@gatwech/core 0.0.10 → 1.0.0-beta.18

package/src/social-providers/naver.ts

@@ -1,112 +0,0 @@
-import { betterFetch } from "@better-fetch/fetch";
-import type { OAuthProvider, ProviderOptions } from "../oauth2";
-import {
-	createAuthorizationURL,
-	refreshAccessToken,
-	validateAuthorizationCode,
-} from "../oauth2";
-
-export interface NaverProfile {
-	/** API response result code */
-	resultcode: string;
-	/** API response message */
-	message: string;
-	response: {
-		/** Unique Naver user identifier */
-		id: string;
-		/** User nickname */
-		nickname: string;
-		/** User real name */
-		name: string;
-		/** User email address */
-		email: string;
-		/** Gender (F: female, M: male, U: unknown) */
-		gender: string;
-		/** Age range */
-		age: string;
-		/** Birthday (MM-DD format) */
-		birthday: string;
-		/** Birth year */
-		birthyear: string;
-		/** Profile image URL */
-		profile_image: string;
-		/** Mobile phone number */
-		mobile: string;
-	};
-}
-
-export interface NaverOptions extends ProviderOptions<NaverProfile> {
-	clientId: string;
-}
-
-export const naver = (options: NaverOptions) => {
-	return {
-		id: "naver",
-		name: "Naver",
-		createAuthorizationURL({ state, scopes, redirectURI }) {
-			const _scopes = options.disableDefaultScope ? [] : ["profile", "email"];
-			if (options.scope) _scopes.push(...options.scope);
-			if (scopes) _scopes.push(...scopes);
-			return createAuthorizationURL({
-				id: "naver",
-				options,
-				authorizationEndpoint: "https://nid.naver.com/oauth2.0/authorize",
-				scopes: _scopes,
-				state,
-				redirectURI,
-			});
-		},
-		validateAuthorizationCode: async ({ code, redirectURI }) => {
-			return validateAuthorizationCode({
-				code,
-				redirectURI,
-				options,
-				tokenEndpoint: "https://nid.naver.com/oauth2.0/token",
-			});
-		},
-		refreshAccessToken: options.refreshAccessToken
-			? options.refreshAccessToken
-			: async (refreshToken) => {
-					return refreshAccessToken({
-						refreshToken,
-						options: {
-							clientId: options.clientId,
-							clientKey: options.clientKey,
-							clientSecret: options.clientSecret,
-						},
-						tokenEndpoint: "https://nid.naver.com/oauth2.0/token",
-					});
-				},
-		async getUserInfo(token) {
-			if (options.getUserInfo) {
-				return options.getUserInfo(token);
-			}
-			const { data: profile, error } = await betterFetch<NaverProfile>(
-				"https://openapi.naver.com/v1/nid/me",
-				{
-					headers: {
-						Authorization: `Bearer ${token.accessToken}`,
-					},
-				},
-			);
-			if (error || !profile || profile.resultcode !== "00") {
-				return null;
-			}
-			const userMap = await options.mapProfileToUser?.(profile);
-			const res = profile.response || {};
-			const user = {
-				id: res.id,
-				name: res.name || res.nickname,
-				email: res.email,
-				image: res.profile_image,
-				emailVerified: false,
-				...userMap,
-			};
-			return {
-				user,
-				data: profile,
-			};
-		},
-		options,
-	} satisfies OAuthProvider<NaverProfile>;
-};

