.
-   */
-  async getSessionInfoFromRequest(
-    req: FastifyRequest,
-  ): Promise<AuthUserSessionInfo | undefined> {
-    if (!req.headers.authorization) {
-      return undefined;
-    }
-
-    const verifiedJwt = await req.jwtVerify<AuthJwt>();
-    const userId = verifiedJwt[USER_ID_CLAIM];
-    const roles = verifiedJwt[ROLES_CLAIM] ?? [];
-    const email = verifiedJwt[EMAIL_CLAIM];
-
-    if (!userId) {
-      throw new Error(`Missing user id in JWT`);
-    }
-
-    const user = await TPL_USER_MODEL.findUnique({ where: { id: userId } });
-
-    // create user if one does not exist already
-    if (!email) {
-      throw new Error(`Missing email claim in JWT`);
-    }
-    if (!user) {
-      // Use createMany to avoid race-conditions with creating the user
-      await TPL_USER_MODEL.createMany({
-        data: [
-          {
-            id: userId,
-            authId: verifiedJwt.sub,
-            email,
-          },
-        ],
-        skipDuplicates: true,
-      });
-    }
-
-    return {
-      id: verifiedJwt.sub,
-      type: 'user',
-      userId,
-      roles: [...DEFAULT_USER_ROLES, ...roles] as AuthRole[],
-      expiresAt:
-        typeof verifiedJwt.exp === 'number'
-          ? new Date(verifiedJwt.exp * 1000)
-          : undefined,
-    };
-  }
-
-  /**
-   * Retrieves the user session information from the authentication token
-   *
-   * @param req The request object
-   * @returns The session info or undefined if no session is found
-   */
-  async getSessionInfoFromToken(
-    req: FastifyRequest,
-    token?: string | null,
-  ): Promise<AuthUserSessionInfo | undefined> {
-    // We have to manually add the header to the request since we can't
-    // use server.jwt.verify due to an error
-    req.headers.authorization = token ?? undefined;
-
-    return this.getSessionInfoFromRequest(req);
-  }
-}
-
-export const userSessionService = new AuthUserSessionService();

package/dist/auth/generators/fastify/auth-module/templates/utils/cookie-signer.ts

@@ -1,71 +0,0 @@
-// @ts-nocheck
-
-import * as crypto from 'node:crypto';
-
-/**
- * Sign the given `val` with `secret` using HMAC-SHA256.
- *
- * @param val - The value to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed value.
- */
-export function sign(val: string, secret: string): string {
-  return `${val}.${crypto
-    .createHmac('sha256', secret)
-    .update(val)
-    .digest('base64')
-    // remove all equal signs since they are not valid in cookie values
-    .replaceAll('=', '')}`;
-}
-
-/**
- * Unsign and decode the given `input` with `secret`,
- *
- * @param input - The signed cookie string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The unsigned value or undefined if the signature is invalid.
- */
-export function unsign(input: string, secret: string): string | undefined {
-  const tentativeValue = input.slice(0, input.lastIndexOf('.'));
-  const expectedInput = sign(tentativeValue, secret);
-  const expectedBuffer = Buffer.from(expectedInput);
-  const inputBuffer = Buffer.from(input);
-  if (
-    expectedBuffer.length !== inputBuffer.length ||
-    !crypto.timingSafeEqual(expectedBuffer, inputBuffer)
-  ) {
-    return undefined;
-  }
-  return tentativeValue;
-}
-
-/**
- * Sign an object by JSON stringifying and base64 encoding it, then signing with secret.
- *
- * @param obj - The object to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed encoded object.
- */
-export function signObject(obj: unknown, secret: string): string {
-  const encoded = Buffer.from(JSON.stringify(obj)).toString('base64url');
-  return sign(encoded, secret);
-}
-
-/**
- * Unsign and decode an object that was signed with signObject.
- *
- * @param input - The signed encoded object string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The decoded object or undefined if the signature is invalid.
- */
-export function unsignObject(input: string, secret: string): unknown {
-  const unsigned = unsign(input, secret);
-  if (!unsigned) return undefined;
-
-  try {
-    const decoded = Buffer.from(unsigned, 'base64url').toString('utf8');
-    return JSON.parse(decoded);
-  } catch {
-    return undefined;
-  }
-}

package/dist/auth/generators/fastify/auth-module/templates/utils/session-cookie.ts

