@ccatto/react-auth 1.0.0

package/dist/server.js

@@ -0,0 +1,160 @@
+import { betterAuth } from 'better-auth';
+import { prismaAdapter } from 'better-auth/adapters/prisma';
+import { createAuthMiddleware } from 'better-auth/api';
+import { nextCookies } from 'better-auth/next-js';
+
+// src/server/create-auth.ts
+var DEFAULT_TOKEN_EXPIRY_SECONDS = 69 * 24 * 60 * 60;
+function createCattoAuth(config) {
+  const expiresIn = config.session?.expiresInSeconds ?? DEFAULT_TOKEN_EXPIRY_SECONDS;
+  const socialProviders = {};
+  if (config.socialProviders?.google) {
+    socialProviders.google = config.socialProviders.google;
+  }
+  if (config.socialProviders?.github) {
+    socialProviders.github = config.socialProviders.github;
+  }
+  if (config.socialProviders?.facebook) {
+    socialProviders.facebook = {
+      ...config.socialProviders.facebook,
+      scope: config.socialProviders.facebook.scope ?? [
+        "email",
+        "public_profile"
+      ]
+    };
+  }
+  const auth = betterAuth({
+    // Database
+    // Cast needed: prismaAdapter expects PrismaClient but we use a minimal interface for package portability
+    database: prismaAdapter(
+      config.database,
+      {
+        provider: config.databaseProvider
+      }
+    ),
+    // Secret & URL
+    secret: config.secret,
+    baseURL: config.baseURL,
+    // Email/password
+    emailAndPassword: {
+      enabled: config.emailAndPassword?.enabled ?? true,
+      requireEmailVerification: config.emailAndPassword?.requireEmailVerification ?? false
+    },
+    // Social providers
+    socialProviders,
+    // Session
+    session: {
+      expiresIn,
+      cookieCache: {
+        enabled: true,
+        maxAge: expiresIn
+      }
+    },
+    // Account linking
+    account: {
+      accountLinking: {
+        enabled: true,
+        trustedProviders: Object.keys(socialProviders)
+      }
+    },
+    // User fields
+    user: {
+      additionalFields: {
+        role: {
+          type: "string",
+          required: false,
+          defaultValue: "user"
+        }
+      }
+    },
+    // Advanced
+    advanced: {
+      useSecureCookies: config.advanced?.useSecureCookies ?? process.env.NODE_ENV === "production",
+      crossSubDomainCookies: {
+        enabled: false
+      }
+    },
+    // Plugins
+    plugins: [nextCookies()],
+    // Hooks
+    hooks: {
+      // Before hooks: email normalization
+      before: createAuthMiddleware(async (ctx) => {
+        if (ctx.path === "/sign-up/email") {
+          const body = ctx.body;
+          if (body?.email && typeof body.email === "string") {
+            ctx.body.email = body.email.toLowerCase();
+          }
+        }
+      }),
+      // After hooks: user lifecycle events
+      after: createAuthMiddleware(async (ctx) => {
+        if (ctx.path.startsWith("/sign-in") || ctx.path.startsWith("/sign-up")) {
+          const newSession = ctx.context.newSession;
+          if (newSession?.user) {
+            const user = newSession.user;
+            const normalizedEmail = user.email?.toLowerCase();
+            if (normalizedEmail && user.email !== normalizedEmail) {
+              try {
+                await config.database.user.update({
+                  where: { id: user.id },
+                  data: { email: normalizedEmail }
+                });
+              } catch (hookError) {
+                config.logger?.warn?.(
+                  "[CattoAuth] Email normalization failed",
+                  {
+                    userId: user.id,
+                    error: hookError instanceof Error ? hookError.message : String(hookError)
+                  }
+                );
+              }