package/src/social-providers/notion.ts

@@ -1,108 +0,0 @@
-import { betterFetch } from "@better-fetch/fetch";
-import type { OAuthProvider, ProviderOptions } from "../oauth2";
-import {
-	createAuthorizationURL,
-	refreshAccessToken,
-	validateAuthorizationCode,
-} from "../oauth2";
-
-export interface NotionProfile {
-	object: "user";
-	id: string;
-	type: "person" | "bot";
-	name?: string | undefined;
-	avatar_url?: string | undefined;
-	person?:
-		| {
-				email?: string;
-		  }
-		| undefined;
-}
-
-export interface NotionOptions extends ProviderOptions<NotionProfile> {
-	clientId: string;
-}
-
-export const notion = (options: NotionOptions) => {
-	const tokenEndpoint = "https://api.notion.com/v1/oauth/token";
-	return {
-		id: "notion",
-		name: "Notion",
-		createAuthorizationURL({ state, scopes, loginHint, redirectURI }) {
-			const _scopes: string[] = options.disableDefaultScope ? [] : [];
-			if (options.scope) _scopes.push(...options.scope);
-			if (scopes) _scopes.push(...scopes);
-			return createAuthorizationURL({
-				id: "notion",
-				options,
-				authorizationEndpoint: "https://api.notion.com/v1/oauth/authorize",
-				scopes: _scopes,
-				state,
-				redirectURI,
-				loginHint,
-				additionalParams: {
-					owner: "user",
-				},
-			});
-		},
-		validateAuthorizationCode: async ({ code, redirectURI }) => {
-			return validateAuthorizationCode({
-				code,
-				redirectURI,
-				options,
-				tokenEndpoint,
-				authentication: "basic",
-			});
-		},
-		refreshAccessToken: options.refreshAccessToken
-			? options.refreshAccessToken
-			: async (refreshToken) => {
-					return refreshAccessToken({
-						refreshToken,
-						options: {
-							clientId: options.clientId,
-							clientKey: options.clientKey,
-							clientSecret: options.clientSecret,
-						},
-						tokenEndpoint,
-					});
-				},
-		async getUserInfo(token) {
-			if (options.getUserInfo) {
-				return options.getUserInfo(token);
-			}
-			const { data: profile, error } = await betterFetch<{
-				bot: {
-					owner: {
-						user: NotionProfile;
-					};
-				};
-			}>("https://api.notion.com/v1/users/me", {
-				headers: {
-					Authorization: `Bearer ${token.accessToken}`,
-					"Notion-Version": "2022-06-28",
-				},
-			});
-			if (error || !profile) {
-				return null;
-			}
-			const userProfile = profile.bot?.owner?.user;
-			if (!userProfile) {
-				return null;
-			}
-			const userMap = await options.mapProfileToUser?.(userProfile);
-			return {
-				user: {
-					id: userProfile.id,
-					name: userProfile.name || "Notion User",
-					email: userProfile.person?.email || null,
-					image: userProfile.avatar_url,
-					emailVerified: !!userProfile.person?.email,
-					...userMap,
-				},
-				data: userProfile,
-			};
-		},
-		options,
-	} satisfies OAuthProvider<NotionProfile>;
-};

package/src/social-providers/paybin.ts

@@ -1,122 +0,0 @@
-import { decodeJwt } from "jose";
-import { logger } from "../env";
-import { PayvoAuthError } from "../error";
-import type { OAuthProvider, ProviderOptions } from "../oauth2";
-import {
-  createAuthorizationURL,
-  refreshAccessToken,
-  validateAuthorizationCode,
-} from "../oauth2";
-
-export interface PaybinProfile {
-  sub: string;
-  email: string;
-  email_verified?: boolean | undefined;
-  name?: string | undefined;
-  preferred_username?: string | undefined;
-  picture?: string | undefined;
-  given_name?: string | undefined;
-  family_name?: string | undefined;
-}
-
-export interface PaybinOptions extends ProviderOptions<PaybinProfile> {
-  clientId: string;
-  /**
-   * The issuer URL of your Paybin OAuth server
-   * @default "https://idp.paybin.io"
-   */
-  issuer?: string | undefined;
-}
-
-export const paybin = (options: PaybinOptions) => {
-  const issuer = options.issuer || "https://idp.paybin.io";
-  const authorizationEndpoint = `${issuer}/oauth2/authorize`;
-  const tokenEndpoint = `${issuer}/oauth2/token`;
-
-  return {
-    id: "paybin",
-    name: "Paybin",
-    async createAuthorizationURL({
-      state,
-      scopes,
-      codeVerifier,
-      redirectURI,
-      loginHint,
-    }) {
-      if (!options.clientId || !options.clientSecret) {
-        logger.error(
-          "Client Id and Client Secret is required for Paybin. Make sure to provide them in the options."
-        );
-        throw new PayvoAuthError("CLIENT_ID_AND_SECRET_REQUIRED");
-      }
-      if (!codeVerifier) {
-        throw new PayvoAuthError("codeVerifier is required for Paybin");
-      }
-      const _scopes = options.disableDefaultScope
-        ? []
-        : ["openid", "email", "profile"];
-      if (options.scope) _scopes.push(...options.scope);
-      if (scopes) _scopes.push(...scopes);
-      const url = await createAuthorizationURL({
-        id: "paybin",
-        options,
-        authorizationEndpoint,
-        scopes: _scopes,
-        state,
-        codeVerifier,
-        redirectURI,
-        prompt: options.prompt,
-        loginHint,
-      });
-      return url;
-    },
-    validateAuthorizationCode: async ({ code, codeVerifier, redirectURI }) => {
-      return validateAuthorizationCode({
-        code,
-        codeVerifier,
-        redirectURI,
-        options,
-        tokenEndpoint,
-      });
-    },
-    refreshAccessToken: options.refreshAccessToken
-      ? options.refreshAccessToken
-      : async (refreshToken) => {
-          return refreshAccessToken({
-            refreshToken,
-            options: {
-              clientId: options.clientId,
-              clientKey: options.clientKey,
-              clientSecret: options.clientSecret,
-            },
-            tokenEndpoint,
-          });
-        },
-    async getUserInfo(token) {
-      if (options.getUserInfo) {
-        return options.getUserInfo(token);
-      }
-      if (!token.idToken) {
-        return null;
-      }
-      const user = decodeJwt(token.idToken) as PaybinProfile;
-      const userMap = await options.mapProfileToUser?.(user);
-      return {
-        user: {
-          id: user.sub,
-          name:
-            user.name ||
-            user.preferred_username ||
-            (user.email ? user.email.split("@")[0] : "User") ||
-            "User",
-          email: user.email,
-          image: user.picture,
-          emailVerified: user.email_verified || false,
-          ...userMap,
-        },
-        data: user,
-      };
-    },
-    options,
-  } satisfies OAuthProvider<PaybinProfile>;
-};

