@frigear-nu/oauth-server 0.0.9 → 0.1.0

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@frigear-nu/oauth-server",
   "configKey": "oauthServer",
-  "version": "0.0.9",
+  "version": "0.1.0",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -24,11 +24,11 @@ const module$1 = defineNuxtModule({
     "@frigear-nu/mcp": { version: ">=0.0.1" },
     "@frigear-nu/users": { version: ">=0.0.1" },
     "@frigear-nu/ui": { version: ">=0.0.1" },
-    // Provides the shared page components of the admin page (`AdminPage`, `AdminTable`, ...).
+    // Provides the admin shell (layout, nav groups) the admin page lives in.
     "@frigear-nu/admin": { version: ">=0.0.0", optional: true },
     "@frigear-nu/menu": { version: ">=0.0.1", optional: true }
   },
-  async setup(options, nuxt) {
+  setup(options, nuxt) {
     registerModule(MODULE_NAME, nuxt);
     addAuthScope(nuxt, { name: "oauth:read", description: "See which applications you can sign in to (MCP)" });
     const resolver = createResolver(import.meta.url);
@@ -67,7 +67,7 @@ const module$1 = defineNuxtModule({
         applications: applicationsPath
       }
     };
-    await registerDatabaseTable(nuxt, {
+    registerDatabaseTable(nuxt, {
       resolver,
       schema: (dialect) => `./runtime/server/db/schema.${dialect}`
     });
@@ -94,14 +94,15 @@ const module$1 = defineNuxtModule({
     if (settings.mcp === true) addMcpDefinitions(nuxt, resolver.resolve("./runtime/server/mcp"));
     addImports([
       { name: "useOAuthApplications", from: resolver.resolve("./runtime/app/composables/useOAuthApplications") },
-      { name: "useMyApplications", from: resolver.resolve("./runtime/app/composables/useOAuthApplications") }
+      { name: "useMyApplications", from: resolver.resolve("./runtime/app/composables/useOAuthApplications") },
+      { name: "useOAuthApplicationActions", from: resolver.resolve("./runtime/app/composables/useOAuthApplicationActions") }
     ]);
     addModulePages(MODULE_NAME, resolver, [
       { name: "oauth-authorize", path: settings.pages?.authorize !== false ? authorizePath : void 0, file: "./runtime/app/pages/authorize.vue" },
       { name: "oauth-admin", path: adminPath, file: "./runtime/app/pages/admin.vue" },
       { name: "oauth-applications", path: applicationsPath, file: "./runtime/app/pages/applications.vue" }
     ]);
-    addOptionalMenuSource(nuxt, { file: resolver.resolve("./runtime/menus"), menu: "dashboard.account" });
+    addOptionalMenuSource(nuxt, { file: resolver.resolve("./runtime/menus"), menu: "account" });
   }
 });
 

package/dist/runtime/app/components/OAuthApplicationSlideover.d.vue.ts

@@ -0,0 +1,18 @@
+import type { AdminApplicationDto, ApplicationInput, CreatedApplicationDto } from '../../../types.js';
+type Saved = AdminApplicationDto | CreatedApplicationDto;
+/**
+ * Create or edit an application. Open it with `useOverlay()` (see `useOAuthApplicationActions`): it closes with the
+ * saved application, or `false` on cancel. `save` performs the request, so a failure is toasted and the form stays open.
+ */
+type __VLS_Props = {
+    /** The application to edit; leave out to create one. */
+    application?: AdminApplicationDto;
+    save: (input: ApplicationInput) => Promise<Saved>;
+};
+declare const __VLS_export: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {
+    close: (value: false | Saved) => any;
+}, string, import("vue").PublicProps, Readonly<__VLS_Props> & Readonly<{
+    onClose?: ((value: false | Saved) => any) | undefined;
+}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/app/components/OAuthApplicationSlideover.vue

