@civic/auth 0.0.1-beta.28 → 0.0.1-beta.29

package/dist/esm/src/styles.css

@@ -1,387 +0,0 @@
-*, ::before, ::after {
-  --tw-border-spacing-x: 0;
-  --tw-border-spacing-y: 0;
-  --tw-translate-x: 0;
-  --tw-translate-y: 0;
-  --tw-rotate: 0;
-  --tw-skew-x: 0;
-  --tw-skew-y: 0;
-  --tw-scale-x: 1;
-  --tw-scale-y: 1;
-  --tw-pan-x:  ;
-  --tw-pan-y:  ;
-  --tw-pinch-zoom:  ;
-  --tw-scroll-snap-strictness: proximity;
-  --tw-gradient-from-position:  ;
-  --tw-gradient-via-position:  ;
-  --tw-gradient-to-position:  ;
-  --tw-ordinal:  ;
-  --tw-slashed-zero:  ;
-  --tw-numeric-figure:  ;
-  --tw-numeric-spacing:  ;
-  --tw-numeric-fraction:  ;
-  --tw-ring-inset:  ;
-  --tw-ring-offset-width: 0px;
-  --tw-ring-offset-color: #fff;
-  --tw-ring-color: rgb(59 130 246 / 0.5);
-  --tw-ring-offset-shadow: 0 0 #0000;
-  --tw-ring-shadow: 0 0 #0000;
-  --tw-shadow: 0 0 #0000;
-  --tw-shadow-colored: 0 0 #0000;
-  --tw-blur:  ;
-  --tw-brightness:  ;
-  --tw-contrast:  ;
-  --tw-grayscale:  ;
-  --tw-hue-rotate:  ;
-  --tw-invert:  ;
-  --tw-saturate:  ;
-  --tw-sepia:  ;
-  --tw-drop-shadow:  ;
-  --tw-backdrop-blur:  ;
-  --tw-backdrop-brightness:  ;
-  --tw-backdrop-contrast:  ;
-  --tw-backdrop-grayscale:  ;
-  --tw-backdrop-hue-rotate:  ;
-  --tw-backdrop-invert:  ;
-  --tw-backdrop-opacity:  ;
-  --tw-backdrop-saturate:  ;
-  --tw-backdrop-sepia:  ;
-  --tw-contain-size:  ;
-  --tw-contain-layout:  ;
-  --tw-contain-paint:  ;
-  --tw-contain-style:  
-}
-
-::backdrop {
-  --tw-border-spacing-x: 0;
-  --tw-border-spacing-y: 0;
-  --tw-translate-x: 0;
-  --tw-translate-y: 0;
-  --tw-rotate: 0;
-  --tw-skew-x: 0;
-  --tw-skew-y: 0;
-  --tw-scale-x: 1;
-  --tw-scale-y: 1;
-  --tw-pan-x:  ;
-  --tw-pan-y:  ;
-  --tw-pinch-zoom:  ;
-  --tw-scroll-snap-strictness: proximity;
-  --tw-gradient-from-position:  ;
-  --tw-gradient-via-position:  ;
-  --tw-gradient-to-position:  ;
-  --tw-ordinal:  ;
-  --tw-slashed-zero:  ;
-  --tw-numeric-figure:  ;
-  --tw-numeric-spacing:  ;
-  --tw-numeric-fraction:  ;
-  --tw-ring-inset:  ;
-  --tw-ring-offset-width: 0px;
-  --tw-ring-offset-color: #fff;
-  --tw-ring-color: rgb(59 130 246 / 0.5);
-  --tw-ring-offset-shadow: 0 0 #0000;
-  --tw-ring-shadow: 0 0 #0000;
-  --tw-shadow: 0 0 #0000;
-  --tw-shadow-colored: 0 0 #0000;
-  --tw-blur:  ;
-  --tw-brightness:  ;
-  --tw-contrast:  ;
-  --tw-grayscale:  ;
