@checkstack/auth-frontend 0.5.1 → 0.5.3

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # @checkstack/auth-frontend
 
+## 0.5.3
+
+### Patch Changes
+
+- Updated dependencies [d1324e6]
+- Updated dependencies [2c0822d]
+  - @checkstack/ui@0.4.0
+
+## 0.5.2
+
+### Patch Changes
+
+- Updated dependencies [8a87cd4]
+- Updated dependencies [8a87cd4]
+  - @checkstack/auth-common@0.5.2
+  - @checkstack/common@0.5.0
+  - @checkstack/frontend-api@0.3.2
+  - @checkstack/ui@0.3.1
+
 ## 0.5.1
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@checkstack/auth-frontend",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "type": "module",
   "main": "src/index.tsx",
   "exports": {

package/src/index.test.tsx

@@ -1,6 +1,5 @@
 import { describe, it, expect, mock, beforeEach } from "bun:test";
-import { authPlugin } from "./index";
-import { accessApiRef } from "@checkstack/frontend-api";
+import { AuthAccessApi } from "./lib/AuthAccessApi";
 import type { AccessRule } from "@checkstack/common";
 import { useAccessRules } from "./hooks/useAccessRules";
 
@@ -32,14 +31,10 @@ const otherAccess: AccessRule = {
 };
 
 describe("AuthAccessApi", () => {
-  let accessApi: {
-    useAccess: (p: AccessRule) => { loading: boolean; allowed: boolean };
-  };
+  let accessApi: AuthAccessApi;
 
   beforeEach(() => {
-    const apiDef = authPlugin.apis?.find((a) => a.ref.id === accessApiRef.id);
-    if (!apiDef) throw new Error("Access API not found in plugin");
-    accessApi = apiDef.factory({ get: () => ({}) } as any) as any;
+    accessApi = new AuthAccessApi();
   });
 
   it("should return true if user has the access rule", () => {

package/src/index.tsx

@@ -2,7 +2,6 @@ import React from "react";
 import {
   ApiRef,
   accessApiRef,
-  AccessApi,
   createFrontendPlugin,
   createSlotExtension,
   NavbarRightSlot,
@@ -24,10 +23,8 @@ import { OnboardingPage } from "./components/OnboardingPage";
 import { ProfilePage } from "./components/ProfilePage";
 import { authApiRef, AuthApi, AuthSession } from "./api";
 import { getAuthClientLazy } from "./lib/auth-client";
+import { AuthAccessApi } from "./lib/AuthAccessApi";
 
-import { useAccessRules } from "./hooks/useAccessRules";
-
-import type { AccessRule } from "@checkstack/common";
 import { useNavigate } from "react-router-dom";
 import { Settings2, User } from "lucide-react";
 import { DropdownMenuItem } from "@checkstack/ui";
@@ -41,40 +38,6 @@ import {
 import { resolveRoute } from "@checkstack/common";
 import { OnboardingCheck } from "./components/OnboardingCheck";
 
-/**
- * Unified access API implementation.
- * Uses AccessRule objects for access checks.
- */
-class AuthAccessApi implements AccessApi {
-  useAccess(accessRule: AccessRule): { loading: boolean; allowed: boolean } {
-    const { accessRules, loading } = useAccessRules();
-
-    if (loading) {
-      return { loading: true, allowed: false };
-    }
-
-    // If no user, or user has no access rules, return false
-    if (!accessRules || accessRules.length === 0) {
-      return { loading: false, allowed: false };
-    }
-
-    const accessRuleId = accessRule.id;
-
-    // Check wildcard, exact match, or manage implies read
-    const isWildcard = accessRules.includes("*");
-    const hasExact = accessRules.includes(accessRuleId);
-
-    // For read actions, also check if user has manage access for the same resource
-    const hasManage =
-      accessRule.level === "read"
-        ? accessRules.includes(`${accessRule.resource}.manage`)
-        : false;
-
-    const allowed = isWildcard || hasExact || hasManage;
-    return { loading: false, allowed };
-  }
-}
-
 /**
  * BetterAuthApi wraps only better-auth client methods.
  * For RPC calls, use rpcApiRef.forPlugin<AuthClient>("auth") directly.

package/src/lib/AuthAccessApi.ts

@@ -0,0 +1,37 @@
+import { AccessApi } from "@checkstack/frontend-api";
+import { useAccessRules } from "../hooks/useAccessRules";
+import type { AccessRule } from "@checkstack/common";
+
+/**
+ * Unified access API implementation.
+ * Uses AccessRule objects for access checks.
+ */
+export class AuthAccessApi implements AccessApi {
+  useAccess(accessRule: AccessRule): { loading: boolean; allowed: boolean } {
+    const { accessRules, loading } = useAccessRules();
+
+    if (loading) {
+      return { loading: true, allowed: false };
+    }
+
+    // If no user, or user has no access rules, return false
+    if (!accessRules || accessRules.length === 0) {
+      return { loading: false, allowed: false };
+    }
+
+    const accessRuleId = accessRule.id;
+
+    // Check wildcard, exact match, or manage implies read
+    const isWildcard = accessRules.includes("*");
+    const hasExact = accessRules.includes(accessRuleId);
+
+    // For read actions, also check if user has manage access for the same resource
+    const hasManage =
+      accessRule.level === "read"
+        ? accessRules.includes(`${accessRule.resource}.manage`)
+        : false;
+
+    const allowed = isWildcard || hasExact || hasManage;
+    return { loading: false, allowed };
+  }
+}