+            }
+            if (config.hooks?.onUserCreated) {
+              try {
+                await config.hooks.onUserCreated(
+                  {
+                    id: user.id,
+                    email: normalizedEmail || user.email,
+                    name: user.name
+                  },
+                  config.database
+                );
+              } catch (hookError) {
+                config.logger?.warn?.("[CattoAuth] onUserCreated hook failed", {
+                  userId: user.id,
+                  error: hookError instanceof Error ? hookError.message : String(hookError)
+                });
+              }
+            }
+          }
+        }
+      })
+    }
+  });
+  async function getEnrichedSession(headers) {
+    try {
+      const baseSession = await auth.api.getSession({ headers });
+      if (!baseSession?.user) return null;
+      const userId = baseSession.user.id;
+      const enrichment = config.hooks?.enrichSession ? await config.hooks.enrichSession(userId, config.database) : {};
+      return {
+        user: {
+          id: baseSession.user.id,
+          email: baseSession.user.email,
+          name: baseSession.user.name,
+          image: baseSession.user.image,
+          ...enrichment
+        },
+        session: baseSession.session
+      };
+    } catch {
+      return null;
+    }
+  }
+  return { auth, getEnrichedSession };
+}
+
+export { createCattoAuth };
+//# sourceMappingURL=server.js.map
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/create-auth.ts"],"names":[],"mappings":";;;;;;AAoCA,IAAM,4BAAA,GAA+B,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,EAAA;AAa7C,SAAS,gBACd,MAAA,EACuB;AACvB,EAAA,MAAM,SAAA,GACJ,MAAA,CAAO,OAAA,EAAS,gBAAA,IAAoB,4BAAA;AAGtC,EAAA,MAAM,kBAGF,EAAC;AACL,EAAA,IAAI,MAAA,CAAO,iBAAiB,MAAA,EAAQ;AAClC,IAAA,eAAA,CAAgB,MAAA,GAAS,OAAO,eAAA,CAAgB,MAAA;AAAA,EAClD;AACA,EAAA,IAAI,MAAA,CAAO,iBAAiB,MAAA,EAAQ;AAClC,IAAA,eAAA,CAAgB,MAAA,GAAS,OAAO,eAAA,CAAgB,MAAA;AAAA,EAClD;AACA,EAAA,IAAI,MAAA,CAAO,iBAAiB,QAAA,EAAU;AACpC,IAAA,eAAA,CAAgB,QAAA,GAAW;AAAA,MACzB,GAAG,OAAO,eAAA,CAAgB,QAAA;AAAA,MAC1B,KAAA,EAAO,MAAA,CAAO,eAAA,CAAgB,QAAA,CAAS,KAAA,IAAS;AAAA,QAC9C,OAAA;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF;AAEA,EAAA,MAAM,OAAO,UAAA,CAAW;AAAA;AAAA;AAAA,IAGtB,QAAA,EAAU,aAAA;AAAA,MACR,MAAA,CAAO,QAAA;AAAA,MACP;AAAA,QACE,UAAU,MAAA,CAAO;AAAA;AACnB,KACF;AAAA;AAAA,IAGA,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,SAAS,MAAA,CAAO,OAAA;AAAA;AAAA,IAGhB,gBAAA,EAAkB;AAAA,MAChB,OAAA,EAAS,MAAA,CAAO,gBAAA,EAAkB,OAAA,IAAW,IAAA;AAAA,MAC7C,wBAAA,EACE,MAAA,CAAO,gBAAA,EAAkB,wBAAA,IAA4B;AAAA,KACzD;AAAA;AAAA,IAGA,eAAA;AAAA;AAAA,IAGA,OAAA,EAAS;AAAA,MACP,SAAA;AAAA,MACA,WAAA,EAAa;AAAA,QACX,OAAA,EAAS,IAAA;AAAA,QACT,MAAA,EAAQ;AAAA;AACV,KACF;AAAA;AAAA,IAGA,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB;AAAA,QACd,OAAA,EAAS,IAAA;AAAA,QACT,gBAAA,EAAkB,MAAA,CAAO,IAAA,CAAK,eAAe;AAAA;AAC/C,KACF;AAAA;AAAA,IAGA,IAAA,EAAM;AAAA,MACJ,gBAAA,EAAkB;AAAA,QAChB,IAAA,EAAM;AAAA,UACJ,IAAA,EAAM,QAAA;AAAA,UACN,QAAA,EAAU,KAAA;AAAA,UACV,YAAA,EAAc;AAAA;AAChB;AACF,KACF;AAAA;AAAA,IAGA,QAAA,EAAU;AAAA,MACR,kBACE,MAAA,CAAO,QAAA,EAAU,gBAAA,IACjB,OAAA,CAAQ,IAAI,QAAA,KAAa,YAAA;AAAA,MAC3B,qBAAA,EAAuB;AAAA,QACrB,OAAA,EAAS;AAAA;AACX,KACF;AAAA;AAAA,IAGA,OAAA,EAAS,CAAC,WAAA,EAAa,CAAA;AAAA;AAAA,IAGvB,KAAA,EAAO;AAAA;AAAA,MAEL,MAAA,EAAQ,oBAAA,CAAqB,OAAO,GAAA,KAAQ;AAC1C,QAAA,IAAI,GAAA,CAAI,SAAS,gBAAA,EAAkB;AACjC,UAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,UAAA,IAAI,IAAA,EAAM,KAAA,IAAS,OAAO,IAAA,CAAK,UAAU,QAAA,EAAU;AACjD,YAAC,GAAA,CAAI,IAAA,CAA2B,KAAA,GAAQ,IAAA,CAAK,MAAM,WAAA,EAAY;AAAA,UACjE;AAAA,QACF;AAAA,MACF,CAAC,CAAA;AAAA;AAAA,MAGD,KAAA,EAAO,oBAAA,CAAqB,OAAO,GAAA,KAAQ;AACzC,QAAA,IACE,GAAA,CAAI,KAAK,UAAA,CAAW,UAAU,KAC9B,GAAA,CAAI,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,EAC9B;AACA,UAAA,MAAM,UAAA,GAAa,IAAI,OAAA,CAAQ,UAAA;AAC/B,UAAA,IAAI,YAAY,IAAA,EAAM;AACpB,YAAA,MAAM,OAAO,UAAA,CAAW,IAAA;AAGxB,YAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,KAAA,EAAO,WAAA,EAAY;AAChD,YAAA,IAAI,eAAA,IAAmB,IAAA,CAAK,KAAA,KAAU,eAAA,EAAiB;AACrD,cAAA,IAAI;AACF,gBAAA,MAAM,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,MAAA,CAAO;AAAA,kBAChC,KAAA,EAAO,EAAE,EAAA,EAAI,IAAA,CAAK,EAAA,EAAG;AAAA,kBACrB,IAAA,EAAM,EAAE,KAAA,EAAO,eAAA;AAAgB,iBAChC,CAAA;AAAA,cACH,SAAS,SAAA,EAAW;AAClB,gBAAA,MAAA,CAAO,MAAA,EAAQ,IAAA;AAAA,kBACb,wCAAA;AAAA,kBACA;AAAA,oBACE,QAAQ,IAAA,CAAK,EAAA;AAAA,oBACb,OACE,SAAA,YAAqB,KAAA,GACjB,SAAA,CAAU,OAAA,GACV,OAAO,SAAS;AAAA;AACxB,iBACF;AAAA,cACF;AAAA,YACF;AAGA,YAAA,IAAI,MAAA,CAAO,OAAO,aAAA,EAAe;AAC/B,cAAA,IAAI;AACF,gBAAA,MAAM,OAAO,KAAA,CAAM,aAAA;AAAA,kBACjB;AAAA,oBACE,IAAI,IAAA,CAAK,EAAA;AAAA,oBACT,KAAA,EAAO,mBAAmB,IAAA,CAAK,KAAA;AAAA,oBAC/B,MAAM,IAAA,CAAK;AAAA,mBACb;AAAA,kBACA,MAAA,CAAO;AAAA,iBACT;AAAA,cACF,SAAS,SAAA,EAAW;AAClB,gBAAA,MAAA,CAAO,MAAA,EAAQ,OAAO,uCAAA,EAAyC;AAAA,kBAC7D,QAAQ,IAAA,CAAK,EAAA;AAAA,kBACb,OACE,SAAA,YAAqB,KAAA,GACjB,SAAA,CAAU,OAAA,GACV,OAAO,SAAS;AAAA,iBACvB,CAAA;AAAA,cACH;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF,CAAC;AAAA;AACH,GACD,CAAA;AAGD,EAAA,eAAe,mBAAmB,OAAA,EAAuC;AACvE,IAAA,IAAI;AACF,MAAA,MAAM,cAAc,MAAM,IAAA,CAAK,IAAI,UAAA,CAAW,EAAE,SAAS,CAAA;AACzD,MAAA,IAAI,CAAC,WAAA,EAAa,IAAA,EAAM,OAAO,IAAA;AAE/B,MAAA,MAAM,MAAA,GAAS,YAAY,IAAA,CAAK,EAAA;AAGhC,MAAA,MAAM,UAAA,GAAa,MAAA,CAAO,KAAA,EAAO,aAAA,GAC7B,MAAM,MAAA,CAAO,KAAA,CAAM,aAAA,CAAc,MAAA,EAAQ,MAAA,CAAO,QAAQ,CAAA,GACxD,EAAC;AAEL,MAAA,OAAO;AAAA,QACL,IAAA,EAAM;AAAA,UACJ,EAAA,EAAI,YAAY,IAAA,CAAK,EAAA;AAAA,UACrB,KAAA,EAAO,YAAY,IAAA,CAAK,KAAA;AAAA,UACxB,IAAA,EAAM,YAAY,IAAA,CAAK,IAAA;AAAA,UACvB,KAAA,EAAO,YAAY,IAAA,CAAK,KAAA;AAAA,UACxB,GAAG;AAAA,SACL;AAAA,QACA,SAAS,WAAA,CAAY;AAAA,OACvB;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAM,kBAAA,EAAmB;AACpC","file":"server.js","sourcesContent":["/**\n * @ccatto/react-auth/server - createCattoAuth Factory\n *\n * Creates a configured Better Auth instance with sensible defaults,\n * automatic email normalization, and pluggable hooks for\n * session enrichment and user lifecycle events.\n *\n * @example\n * ```typescript\n * import { createCattoAuth } from '@ccatto/react-auth/server';\n * import { prisma } from '@myapp/database';\n *\n * export const { auth, getEnrichedSession } = createCattoAuth({\n *   database: prisma,\n *   databaseProvider: 'postgresql',\n *   secret: process.env.BETTER_AUTH_SECRET!,\n *   baseURL: process.env.BETTER_AUTH_URL!,\n *   hooks: {\n *     enrichSession: async (userId, db) => {\n *       // Return custom fields to merge into session.user\n *       return { role: 'admin', customField: 'value' };\n *     },\n *   },\n * });\n * ```\n */\nimport { betterAuth } from 'better-auth';\nimport { prismaAdapter } from 'better-auth/adapters/prisma';\nimport { createAuthMiddleware } from 'better-auth/api';\nimport { nextCookies } from 'better-auth/next-js';\nimport type {\n  CattoAuthServerConfig,\n  CattoAuthSocialProvider,\n} from '../types/config';\n\n// Default: 69 days (matches common long-lived session configs)\nconst DEFAULT_TOKEN_EXPIRY_SECONDS = 69 * 24 * 60 * 60;\n\nexport interface CreateCattoAuthResult {\n  /** The Better Auth instance (use for API routes) */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  auth: any;\n  /**\n   * Get enriched session with custom fields from hooks.enrichSession.\n   * Call this instead of auth.api.getSession for full session data.