-  --tw-hue-rotate:  ;
-  --tw-invert:  ;
-  --tw-saturate:  ;
-  --tw-sepia:  ;
-  --tw-drop-shadow:  ;
-  --tw-backdrop-blur:  ;
-  --tw-backdrop-brightness:  ;
-  --tw-backdrop-contrast:  ;
-  --tw-backdrop-grayscale:  ;
-  --tw-backdrop-hue-rotate:  ;
-  --tw-backdrop-invert:  ;
-  --tw-backdrop-opacity:  ;
-  --tw-backdrop-saturate:  ;
-  --tw-backdrop-sepia:  ;
-  --tw-contain-size:  ;
-  --tw-contain-layout:  ;
-  --tw-contain-paint:  ;
-  --tw-contain-style:  
-}
-
-.cac-sr-only {
-  position: absolute;
-  width: 1px;
-  height: 1px;
-  padding: 0;
-  margin: -1px;
-  overflow: hidden;
-  clip: rect(0, 0, 0, 0);
-  white-space: nowrap;
-  border-width: 0
-}
-
-.cac-absolute {
-  position: absolute
-}
-
-.cac-relative {
-  position: relative
-}
-
-.cac-inset-0 {
-  inset: 0px
-}
-
-.cac-left-0 {
-  left: 0px
-}
-
-.cac-right-0 {
-  right: 0px
-}
-
-.cac-right-4 {
-  right: 1rem
-}
-
-.cac-top-0 {
-  top: 0px
-}
-
-.cac-top-4 {
-  top: 1rem
-}
-
-.cac-z-50 {
-  z-index: 50
-}
-
-.cac-mt-2 {
-  margin-top: 0.5rem
-}
-
-.cac-block {
-  display: block
-}
-
-.cac-inline {
-  display: inline
-}
-
-.cac-flex {
-  display: flex
-}
-
-.cac-hidden {
-  display: none
-}
-
-.cac-h-10 {
-  height: 2.5rem
-}
-
-.cac-h-8 {
-  height: 2rem
-}
-
-.cac-h-\[26rem\] {
-  height: 26rem
-}
-
-.cac-h-full {
-  height: 100%
-}
-
-.cac-h-screen {
-  height: 100vh
-}
-
-.cac-w-10 {
-  width: 2.5rem
-}
-
-.cac-w-8 {
-  width: 2rem
-}
-
-.cac-w-full {
-  width: 100%
-}
-
-.cac-w-screen {
-  width: 100vw
-}
-
-.cac-min-w-72 {
-  min-width: 18rem
-}
-
-.cac-shrink-0 {
-  flex-shrink: 0
-}
-
-@keyframes cac-spin {
-  to {
-    transform: rotate(360deg)
-  }
-}
-
-.cac-animate-spin {
-  animation: cac-spin 1s linear infinite
-}
-
-.cac-cursor-pointer {
-  cursor: pointer
-}
-
-.cac-items-center {
-  align-items: center
-}
-
-.cac-justify-center {
-  justify-content: center
-}
-
-.cac-justify-between {
-  justify-content: space-between
-}
-
-.cac-gap-2 {
-  gap: 0.5rem
-}
-
-.cac-overflow-hidden {
-  overflow: hidden
-}
-
-.cac-rounded-3xl {
-  border-radius: 1.5rem
-}
-
-.cac-rounded-full {
-  border-radius: 9999px
-}
-
-.cac-rounded-lg {
-  border-radius: 0.5rem
-}
-
-.cac-border {
-  border-width: 1px
-}
-
-.cac-border-none {
-  border-style: none
-}
-
-.cac-border-neutral-500 {
-  --tw-border-opacity: 1;
-  border-color: rgb(115 115 115 / var(--tw-border-opacity))
-}
-