package/src/social-providers/paypal.ts

@@ -1,263 +0,0 @@
-import { base64 } from "@gatwech/utils/base64";
-import { betterFetch } from "@better-fetch/fetch";
-import { decodeJwt } from "jose";
-import { logger } from "../env";
-import { PayvoAuthError } from "../error";
-import type { OAuthProvider, ProviderOptions } from "../oauth2";
-import { createAuthorizationURL } from "../oauth2";
-
-export interface PayPalProfile {
-  user_id: string;
-  name: string;
-  given_name: string;
-  family_name: string;
-  middle_name?: string | undefined;
-  picture?: string | undefined;
-  email: string;
-  email_verified: boolean;
-  gender?: string | undefined;
-  birthdate?: string | undefined;
-  zoneinfo?: string | undefined;
-  locale?: string | undefined;
-  phone_number?: string | undefined;
-  address?:
-    | {
-        street_address?: string;
-        locality?: string;
-        region?: string;
-        postal_code?: string;
-        country?: string;
-      }
-    | undefined;
-  verified_account?: boolean | undefined;
-  account_type?: string | undefined;
-  age_range?: string | undefined;
-  payer_id?: string | undefined;
-}
-
-export interface PayPalTokenResponse {
-  scope?: string | undefined;
-  access_token: string;
-  refresh_token?: string | undefined;
-  token_type: "Bearer";
-  id_token?: string | undefined;
-  expires_in: number;
-  nonce?: string | undefined;
-}
-
-export interface PayPalOptions extends ProviderOptions<PayPalProfile> {
-  clientId: string;
-  /**
-   * PayPal environment - 'sandbox' for testing, 'live' for production
-   * @default 'sandbox'
-   */
-  environment?: ("sandbox" | "live") | undefined;
-  /**
-   * Whether to request shipping address information
-   * @default false
-   */
-  requestShippingAddress?: boolean | undefined;
-}
-
-export const paypal = (options: PayPalOptions) => {
-  const environment = options.environment || "sandbox";
-  const isSandbox = environment === "sandbox";
-
-  const authorizationEndpoint = isSandbox
-    ? "https://www.sandbox.paypal.com/signin/authorize"
-    : "https://www.paypal.com/signin/authorize";
-
-  const tokenEndpoint = isSandbox
-    ? "https://api-m.sandbox.paypal.com/v1/oauth2/token"
-    : "https://api-m.paypal.com/v1/oauth2/token";
-
-  const userInfoEndpoint = isSandbox
-    ? "https://api-m.sandbox.paypal.com/v1/identity/oauth2/userinfo"
-    : "https://api-m.paypal.com/v1/identity/oauth2/userinfo";
-
-  return {
-    id: "paypal",
-    name: "PayPal",
-    async createAuthorizationURL({ state, codeVerifier, redirectURI }) {
-      if (!options.clientId || !options.clientSecret) {
-        logger.error(
-          "Client Id and Client Secret is required for PayPal. Make sure to provide them in the options."
-        );
-        throw new PayvoAuthError("CLIENT_ID_AND_SECRET_REQUIRED");
-      }
-
-      /**
-       * Log in with PayPal doesn't use traditional OAuth2 scopes
-       * Instead, permissions are configured in the PayPal Developer Dashboard
-       * We don't pass any scopes to avoid "invalid scope" errors
-       **/
-
-      const _scopes: string[] = [];
-
-      const url = await createAuthorizationURL({
-        id: "paypal",
-        options,
-        authorizationEndpoint,
-        scopes: _scopes,
-        state,
-        codeVerifier,
-        redirectURI,
-        prompt: options.prompt,
-      });
-      return url;
-    },
-
-    validateAuthorizationCode: async ({ code, redirectURI }) => {
-      /**
-       * PayPal requires Basic Auth for token exchange
-       **/
-
-      const credentials = base64.encode(
-        `${options.clientId}:${options.clientSecret}`
-      );
-
-      try {
-        const response = await betterFetch(tokenEndpoint, {
-          method: "POST",
-          headers: {
-            Authorization: `Basic ${credentials}`,
-            Accept: "application/json",
-            "Accept-Language": "en_US",
-            "Content-Type": "application/x-www-form-urlencoded",
-          },
-          body: new URLSearchParams({
