@baseplate-dev/plugin-auth 0.6.17 → 0.6.19

package/dist/web/assets/web-CypPeiVv.js

@@ -0,0 +1,148 @@
+import { Q as __mf_2, Z as __mf_1, d as __mf_202, f as __mf_203, g as __mf_207, h as __mf_206, i as __mf_166, m as __mf_205, mt as __mf_34, p as __mf_204, t as __mf_128, vt as init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__, y as __mf_262 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-CtIleM_e.js";
+import { T as __mf_74, _ as __mf_244, f as __mf_18, g as __mf_240, h as __mf_24, w as __mf_72, y as __mf_56 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-DE4rTqEA.js";
+import { c as __mf_25, i as __mf_15, l as __mf_26, n as __mf_11, r as __mf_14, t as __mf_0, u as __mf_7 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-mszeXpf-.js";
+import { n as a, t as AuthConfigTabs } from "./styles-BQEcQHoR.js";
+import { t as getAuthPluginDefinition } from "./get-auth-plugin-definition-BgWWHl_Y.js";
+import { n as createLocalAuthPluginDefinitionSchema, t as createLocalAuthPartialDefinition } from "./models-DF6DoXt6.js";
+//#region src/local-auth/core/components/local-auth-definition-editor.tsx
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__();
+function LocalAuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave }) {
+	const { definition, definitionContainer, saveDefinitionWithFeedback } = __mf_14();
+	const authPluginDefinitionSchema = __mf_11(createLocalAuthPluginDefinitionSchema);
+	const authDefinition = getAuthPluginDefinition(definition);
+	const roles = authDefinition.roles.filter((role) => !role.builtIn).map((role) => ({
+		label: role.name,
+		value: role.id
+	}));
+	const defaultValues = __mf_34(() => {
+		if (pluginMetadata?.config) return pluginMetadata.config;
+		return {
+			additionalUserAdminRoles: [],
+			requireNameOnRegistration: false,
+			emailOtp: false
+		};
+	}, [pluginMetadata?.config]);
+	const form = __mf_15({
+		resolver: a(authPluginDefinitionSchema),
+		defaultValues
+	});
+	const { control, reset, handleSubmit } = form;
+	const authFeature = definition.features.find((f) => f.id === authDefinition.authFeatureRef);
+	if (!authFeature) throw new Error(`Auth feature not found for ref: ${authDefinition.authFeatureRef}`);
+	const accountsFeature = definition.features.find((f) => f.id === authDefinition.accountsFeatureRef);
+	if (!accountsFeature) throw new Error(`Accounts feature not found for ref: ${authDefinition.accountsFeatureRef}`);
+	const partialDef = __mf_34(() => createLocalAuthPartialDefinition(authFeature.name, accountsFeature.name), [authFeature.name, accountsFeature.name]);
+	const diff = __mf_34(() => __mf_240(definitionContainer.schema, definitionContainer.definition, partialDef), [definitionContainer, partialDef]);
+	const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
+		const updatedData = { ...data };
+		__mf_244(definitionContainer, partialDef)(draftConfig);
+		__mf_24.setPluginConfig(draftConfig, metadata, updatedData, definitionContainer);
+	}, {
+		successMessage: "Successfully saved auth plugin!",
+		onSuccess: () => {
+			onSave();
+		}
+	}));
+	__mf_7({
+		control,
+		reset,
+		onSubmit
+	});
+	return /* @__PURE__ */ __mf_2("div", {
+		className: "auth:relative auth:flex auth:h-full auth:flex-1 auth:flex-col auth:gap-4 auth:overflow-hidden",
+		children: [/* @__PURE__ */ __mf_1(AuthConfigTabs, {}), /* @__PURE__ */ __mf_1("div", {
+			className: "auth:mb-[--action-bar-height] auth:flex auth:flex-1 auth:overflow-y-auto",
+			style: { "--action-bar-height": "52px" },
+			children: /* @__PURE__ */ __mf_2("form", {
+				onSubmit,
+				className: "auth:max-w-6xl auth:flex-1",
+				children: [/* @__PURE__ */ __mf_1("div", {
+					className: "auth:pb-16",
+					children: /* @__PURE__ */ __mf_2(__mf_202, { children: [
+						/* @__PURE__ */ __mf_2(__mf_203, { children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "Local Auth User Models" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "The plugin will automatically configure the models it needs." })] }), /* @__PURE__ */ __mf_1(__mf_204, {
+							className: "auth:space-y-6",
+							children: /* @__PURE__ */ __mf_1(__mf_0, { diff })
+						})] }),
+						/* @__PURE__ */ __mf_2(__mf_203, { children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "User Management Permissions" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "The \"admin\" role always has user management permissions. Optionally add more roles that can manage users and assign roles in the admin interface." })] }), /* @__PURE__ */ __mf_1(__mf_204, {
+							className: "auth:space-y-6",
+							children: /* @__PURE__ */ __mf_1(__mf_166, {
+								label: "Additional User Admin Roles",
+								name: "additionalUserAdminRoles",
+								control,
+								options: roles,
+								description: "Additional roles (beyond admin) that can manage users and assign roles."