@@ -1,42 +0,0 @@
-// @ts-nocheck
-
-import type { FastifyRequest } from 'fastify';
-
-import { config } from '%configServiceImports';
-
-const COOKIE_NAME = 'user-session';
-
-/**
- * Retrieves the name of the session cookie based on the provided request.
- * If the application environment is not 'development', the cookie name will be prefixed with '__Host-'.
- * In development, the cookie name will be suffixed with the port number.
- *
- * @param req - The FastifyRequest object representing the incoming request.
- * @returns The name of the Iron session cookie.
- */
-export function getUserSessionCookieName(
-  headers: FastifyRequest['headers'],
-): string {
-  if (config.APP_ENVIRONMENT !== 'development') {
-    return `__Host-${COOKIE_NAME}`;
-  }
-  // in development, localhost does not support the __Host prefix and should be scoped to port
-  // use origin/referer header to determine hostname because dev reverse proxies use origin/referer to signal the original host
-  const { origin, referer } = headers;
-  const originalHost = origin ?? referer;
-  let port;
-  try {
-    if (!originalHost) {
-      port = config.SERVER_PORT;
-    } else {
-      const url = new URL(originalHost);
-      const parsedPort = Number.parseInt(url.port, 10);
-      // Validate port is in valid range (1-65535)
-      port =
-        parsedPort > 0 && parsedPort < 65_536 ? parsedPort : config.SERVER_PORT;
-    }
-  } catch {
-    port = config.SERVER_PORT;
-  }
-  return `${COOKIE_NAME}-${port}`;
-}

package/dist/auth/generators/fastify/index.d.ts

@@ -1,2 +0,0 @@
-export * from './auth-module/auth-module.generator.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/generators/fastify/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/auth/generators/fastify/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC"}

package/dist/auth/generators/fastify/index.js

@@ -1,2 +0,0 @@
-export * from './auth-module/auth-module.generator.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/generators/fastify/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/auth/generators/fastify/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC"}

package/dist/auth/generators/index.d.ts

@@ -1,2 +0,0 @@
-export * from './fastify/index.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/generators/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/generators/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC"}

package/dist/auth/generators/index.js

@@ -1,2 +0,0 @@
-export * from './fastify/index.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/generators/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/generators/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC"}

package/dist/auth/metadata.json

@@ -1,8 +0,0 @@
-{
-  "name": "auth",
-  "displayName": "Auth",
-  "icon": "icon.svg",
-  "description": "This plugin sets up a self-hosted auth service using email/password authentication.",
-  "version": "0.1.0",
-  "moduleDirectories": ["core"]
-}

package/dist/auth0/constants/packages.d.ts

@@ -1,6 +0,0 @@
-export declare const AUTH0_PACKAGES: {
-    readonly auth0: "4.0.2";
-    readonly 'fastify-auth0-verify': "3.0.0";
-    readonly '@auth0/auth0-react': "2.3.0";
-};
-//# sourceMappingURL=packages.d.ts.map

package/dist/auth0/constants/packages.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"packages.d.ts","sourceRoot":"","sources":["../../../src/auth0/constants/packages.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc;;;;CAKjB,CAAC"}

package/dist/auth0/constants/packages.js

@@ -1,6 +0,0 @@
-export const AUTH0_PACKAGES = {
-    auth0: '4.0.2',
-    'fastify-auth0-verify': '3.0.0',
-    '@auth0/auth0-react': '2.3.0',
-};
-//# sourceMappingURL=packages.js.map

package/dist/auth0/constants/packages.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"packages.js","sourceRoot":"","sources":["../../../src/auth0/constants/packages.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,KAAK,EAAE,OAAO;IACd,sBAAsB,EAAE,OAAO;IAE/B,oBAAoB,EAAE,OAAO;CACrB,CAAC"}

package/dist/auth0/core/common.d.ts

@@ -1,7 +0,0 @@
-declare const _default: import("@baseplate-dev/project-builder-lib").PluginPlatformModule<{
-    config: import("@baseplate-dev/project-builder-lib").PluginSpecWithInitializer<import("@baseplate-dev/project-builder-lib").PluginConfigSpec>;
-}, {
-    authConfig: import("@baseplate-dev/project-builder-lib").PluginSpec<import("@baseplate-dev/project-builder-lib").AuthConfigSpec>;
-}>;
-export default _default;
-//# sourceMappingURL=common.d.ts.map

