@camstack/addon-auth 1.2.126 → 1.2.128

package/dist/magic-link/auth-magic-link.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../chunk-Cek0wNdY.js");
-const require_dist = require("../dist-Y4IbR-lV.js");
+const require_hub_browser_origin = require("../hub-browser-origin-XYN-h9Iy.js");
 //#region src/magic-link/auth-magic-link.addon.ts
 /**
 * Magic-link authentication addon.
@@ -38,7 +38,7 @@ var DEFAULT_CONFIG = {
 	defaultRole: "viewer",
 	ttlSec: 600
 };
-var AuthMagicLinkAddon = class extends require_dist.BaseAddon {
+var AuthMagicLinkAddon = class extends require_hub_browser_origin.BaseAddon {
 	constructor() {
 		super({ ...DEFAULT_CONFIG });
 	}
@@ -53,7 +53,7 @@ var AuthMagicLinkAddon = class extends require_dist.BaseAddon {
 				throw new Error("Magic link does not use callback — the email link redirects to /api/auth/sso/finish directly");
 			}
 		};
-		const routeProvider = require_dist.buildAddonRouteProvider("auth-magic-link", [
+		const routeProvider = require_hub_browser_origin.buildAddonRouteProvider("auth-magic-link", [
 			{
 				method: "GET",
 				path: "/start",
@@ -80,15 +80,15 @@ var AuthMagicLinkAddon = class extends require_dist.BaseAddon {
 		this.ctx.logger.info("Magic-link auth provider initialized", { meta: { deliveryMode: this.config.deliveryMode } });
 		return [
 			{
-				capability: require_dist.authProviderCapability,
+				capability: require_hub_browser_origin.authProviderCapability,
 				provider: authProvider
 			},
 			{
-				capability: require_dist.addonRoutesCapability,
+				capability: require_hub_browser_origin.addonRoutesCapability,
 				provider: routeProvider
 			},
 			{
-				capability: require_dist.loginMethodCapability,
+				capability: require_hub_browser_origin.loginMethodCapability,
 				provider: loginMethodProvider
 			}
 		];
@@ -134,7 +134,7 @@ var AuthMagicLinkAddon = class extends require_dist.BaseAddon {
 					type: "text",
 					key: "publicOrigin",
 					label: "Public origin",
-					description: "Where the email link points. Empty = read CAMSTACK_PUBLIC_ORIGIN env var.",
+					description: "Where the email link points. Empty = the hub address from Network (public tunnel, then mesh, then LAN).",
 					default: ""
 				}),
 				this.field({
@@ -174,17 +174,17 @@ var AuthMagicLinkAddon = class extends require_dist.BaseAddon {
 			]
 		}] });
 	}
-	buildPublicOrigin() {
+	async buildPublicOrigin() {
 		const configured = this.config.publicOrigin?.trim();
 		if (configured) return configured.replace(/\/+$/, "");
-		return (process.env["CAMSTACK_PUBLIC_ORIGIN"] || "").replace(/\/+$/, "") || "https://localhost:4443";
+		return await require_hub_browser_origin.hubBrowserOrigin(this.ctx.api.localNetwork, this.ctx.logger) ?? "https://localhost:4443";
 	}
 	async findUserByEmail(email) {
 		let users;
 		try {
 			users = await this.ctx.api.userManagement.listUsers.query();
 		} catch (err) {
-			this.ctx.logger.warn("Magic-link user lookup failed (user-management cap unavailable)", { meta: { message: require_dist.errMsg(err) } });
+			this.ctx.logger.warn("Magic-link user lookup failed (user-management cap unavailable)", { meta: { message: require_hub_browser_origin.errMsg(err) } });
 			return null;
 		}
 		const needle = email.trim().toLowerCase();
@@ -273,12 +273,12 @@ var AuthMagicLinkAddon = class extends require_dist.BaseAddon {
 					ttlSec: this.config.ttlSec || DEFAULT_CONFIG.ttlSec
 				}));
 			} catch (err) {
-				this.ctx.logger.error("Magic-link bridge-token minting failed (sso-bridge unavailable)", { meta: { message: require_dist.errMsg(err) } });
+				this.ctx.logger.error("Magic-link bridge-token minting failed (sso-bridge unavailable)", { meta: { message: require_hub_browser_origin.errMsg(err) } });
 				reply.code(503);
 				reply.send({ error: "sso-bridge capability unavailable" });
 				return;
 			}
-			const link = `${this.buildPublicOrigin()}/addon/auth-magic-link/login?bridge=${encodeURIComponent(token)}`;
+			const link = `${await this.buildPublicOrigin()}/addon/auth-magic-link/login?bridge=${encodeURIComponent(token)}`;
 			if (this.config.deliveryMode === "log-only") this.ctx.logger.warn("Magic link generated (log-only mode — NOT delivered via email)", { meta: {
 				email,
 				link,
@@ -294,7 +294,7 @@ var AuthMagicLinkAddon = class extends require_dist.BaseAddon {
 			reply.code(500);
 			reply.send({
 				error: "Magic-link request failed",
-				message: require_dist.errMsg(err)
+				message: require_hub_browser_origin.errMsg(err)
 			});
 		}
 	}

package/dist/magic-link/auth-magic-link.addon.mjs

@@ -1,4 +1,4 @@
-import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-DoUGHO_G.mjs";
+import { a as buildAddonRouteProvider, c as errMsg, i as authProviderCapability, l as BaseAddon, n as addonRoutesCapability, o as loginMethodCapability, t as hubBrowserOrigin } from "../hub-browser-origin-DmRqQVDn.mjs";
 //#region src/magic-link/auth-magic-link.addon.ts
 /**
 * Magic-link authentication addon.
@@ -129,7 +129,7 @@ var AuthMagicLinkAddon = class extends BaseAddon {
 					type: "text",
 					key: "publicOrigin",
 					label: "Public origin",
-					description: "Where the email link points. Empty = read CAMSTACK_PUBLIC_ORIGIN env var.",
+					description: "Where the email link points. Empty = the hub address from Network (public tunnel, then mesh, then LAN).",
 					default: ""
 				}),
 				this.field({
@@ -169,10 +169,10 @@ var AuthMagicLinkAddon = class extends BaseAddon {
 			]
 		}] });
 	}
-	buildPublicOrigin() {
+	async buildPublicOrigin() {
 		const configured = this.config.publicOrigin?.trim();
 		if (configured) return configured.replace(/\/+$/, "");
-		return (process.env["CAMSTACK_PUBLIC_ORIGIN"] || "").replace(/\/+$/, "") || "https://localhost:4443";
+		return await hubBrowserOrigin(this.ctx.api.localNetwork, this.ctx.logger) ?? "https://localhost:4443";
 	}
 	async findUserByEmail(email) {
 		let users;
@@ -273,7 +273,7 @@ var AuthMagicLinkAddon = class extends BaseAddon {
 				reply.send({ error: "sso-bridge capability unavailable" });
 				return;
 			}
-			const link = `${this.buildPublicOrigin()}/addon/auth-magic-link/login?bridge=${encodeURIComponent(token)}`;
+			const link = `${await this.buildPublicOrigin()}/addon/auth-magic-link/login?bridge=${encodeURIComponent(token)}`;
 			if (this.config.deliveryMode === "log-only") this.ctx.logger.warn("Magic link generated (log-only mode — NOT delivered via email)", { meta: {
 				email,
 				link,