+							})
+						})] }),
+						/* @__PURE__ */ __mf_2(__mf_203, { children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "Registration Settings" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "Configure what information is collected during user registration." })] }), /* @__PURE__ */ __mf_1(__mf_204, {
+							className: "auth:space-y-6",
+							children: /* @__PURE__ */ __mf_1(__mf_262, {
+								label: "Require Name on Registration",
+								name: "requireNameOnRegistration",
+								control,
+								description: "When enabled, users must provide their name when registering."
+							})
+						})] }),
+						/* @__PURE__ */ __mf_2(__mf_203, { children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "Sign-in Methods" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "Choose how users can sign in, in addition to email and password." })] }), /* @__PURE__ */ __mf_1(__mf_204, {
+							className: "auth:space-y-6",
+							children: /* @__PURE__ */ __mf_1(__mf_262, {
+								label: "Email Sign-in Codes",
+								name: "emailOtp",
+								control,
+								description: "When enabled, users can sign in with a single-use code emailed to them instead of a password. Signing in with a code creates an account if the address is new."
+							})
+						})] })
+					] })
+				}), /* @__PURE__ */ __mf_1(__mf_128, {
+					form,
+					allowSaveWithoutDirty: !pluginMetadata || diff.hasChanges
+				})]
+			})
+		})]
+	});
+}
+//#endregion
+//#region src/local-auth/core/components/local-auth-web-app-settings-form.tsx
+/**
+* Renders the local-auth per-app settings (disable registration toggle) in
+* the web app settings page. Bound to `pluginData[pluginKey]` on the shared
+* web app form.
+*/
+function LocalAuthWebAppSettingsForm({ formProps, pluginKey }) {
+	return /* @__PURE__ */ __mf_1(__mf_262, {
+		label: "Disable Registration",
+		description: "When enabled, this site's sign-up page and link are hidden so users can only be added via an invite.",
+		control: formProps.control,
+		name: `pluginData.${pluginKey}.disableRegistration`
+	});
+}
+//#endregion
+//#region src/local-auth/core/web.ts
+var AUTH_FEATURE_NAME = "accounts/auth";
+var ACCOUNTS_FEATURE_NAME = "accounts/users";
+var web_default = __mf_56({
+	name: "web",
+	dependencies: {
+		webConfig: __mf_74,
+		pluginDefaults: __mf_72,
+		webAppSchemaExtensionWeb: __mf_26
+	},
+	initialize: ({ webConfig, pluginDefaults, webAppSchemaExtensionWeb }, { pluginKey }) => {
+		webConfig.components.set(pluginKey, LocalAuthDefinitionEditor);
+		webAppSchemaExtensionWeb.configs.set(pluginKey, __mf_25({
+			pluginKey,
+			Form: LocalAuthWebAppSettingsForm
+		}));
+		pluginDefaults.builders.set(pluginKey, ({ draft }) => {
+			__mf_18.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
+			__mf_18.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
+			return {
+				config: {},
+				partialDef: createLocalAuthPartialDefinition(AUTH_FEATURE_NAME, ACCOUNTS_FEATURE_NAME)
+			};
+		});
+	}
+});
+//#endregion
+export { web_default as default };
+
+//# sourceMappingURL=web-CypPeiVv.js.map

package/dist/web/assets/{web-D0MSKfyv.js → web-CzK_la2_.js}

@@ -1,11 +1,11 @@
-import { $ as __mf_2, A as __mf_76, K as useWatch, L as MdAdd, M as __mf_78, N as __mf_81, O as __mf_73, Q as __mf_1, R as MdDeleteOutline, T as __mf_270, U as useFieldArray$1, W as useForm, Z as __mf_0, _ as __mf_180, _t as __mf_38, b as __mf_19, d as __mf_172, f as __mf_173, ft as __mf_30, g as __mf_179, h as __mf_178, ht as __mf_34, i as __mf_124, j as __mf_77, k as __mf_75, l as __mf_170, m as __mf_177, n as __mf_1$1, p as __mf_176, r as __mf_116, t as __mf_0$1, u as __mf_171, v as __mf_181, w as __mf_27, x as __mf_2$1, y as __mf_185, yt as init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__, z as MdEdit } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-DRSNXPPo.js";
-import { n as __mf_92, t as __mf_13 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_tanstack_mf_1_react_mf_2_router__loadShare__.js-DfiQqvVC.js";
-import { c as __mf_189, d as __mf_233, f as __mf_26, n as __mf_142, o as __mf_17, p as __mf_263, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-CO5Pvo0y.js";
