@geekapps/auth-nextjs 0.1.0

package/README.md

@@ -0,0 +1,73 @@
+# @geekapps/auth-nextjs
+
+SDK Next.js para consumir o Geekapps Auth/IDP.
+
+## Instalação
+
+```bash
+bun add @geekapps/auth-nextjs
+```
+
+## Server
+
+```ts
+// src/lib/auth.ts
+import { configureGeekappsAuth } from "@geekapps/auth-nextjs/server";
+
+export const auth = configureGeekappsAuth({
+  issuer: process.env.GEEKAPPS_AUTH_ISSUER!,
+  clientId: process.env.GEEKAPPS_AUTH_CLIENT_ID!,
+  clientSecret: process.env.GEEKAPPS_AUTH_CLIENT_SECRET,
+  redirectUri: process.env.GEEKAPPS_AUTH_REDIRECT_URI!,
+  scopes: ["openid", "profile", "email"],
+});
+```
+
+```ts
+// app/api/auth/[...routes]/route.ts
+import { auth } from "@/lib/auth";
+
+export const GET = auth.handlers.GET;
+export const POST = auth.handlers.POST;
+export const PATCH = auth.handlers.PATCH;
+export const DELETE = auth.handlers.DELETE;
+```
+
+## Client
+
+```tsx
+import { GeekappsAuthProvider } from "@geekapps/auth-nextjs/client";
+
+export function Providers({ children }: { children: React.ReactNode }) {
+  return <GeekappsAuthProvider>{children}</GeekappsAuthProvider>;
+}
+```
+
+Hooks principais:
+
+- `useAuth()`
+- `useOrg()`
+- `useUsers()`
+- `useRoles()`
+- `usePermissions()`
+- `useSessions()`
+
+
+## Standalone client auth actions
+
+`@geekapps/auth-nextjs/client` exporta funções standalone usadas pela `auth-ui`:
+
+```ts
+import {
+  loginWithPassword,
+  registerWithPassword,
+  requestPasswordlessLink,
+  startGoogleLogin,
+} from "@geekapps/auth-nextjs/client";
+```
+
+Depois de aplicar esse source, rode o build do package para gerar o `dist`:
+
+```bash
+bun --filter @geekapps/auth-nextjs build
+```

package/dist/client.d.ts

@@ -0,0 +1,379 @@
+import { MouseEvent, ReactNode, ReactElement } from 'react';
+
+type UserStatus = "active" | "inactive" | "suspended";
+type OrganizationStatus = "active" | "inactive" | "suspended";
+type OAuthClientType = "public" | "confidential";
+type AuthResult<T = unknown> = {
+    success: true;
+    data: T;
+} | {
+    success: false;
+    error: string;
+    status?: number;
+};
+type User = {
+    id: string;
+    email: string;
+    name: string | null;
+    phone: string | null;
+    imageUrl: string | null;
+    status?: UserStatus;
+    createdAt?: string | Date;
+    updatedAt?: string | Date;
+};
+type ConnectedAccount = {
+    id: string;
+    sessionId?: string;
+    isActive: boolean;
+    user: User;
+};
+type Permission = {
+    id: string;
+    applicationId?: string | null;
+    key: string;
+    name: string;
+    description: string | null;
+    category: string | null;
+    isSystem: boolean;
+    isActive: boolean;
+    createdAt?: string | Date;
+    updatedAt?: string | Date;
+};
+type RolePermission = {
+    permissionDefinition: Permission;
+};
+type Role = {
+    id: string;
+    applicationId?: string | null;
+    /** Present only on custom roles */
+    organizationId?: string | null;
+    /** "system" | "custom" */
+    type?: string;
+    key: string;
+    name: string;
+    description: string | null;
+    isSystem?: boolean;
+    isDefault?: boolean;
+    isActive: boolean;
+    permissions: RolePermission[];
+    createdAt?: string | Date;
+    updatedAt?: string | Date;
+};
+type RoleAssignment = {
+    id: string;
+    roleDefinitionId?: string | null;
+    customRoleId?: string | null;
+    roleDefinition?: Role | null;
+    customRole?: Role | null;
+};
+type OrganizationMember = {
+    id: string;
+    organizationId?: string;
+    userId?: string;
+    createdAt?: string | Date;
+    user: User;
+    roleAssignments?: RoleAssignment[];
+};
+type OrganizationOwnedApplication = {
+    id: string;
+    name: string;
+    description: string | null;
+    imageUrl: string | null;
+    type?: OAuthClientType;
+    organizationId: string;
+    isFirstParty: boolean;
+    ssoEnabled: boolean;