package/dist/auth0/core/common.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/auth0/core/common.ts"],"names":[],"mappings":";;;;;AAYA,wBA6BG"}

package/dist/auth0/core/common.js

@@ -1,28 +0,0 @@
-import { authConfigSpec, createPlatformPluginExport, pluginConfigSpec, PluginUtils, } from '@baseplate-dev/project-builder-lib';
-import { AUTH0_PLUGIN_CONFIG_MIGRATIONS } from './schema/migrations.js';
-import { auth0PluginDefinitionSchema } from './schema/plugin-definition.js';
-export default createPlatformPluginExport({
-    dependencies: {
-        config: pluginConfigSpec,
-    },
-    exports: {
-        authConfig: authConfigSpec,
-    },
-    initialize: ({ config }, { pluginId }) => {
-        config.registerSchema(pluginId, auth0PluginDefinitionSchema);
-        config.registerMigrations(pluginId, AUTH0_PLUGIN_CONFIG_MIGRATIONS);
-        return {
-            authConfig: {
-                getUserModel: (definition) => {
-                    const pluginConfig = PluginUtils.configByIdOrThrow(definition, pluginId);
-                    return pluginConfig.modelRefs.user;
-                },
-                getAuthRoles: (definition) => {
-                    const pluginConfig = PluginUtils.configByIdOrThrow(definition, pluginId);
-                    return pluginConfig.roles;
-                },
-            },
-        };
-    },
-});
-//# sourceMappingURL=common.js.map

package/dist/auth0/core/common.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/auth0/core/common.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,EAChB,WAAW,GACZ,MAAM,oCAAoC,CAAC;AAI5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5E,eAAe,0BAA0B,CAAC;IACxC,YAAY,EAAE;QACZ,MAAM,EAAE,gBAAgB;KACzB;IACD,OAAO,EAAE;QACP,UAAU,EAAE,cAAc;KAC3B;IACD,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACvC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;QAC7D,MAAM,CAAC,kBAAkB,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC;QACpE,OAAO;YACL,UAAU,EAAE;gBACV,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;oBAC3B,MAAM,YAAY,GAAG,WAAW,CAAC,iBAAiB,CAChD,UAAU,EACV,QAAQ,CACgB,CAAC;oBAC3B,OAAO,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC;gBACrC,CAAC;gBACD,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;oBAC3B,MAAM,YAAY,GAAG,WAAW,CAAC,iBAAiB,CAChD,UAAU,EACV,QAAQ,CACgB,CAAC;oBAC3B,OAAO,YAAY,CAAC,KAAK,CAAC;gBAC5B,CAAC;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/auth0/core/components/auth-definition-editor.d.ts

@@ -1,5 +0,0 @@
-import type { WebConfigProps } from '@baseplate-dev/project-builder-lib';
-import type React from 'react';
-import '#src/styles.css';
-export declare function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave, }: WebConfigProps): React.JSX.Element;
-//# sourceMappingURL=auth-definition-editor.d.ts.map

package/dist/auth0/core/components/auth-definition-editor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-definition-editor.d.ts","sourceRoot":"","sources":["../../../../src/auth0/core/components/auth-definition-editor.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAsC/B,OAAO,iBAAiB,CAAC;AAEzB,wBAAgB,oBAAoB,CAAC,EACnC,UAAU,EAAE,cAAc,EAC1B,QAAQ,EACR,MAAM,GACP,EAAE,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CA8HpC"}