-import { n as createAuthRoleSchema, r as createDefaultAuthRoles, t as createAuthPluginDefinitionSchema } from "./plugin-definition-CYj29S3q.js";
-import { a as __mf_26$1, i as __mf_25, n as __mf_20, o as __mf_3, r as __mf_23 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-37vlYRxk.js";
-import { n as a, t as AuthConfigTabs } from "./styles-yjbHBTlw.js";
+import { A as __mf_86, C as __mf_3, D as __mf_6, K as useWatch, L as MdAdd, M as __mf_88, N as __mf_91, O as __mf_83, Q as __mf_2, R as MdDeleteOutline, T as __mf_5, U as useFieldArray$1, W as useForm, X as __mf_0, Z as __mf_1, _ as __mf_214, c as __mf_197, d as __mf_202, dt as __mf_30, f as __mf_203, g as __mf_207, gt as __mf_38, h as __mf_206, j as __mf_87, k as __mf_85, l as __mf_198, m as __mf_205, mt as __mf_34, n as __mf_136, p as __mf_204, s as __mf_196, t as __mf_128, u as __mf_199, v as __mf_24, vt as init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__, w as __mf_37, x as __mf_296, z as MdEdit } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-CtIleM_e.js";
+import { n as __mf_92, t as __mf_13 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_tanstack_mf_1_react_mf_2_router__loadShare__.js-BckLhSjF.js";
+import { T as __mf_74, b as __mf_59, c as __mf_146, f as __mf_18, h as __mf_24$1, w as __mf_72, y as __mf_56 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-DE4rTqEA.js";
+import { n as createAuthRoleSchema, r as createDefaultAuthRoles, t as createAuthPluginDefinitionSchema } from "./plugin-definition--k0VAeK3.js";
+import { i as __mf_15, n as __mf_11, r as __mf_14, s as __mf_2$1, u as __mf_7 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-mszeXpf-.js";
+import { n as a, t as AuthConfigTabs } from "./styles-BQEcQHoR.js";
 //#region ../../node_modules/.pnpm/@hookform+lenses@0.8.1_react-hook-form@7.71.1_react@19.2.8/node_modules/@hookform/lenses/dist/rhf/index.js
-init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__();
 function useFieldArray(props) {
 	const original = useFieldArray$1(props);
 	return {
@@ -45,9 +45,9 @@ function useFieldArray(props) {
 }
 //#endregion
 //#region src/auth/core/components/role-editor-form/role-dialog.tsx
-init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__();
 function RoleDialog({ open, onOpenChange, role, isNew = false, onSave }) {
-	const authRoleSchema = __mf_23(createAuthRoleSchema);
+	const authRoleSchema = __mf_11(createAuthRoleSchema);
 	const { control, handleSubmit } = useForm({
 		resolver: a(authRoleSchema),
 		values: role
@@ -57,39 +57,39 @@ function RoleDialog({ open, onOpenChange, role, isNew = false, onSave }) {
 		onOpenChange?.(false);
 	});
 	const formId = __mf_30();
-	return /* @__PURE__ */ __mf_1(__mf_73, {
+	return /* @__PURE__ */ __mf_1(__mf_83, {
 		open,
 		onOpenChange,
-		children: /* @__PURE__ */ __mf_1(__mf_75, { children: /* @__PURE__ */ __mf_2("form", {
+		children: /* @__PURE__ */ __mf_1(__mf_85, { children: /* @__PURE__ */ __mf_2("form", {
 			id: formId,
 			onSubmit: (e) => {
 				e.stopPropagation();
 				return onSubmit(e);
 			},
 			children: [
-				/* @__PURE__ */ __mf_2(__mf_78, { children: [/* @__PURE__ */ __mf_1(__mf_81, { children: isNew ? "Add Role" : "Edit Role" }), /* @__PURE__ */ __mf_1(__mf_76, { children: isNew ? "Enter the details for the new role." : "Update the role details below." })] }),
+				/* @__PURE__ */ __mf_2(__mf_88, { children: [/* @__PURE__ */ __mf_1(__mf_91, { children: isNew ? "Add Role" : "Edit Role" }), /* @__PURE__ */ __mf_1(__mf_86, { children: isNew ? "Enter the details for the new role." : "Update the role details below." })] }),
 				/* @__PURE__ */ __mf_2("div", {
 					className: "auth:space-y-4 auth:py-4",
-					children: [/* @__PURE__ */ __mf_1(__mf_124, {
+					children: [/* @__PURE__ */ __mf_1(__mf_136, {
 						label: "Role Name",
 						name: "name",
 						control,
 						placeholder: "Enter role name"
-					}), /* @__PURE__ */ __mf_1(__mf_124, {
+					}), /* @__PURE__ */ __mf_1(__mf_136, {
 						label: "Description",
 						name: "comment",