+    status?: "active" | "inactive" | "suspended";
+    createdAt?: string | Date;
+    updatedAt?: string | Date;
+};
+type Organization = {
+    id: string;
+    name: string;
+    description: string | null;
+    slug: string;
+    domain: string | null;
+    imageUrl: string | null;
+    faviconUrl: string | null;
+    status: OrganizationStatus;
+    members?: OrganizationMember[];
+    ownedApplications?: OrganizationOwnedApplication[];
+    applicationLinks?: Array<{
+        id: string;
+        status: OrganizationStatus;
+        createdAt?: string | Date;
+        application: OrganizationOwnedApplication;
+    }>;
+    createdAt: string | Date;
+    updatedAt: string | Date;
+};
+type SessionApplication = {
+    id: string;
+    createdAt: string | Date;
+    expiresAt: string | Date;
+    application: {
+        id: string;
+        name: string;
+        organizationId: string;
+    };
+};
+type UserSession = {
+    id: string;
+    userId: string;
+    organizationId: string | null;
+    deviceAgent: string | null;
+    deviceId: string | null;
+    deviceName: string | null;
+    ip: string | null;
+    authState?: unknown;
+    authTime?: string | Date;
+    expiresAt: string | Date;
+    createdAt: string | Date;
+    updatedAt: string | Date;
+    user?: User;
+    applicationSessions?: SessionApplication[];
+};
+type UserInput = {
+    name?: string | null;
+    email?: string;
+    phone?: string | null;
+    imageUrl?: string | null;
+    password?: string;
+    organizationId?: string | null;
+    status?: UserStatus;
+};
+type OrganizationInput = {
+    name: string;
+    description?: string | null;
+    slug: string;
+    domain?: string | null;
+    imageUrl?: string | null;
+    faviconUrl?: string | null;
+};
+type OrganizationUpdateInput = Partial<OrganizationInput> & {
+    status?: OrganizationStatus;
+};
+type RoleInput = {
+    organizationId: string;
+    applicationId?: string | null;
+    key: string;
+    name: string;
+    description?: string | null;
+    permissionDefinitionIds?: string[];
+};
+type RoleUpdateInput = {
+    name?: string;
+    description?: string | null;
+    isActive?: boolean;
+    permissionDefinitionIds?: string[];
+};
+type PermissionInput = {
+    applicationId?: string | null;
+    key: string;
+    name: string;
+    description?: string | null;
+    category?: string | null;
+};
+type PermissionUpdateInput = {
+    name?: string;
+    description?: string | null;
+    category?: string | null;
+    isActive?: boolean;
+};
+type SignInOptions = {
+    redirectTo?: string;
+    authorizationFlowId?: string;
+};
+type SignInInput = SignInOptions | MouseEvent<HTMLElement>;
+type CallbackUrlOptions = SignInOptions & {
+    callbackUrl?: string;
+};
+type PermissionCheckOptions = {
+    permission: string;
+    organizationId?: string | null;
+    applicationId?: string | null;
+    resourceId?: string | null;
+};
+type LoginResponse = {
+    user: User;
+    redirectTo?: string | null;
+};
+type RegisterResponse = User;
+type GeekappsAuthProviderProps = {
+    children: ReactNode;
+    basePath?: string;
+    initialUser?: User | null;
+    initialOrganizations?: Organization[];
+    initialCurrentOrgId?: string | null;
+};
+type RequestOptions = {
+    body?: unknown;
+    method?: "GET" | "POST" | "PATCH" | "DELETE";
+};
+type ClientActionOptions = {
+    basePath?: string;
+};
+declare function loginWithPassword(params: {
+    identifier?: string;
+    email?: string;
+    phone?: string;
+    password: string;
+    authorizationFlowId?: string;
+    redirectTo?: string;
+}, options?: ClientActionOptions): Promise<AuthResult<LoginResponse>>;
+declare function registerWithPassword(params: {
+    name: string;
+    email: string;
+    phone?: string;
+    imageUrl?: string;
+    address?: Record<string, unknown>;
+    password: string;
+    redirectTo?: string;