@@ -0,0 +1,160 @@
+<script setup>
+import * as z from "zod";
+defineOptions({ name: "OAuthApplicationSlideover" });
+const props = defineProps({
+  application: { type: Object, required: false },
+  save: { type: Function, required: true }
+});
+const emit = defineEmits(["close"]);
+const t = useModuleT("oauthServer");
+const { busy, run } = useAction();
+const schema = z.object({
+  name: z.string().trim().min(1, t("form.nameRequired", "Enter a name.")),
+  websiteUrl: z.url(t("form.websiteUrlInvalid", "Enter a full URL, for example https://app.example.com.")),
+  loginUrl: z.string(),
+  previewUrlPattern: z.string(),
+  description: z.string(),
+  icon: z.string(),
+  priority: z.number(),
+  allowedRoles: z.array(z.string()),
+  tags: z.array(z.string())
+});
+const state = reactive({
+  name: props.application?.name ?? "",
+  websiteUrl: props.application?.websiteUrl ?? "",
+  loginUrl: props.application?.loginUrl ?? "",
+  previewUrlPattern: props.application?.previewUrlPattern ?? "",
+  description: props.application?.description ?? "",
+  icon: props.application ? props.application.icon ?? "" : "i-lucide-globe",
+  priority: props.application?.priority ?? 0,
+  allowedRoles: [...props.application?.allowedRoles ?? []],
+  tags: [...props.application?.tags ?? []]
+});
+const formId = "oauth-application-form";
+async function onSubmit(event) {
+  const value = event.data;
+  const saved = await run(() => props.save({
+    name: value.name,
+    websiteUrl: value.websiteUrl,
+    loginUrl: value.loginUrl || null,
+    previewUrlPattern: value.previewUrlPattern || null,
+    description: value.description || null,
+    icon: value.icon || null,
+    priority: Number(value.priority) || 0,
+    allowedRoles: value.allowedRoles,
+    tags: value.tags
+  }));
+  if (saved) emit("close", saved);
+}
+</script>
+
+<template>
+  <FormSlideover
+    :title="application ? t('form.editTitle', 'Edit application') : t('form.createTitle', 'Add application')"
+    :description="application ? t('form.editDescription', 'Change how the application is registered.') : t('form.createDescription', 'Register an application that users can sign in to.')"
+    :form-id="formId"
+    :submit-label="application ? t('form.save', 'Save application') : t('form.create', 'Add application')"
+    :loading="busy"
+    @close="emit('close', $event)"
+  >
+    <UForm
+      :id="formId"
+      :schema="schema"
+      :state="state"
+      class="grid gap-4"
+      @submit="onSubmit"
+    >
+      <UFormField
+        name="name"
+        :label="t('form.name', 'Name')"
+        required
+      >
+        <UInput
+          v-model="state.name"
+          class="w-full"
+        />
+      </UFormField>
+      <UFormField
+        name="websiteUrl"
+        :label="t('form.websiteUrl', 'Website URL')"
+        :description="t('form.websiteUrlHint', 'The origin of the application, without a path. The callback is the website URL plus the configured callback path.')"
+        required
+      >
+        <UInput
+          v-model="state.websiteUrl"
+          class="w-full"
+          placeholder="https://app.example.com"
+        />
+      </UFormField>
+      <UFormField
+        name="loginUrl"
+        :label="t('form.loginUrl', 'Login URL')"
+        :description="t('form.loginUrlHint', 'Where the Open button goes. Defaults to the website URL.')"
+      >
+        <UInput
+          v-model="state.loginUrl"
+          class="w-full"
+        />
+      </UFormField>
+      <UFormField
+        name="previewUrlPattern"
+        :label="t('form.previewUrlPattern', 'Preview URL pattern')"
+        :description="t('form.previewUrlPatternHint', 'Optional, e.g. https://*.vercel.app, for preview deployments.')"
+      >
+        <UInput
+          v-model="state.previewUrlPattern"
+          class="w-full"
+        />
+      </UFormField>
+      <UFormField
+        name="allowedRoles"
+        :label="t('form.allowedRoles', 'Allowed roles')"
+        :description="t('form.allowedRolesHint', 'Leave empty to allow every signed-in user.')"
+      >
+        <UInputTags
+          v-model="state.allowedRoles"
+          class="w-full"
+        />
+      </UFormField>
+      <UFormField
+        name="tags"
+        :label="t('form.tags', 'Tags')"
+      >
+        <UInputTags
+          v-model="state.tags"
+          class="w-full"
+        />
+      </UFormField>
+      <UFormField
+        name="description"
+        :label="t('form.description', 'Description')"
+      >
+        <UTextarea
+          v-model="state.description"
+          class="w-full"
+        />
+      </UFormField>
+      <div class="grid grid-cols-2 gap-4">
+        <UFormField
+          name="icon"
+          :label="t('form.icon', 'Icon')"
+        >
+          <UInput
+            v-model="state.icon"
+            class="w-full"
+          />
+        </UFormField>
+        <UFormField
+          name="priority"
+          :label="t('form.priority', 'Priority')"
+        >
+          <UInput
+            v-model.number="state.priority"
+            type="number"
+            class="w-full"
+          />
+        </UFormField>
+      </div>
+    </UForm>
+  </FormSlideover>
+</template>