 						control,
 						placeholder: "Describe this role's purpose"
 					})]
 				}),
-				/* @__PURE__ */ __mf_2(__mf_77, { children: [/* @__PURE__ */ __mf_1(__mf_27, {
+				/* @__PURE__ */ __mf_2(__mf_87, { children: [/* @__PURE__ */ __mf_1(__mf_37, {
 					type: "button",
 					variant: "outline",
 					onClick: () => {
 						onOpenChange?.(false);
 					},
 					children: "Cancel"
-				}), /* @__PURE__ */ __mf_2(__mf_27, {
+				}), /* @__PURE__ */ __mf_2(__mf_37, {
 					form: formId,
 					type: "submit",
 					children: [isNew ? "Add" : "Update", " Role"]
@@ -100,9 +100,9 @@ function RoleDialog({ open, onOpenChange, role, isNew = false, onSave }) {
 }
 //#endregion
 //#region src/auth/core/components/role-editor-form/role-editor-form.tsx
-init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__();
 function RoleEditorForm({ className, control }) {
-	const { requestConfirm } = __mf_270();
+	const { requestConfirm } = __mf_296();
 	const { append, update, remove } = useFieldArray({
 		control,
 		name: "roles"
@@ -129,27 +129,27 @@ function RoleEditorForm({ className, control }) {
 			}
 		});
 	}
-	return /* @__PURE__ */ __mf_2(__mf_177, {
+	return /* @__PURE__ */ __mf_2(__mf_203, {
 		className,
-		children: [/* @__PURE__ */ __mf_2(__mf_180, { children: [/* @__PURE__ */ __mf_1(__mf_181, { children: "User Roles" }), /* @__PURE__ */ __mf_1(__mf_179, { children: "Define roles for your application. Default roles are protected and cannot be removed." })] }), /* @__PURE__ */ __mf_2(__mf_178, {
+		children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "User Roles" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "Define roles for your application. Default roles are protected and cannot be removed." })] }), /* @__PURE__ */ __mf_2(__mf_204, {
 			className: "auth:space-y-4",
 			children: [
-				roles.map((role, roleIdx) => /* @__PURE__ */ __mf_2(__mf_170, { children: [/* @__PURE__ */ __mf_2(__mf_173, { children: [/* @__PURE__ */ __mf_1(__mf_172, {
+				roles.map((role, roleIdx) => /* @__PURE__ */ __mf_2(__mf_196, { children: [/* @__PURE__ */ __mf_2(__mf_199, { children: [/* @__PURE__ */ __mf_1(__mf_198, {
 					title: "Name",
 					children: /* @__PURE__ */ __mf_1("div", {
 						className: "auth:flex auth:items-center auth:gap-2",
 						children: /* @__PURE__ */ __mf_1("span", { children: role.name })
 					})
-				}), /* @__PURE__ */ __mf_1(__mf_172, {
+				}), /* @__PURE__ */ __mf_1(__mf_198, {
 					title: "Description",
 					children: role.comment.trim() || /* @__PURE__ */ __mf_1("span", {
 						className: "auth:text-muted-foreground",
 						children: "No description"
 					})
-				})] }), /* @__PURE__ */ __mf_2(__mf_171, { children: [role.builtIn && /* @__PURE__ */ __mf_1(__mf_19, {
+				})] }), /* @__PURE__ */ __mf_2(__mf_197, { children: [role.builtIn && /* @__PURE__ */ __mf_1(__mf_24, {
 					variant: "secondary",
 					children: "Default Role"
-				}), !role.builtIn && /* @__PURE__ */ __mf_2(__mf_0, { children: [/* @__PURE__ */ __mf_1(__mf_27, {
+				}), !role.builtIn && /* @__PURE__ */ __mf_2(__mf_0, { children: [/* @__PURE__ */ __mf_1(__mf_37, {
 					variant: "ghost",
 					size: "icon",
 					title: "Edit",
@@ -159,7 +159,7 @@ function RoleEditorForm({ className, control }) {
 						setIsEditing(true);
 					},
 					children: /* @__PURE__ */ __mf_1(MdEdit, {})
-				}), /* @__PURE__ */ __mf_1(__mf_27, {
+				}), /* @__PURE__ */ __mf_1(__mf_37, {
 					variant: "ghostDestructive",
 					size: "icon",
 					title: "Delete",
@@ -176,12 +176,12 @@ function RoleEditorForm({ className, control }) {
 					isNew: roleToEdit ? !roles.some((r) => r.id === roleToEdit.id) : true,
 					onSave: handleSaveRole
 				}),
-				/* @__PURE__ */ __mf_2(__mf_27, {
+				/* @__PURE__ */ __mf_2(__mf_37, {
 					variant: "secondary",
 					size: "sm",
 					onClick: () => {
 						setRoleToEdit({
-							id: __mf_59.generateNewId(),
+							id: __mf_146.generateNewId(),
 							name: "",
 							comment: "",
 							builtIn: false
@@ -196,16 +196,16 @@ function RoleEditorForm({ className, control }) {
 }
 //#endregion
