@frigear-nu/oauth-server 0.0.0-stage → 0.0.3

package/dist/runtime/utils/index.js

@@ -0,0 +1,51 @@
+export const DEFAULT_SCOPES = ["openid", "profile", "email"];
+export const DEFAULT_CALLBACK_PATH = "/auth/frigear";
+export function matchesAllowedRoles(allowedRoles, roles) {
+  if (!allowedRoles || allowedRoles.length === 0) return true;
+  return allowedRoles.some((role) => roles.includes(role));
+}
+export function parseScope(scope) {
+  return [...new Set((scope ?? "").split(/\s+/).filter(Boolean))];
+}
+export function resolveScope(requested, supported) {
+  const asked = parseScope(requested);
+  if (asked.length === 0) return [...DEFAULT_SCOPES];
+  return asked.filter((scope) => supported.includes(scope));
+}
+export function isSecureOrigin(url) {
+  if (url.protocol === "https:") return true;
+  return url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+}
+export function normalizeWebsiteUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error("The website URL is not a valid URL.");
+  }
+  if (!isSecureOrigin(url)) throw new Error("The website URL must use https (http is only allowed for localhost).");
+  if (url.pathname !== "/" || url.search || url.hash) throw new Error("The website URL must be an origin without a path.");
+  return url.origin;
+}
+export function previewPatternToRegExp(pattern, callbackPath) {
+  const escaped = pattern.replace(/\/+$/, "").split("*").map((part) => part.replace(/[.+?^${}()|[\]\\]/g, "\\$&")).join("[^/.]+");
+  const callback = callbackPath.replace(/[.+?^${}()|[\]\\]/g, "\\$&");
+  return new RegExp(`^${escaped}${callback}$`);
+}
+export function validateRedirectUri(redirectUri, rules) {
+  const callbackPath = rules.callbackPath ?? DEFAULT_CALLBACK_PATH;
+  let url;
+  try {
+    url = new URL(redirectUri);
+  } catch {
+    return false;
+  }
+  if (url.hash || !isSecureOrigin(url)) return false;
+  if (redirectUri === `${rules.websiteUrl.replace(/\/+$/, "")}${callbackPath}`) return true;
+  if (rules.redirectUris?.includes(redirectUri)) return true;
+  if (rules.previewUrlPattern) return previewPatternToRegExp(rules.previewUrlPattern, callbackPath).test(redirectUri);
+  return false;
+}
+export function newId(prefix) {
+  return `${prefix}_${crypto.randomUUID().replaceAll("-", "")}`;
+}

package/dist/types.d.mts

@@ -0,0 +1,3 @@
+export { default } from './module.mjs'
+
+export { type AdminApplicationDto, type ApplicationAccessContext, type ApplicationInput, type AuthorizeContext, type ClaimsContext, type ConsentDto, type CreatedApplicationDto, type ModuleOptions, type OAuthApplication, type OAuthServerRuntimeConfig, type OAuthUser, type PublicModuleOptions, type TokenIssuedContext, type TokenRevokedContext, type TokenType, type UserApplicationDto, type UserRolesContext } from './module.mjs'

package/package.json

@@ -1,6 +1,95 @@
 {
   "name": "@frigear-nu/oauth-server",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.0.3",
+  "description": "OAuth 2.0 / OpenID Connect server for the frigear ecosystem: register applications that users with certain roles may sign in to.",
+  "url": "https://docs.frigear.nu/modules/oauth-server",
+  "author": {
+    "name": "Frigear",
+    "email": "kontakt@frigear.nu",
+    "url": "https://frigear.nu"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/frigear-nu/frigear-nu.git",
+    "directory": "packages/oauth-server"
+  },
+  "license": "MIT",
+  "type": "module",
+  "private": false,
+  "main": "./dist/module.mjs",
+  "exports": {
+    ".": {
+      "types": "./dist/types.d.mts",
+      "import": "./dist/module.mjs",
+      "default": "./dist/module.mjs"
+    },
+    "./utils": {
+      "types": "./dist/runtime/utils/index.d.ts",
+      "import": "./dist/runtime/utils/index.js",
+      "default": "./dist/runtime/utils/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "workspaces": [
+    "playground"
+  ],
+  "dependencies": {
+    "@frigear-nu/menu": "0.0.4",
+    "@frigear-nu/module-kit": "0.1.2",
+    "@frigear-nu/users": "1.0.4",
+    "@libsql/client": "^0.18.0",
+    "@nuxt/kit": "^4.6.0",
+    "drizzle-kit": "^0.31.11",
+    "drizzle-orm": "^0.45.3",
+    "h3": "^1.15.11",
+    "jose": "^6.1.0",
+    "zod": "^4.6.5"
+  },
+  "peerDependencies": {
+    "@nuxt/ui": "^4.10.0",
+    "@nuxthub/core": "^0.10.8"
+  },
+  "peerDependenciesMeta": {
+    "@nuxt/ui": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@nuxt/devtools": "^3.4.2",
+    "@nuxt/eslint-config": "^1.17.0",
+    "@nuxt/module-builder": "^1.0.3",
+    "@nuxt/schema": "^4.6.0",
+    "@nuxt/test-utils": "^4.3.2",
+    "@nuxt/ui": "^4.11.0",
+    "@nuxthub/core": "^0.10.8",
+    "@types/node": "latest",
+    "changelogen": "^0.6.2",
+    "eslint": "^10.10.0",
+    "nuxt": "^4.6.0",
+    "typescript": "^6.0.3",
+    "vitest": "^5.0.1",
+    "vue-tsc": "^3.3.11"
+  },
+  "scripts": {
+    "postinstall": "nuxt-module-build build --stub && nuxt prepare",
+    "build": "nuxt-module-build build",
+    "dev": "npm run dev:prepare && nuxt dev playground",
+    "dev:build": "nuxt build playground",
+    "dev:prepare": "nuxt-module-build build --stub && nuxt-module-build prepare && nuxt prepare playground",
+    "release": "npm run lint && npm run test && npm run prepack && changelogen --release && npm publish && git push --follow-tags",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "test": "vitest run",
+    "test:watch": "vitest watch",
+    "test:types": "vue-tsc --noEmit && cd playground && vue-tsc --noEmit"
+  },
+  "typesVersions": {
+    "*": {
+      ".": [
+        "./dist/types.d.mts"
+      ]
+    }
+  }
 }