\n   */\n  getEnrichedSession: (headers: Headers) => Promise<any | null>;\n}\n\nexport function createCattoAuth(\n  config: CattoAuthServerConfig,\n): CreateCattoAuthResult {\n  const expiresIn =\n    config.session?.expiresInSeconds ?? DEFAULT_TOKEN_EXPIRY_SECONDS;\n\n  // Build social providers config\n  const socialProviders: Record<\n    string,\n    CattoAuthSocialProvider & { scope?: string[] }\n  > = {};\n  if (config.socialProviders?.google) {\n    socialProviders.google = config.socialProviders.google;\n  }\n  if (config.socialProviders?.github) {\n    socialProviders.github = config.socialProviders.github;\n  }\n  if (config.socialProviders?.facebook) {\n    socialProviders.facebook = {\n      ...config.socialProviders.facebook,\n      scope: config.socialProviders.facebook.scope ?? [\n        'email',\n        'public_profile',\n      ],\n    };\n  }\n\n  const auth = betterAuth({\n    // Database\n    // Cast needed: prismaAdapter expects PrismaClient but we use a minimal interface for package portability\n    database: prismaAdapter(\n      config.database as Parameters<typeof prismaAdapter>[0],\n      {\n        provider: config.databaseProvider,\n      },\n    ),\n\n    // Secret & URL\n    secret: config.secret,\n    baseURL: config.baseURL,\n\n    // Email/password\n    emailAndPassword: {\n      enabled: config.emailAndPassword?.enabled ?? true,\n      requireEmailVerification:\n        config.emailAndPassword?.requireEmailVerification ?? false,\n    },\n\n    // Social providers\n    socialProviders,\n\n    // Session\n    session: {\n      expiresIn,\n      cookieCache: {\n        enabled: true,\n        maxAge: expiresIn,\n      },\n    },\n\n    // Account linking\n    account: {\n      accountLinking: {\n        enabled: true,\n        trustedProviders: Object.keys(socialProviders),\n      },\n    },\n\n    // User fields\n    user: {\n      additionalFields: {\n        role: {\n          type: 'string' as const,\n          required: false,\n          defaultValue: 'user',\n        },\n      },\n    },\n\n    // Advanced\n    advanced: {\n      useSecureCookies:\n        config.advanced?.useSecureCookies ??\n        process.env.NODE_ENV === 'production',\n      crossSubDomainCookies: {\n        enabled: false,\n      },\n    },\n\n    // Plugins\n    plugins: [nextCookies()],\n\n    // Hooks\n    hooks: {\n      // Before hooks: email normalization\n      before: createAuthMiddleware(async (ctx) => {\n        if (ctx.path === '/sign-up/email') {\n          const body = ctx.body as { email?: string } | undefined;\n          if (body?.email && typeof body.email === 'string') {\n            (ctx.body as { email: string }).email = body.email.toLowerCase();\n          }\n        }\n      }),\n\n      // After hooks: user lifecycle events\n      after: createAuthMiddleware(async (ctx) => {\n        if (\n          ctx.path.startsWith('/sign-in') ||\n          ctx.path.startsWith('/sign-up')\n        ) {\n          const newSession = ctx.context.newSession;\n          if (newSession?.user) {\n            const user = newSession.user;\n\n            // Normalize email in database if needed\n            const normalizedEmail = user.email?.toLowerCase();\n            if (normalizedEmail && user.email !== normalizedEmail) {\n              try {\n                await config.database.user.update({\n                  where: { id: user.id },\n                  data: { email: normalizedEmail },\n                });\n              } catch (hookError) {\n                config.logger?.warn?.