-.cac-bg-neutral-950 {
-  --tw-bg-opacity: 1;
-  background-color: rgb(10 10 10 / var(--tw-bg-opacity))
-}
-
-.cac-bg-transparent {
-  background-color: transparent
-}
-
-.cac-bg-white {
-  --tw-bg-opacity: 1;
-  background-color: rgb(255 255 255 / var(--tw-bg-opacity))
-}
-
-.cac-bg-opacity-50 {
-  --tw-bg-opacity: 0.5
-}
-
-.cac-fill-neutral-600 {
-  fill: #525252
-}
-
-.cac-object-cover {
-  -o-object-fit: cover;
-     object-fit: cover
-}
-
-.cac-p-1 {
-  padding: 0.25rem
-}
-
-.cac-p-2 {
-  padding: 0.5rem
-}
-
-.cac-px-3 {
-  padding-left: 0.75rem;
-  padding-right: 0.75rem
-}
-
-.cac-px-4 {
-  padding-left: 1rem;
-  padding-right: 1rem
-}
-
-.cac-py-2 {
-  padding-top: 0.5rem;
-  padding-bottom: 0.5rem
-}
-
-.cac-text-neutral-200 {
-  --tw-text-opacity: 1;
-  color: rgb(229 229 229 / var(--tw-text-opacity))
-}
-
-.cac-text-neutral-400 {
-  --tw-text-opacity: 1;
-  color: rgb(163 163 163 / var(--tw-text-opacity))
-}
-
-.cac-text-neutral-500 {
-  --tw-text-opacity: 1;
-  color: rgb(115 115 115 / var(--tw-text-opacity))
-}
-
-.cac-shadow-lg {
-  --tw-shadow: 0 10px 15px -3px rgb(0 0 0 / 0.1), 0 4px 6px -4px rgb(0 0 0 / 0.1);
-  --tw-shadow-colored: 0 10px 15px -3px var(--tw-shadow-color), 0 4px 6px -4px var(--tw-shadow-color);
-  box-shadow: var(--tw-ring-offset-shadow, 0 0 #0000), var(--tw-ring-shadow, 0 0 #0000), var(--tw-shadow)
-}
-
-.cac-shadow-xl {
-  --tw-shadow: 0 20px 25px -5px rgb(0 0 0 / 0.1), 0 8px 10px -6px rgb(0 0 0 / 0.1);
-  --tw-shadow-colored: 0 20px 25px -5px var(--tw-shadow-color), 0 8px 10px -6px var(--tw-shadow-color);
-  box-shadow: var(--tw-ring-offset-shadow, 0 0 #0000), var(--tw-ring-shadow, 0 0 #0000), var(--tw-shadow)
-}
-
-.cac-transition-colors {
-  transition-property: color, background-color, border-color, text-decoration-color, fill, stroke;
-  transition-timing-function: cubic-bezier(0.4, 0, 0.2, 1);
-  transition-duration: 150ms
-}
-
-.hover\:cac-bg-neutral-200:hover {
-  --tw-bg-opacity: 1;
-  background-color: rgb(229 229 229 / var(--tw-bg-opacity))
-}
-
-.hover\:cac-bg-opacity-50:hover {
-  --tw-bg-opacity: 0.5
-}
-
-@media (min-width: 640px) {
-  .sm\:cac-p-6 {
-    padding: 1.5rem
-  }
-}
-
-@media (prefers-color-scheme: dark) {
-  .dark\:cac-fill-neutral-300 {
-    fill: #d4d4d4
-  }
-
-  .dark\:cac-text-neutral-600 {
-    --tw-text-opacity: 1;
-    color: rgb(82 82 82 / var(--tw-text-opacity))
-  }
-}