 //#region src/auth/core/components/auth-definition-editor.tsx
-init__virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__react__loadShare__();
+init__virtual_mf___mfe_internal__plugin_mf_2_auth__mf_owner__1__loadShare__react__loadShare__();
 function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave }) {
-	const { definition, definitionContainer, schemaParserContext, saveDefinitionWithFeedback } = __mf_25();
-	const authPluginDefinitionSchema = __mf_23(createAuthPluginDefinitionSchema);
-	const availableImplementations = __mf_189(schemaParserContext.pluginStore, metadata.key);
+	const { definition, definitionContainer, schemaParserContext, saveDefinitionWithFeedback } = __mf_14();
+	const authPluginDefinitionSchema = __mf_11(createAuthPluginDefinitionSchema);
+	const availableImplementations = __mf_59(schemaParserContext.pluginStore, metadata.key);
 	const defaultImplementation = availableImplementations.find((i) => i.fullyQualifiedName === "@baseplate-dev/plugin-auth:local-auth") ?? availableImplementations[0];
 	const defaultValues = __mf_34(() => {
 		if (pluginMetadata?.config) return pluginMetadata.config;
-		const defaultAuthFeatureRef = __mf_17.getFeatureIdByNameOrDefault(definition, "accounts/auth");
-		const defaultAccountsFeatureRef = __mf_17.getFeatureIdByNameOrDefault(definition, "accounts/users");
+		const defaultAuthFeatureRef = __mf_18.getFeatureIdByNameOrDefault(definition, "accounts/auth");
+		const defaultAccountsFeatureRef = __mf_18.getFeatureIdByNameOrDefault(definition, "accounts/users");
 		if (!defaultImplementation) throw new Error("No auth implementation plugins are available");
 		return {
 			implementationPluginKey: defaultImplementation.key,
@@ -218,27 +218,27 @@ function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave })
 		pluginMetadata?.config,
 		defaultImplementation
 	]);
-	const form = __mf_26$1({
+	const form = __mf_15({
 		resolver: a(authPluginDefinitionSchema),
 		defaultValues
 	});
 	const { control, reset, handleSubmit, watch } = form;
 	const implementationPluginKey = watch("implementationPluginKey");
 	const selectedPlugin = implementationPluginKey && availableImplementations.find((i) => i.key === implementationPluginKey);
-	const isSelectedImplementationActive = !!__mf_26.byKey(definitionContainer.definition, implementationPluginKey);
+	const isSelectedImplementationActive = !!__mf_24$1.byKey(definitionContainer.definition, implementationPluginKey);
 	const hasSelectedImplementationChanged = implementationPluginKey !== (pluginMetadata?.config)?.implementationPluginKey;
 	const selectedImplementationUrl = selectedPlugin ? `/plugins/edit/${selectedPlugin.key}` : void 0;
 	const navigate = __mf_92();
 	const onSubmit = handleSubmit((data) => saveDefinitionWithFeedback((draftConfig) => {
-		const featureRef = __mf_17.ensureFeatureByNameRecursively(draftConfig, data.authFeatureRef);
-		const accountsFeatureRef = __mf_17.ensureFeatureByNameRecursively(draftConfig, data.accountsFeatureRef);
-		__mf_26.setPluginConfig(draftConfig, metadata, {
+		const featureRef = __mf_18.ensureFeatureByNameRecursively(draftConfig, data.authFeatureRef);
+		const accountsFeatureRef = __mf_18.ensureFeatureByNameRecursively(draftConfig, data.accountsFeatureRef);
+		__mf_24$1.setPluginConfig(draftConfig, metadata, {
 			...data,
 			authFeatureRef: featureRef,
 			accountsFeatureRef
 		}, definitionContainer);
 		const otherPlugins = availableImplementations.filter((i) => i.key !== implementationPluginKey);
-		for (const plugin of otherPlugins) __mf_26.disablePlugin(draftConfig, plugin.key, definitionContainer.parserContext);
+		for (const plugin of otherPlugins) __mf_24$1.disablePlugin(draftConfig, plugin.key, definitionContainer.parserContext);
 	}, {
 		successMessage: `Successfully saved auth plugin! ${selectedImplementationUrl && !isSelectedImplementationActive ? `Please configure the provider plugin before syncing.` : ""}`,
 		onSuccess: () => {
@@ -248,7 +248,7 @@ function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave })
 			}, 100);
 		}
 	}));
-	__mf_20({
+	__mf_7({
 		control,
 		reset,
 		onSubmit