package/dist/runtime/app/components/OAuthApplicationSlideover.vue.d.ts

@@ -0,0 +1,18 @@
+import type { AdminApplicationDto, ApplicationInput, CreatedApplicationDto } from '../../../types.js';
+type Saved = AdminApplicationDto | CreatedApplicationDto;
+/**
+ * Create or edit an application. Open it with `useOverlay()` (see `useOAuthApplicationActions`): it closes with the
+ * saved application, or `false` on cancel. `save` performs the request, so a failure is toasted and the form stays open.
+ */
+type __VLS_Props = {
+    /** The application to edit; leave out to create one. */
+    application?: AdminApplicationDto;
+    save: (input: ApplicationInput) => Promise<Saved>;
+};
+declare const __VLS_export: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {
+    close: (value: false | Saved) => any;
+}, string, import("vue").PublicProps, Readonly<__VLS_Props> & Readonly<{
+    onClose?: ((value: false | Saved) => any) | undefined;
+}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/app/components/OAuthCredentialsModal.d.vue.ts

@@ -0,0 +1,9 @@
+/** Shown once after creating an application or replacing its secret. Opened by `useOAuthApplicationActions`. */
+type __VLS_Props = {
+    name: string;
+    clientId: string;
+    clientSecret: string;
+};
+declare const __VLS_export: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/app/components/OAuthCredentialsModal.vue

@@ -0,0 +1,53 @@
+<script setup>
+defineOptions({ name: "OAuthCredentialsModal" });
+defineProps({
+  name: { type: String, required: true },
+  clientId: { type: String, required: true },
+  clientSecret: { type: String, required: true }
+});
+const t = useModuleT("oauthServer");
+const { copy } = useCopyToClipboard();
+</script>
+
+<template>
+  <UModal
+    :title="t('credentials.title', 'Credentials for {name}', { name })"
+    :description="t('credentials.description', 'Copy the client secret now. It is only shown once.')"
+  >
+    <template #body>
+      <DescriptionList
+        :items="[
+  { key: 'clientId', label: t('credentials.clientId', 'Client ID') },
+  { key: 'clientSecret', label: t('credentials.clientSecret', 'Client secret') }
+]"
+      >
+        <template #clientId>
+          <div class="flex items-center gap-2">
+            <code class="min-w-0 break-all">{{ clientId }}</code>
+            <UButton
+              size="xs"
+              color="neutral"
+              variant="outline"
+              icon="i-lucide-copy"
+              :label="t('credentials.copy', 'Copy')"
+              @click="copy(clientId, t('credentials.copiedClientId', 'Client ID copied'))"
+            />
+          </div>
+        </template>
+        <template #clientSecret>
+          <div class="flex items-center gap-2">
+            <code class="min-w-0 break-all">{{ clientSecret }}</code>
+            <UButton
+              size="xs"
+              color="neutral"
+              variant="outline"
+              icon="i-lucide-copy"
+              :label="t('credentials.copy', 'Copy')"
+              @click="copy(clientSecret, t('credentials.copiedClientSecret', 'Client secret copied'))"
+            />
+          </div>
+        </template>
+      </DescriptionList>
+    </template>
+  </UModal>
+</template>

package/dist/runtime/app/components/OAuthCredentialsModal.vue.d.ts

@@ -0,0 +1,9 @@
+/** Shown once after creating an application or replacing its secret. Opened by `useOAuthApplicationActions`. */
+type __VLS_Props = {
+    name: string;
+    clientId: string;
+    clientSecret: string;
+};
+declare const __VLS_export: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/app/composables/index.d.ts