package/dist/src/nextjs/client/index.d.ts

@@ -1,2 +0,0 @@
-export { CivicNextAuthProvider as CivicAuthProvider, type NextCivicAuthProviderProps as AuthProviderProps, } from "@/nextjs/providers/NextAuthProvider.jsx";
-//# sourceMappingURL=index.d.ts.map

package/dist/src/nextjs/client/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/nextjs/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,IAAI,iBAAiB,EAC1C,KAAK,0BAA0B,IAAI,iBAAiB,GACrD,MAAM,yCAAyC,CAAC"}

package/dist/src/nextjs/client/index.js

@@ -1,2 +0,0 @@
-export { CivicNextAuthProvider as CivicAuthProvider, } from "@/nextjs/providers/NextAuthProvider.jsx";
-//# sourceMappingURL=index.js.map

package/dist/src/nextjs/client/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/nextjs/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,IAAI,iBAAiB,GAE3C,MAAM,yCAAyC,CAAC","sourcesContent":["export {\n  CivicNextAuthProvider as CivicAuthProvider,\n  type NextCivicAuthProviderProps as AuthProviderProps,\n} from \"@/nextjs/providers/NextAuthProvider.jsx\";\n"]}

package/dist/test/unit/nextjs/routeHandler.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=routeHandler.test.d.ts.map

package/dist/test/unit/nextjs/routeHandler.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"routeHandler.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/nextjs/routeHandler.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/nextjs/routeHandler.test.js