@@ -263,9 +263,9 @@ function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave })
 				className: "auth:max-w-6xl auth:flex-1",
 				children: [/* @__PURE__ */ __mf_2("div", {
 					className: "auth:pb-16",
-					children: [!isSelectedImplementationActive && selectedPlugin && !hasSelectedImplementationChanged && /* @__PURE__ */ __mf_2(__mf_0$1, {
+					children: [!isSelectedImplementationActive && selectedPlugin && !hasSelectedImplementationChanged && /* @__PURE__ */ __mf_2(__mf_3, {
 						variant: "warning",
-						children: [/* @__PURE__ */ __mf_1(__mf_2$1, { children: "Implementation Provider Not Active" }), /* @__PURE__ */ __mf_1(__mf_1$1, { children: /* @__PURE__ */ __mf_2("p", { children: [
+						children: [/* @__PURE__ */ __mf_1(__mf_6, { children: "Implementation Provider Not Active" }), /* @__PURE__ */ __mf_1(__mf_5, { children: /* @__PURE__ */ __mf_2("p", { children: [
 							"The selected implementation provider is not active. Please make sure",
 							" ",
 							/* @__PURE__ */ __mf_1(__mf_13, {
@@ -276,24 +276,24 @@ function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave })
 							" ",
 							"before syncing."
 						] }) })]
-					}), /* @__PURE__ */ __mf_2(__mf_176, { children: [/* @__PURE__ */ __mf_2(__mf_177, { children: [/* @__PURE__ */ __mf_2(__mf_180, { children: [/* @__PURE__ */ __mf_1(__mf_181, { children: "General Settings" }), /* @__PURE__ */ __mf_1(__mf_179, { children: "Configure the general settings for the auth plugin." })] }), /* @__PURE__ */ __mf_2(__mf_178, {
+					}), /* @__PURE__ */ __mf_2(__mf_202, { children: [/* @__PURE__ */ __mf_2(__mf_203, { children: [/* @__PURE__ */ __mf_2(__mf_206, { children: [/* @__PURE__ */ __mf_1(__mf_207, { children: "General Settings" }), /* @__PURE__ */ __mf_1(__mf_205, { children: "Configure the general settings for the auth plugin." })] }), /* @__PURE__ */ __mf_2(__mf_204, {
 						className: "auth:space-y-6",
 						children: [
-							/* @__PURE__ */ __mf_1(__mf_3, {
+							/* @__PURE__ */ __mf_1(__mf_2$1, {
 								label: "Auth Feature Path",
 								name: "authFeatureRef",
 								control,
 								canCreate: true,
 								description: "Specify the feature path where auth infrastructure will be generated"
 							}),
-							/* @__PURE__ */ __mf_1(__mf_3, {
+							/* @__PURE__ */ __mf_1(__mf_2$1, {
 								label: "Accounts Feature Path",
 								name: "accountsFeatureRef",
 								control,
 								canCreate: true,
 								description: "Specify the feature path where user account models will be generated"
 							}),
-							/* @__PURE__ */ __mf_1(__mf_185, {
+							/* @__PURE__ */ __mf_1(__mf_214, {
 								label: "Authentication Provider",
 								name: "implementationPluginKey",
 								control,
@@ -314,7 +314,7 @@ function AuthDefinitionEditor({ definition: pluginMetadata, metadata, onSave })
 							})
 						]
 					})] }), /* @__PURE__ */ __mf_1(RoleEditorForm, { control })] })]
-				}), /* @__PURE__ */ __mf_1(__mf_116, {
+				}), /* @__PURE__ */ __mf_1(__mf_128, {
 					form,
 					allowSaveWithoutDirty: !pluginMetadata
 				})]
@@ -328,17 +328,17 @@ var AUTH_FEATURE_NAME = "accounts/auth";
 var ACCOUNTS_FEATURE_NAME = "accounts/users";
 var AUTH_IMPL_FQN_PREFIX = "@baseplate-dev/plugin-auth:";
 var PARENT_AUTH_FQN = "@baseplate-dev/plugin-auth:auth";
-var web_default = __mf_142({
+var web_default = __mf_56({
 	name: "web",
 	dependencies: {
-		webConfig: __mf_263,
-		pluginDefaults: __mf_233
+		webConfig: __mf_74,
+		pluginDefaults: __mf_72
 	},
 	initialize: ({ webConfig, pluginDefaults }, { pluginKey }) => {
 		webConfig.components.set(pluginKey, AuthDefinitionEditor);
 		pluginDefaults.builders.set(pluginKey, ({ draft, enabledPluginFqns, findPluginMetadataByFqn }) => {
-			const authFeatureRef = __mf_17.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
-			const accountsFeatureRef = __mf_17.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
+			const authFeatureRef = __mf_18.ensureFeatureByNameRecursively(draft, AUTH_FEATURE_NAME);
+			const accountsFeatureRef = __mf_18.ensureFeatureByNameRecursively(draft, ACCOUNTS_FEATURE_NAME);