-            grant_type: "authorization_code",
-            code: code,
-            redirect_uri: redirectURI,
-          }).toString(),
-        });
-
-        if (!response.data) {
-          throw new PayvoAuthError("FAILED_TO_GET_ACCESS_TOKEN");
-        }
-
-        const data = response.data as PayPalTokenResponse;
-
-        const result = {
-          accessToken: data.access_token,
-          refreshToken: data.refresh_token,
-          accessTokenExpiresAt: data.expires_in
-            ? new Date(Date.now() + data.expires_in * 1000)
-            : undefined,
-          idToken: data.id_token,
-        };
-
-        return result;
-      } catch (error) {
-        logger.error("PayPal token exchange failed:", error);
-        throw new PayvoAuthError("FAILED_TO_GET_ACCESS_TOKEN");
-      }
-    },
-
-    refreshAccessToken: options.refreshAccessToken
-      ? options.refreshAccessToken
-      : async (refreshToken) => {
-          const credentials = base64.encode(
-            `${options.clientId}:${options.clientSecret}`
-          );
-
-          try {
-            const response = await betterFetch(tokenEndpoint, {
-              method: "POST",
-              headers: {
-                Authorization: `Basic ${credentials}`,
-                Accept: "application/json",
-                "Accept-Language": "en_US",
-                "Content-Type": "application/x-www-form-urlencoded",
-              },
-              body: new URLSearchParams({
-                grant_type: "refresh_token",
-                refresh_token: refreshToken,
-              }).toString(),
-            });
-
-            if (!response.data) {
-              throw new PayvoAuthError("FAILED_TO_REFRESH_ACCESS_TOKEN");
-            }
-
-            const data = response.data as any;
-            return {
-              accessToken: data.access_token,
-              refreshToken: data.refresh_token,
-              accessTokenExpiresAt: data.expires_in
-                ? new Date(Date.now() + data.expires_in * 1000)
-                : undefined,
-            };
-          } catch (error) {
-            logger.error("PayPal token refresh failed:", error);
-            throw new PayvoAuthError("FAILED_TO_REFRESH_ACCESS_TOKEN");
-          }
-        },
-
-    async verifyIdToken(token, nonce) {
-      if (options.disableIdTokenSignIn) {
-        return false;
-      }
-      if (options.verifyIdToken) {
-        return options.verifyIdToken(token, nonce);
-      }
-      try {
-        const payload = decodeJwt(token);
-        return !!payload.sub;
-      } catch (error) {
-        logger.error("Failed to verify PayPal ID token:", error);
-        return false;
-      }
-    },
-
-    async getUserInfo(token) {
-      if (options.getUserInfo) {
-        return options.getUserInfo(token);
-      }
-
-      if (!token.accessToken) {
-        logger.error("Access token is required to fetch PayPal user info");
-        return null;
-      }
-
-      try {
-        const response = await betterFetch<PayPalProfile>(
-          `${userInfoEndpoint}?schema=paypalv1.1`,
-          {
-            headers: {
-              Authorization: `Bearer ${token.accessToken}`,
-              Accept: "application/json",
-            },
-          }
-        );
-
-        if (!response.data) {
-          logger.error("Failed to fetch user info from PayPal");
-          return null;
-        }
-
-        const userInfo = response.data;
-        const userMap = await options.mapProfileToUser?.(userInfo);
-
-        const result = {
-          user: {
-            id: userInfo.user_id,
-            name: userInfo.name,
-            email: userInfo.email,
-            image: userInfo.picture,
-            emailVerified: userInfo.email_verified,
-            ...userMap,
-          },
-          data: userInfo,
-        };
-
-        return result;
-      } catch (error) {
-        logger.error("Failed to fetch user info from PayPal:", error);
-        return null;
-      }
-    },
-
-    options,
-  } satisfies OAuthProvider<PayPalProfile>;
-};