@@ -1 +1,2 @@
-export { useOAuthApplications, useMyApplications } from './useOAuthApplications.js';
+export { useOAuthApplications, useMyApplications, oauthApplicationsApi, OAUTH_APPLICATIONS_KEY } from './useOAuthApplications.js';
+export { useOAuthApplicationActions } from './useOAuthApplicationActions.js';

package/dist/runtime/app/composables/index.js

@@ -1 +1,2 @@
-export { useOAuthApplications, useMyApplications } from "./useOAuthApplications.js";
+export { useOAuthApplications, useMyApplications, oauthApplicationsApi, OAUTH_APPLICATIONS_KEY } from "./useOAuthApplications.js";
+export { useOAuthApplicationActions } from "./useOAuthApplicationActions.js";

package/dist/runtime/app/composables/useOAuthApplicationActions.d.ts

@@ -0,0 +1,20 @@
+import type { DropdownMenuItem } from '@nuxt/ui';
+import type { AdminApplicationDto, CreatedApplicationDto } from '../../../types.js';
+type SavedApplication = AdminApplicationDto | CreatedApplicationDto | false | undefined;
+/**
+ * Everything you can do to an application: `create` / `edit` (a `FormSlideover`), `remove`, `toggle`, `rotateSecret`,
+ * `signOutEveryone`, `copyClientId` and `menu(application)` for the row menu. Toasts, confirmations and the refresh
+ * of the admin list are handled here.
+ */
+export declare function useOAuthApplicationActions(): {
+    busy: any;
+    create: () => Promise<SavedApplication>;
+    edit: (application: AdminApplicationDto) => Promise<SavedApplication>;
+    remove: (application: AdminApplicationDto) => Promise<any>;
+    toggle: (application: AdminApplicationDto) => Promise<void>;
+    rotateSecret: (application: AdminApplicationDto) => Promise<void>;
+    signOutEveryone: (application: AdminApplicationDto) => Promise<void>;
+    copyClientId: (application: AdminApplicationDto) => any;
+    menu: (application: AdminApplicationDto) => DropdownMenuItem[][];
+};
+export {};