(\n                  '[CattoAuth] Email normalization failed',\n                  {\n                    userId: user.id,\n                    error:\n                      hookError instanceof Error\n                        ? hookError.message\n                        : String(hookError),\n                  },\n                );\n              }\n            }\n\n            // Call onUserCreated hook\n            if (config.hooks?.onUserCreated) {\n              try {\n                await config.hooks.onUserCreated(\n                  {\n                    id: user.id,\n                    email: normalizedEmail || user.email,\n                    name: user.name,\n                  },\n                  config.database,\n                );\n              } catch (hookError) {\n                config.logger?.warn?.('[CattoAuth] onUserCreated hook failed', {\n                  userId: user.id,\n                  error:\n                    hookError instanceof Error\n                      ? hookError.message\n                      : String(hookError),\n                });\n              }\n            }\n          }\n        }\n      }),\n    },\n  });\n\n  // Enriched session factory\n  async function getEnrichedSession(headers: Headers): Promise<any | null> {\n    try {\n      const baseSession = await auth.api.getSession({ headers });\n      if (!baseSession?.user) return null;\n\n      const userId = baseSession.user.id;\n\n      // Call enrichSession hook if provided\n      const enrichment = config.hooks?.enrichSession\n        ? await config.hooks.enrichSession(userId, config.database)\n        : {};\n\n      return {\n        user: {\n          id: baseSession.user.id,\n          email: baseSession.user.email,\n          name: baseSession.user.name,\n          image: baseSession.user.image,\n          ...enrichment,\n        },\n        session: baseSession.session,\n      };\n    } catch {\n      return null;\n    }\n  }\n\n  return { auth, getEnrichedSession };\n}\n"]}

package/package.json

@@ -0,0 +1,91 @@
+{
+  "name": "@ccatto/react-auth",
+  "version": "1.0.0",
+  "description": "Catto Auth - React/Next.js authentication with Better Auth, JWT, and mobile support",
+  "license": "MIT",
+  "author": "Chris Catto",
+  "keywords": [
+    "react",
+    "nextjs",
+    "authentication",
+    "better-auth",
+    "typescript",
+    "catto"
+  ],
+  "homepage": "https://github.com/ccatto/catto-packages/tree/main/packages/react-auth",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ccatto/catto-packages.git",
+    "directory": "packages/react-auth"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js",
+      "require": "./dist/server.cjs"
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "clean": "rimraf dist",
+    "dev": "tsup --watch",
+    "test": "vitest run",
+    "test:cov": "vitest run --coverage",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@types/react": "^19.0.0",
+    "better-auth": "^1.2.8",
+    "glob": "^13.0.0",
+    "next": "^16.0.0",
+    "react": "^19.0.0",
+    "rimraf": "^6.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.7.0",
+    "zustand": "^5.0.0"
+  },
+  "peerDependencies": {
+    "better-auth": ">=1.0.0",
+    "next": ">=14.0.0",
+    "react": ">=18.0.0",
+    "zustand": ">=4.0.0",
+    "@apollo/client": ">=3.0.0",
+    "@capacitor/core": ">=5.0.0",
+    "@capacitor/preferences": ">=5.0.0",
+    "@simplewebauthn/browser": ">=13.0.0",
+    "graphql": ">=16.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@apollo/client": {
+      "optional": true
+    },
+    "@capacitor/core": {
+      "optional": true
+    },
+    "@capacitor/preferences": {
+      "optional": true
+    },
+    "@simplewebauthn/browser": {
+      "optional": true
+    },
+    "graphql": {
+      "optional": true
+    }
+  }
+}