package/src/social-providers/polar.ts

@@ -1,107 +0,0 @@
-import { betterFetch } from "@better-fetch/fetch";
-import type { OAuthProvider, ProviderOptions } from "../oauth2";
-import {
-	createAuthorizationURL,
-	refreshAccessToken,
-	validateAuthorizationCode,
-} from "../oauth2";
-
-export interface PolarProfile {
-	id: string;
-	email: string;
-	username: string;
-	avatar_url: string;
-	github_username?: string | undefined;
-	account_id?: string | undefined;
-	public_name?: string | undefined;
-	profile_settings?:
-		| {
-				profile_settings_enabled?: boolean;
-				profile_settings_public_name?: string;
-				profile_settings_public_avatar?: string;
-				profile_settings_public_bio?: string;
-				profile_settings_public_location?: string;
-				profile_settings_public_website?: string;
-				profile_settings_public_twitter?: string;
-				profile_settings_public_github?: string;
-				profile_settings_public_email?: string;
-		  }
-		| undefined;
-}
-
-export interface PolarOptions extends ProviderOptions<PolarProfile> {}
-
-export const polar = (options: PolarOptions) => {
-	return {
-		id: "polar",
-		name: "Polar",
-		createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }) {
-			const _scopes = options.disableDefaultScope
-				? []
-				: ["openid", "profile", "email"];
-			if (options.scope) _scopes.push(...options.scope);
-			if (scopes) _scopes.push(...scopes);
-			return createAuthorizationURL({
-				id: "polar",
-				options,
-				authorizationEndpoint: "https://polar.sh/oauth2/authorize",
-				scopes: _scopes,
-				state,
-				codeVerifier,
-				redirectURI,
-				prompt: options.prompt,
-			});
-		},
-		validateAuthorizationCode: async ({ code, codeVerifier, redirectURI }) => {
-			return validateAuthorizationCode({
-				code,
-				codeVerifier,
-				redirectURI,
-				options,
-				tokenEndpoint: "https://api.polar.sh/v1/oauth2/token",
-			});
-		},
-		refreshAccessToken: options.refreshAccessToken
-			? options.refreshAccessToken
-			: async (refreshToken) => {
-					return refreshAccessToken({
-						refreshToken,
-						options: {
-							clientId: options.clientId,
-							clientKey: options.clientKey,
-							clientSecret: options.clientSecret,
-						},
-						tokenEndpoint: "https://api.polar.sh/v1/oauth2/token",
-					});
-				},
-		async getUserInfo(token) {
-			if (options.getUserInfo) {
-				return options.getUserInfo(token);
-			}
-			const { data: profile, error } = await betterFetch<PolarProfile>(
-				"https://api.polar.sh/v1/oauth2/userinfo",
-				{
-					headers: {
-						Authorization: `Bearer ${token.accessToken}`,
-					},
-				},
-			);
-			if (error) {
-				return null;
-			}
-			const userMap = await options.mapProfileToUser?.(profile);
-			return {
-				user: {
-					id: profile.id,
-					name: profile.public_name || profile.username,
-					email: profile.email,
-					image: profile.avatar_url,
-					emailVerified: true,
-					...userMap,
-				},
-				data: profile,
-			};
-		},
-		options,
-	} satisfies OAuthProvider<PolarProfile>;
-};