@blakearoberts/visage 0.0.1-rc.15 → 0.0.1-rc.16

package/README.md

@@ -21,12 +21,22 @@ export default defineConfig({
 });
 ```
 
-Then start Vite normally:
+Start Vite normally:
 
 ```console
 vite
 ```
 
+By default, you can reach the app at [https://localhost:9001/](https://localhost:9001/). You will be redirected to Dex to sign in. The default username and password is `user@example.com` and `pass`.
+
+## Why Visage
+
+Visage is a local development harness for web apps that run behind an auth-protected edge, where browser sessions are represented by secure cookies backed by OIDC tokens.
+
+Visage narrows the gap between local development, automated tests, and production by bringing production-like session lifecycle semantics to local Vite development without giving up HMR. That makes it practical to iterate on SSR identity injection, session timeout recovery, lock screens, and authenticated API calls.
+
+Visage can also use a hosted IdP, so local frontend code can call hosted backend APIs with real credentials. That avoids frontend-only auth mocks or backend-only local bypasses: code can be written for production and still work locally.
+
 ## Configuration
 
 Visage is configured through `visage(options?)` in `vite.config.ts`.
@@ -150,7 +160,7 @@ Do not treat the managed Dex and OAuth2 Proxy defaults as production auth infras
 
 ## TO-DO
 
-- [ ] Support SSR injection of identity into HTML responses as script tag elements.
+- [ ] Support OIDC auto-discovery with external IdP configuration.
 - [ ] Support configuring [Dex connectors](https://dexidp.io/docs/connectors/).
 - [ ] Support configuring Dex on a distinct subdomain, such as `auth.localhost`.
 - [ ] Support optional [HTTP mode without local TLS](docs/tls-http-mode.md).

package/dist/index.js

@@ -723,14 +723,15 @@ function renderOauth2ProxyConfig(config) {
         cookie_csrf_per_request: true,
         cookie_csrf_per_request_limit: 16,
         email_domains: config.oauth2.emailDomains,
+        whitelist_domains: [config.host, `${config.host}:${config.port}`],
         scope: config.oauth2.scopes.join(' '),
-        ...LogFormats,
         reverse_proxy: true,
         set_xauthrequest: true,
         set_authorization_header: true,
         pass_access_token: true,
         skip_provider_button: true,
-        whitelist_domains: [config.host, `${config.host}:${config.port}`],
+        approval_prompt: 'auto',
+        ...LogFormats,
     };
     return `${Object.entries(data)
         .map(([key, value]) => {
@@ -738,9 +739,8 @@ function renderOauth2ProxyConfig(config) {
             const values = value.map((item) => JSON.stringify(item)).join(', ');
             return `${key} = [${values}]`;
         }
-        if (typeof value === 'string') {
+        if (typeof value === 'string')
             return `${key} = ${JSON.stringify(value)}`;
-        }
         return `${key} = ${String(value)}`;
     })
         .join('\n')}\n`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blakearoberts/visage",
-  "version": "0.0.1-rc.15",
+  "version": "0.0.1-rc.16",
   "description": "Vite plugin for local development with HMR and OIDC session cookie lifecycle semantics.",
   "type": "module",
   "author": "Blake Roberts",