@edcalderon/auth 1.4.1 → 1.4.2

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.4.2] - 2026-03-30
+
+### Added
+
+- ✨ **Authentik preset helpers** — `createAuthentikPreset()`, `createAuthentikRelayHandler()`, `createAuthentikLogoutHandler()`, and `handleAuthentikCallback()` wrap the existing relay/callback/logout/provisioning primitives into a reusable config-first flow.
+- 📦 **New `@edcalderon/auth/authentik` exports** — the preset layer is now part of the Authentik subpath export surface.
+
 ## [1.4.1] - 2026-03-23
 
 ### Added

package/README.md

@@ -11,12 +11,12 @@ Swap between Supabase, Firebase, Hybrid, or any custom provider without changing
 
 ---
 
-## 📋 Latest Changes (v1.4.1)
+## 📋 Latest Changes (v1.4.2)
 
 ### Added
 
-- 📚 **Documentation**: Added `packages/auth/docs/` with five guides: `authentik-integration-guide.md`, `provisioning-model.md`, `upgrade-migration.md`, `nextjs-examples.md`, `cig-reference-map.md`.
-- Updated README with documentation table and `@edcalderon/auth/authentik` subpath listing.
+- ✨ **Authentik preset helpers** — `createAuthentikPreset()`, `createAuthentikRelayHandler()`, `createAuthentikLogoutHandler()`, and `handleAuthentikCallback()` wrap the existing relay/callback/logout/provisioning primitives into a reusable config-first flow.
+- 📦 **New `@edcalderon/auth/authentik` exports** — the preset layer is now part of the Authentik subpath export surface.
 
 For full version history, see [CHANGELOG.md](./CHANGELOG.md) and [GitHub releases](https://github.com/edcalderon/my-second-brain/releases)
 

package/dist/authentik/index.d.ts

@@ -15,3 +15,5 @@ export { revokeToken, buildEndSessionUrl, orchestrateLogout, } from "./logout";
 export { NoopProvisioningAdapter, createProvisioningAdapter, normalizePayload, SupabaseSyncAdapter, createSupabaseSyncAdapter, } from "./provisioning";
 export { validateAuthentikConfig, validateSupabaseSyncConfig, validateFullConfig, discoverEndpoints, } from "./config";
 export { resolveSafeRedirect } from "./redirect";
+export { createAuthentikPreset, createAuthentikRelayHandler, createAuthentikLogoutHandler, handleAuthentikCallback, } from "./preset";
+export type { AuthentikPreset, AuthentikPresetConfig, CreateAuthentikPresetOptions, HandleAuthentikCallbackInput, AuthentikRelayHandler, } from "./preset";

package/dist/authentik/index.js

@@ -19,4 +19,6 @@ export { NoopProvisioningAdapter, createProvisioningAdapter, normalizePayload, S
 export { validateAuthentikConfig, validateSupabaseSyncConfig, validateFullConfig, discoverEndpoints, } from "./config";
 // Safe redirect
 export { resolveSafeRedirect } from "./redirect";
+// Preset helpers
+export { createAuthentikPreset, createAuthentikRelayHandler, createAuthentikLogoutHandler, handleAuthentikCallback, } from "./preset";
 //# sourceMappingURL=index.js.map

package/dist/authentik/preset.d.ts

@@ -0,0 +1,42 @@
+import { type ProcessCallbackResult } from "./callback";
+import { orchestrateLogout } from "./logout";
+import type { AuthentikCallbackConfig, AuthentikLogoutConfig, AuthentikRelayConfig, ProvisioningAdapter, SupabaseSyncConfig, ConfigValidationResult } from "./types";
+export interface AuthentikPresetConfig {
+    relay: AuthentikRelayConfig;
+    callback: AuthentikCallbackConfig;
+    logout: AuthentikLogoutConfig;
+    provisioningAdapter?: ProvisioningAdapter;
+}
+export interface CreateAuthentikPresetOptions {
+    relay: AuthentikRelayConfig;
+    callback: AuthentikCallbackConfig;
+    logout: AuthentikLogoutConfig;
+    provisioningAdapter?: ProvisioningAdapter;
+    supabaseSync?: SupabaseSyncConfig;
+}
+export interface AuthentikPreset {
+    config: AuthentikPresetConfig;
+    validateConfig(): ConfigValidationResult;
+}
+export interface HandleAuthentikCallbackInput {
+    code: string;
+    codeVerifier: string;
+    state: string;
+    expectedState: string;
+    provider: string;
+}
+export type AuthentikRelayHandler = (searchParams: URLSearchParams | Record<string, string | undefined>) => {
+    ok: true;
+    html: string;
+} | {
+    ok: false;
+    error: string;
+    errorCode: string;
+};
+export declare function createAuthentikRelayHandler(config: AuthentikRelayConfig): AuthentikRelayHandler;
+export declare function handleAuthentikCallback(preset: AuthentikPreset, input: HandleAuthentikCallbackInput): Promise<ProcessCallbackResult>;
+export declare function createAuthentikLogoutHandler(config: AuthentikLogoutConfig): (tokens: {
+    accessToken?: string;
+    idToken?: string;
+}) => ReturnType<typeof orchestrateLogout>;
+export declare function createAuthentikPreset(options: CreateAuthentikPresetOptions): AuthentikPreset;

package/dist/authentik/preset.js

@@ -0,0 +1,51 @@
+import { createRelayPageHtml, parseRelayParams, } from "./relay";
+import { processCallback } from "./callback";
+import { orchestrateLogout } from "./logout";
+import { validateAuthentikConfig, validateFullConfig, } from "./config";
+export function createAuthentikRelayHandler(config) {
+    return (searchParams) => {
+        const params = parseRelayParams(searchParams);
+        if (!params) {
+            return {
+                ok: false,
+                error: "Missing required relay parameters",
+                errorCode: "relay_params_missing",
+            };
+        }
+        const result = createRelayPageHtml(config, params);
+        return { ok: true, html: result.html };
+    };
+}
+export function handleAuthentikCallback(preset, input) {
+    return processCallback({
+        config: preset.config.callback,
+        code: input.code,
+        codeVerifier: input.codeVerifier,
+        state: input.state,
+        expectedState: input.expectedState,
+        provider: input.provider,
+        provisioningAdapter: preset.config.provisioningAdapter,
+    });
+}
+export function createAuthentikLogoutHandler(config) {
+    return (tokens) => orchestrateLogout(config, tokens);
+}
+export function createAuthentikPreset(options) {
+    const provisioningAdapter = options.provisioningAdapter;
+    const presetConfig = {
+        relay: options.relay,
+        callback: options.callback,
+        logout: options.logout,
+        provisioningAdapter,
+    };
+    return {
+        config: presetConfig,
+        validateConfig: () => {
+            if (options.supabaseSync) {
+                return validateFullConfig(options.callback, options.supabaseSync);
+            }
+            return validateAuthentikConfig(options.callback);
+        },
+    };
+}
+//# sourceMappingURL=preset.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edcalderon/auth",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "A universal, provider-agnostic authentication package (Web + Next.js + Expo/React Native)",
   "exports": {
     ".": {