 			const implFqn = [...enabledPluginFqns].find((fqn) => fqn.startsWith(AUTH_IMPL_FQN_PREFIX) && fqn !== PARENT_AUTH_FQN);
 			if (!implFqn) throw new Error("No auth implementation plugin enabled. Add an auth implementation (e.g. local-auth or better-auth) to the enabled plugins.");
 			const implPlugin = findPluginMetadataByFqn(implFqn);
@@ -355,4 +355,4 @@ var web_default = __mf_142({
 //#endregion
 export { web_default as default };
 
-//# sourceMappingURL=web-D0MSKfyv.js.map
+//# sourceMappingURL=web-CzK_la2_.js.map

package/dist/web/index.html

@@ -15,11 +15,11 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>React Remote</title>
-    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-0-dfed0275.js"></script>
-    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-1-5275674a.js"></script>
-    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-2-39fb9255.js"></script>
-    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-3-49e64336.js"></script>
-  <link rel="modulepreload" crossorigin href="./assets/hostInit-Cruek6c6.js"><link rel="modulepreload" crossorigin href="./remoteEntry.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf-localSharedImportMap___mfe_internal__plugin_mf_2_auth-ChkXxpXe.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-CO5Pvo0y.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib_mf_1_web__loadShare__.js-37vlYRxk.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_ui_mf_2_components__loadShare__.js-DRSNXPPo.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_tanstack_mf_1_react_mf_2_router__loadShare__.js-DfiQqvVC.js"><link rel="modulepreload" crossorigin href="./assets/_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-BEZ7A-cz.js"></head>
+    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-0-ea77c09b.js"></script>
+    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-1-9dee3d8d.js"></script>
+    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-2-3179040b.js"></script>
+    <script type="module" crossorigin src="./assets/mf-entry-bootstrap-3-370d200d.js"></script>
+  </head>
 
   <body>
     <div id="root"></div>

package/dist/web/remoteEntry.js

@@ -1,2 +1,2 @@
-import { n as init, t as getExposes } from "./assets/virtual_mf-REMOTE_ENTRY_ID___mfe_internal__plugin-auth__remoteEntry_js-XM6iYVxf.js";
+import { n as init, t as getExposes } from "./assets/virtual_mf-REMOTE_ENTRY_ID___mfe_internal__plugin-auth__remoteEntry_js-BZBRyml2.js";
 export { getExposes as get, init };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@baseplate-dev/plugin-auth",
-  "version": "0.6.17",
+  "version": "0.6.19",
   "description": "Contains the auth plugin for Baseplate",
   "keywords": [
     "authentication",
@@ -43,21 +43,21 @@
     "react-hook-form": "^7.71.1",
     "react-icons": "^5.7.0",
     "zod": "~4.3.6",
-    "@baseplate-dev/core-generators": "0.6.17",
-    "@baseplate-dev/fastify-generators": "0.6.17",
-    "@baseplate-dev/plugin-email": "0.6.17",
-    "@baseplate-dev/plugin-queue": "0.6.17",
-    "@baseplate-dev/plugin-rate-limit": "0.6.17",
-    "@baseplate-dev/project-builder-lib": "0.6.17",
-    "@baseplate-dev/react-generators": "0.6.17",
-    "@baseplate-dev/sync": "0.6.17",
-    "@baseplate-dev/ui-components": "0.6.17",
-    "@baseplate-dev/utils": "0.6.17"
+    "@baseplate-dev/core-generators": "0.6.19",
+    "@baseplate-dev/fastify-generators": "0.6.19",
+    "@baseplate-dev/plugin-email": "0.6.19",
+    "@baseplate-dev/plugin-queue": "0.6.19",
+    "@baseplate-dev/plugin-rate-limit": "0.6.19",
+    "@baseplate-dev/project-builder-lib": "0.6.19",
+    "@baseplate-dev/react-generators": "0.6.19",
+    "@baseplate-dev/sync": "0.6.19",
+    "@baseplate-dev/ui-components": "0.6.19",
+    "@baseplate-dev/utils": "0.6.19"
   },
   "devDependencies": {
-    "@module-federation/vite": "1.17.0",
+    "@module-federation/vite": "1.20.5",
     "@tailwindcss/vite": "4.3.3",
-    "@types/node": "^24.12.0",
+    "@types/node": "^24.13.0",
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.4",
     "@vitejs/plugin-react": "6.0.5",