package/dist/runtime/app/composables/useOAuthApplicationActions.js

@@ -0,0 +1,123 @@
+import OAuthApplicationSlideover from "../components/OAuthApplicationSlideover.vue";
+import OAuthCredentialsModal from "../components/OAuthCredentialsModal.vue";
+import { OAUTH_APPLICATIONS_KEY, oauthApplicationsApi } from "./useOAuthApplications.js";
+export function useOAuthApplicationActions() {
+  const t = useModuleT("oauthServer");
+  const overlay = useOverlay();
+  const confirm = useConfirmDialog();
+  const toast = useToast();
+  const { busy, run } = useAction();
+  const { copy } = useCopyToClipboard();
+  const refresh = () => refreshNuxtData(OAUTH_APPLICATIONS_KEY);
+  function showCredentials(credentials) {
+    overlay.create(OAuthCredentialsModal, { destroyOnClose: true, props: credentials }).open();
+  }
+  async function create() {
+    const saved = await overlay.create(OAuthApplicationSlideover, {
+      destroyOnClose: true,
+      props: {
+        save: async (input) => {
+          const created = await oauthApplicationsApi.create(input);
+          await refresh();
+          return created;
+        }
+      }
+    }).open();
+    if (saved && "clientSecret" in saved) {
+      toast.add({ title: t("admin.created", "Application created"), description: saved.name, color: "success", icon: "i-lucide-check" });
+      showCredentials({ name: saved.name, clientId: saved.clientId, clientSecret: saved.clientSecret });
+    }
+    return saved;
+  }
+  async function edit(application) {
+    const saved = await overlay.create(OAuthApplicationSlideover, {
+      destroyOnClose: true,
+      props: {
+        application,
+        save: async (input) => {
+          const updated = await oauthApplicationsApi.update(application.id, input);
+          await refresh();
+          return updated;
+        }
+      }
+    }).open();
+    if (saved) toast.add({ title: t("admin.updated", "Application updated"), description: saved.name, color: "success", icon: "i-lucide-check" });
+    return saved;
+  }
+  async function remove(application) {
+    const confirmed = await confirm({
+      title: t("admin.deleteTitle", "Delete {name}?", { name: application.name }),
+      description: t("admin.deleteDescription", "Users can no longer sign in to it and every active sign-in ends. This cannot be undone."),
+      confirmText: t("admin.delete", "Delete application"),
+      destructive: true
+    });
+    if (!confirmed) return false;
+    const done = await run(async () => {
+      await oauthApplicationsApi.remove(application.id);
+      await refresh();
+      return true;
+    }, { success: t("admin.deleted", "Application deleted") });
+    return done ?? false;
+  }
+  async function toggle(application) {
+    await run(async () => {
+      await oauthApplicationsApi.update(application.id, { isActive: !application.isActive });
+      await refresh();
+    }, { success: application.isActive ? t("admin.disabledToast", "Application disabled") : t("admin.enabled", "Application enabled") });
+  }
+  async function rotateSecret(application) {
+    const confirmed = await confirm({
+      title: t("admin.rotateTitle", "Replace the client secret of {name}?", { name: application.name }),
+      description: t("admin.rotateDescription", "The old secret stops working and everyone is signed out of the application."),
+      confirmText: t("admin.newSecret", "New client secret"),
+      destructive: true
+    });
+    if (!confirmed) return;
+    const clientSecret = await run(async () => {
+      const secret = await oauthApplicationsApi.rotateSecret(application.id);
+      await refresh();
+      return secret;
+    }, { success: t("admin.secretReplaced", "Client secret replaced") });
+    if (clientSecret) showCredentials({ name: application.name, clientId: application.id, clientSecret });
+  }
+  async function signOutEveryone(application) {
+    const confirmed = await confirm({
+      title: t("admin.signOutTitle", "Sign everyone out of {name}?", { name: application.name }),
+      description: t("admin.signOutDescription", "Their sessions in the application end. They can sign in again."),
+      confirmText: t("admin.signOutEveryone", "Sign everyone out"),
+      destructive: true
+    });
+    if (!confirmed) return;
+    await run(async () => {
+      await oauthApplicationsApi.revokeGrants(application.id);
+      await refresh();
+    }, { success: t("admin.signedOut", "Everyone signed out") });
+  }
+  const copyClientId = (application) => copy(application.id, t("credentials.copiedClientId", "Client ID copied"));
+  const menu = (application) => [[
+    { label: t("admin.edit", "Edit application"), icon: "i-lucide-pencil", onSelect: () => {
+      void edit(application);
+    } },
+    { label: t("admin.copyClientId", "Copy client ID"), icon: "i-lucide-copy", onSelect: () => {
+      void copyClientId(application);
+    } },
+    {
+      label: application.isActive ? t("admin.disable", "Disable application") : t("admin.enable", "Enable application"),
+      icon: application.isActive ? "i-lucide-pause" : "i-lucide-play",
+      onSelect: () => {
+        void toggle(application);
+      }
+    },
+    { label: t("admin.newSecret", "New client secret"), icon: "i-lucide-key-round", onSelect: () => {
+      void rotateSecret(application);
+    } },
+    { label: t("admin.signOutEveryone", "Sign everyone out"), icon: "i-lucide-log-out", onSelect: () => {
+      void signOutEveryone(application);
+    } }
+  ], [
+    { label: t("admin.delete", "Delete application"), icon: "i-lucide-trash", color: "error", onSelect: () => {
+      void remove(application);
+    } }
+  ]];
+  return { busy, create, edit, remove, toggle, rotateSecret, signOutEveryone, copyClientId, menu };
+}