@@ -1,271 +0,0 @@
-import { describe, it, expect, beforeEach, vi } from "vitest";
-import { NextRequest, NextResponse } from "next/server.js";
-import { handler } from "@/nextjs/routeHandler.js";
-import { revalidatePath } from "next/cache.js";
-import * as logger from "@/lib/logger.js";
-import * as login from "@/server/login.js";
-import * as session from "@/shared/lib/session.js";
-import * as cookies from "@/nextjs/cookies.js";
-import * as PKCE from "@/services/PKCE.js";
-import { GenericUserSession } from "@/shared/lib/UserSession.js";
-import { TOKEN_EXCHANGE_TRIGGER_TEXT } from "@/constants.js";
-vi.mock("next/headers.js", () => {
-    return {
-        cookies: vi.fn().mockReturnValue({
-            set: vi.fn(),
-            get: (name) => {
-                if (name === "codeVerifier") {
-                    return "test-code-verifier";
-                }
-            },
-        }),
-    };
-});
-vi.mock("@/server/login.js");
-vi.mock("@/shared/lib/session.js");
-vi.mock("@/nextjs/cookies.js");
-vi.mock("@/services/PKCE.js");
-const mockUser = {
-    id: "user123",
-    name: "John Doe",
-    email: "john@example.com",
-    picture: "https://example.com/john.jpg",
-};
-// Mock implementations
-vi.mock("next/server.js", () => {
-    class MockNextResponse {
-        body;
-        init;
-        constructor(body, init) {
-            this.body = body;
-            this.init = init;
-            this.body = body;
-            this.init = init;
-        }
-        headers = {
-            set: vi.fn(),
-        };
-        cookies = {
-            set: vi.fn(),
-            get: vi.fn(),
-        };
-        json() {
-            return Promise.resolve({});
-        }
-        static json(data, options) {
-            return {
-                ...options,
-                data,
-                json: () => Promise.resolve(data),
-                headers: {
-                    set: vi.fn(),
-                },
-                cookies: {
-                    set: vi.fn(),
-                    get: vi.fn(),
-                },
-            };
-        }
-        static redirect(url) {
-            return {
-                url,
-                cookies: {
-                    set: vi.fn(),
-                    get: vi.fn(),
-                },
-            };
-        }
-    }
-    return {
-        NextResponse: MockNextResponse,
-        NextRequest: vi.fn().mockImplementation((url) => ({
-            url,
-            nextUrl: new URL(url),
-        })),
-    };
-});
-vi.mock("next/cache", () => ({
-    revalidatePath: vi.fn(),
-}));
-describe("Auth Route Handler", () => {
-    let mockLogger;
-    afterEach(vi.clearAllMocks);
-    beforeEach(() => {
-        mockLogger = {
-            error: vi.fn(),
-            info: vi.fn(),
-            warn: vi.fn(),
-            debug: vi.fn(),
-        };
-        vi.spyOn(logger.loggers.nextjs.handlers.auth, "debug").mockImplementation((...args) => mockLogger.debug(...args));
-        vi.spyOn(logger.loggers.nextjs.handlers.auth, "info").mockImplementation((...args) => mockLogger.info(...args));
-        vi.spyOn(logger.loggers.nextjs.handlers.auth, "warn").mockImplementation((...args) => mockLogger.warn(...args));
-        vi.spyOn(logger.loggers.nextjs.handlers.auth, "error").mockImplementation((...args) => mockLogger.error(...args));
-    });
-    beforeEach(() => {
-        vi.clearAllMocks();
-        vi.stubEnv("_civic_auth_client_id", "test-client-id");
-        vi.spyOn(login, "resolveOAuthAccessCode").mockResolvedValue({});
-        vi.spyOn(session, "getUser").mockResolvedValue(mockUser);
-        vi.spyOn(GenericUserSession.prototype, "set");
-    });
-    describe("Challenge Handler", () => {
-        beforeEach(() => {
-            vi.spyOn(PKCE.GenericPublicClientPKCEProducer.prototype, "getCodeChallenge").mockResolvedValue("test-code-challenge");
-        });
-        it("should handle challenge request", async () => {
-            const mockRequest = new NextRequest("https://example.com/api/auth/challenge");
-            const routeHandler = handler();
-            const response = await routeHandler(mockRequest);
-            expect(response.json()).resolves.toEqual({
-                status: "success",
-                challenge: "test-code-challenge",
-            });
-        });
-    });
-    describe("Callback Handler", () => {
-        let mockRequest;
-        let routeHandler;
-        beforeAll(() => {
-            routeHandler = handler();
-        });
-        it("should handle missing parameters", async () => {
-            mockRequest = new NextRequest("https://example.com/api/auth/callback");
-            mockRequest.cookies = {
-                get: (cookieName) => cookieName === "code_verifier" ? "test-code-verifier" : undefined,
-            };
-            const response = await routeHandler(mockRequest);
-            expect(response.json()).resolves.toEqual({
-                error: "Bad parameters",
-            });
-            expect(response.status).toBe(400);
-        });
-        describe("with all parameters passed in", () => {
-            beforeAll(() => {
-                mockRequest = new NextRequest("https://example.com/api/auth/callback?code=123&state=testState&appUrl=https://example.com");
-                mockRequest.cookies = {
-                    get: (cookieName) => cookieName === "code_verifier" ? "test-code-verifier" : undefined,
-                };
-            });
-            it("should handle error when resolving the access code", async () => {
-                vi.spyOn(login, "resolveOAuthAccessCode").mockRejectedValue("Token exchange failed");
-                const response = await routeHandler(mockRequest);
-                expect(response.json()).resolves.toEqual({
-                    error: "Failed to authenticate user",
-                });
-                expect(response.status).toBe(401);
-            });
-            describe("with code_verifier cookie present on request", () => {
-                it("should do token exchange", async () => {
-                    const routeHandler = handler();
-                    const response = await routeHandler(mockRequest);
-                    // should have resolved the access code