package/dist/auth0/core/components/auth-definition-editor.js

@@ -1,57 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { authRoleEntityType, createAndApplyModelMergerResults, createModelMergerResults, FeatureUtils, ModelUtils, PluginUtils, } from '@baseplate-dev/project-builder-lib';
-import { FeatureComboboxFieldController, ModelComboboxFieldController, ModelMergerResultAlert, useBlockUnsavedChangesNavigate, useProjectDefinition, useResettableForm, } from '@baseplate-dev/project-builder-lib/web';
-import { FormActionBar, SectionList, SectionListSection, SectionListSectionContent, SectionListSectionDescription, SectionListSectionHeader, SectionListSectionTitle, } from '@baseplate-dev/ui-components';
-import { zodResolver } from '@hookform/resolvers/zod';
-import { useMemo } from 'react';
-import { AUTH_DEFAULT_ROLES } from '#src/roles/index.js';
-import { createAuth0Models } from '../schema/models.js';
-import { auth0PluginDefinitionSchema } from '../schema/plugin-definition.js';
-import RoleEditorForm from './role-editor-form.js';
-import '#src/styles.css';
-export function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave, }) {
-    const { definition, definitionContainer, saveDefinitionWithFeedback } = useProjectDefinition();
-    const defaultValues = useMemo(() => {
-        if (pluginMetadata?.config) {
-            return pluginMetadata.config;
-        }
-        return {
-            modelRefs: {
-                user: ModelUtils.getModelIdByNameOrDefault(definition, 'User'),
-            },
-            authFeatureRef: FeatureUtils.getFeatureIdByNameOrDefault(definition, 'auth'),
-            roles: AUTH_DEFAULT_ROLES.map((r) => ({
-                ...r,
-                id: authRoleEntityType.generateNewId(),
-            })),
-        };
-    }, [definition, pluginMetadata?.config]);
-    const form = useResettableForm({
-        resolver: zodResolver(auth0PluginDefinitionSchema),
-        defaultValues,
-    });
-    const { control, reset, handleSubmit, watch } = form;
-    const modelRefs = watch('modelRefs');
-    const authFeatureRef = watch('authFeatureRef');
-    const pendingModelChanges = useMemo(() => {
-        const desiredModels = createAuth0Models({ modelRefs, authFeatureRef });
-        return createModelMergerResults(modelRefs, desiredModels, definitionContainer);
-    }, [definitionContainer, authFeatureRef, modelRefs]);
-    const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
-        const featureRef = FeatureUtils.ensureFeatureByNameRecursively(draftConfig, data.authFeatureRef);
-        const updatedData = {
-            ...data,
-            authFeatureRef: featureRef,
-        };
-        createAndApplyModelMergerResults(draftConfig, updatedData.modelRefs, createAuth0Models(updatedData), definitionContainer);
-        PluginUtils.setPluginConfig(draftConfig, metadata, updatedData, definitionContainer.pluginStore);
-    }, {
-        successMessage: 'Successfully saved Auth0 plugin!',
-        onSuccess: () => {
-            onSave();
-        },
-    }));
-    useBlockUnsavedChangesNavigate({ control, reset, onSubmit });
-    return (_jsxs("form", { onSubmit: onSubmit, className: "max-w-6xl auth:mb-[--action-bar-height]", children: [_jsx("div", { className: "auth:pb-16", children: _jsxs(SectionList, { children: [_jsxs(SectionListSection, { children: [_jsxs(SectionListSectionHeader, { children: [_jsx(SectionListSectionTitle, { children: "Auth0 Configuration" }), _jsx(SectionListSectionDescription, { children: "Configure your Auth0 authentication settings, user model, and role definitions." })] }), _jsxs(SectionListSectionContent, { className: "auth:space-y-6", children: [_jsx(ModelMergerResultAlert, { pendingModelChanges: pendingModelChanges }), _jsxs("div", { className: "md:auth:grid-cols-2 auth:grid auth:grid-cols-1 auth:gap-6", children: [_jsx(ModelComboboxFieldController, { label: "User Model", name: "modelRefs.user", control: control, canCreate: true, description: "Select or create the model that will store user authentication data" }), _jsx(FeatureComboboxFieldController, { label: "Auth Feature Path", name: "authFeatureRef", control: control, canCreate: true, description: "Specify the feature path where authentication endpoints will be generated" })] })] })] }), _jsx(RoleEditorForm, { control: control })] }) }), _jsx(FormActionBar, { form: form })] }));
-}
-//# sourceMappingURL=auth-definition-editor.js.map