package/dist/runtime/app/composables/useOAuthApplications.d.ts

@@ -1,14 +1,25 @@
-import type { ApplicationInput } from '../../../types.js';
+import type { AdminApplicationDto, ApplicationInput, CreatedApplicationDto } from '../../../types.js';
+/** The `useFetch` key of the admin list; `refreshNuxtData(OAUTH_APPLICATIONS_KEY)` reloads it from anywhere. */
+export declare const OAUTH_APPLICATIONS_KEY = "oauth-server:applications";
+/** The admin endpoints as plain calls (no refresh). Every call needs the host's `oauth:authorize` hook to allow the user. */
+export declare const oauthApplicationsApi: {
+    create: (input: ApplicationInput) => Promise<CreatedApplicationDto>;
+    update: (id: string, patch: Partial<ApplicationInput>) => Promise<AdminApplicationDto>;
+    remove: (id: string) => Promise<unknown>;
+    /** Returns the new client secret; the old one stops working. */
+    rotateSecret: (id: string) => Promise<string>;
+    revokeGrants: (id: string) => Promise<unknown>;
+};
 /** Admin CRUD for applications. Every call needs the host's `oauth:authorize` hook to allow the user. */
 export declare function useOAuthApplications(): {
     applications: any;
     status: any;
     error: any;
     refresh: any;
-    create: (input: ApplicationInput) => Promise<any>;
-    update: (id: string, patch: Partial<ApplicationInput>) => Promise<any>;
+    create: (input: ApplicationInput) => Promise<CreatedApplicationDto>;
+    update: (id: string, patch: Partial<ApplicationInput>) => Promise<AdminApplicationDto>;
     remove: (id: string) => Promise<void>;
-    rotateSecret: (id: string) => Promise<any>;
+    rotateSecret: (id: string) => Promise<string>;
     revokeGrants: (id: string) => Promise<void>;
 };
 /** The applications the signed-in user may sign in to. */

package/dist/runtime/app/composables/useOAuthApplications.js

@@ -1,30 +1,39 @@
 const BASE = "/api/oauth-server";
+export const OAUTH_APPLICATIONS_KEY = "oauth-server:applications";
+export const oauthApplicationsApi = {
+  create: (input) => $fetch(`${BASE}/admin/applications`, { method: "POST", body: input }),
+  update: (id, patch) => $fetch(`${BASE}/admin/applications/${id}`, { method: "PATCH", body: patch }),
+  remove: (id) => $fetch(`${BASE}/admin/applications/${id}`, { method: "DELETE" }),
+  /** Returns the new client secret; the old one stops working. */
+  rotateSecret: async (id) => (await $fetch(`${BASE}/admin/applications/${id}/secret`, { method: "POST" })).clientSecret,
+  revokeGrants: (id) => $fetch(`${BASE}/admin/applications/${id}/revoke`, { method: "POST" })
+};
 export function useOAuthApplications() {
   const { data, status, error, refresh } = useFetch(`${BASE}/admin/applications`, {
-    key: "oauth-server:applications",
+    key: OAUTH_APPLICATIONS_KEY,
     default: () => []
   });
   async function create(input) {
-    const created = await $fetch(`${BASE}/admin/applications`, { method: "POST", body: input });
+    const created = await oauthApplicationsApi.create(input);
     await refresh();
     return created;
   }
   async function update(id, patch) {
-    const updated = await $fetch(`${BASE}/admin/applications/${id}`, { method: "PATCH", body: patch });
+    const updated = await oauthApplicationsApi.update(id, patch);
     await refresh();
     return updated;
   }
   async function remove(id) {
-    await $fetch(`${BASE}/admin/applications/${id}`, { method: "DELETE" });
+    await oauthApplicationsApi.remove(id);
     await refresh();
   }
   async function rotateSecret(id) {
-    const { clientSecret } = await $fetch(`${BASE}/admin/applications/${id}/secret`, { method: "POST" });
+    const clientSecret = await oauthApplicationsApi.rotateSecret(id);
     await refresh();
     return clientSecret;
   }
   async function revokeGrants(id) {
-    await $fetch(`${BASE}/admin/applications/${id}/revoke`, { method: "POST" });
+    await oauthApplicationsApi.revokeGrants(id);
     await refresh();
   }
   return { applications: data, status, error, refresh, create, update, remove, rotateSecret, revokeGrants };