@@ -70,7 +70,7 @@
     "typescript": "6.0.3",
     "vite": "8.2.0",
     "vitest": "4.1.10",
-    "@baseplate-dev/tools": "0.6.17"
+    "@baseplate-dev/tools": "0.6.19"
   },
   "engines": {
     "node": "^24.0.0"

package/dist/local-auth/core/generators/auth-module/templates/module/utils/cookie-signer.d.ts

@@ -1,38 +0,0 @@
-/**
- * Cookie signing utilities
- * Based on node-cookie-signature by TJ Holowaychuk
- * Source: https://github.com/tj/node-cookie-signature
- */
-/**
- * Sign the given `val` with `secret` using HMAC-SHA256.
- *
- * @param val - The value to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed value.
- */
-export declare function sign(val: string, secret: string): string;
-/**
- * Unsign and decode the given `input` with `secret`,
- *
- * @param input - The signed cookie string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The unsigned value or undefined if the signature is invalid.
- */
-export declare function unsign(input: string, secret: string): string | undefined;
-/**
- * Sign an object by JSON stringifying and base64 encoding it, then signing with secret.
- *
- * @param obj - The object to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed encoded object.
- */
-export declare function signObject(obj: unknown, secret: string): string;
-/**
- * Unsign and decode an object that was signed with signObject.
- *
- * @param input - The signed encoded object string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The decoded object or undefined if the signature is invalid.
- */
-export declare function unsignObject(input: string, secret: string): unknown;
-//# sourceMappingURL=cookie-signer.d.ts.map

package/dist/local-auth/core/generators/auth-module/templates/module/utils/cookie-signer.js

@@ -1,71 +0,0 @@
-// @ts-nocheck
-import * as crypto from 'node:crypto';
-/**
- * Cookie signing utilities
- * Based on node-cookie-signature by TJ Holowaychuk
- * Source: https://github.com/tj/node-cookie-signature
- */
-/**
- * Sign the given `val` with `secret` using HMAC-SHA256.
- *
- * @param val - The value to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed value.
- */
-export function sign(val, secret) {
-    return `${val}.${crypto
-        .createHmac('sha256', secret)
-        .update(val)
-        .digest('base64')
-        // remove all equal signs since they are not valid in cookie values
-        .replaceAll('=', '')}`;
-}
-/**
- * Unsign and decode the given `input` with `secret`,
- *
- * @param input - The signed cookie string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The unsigned value or undefined if the signature is invalid.
- */
-export function unsign(input, secret) {
-    const tentativeValue = input.slice(0, input.lastIndexOf('.'));
-    const expectedInput = sign(tentativeValue, secret);
-    const expectedBuffer = Buffer.from(expectedInput);
-    const inputBuffer = Buffer.from(input);
-    if (expectedBuffer.length !== inputBuffer.length ||
-        !crypto.timingSafeEqual(expectedBuffer, inputBuffer)) {
-        return undefined;
-    }
-    return tentativeValue;
-}
-/**
- * Sign an object by JSON stringifying and base64 encoding it, then signing with secret.
- *
- * @param obj - The object to sign.
- * @param secret - The secret key to use for signing.
- * @returns The signed encoded object.
- */
-export function signObject(obj, secret) {
-    const encoded = Buffer.from(JSON.stringify(obj)).toString('base64url');
-    return sign(encoded, secret);
-}
-/**
- * Unsign and decode an object that was signed with signObject.
- *
- * @param input - The signed encoded object string to unsign.
- * @param secret - The secret key used for signing.
- * @returns The decoded object or undefined if the signature is invalid.
- */
-export function unsignObject(input, secret) {
-    const unsigned = unsign(input, secret);
-    if (!unsigned)
-        return undefined;
-    try {
-        const decoded = Buffer.from(unsigned, 'base64url').toString('utf8');
-        return JSON.parse(decoded);
-    }
-    catch {
-        return undefined;
-    }
-}
-//# sourceMappingURL=cookie-signer.js.map