-                    expect(login.resolveOAuthAccessCode).toHaveBeenCalled();
-                    // verify response data
-                    const responseData = await response.json();
-                    expect(responseData).toEqual({});
-                    // verify user is being set to the session
-                    expect(GenericUserSession.prototype.set).toHaveBeenCalledWith(mockUser);
-                });
-                it("should return empty html response", async () => {
-                    const response = await routeHandler(mockRequest);
-                    expect(response.body).toEqual('<html><span style="display:none">serverSideTokenExchangeSuccess</span></html>');
-                });
-            });
-            describe("with no code_verifier cookie present on request", () => {
-                beforeAll(() => {
-                    mockRequest.cookies = {
-                        get: () => undefined,
-                    };
-                });
-                it("should not do token exchange", async () => {
-                    const response = await routeHandler(mockRequest);
-                    // should have resolved the access code
-                    expect(login.resolveOAuthAccessCode).not.toHaveBeenCalled();
-                    // verify response data
-                    const responseData = await response.json();
-                    expect(responseData).toEqual({});
-                    // verify user is being set to the session
-                    expect(GenericUserSession.prototype.set).not.toHaveBeenCalled();
-                });
-                describe("in server token-exchange mode", () => {
-                    let state;
-                    beforeEach(() => {
-                        state =
-                            "eyJ1dWlkIjoiMGY0NWU5YWItY2U1Ni00OWZiLTlkYmUtOGQ3ZmM3YTI3NDFhIiwiZGlzcGxheU1vZGUiOiJpZnJhbWUiLCJzZXJ2ZXJUb2tlbkV4Y2hhbmdlIjp0cnVlfQ";
-                        const params = new URLSearchParams({ code: "123", state });
-                        mockRequest = new NextRequest(`https://example.com/api/auth/callback?${params.toString()}`);
-                        mockRequest.cookies = {
-                            get: () => undefined,
-                        };
-                    });
-                    it("should return html with a javascript fetch call to retry the callback token exchange", async () => {
-                        // this state indicates server-side token exchange
-                        const response = await routeHandler(mockRequest);
-                        expect(response.body).toContain(`fetch('/api/auth/callback?code=123&state=${state}&sameDomainServerTokenExchange=true&appUrl=' + appUrl)`);
-                    });
-                });
-                describe("in client token-exchange mode", () => {
-                    let state;
-                    beforeEach(() => {
-                        state =
-                            "eyJ1dWlkIjoiNzE5MmI3MmItYzk5ZC00NjhmLTliMDAtMWFhOWVhYjI0YjgxIiwiZGlzcGxheU1vZGUiOiJyZWRpcmVjdCJ9";
-                        const params = new URLSearchParams({ code: "123", state });
-                        mockRequest = new NextRequest(`https://example.com/api/auth/callback?${params.toString()}`);
-                        mockRequest.cookies = {
-                            get: () => undefined,
-                        };
-                    });
-                    it("should return html response indicating a token exchange is required", async () => {
-                        const response = await routeHandler(mockRequest);
-                        expect(response.body).toEqual(`<html><body><span style="display:none">${TOKEN_EXCHANGE_TRIGGER_TEXT}</span></body></html>`);
-                    });
-                });
-            });
-        });
-    });
-    describe("Logout Handler", () => {
-        beforeEach(() => {
-            vi.spyOn(cookies, "clearAuthCookies");
-        });
-        it("should clear auth cookies", async () => {
-            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=/dashboard");
-            const routeHandler = handler();
-            await routeHandler(mockRequest);
-            expect(cookies.clearAuthCookies).toHaveBeenCalled();
-        });
-        it("should handle relative redirect paths", async () => {
-            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=/dashboard");
-            const routeHandler = handler();
-            const response = await routeHandler(mockRequest);
-            expect(response.url).toBe("https://example.com/dashboard");
-            expect(revalidatePath).toHaveBeenCalledWith("/dashboard");
-        });
-        it("should handle default redirect to home", async () => {
-            const mockRequest = new NextRequest("https://example.com/api/auth/logout");
-            const routeHandler = handler();
-            const response = await routeHandler(mockRequest);
-            expect(response.url).toBe("https://example.com/");
-            expect(revalidatePath).toHaveBeenCalledWith("/");
-        });
-        it("should handle absolute URLs and preserve the domain", async () => {
-            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=https://other-domain.com/page");
-            const routeHandler = handler();
-            const response = await routeHandler(mockRequest);
-            // The URL constructor will preserve the absolute URL
-            expect(response.url).toBe("https://other-domain.com/page");
-            expect(revalidatePath).toHaveBeenCalledWith("https://other-domain.com/page");
-        });
-        it("should handle revalidation failure gracefully", async () => {
-            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=/dashboard");
-            vi.mocked(revalidatePath).mockImplementationOnce(() => {
-                throw new Error("Revalidation failed");
-            });
-            const routeHandler = handler();
-            const response = await routeHandler(mockRequest);
-            expect(response.url).toBe("https://example.com/dashboard");
-            expect(mockLogger.warn).toHaveBeenCalled();
-        });
-    });
-});
-//# sourceMappingURL=routeHandler.test.js.map