+}, options?: ClientActionOptions): Promise<AuthResult<RegisterResponse>>;
+declare function startGoogleLogin(params?: CallbackUrlOptions, options?: ClientActionOptions): void;
+declare function requestPasswordlessLink(params: {
+    email: string;
+    authorizationFlowId?: string;
+    redirectTo?: string;
+    callbackUrl?: string;
+}, options?: ClientActionOptions): Promise<AuthResult>;
+type GeekappsAuthContextValue = {
+    basePath: string;
+    user: User | null;
+    isLoading: boolean;
+    accounts: ConnectedAccount[];
+    isLoadingAccounts: boolean;
+    organizations: Organization[];
+    currentOrg: Organization | null;
+    currentOrgId: string | null;
+    isLoadingOrganizations: boolean;
+    request: <T>(path: string, options?: RequestOptions) => Promise<T>;
+    signIn: (options?: SignInInput) => Promise<void>;
+    signUp: (options?: SignInInput) => Promise<void>;
+    addAccount: (options?: SignInInput) => Promise<void>;
+    signOut: () => Promise<void>;
+    signOutAll: () => Promise<void>;
+    refreshUser: () => Promise<void>;
+    refreshAccounts: () => Promise<void>;
+    switchAccount: (sessionId: string, options?: SignInOptions) => Promise<void>;
+    loginWithPassword: (params: {
+        identifier?: string;
+        email?: string;
+        phone?: string;
+        password: string;
+        authorizationFlowId?: string;
+        redirectTo?: string;
+    }) => Promise<AuthResult<LoginResponse>>;
+    registerWithPassword: (params: {
+        name: string;
+        email: string;
+        phone?: string;
+        imageUrl?: string;
+        address?: Record<string, unknown>;
+        password: string;
+        redirectTo?: string;
+    }) => Promise<AuthResult<RegisterResponse>>;
+    startGoogleLogin: (params?: CallbackUrlOptions) => void;
+    requestPasswordlessLink: (params: {
+        email: string;
+        authorizationFlowId?: string;
+        redirectTo?: string;
+        callbackUrl?: string;
+    }) => Promise<AuthResult>;
+    refreshOrganizations: () => Promise<void>;
+    setCurrentOrg: (organizationId: string | null) => Promise<void>;
+    createOrganization: (input: OrganizationInput) => Promise<AuthResult<Organization>>;
+    updateOrganization: (id: string, input: OrganizationUpdateInput) => Promise<AuthResult<Organization>>;
+    deleteOrganization: (id: string) => Promise<AuthResult<null>>;
+    hasPermission: (options: PermissionCheckOptions) => Promise<boolean>;
+    listUsers: (params?: {
+        organizationId?: string | null;
+    }) => Promise<User[]>;
+    getUser: (id: string) => Promise<User>;
+    createUser: (input: UserInput) => Promise<AuthResult<User>>;
+    updateUser: (id: string, input: UserInput) => Promise<AuthResult<User>>;
+    deleteUser: (id: string) => Promise<AuthResult<null>>;
+    listRoles: (params: {
+        organizationId?: string;
+        applicationId?: string;
+        type?: "system" | "custom" | "all";
+    }) => Promise<{
+        systemRoles: Role[];
+        customRoles: Role[];
+    }>;
+    getRole: (id: string, type: "system" | "custom") => Promise<Role>;
+    createRole: (input: RoleInput) => Promise<AuthResult<Role>>;
+    updateRole: (id: string, input: RoleUpdateInput) => Promise<AuthResult<Role>>;
+    deleteRole: (id: string) => Promise<AuthResult<null>>;
+    listPermissions: (params: {
+        applicationId?: string;
+        roleId?: string | null;
+    }) => Promise<Permission[]>;
+    createPermission: (input: PermissionInput) => Promise<AuthResult<Permission>>;
+    updatePermission: (id: string, input: PermissionUpdateInput) => Promise<AuthResult<Permission>>;
+    deletePermission: (id: string) => Promise<AuthResult<null>>;
+    listUserSessions: (params?: {
+        userId?: string;
+        organizationId?: string | null;
+    }) => Promise<UserSession[]>;
+    revokeUserSession: (sessionId: string) => Promise<AuthResult<null>>;