package/dist/auth0/core/components/auth-definition-editor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-definition-editor.js","sourceRoot":"","sources":["../../../../src/auth0/core/components/auth-definition-editor.tsx"],"names":[],"mappings":";AAGA,OAAO,EACL,kBAAkB,EAClB,gCAAgC,EAChC,wBAAwB,EACxB,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,sBAAsB,EACtB,8BAA8B,EAC9B,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAIzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,cAAc,MAAM,uBAAuB,CAAC;AAEnD,OAAO,iBAAiB,CAAC;AAEzB,MAAM,UAAU,oBAAoB,CAAC,EACnC,UAAU,EAAE,cAAc,EAC1B,QAAQ,EACR,MAAM,GACS;IACf,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,GACnE,oBAAoB,EAAE,CAAC;IAEzB,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;QACjC,IAAI,cAAc,EAAE,MAAM,EAAE,CAAC;YAC3B,OAAO,cAAc,CAAC,MAAoC,CAAC;QAC7D,CAAC;QAED,OAAO;YACL,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU,CAAC,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC;aAC/D;YACD,cAAc,EAAE,YAAY,CAAC,2BAA2B,CACtD,UAAU,EACV,MAAM,CACP;YACD,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,GAAG,CAAC;gBACJ,EAAE,EAAE,kBAAkB,CAAC,aAAa,EAAE;aACvC,CAAC,CAAC;SACiC,CAAC;IACzC,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAG,iBAAiB,CAAC;QAC7B,QAAQ,EAAE,WAAW,CAAC,2BAA2B,CAAC;QAClD,aAAa;KACd,CAAC,CAAC;IACH,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAErD,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAE/C,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,EAAE;QACvC,MAAM,aAAa,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;QAEvE,OAAO,wBAAwB,CAC7B,SAAS,EACT,aAAa,EACb,mBAAmB,CACpB,CAAC;IACJ,CAAC,EAAE,CAAC,mBAAmB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,0BAA0B,CACxB,CAAC,WAAW,EAAE,EAAE;QACd,MAAM,UAAU,GAAG,YAAY,CAAC,8BAA8B,CAC5D,WAAW,EACX,IAAI,CAAC,cAAc,CACpB,CAAC;QACF,MAAM,WAAW,GAAG;YAClB,GAAG,IAAI;YACP,cAAc,EAAE,UAAU;SAC3B,CAAC;QACF,gCAAgC,CAC9B,WAAW,EACX,WAAW,CAAC,SAAS,EACrB,iBAAiB,CAAC,WAAW,CAAC,EAC9B,mBAAmB,CACpB,CAAC;QACF,WAAW,CAAC,eAAe,CACzB,WAAW,EACX,QAAQ,EACR,WAAW,EACX,mBAAmB,CAAC,WAAW,CAChC,CAAC;IACJ,CAAC,EACD;QACE,cAAc,EAAE,kCAAkC;QAClD,SAAS,EAAE,GAAG,EAAE;YACd,MAAM,EAAE,CAAC;QACX,CAAC;KACF,CACF,CACF,CAAC;IAEF,8BAA8B,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE7D,OAAO,CACL,gBACE,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAC,yCAAyC,aAEnD,cAAK,SAAS,EAAC,YAAY,YACzB,MAAC,WAAW,eACV,MAAC,kBAAkB,eACjB,MAAC,wBAAwB,eACvB,KAAC,uBAAuB,sCAEE,EAC1B,KAAC,6BAA6B,kGAGE,IACP,EAC3B,MAAC,yBAAyB,IAAC,SAAS,EAAC,gBAAgB,aACnD,KAAC,sBAAsB,IACrB,mBAAmB,EAAE,mBAAmB,GACxC,EAEF,eAAK,SAAS,EAAC,2DAA2D,aACxE,KAAC,4BAA4B,IAC3B,KAAK,EAAC,YAAY,EAClB,IAAI,EAAC,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,SAAS,QACT,WAAW,EAAC,qEAAqE,GACjF,EACF,KAAC,8BAA8B,IAC7B,KAAK,EAAC,mBAAmB,EACzB,IAAI,EAAC,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,SAAS,QACT,WAAW,EAAC,2EAA2E,GACvF,IACE,IACoB,IACT,EAErB,KAAC,cAAc,IAAC,OAAO,EAAE,OAAO,GAAI,IACxB,GACV,EAEN,KAAC,aAAa,IAAC,IAAI,EAAE,IAAI,GAAI,IACxB,CACR,CAAC;AACJ,CAAC"}