+};
+type UseOrgResult = Pick<GeekappsAuthContextValue, "organizations" | "currentOrg" | "currentOrgId" | "isLoadingOrganizations" | "refreshOrganizations" | "setCurrentOrg" | "createOrganization" | "updateOrganization" | "deleteOrganization" | "hasPermission">;
+type UseAccountsResult = Pick<GeekappsAuthContextValue, "accounts" | "addAccount" | "isLoadingAccounts" | "refreshAccounts" | "switchAccount">;
+type UseUsersResult = Pick<GeekappsAuthContextValue, "listUsers" | "getUser" | "createUser" | "updateUser" | "deleteUser">;
+type UseRolesResult = Pick<GeekappsAuthContextValue, "listRoles" | "getRole" | "createRole" | "updateRole" | "deleteRole">;
+type UsePermissionsResult = Pick<GeekappsAuthContextValue, "listPermissions" | "createPermission" | "updatePermission" | "deletePermission">;
+type UseSessionsResult = Pick<GeekappsAuthContextValue, "listUserSessions" | "revokeUserSession">;
+declare function GeekappsAuthProvider({ children, basePath, initialUser, initialOrganizations, initialCurrentOrgId, }: GeekappsAuthProviderProps): ReactElement;
+declare function useAuth(): GeekappsAuthContextValue;
+declare function useOrg(): UseOrgResult;
+declare function useAccounts(): UseAccountsResult;
+declare function useUsers(): UseUsersResult;
+declare function useRoles(): UseRolesResult;
+declare function usePermissions(): UsePermissionsResult;
+declare function useSessions(): UseSessionsResult;
+type ServiceAccount = {
+    id: string;
+    membershipId: string;
+    organizationId: string;
+    applicationId: string | null;
+    name: string;
+    status: "active" | "inactive" | "suspended";
+    serviceId: string | null;
+    roleAssignment: {
+        role: {
+            id: string;
+            key: string;
+            name: string;
+        };
+    } | null;
+    createdAt: string;
+    updatedAt: string;
+};
+type ServiceAccountWithSecret = ServiceAccount & {
+    serviceSecret: string;
+};
+type CreateServiceAccountInput = {
+    organizationId: string;
+    applicationId?: string;
+    name: string;
+    description?: string;
+    roleId?: string;
+};
+type UseServiceAccountResult = {
+    listServiceAccounts: (params: {
+        organizationId: string;
+        applicationId?: string;
+    }) => Promise<ServiceAccount[]>;
+    createServiceAccount: (input: CreateServiceAccountInput) => Promise<ServiceAccountWithSecret>;
+    updateServiceAccountRole: (id: string, roleId: string | null) => Promise<void>;
+    revokeServiceAccount: (id: string) => Promise<void>;
+    rotateServiceAccountSecret: (id: string) => Promise<{
+        serviceId: string;
+        serviceSecret: string;
+    }>;
+    deleteServiceAccount: (id: string) => Promise<void>;
+};
+declare function useServiceAccount(): UseServiceAccountResult;
+
+export { type AuthResult, type CallbackUrlOptions, type ConnectedAccount, type CreateServiceAccountInput, type GeekappsAuthContextValue, GeekappsAuthProvider, type GeekappsAuthProviderProps, type LoginResponse, type OAuthClientType, type Organization, type OrganizationInput, type OrganizationMember, type OrganizationOwnedApplication, type OrganizationStatus, type OrganizationUpdateInput, type Permission, type PermissionCheckOptions, type PermissionInput, type PermissionUpdateInput, type RegisterResponse, type Role, type RoleAssignment, type RoleInput, type RolePermission, type RoleUpdateInput, type ServiceAccount, type ServiceAccountWithSecret, type SessionApplication, type SignInInput, type SignInOptions, type UseAccountsResult, type UseOrgResult, type UsePermissionsResult, type UseRolesResult, type UseServiceAccountResult, type UseSessionsResult, type UseUsersResult, type User, type UserInput, type UserSession, type UserStatus, loginWithPassword, registerWithPassword, requestPasswordlessLink, startGoogleLogin, useAccounts, useAuth, useOrg, usePermissions, useRoles, useServiceAccount, useSessions, useUsers };