@getstrata/core 0.5.68 → 0.5.70

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @getstrata/core changelog
 
+## 0.5.70
+
+- `OAuthProvider.getAuthorizationUrl` / `exchangeCode` accept an optional `redirectUri` so HTMX login can use `/oauth/:provider/callback` while the API keeps `OAUTH_REDIRECT_URI`.
+
+## 0.5.69
+
+- `MembershipLookup.updateMemberRole(organizationId, userId, role)` is required. The uninitialized lookup throws until `configureMembershipLookup()` is called. `MembershipService.updateMemberRole` delegates to the adapter.
+
 ## 0.5.68
 
 - Published core no longer imports WorkHub `src/config`. Frontend mode, queue retries, CORS, and upload limits read env (`FRONTEND_MODE`, `QUEUE_*`, `CORS_ALLOWED_ORIGINS`, `MAX_UPLOAD_BYTES`).

package/dist/core/auth/membershipService.d.ts

@@ -16,6 +16,7 @@ declare class MembershipService {
         role?: OrganizationMemberRole;
     }): Promise<import("../contracts/membership").MembershipRecord>;
     removeMember(organizationId: number, userId: number): Promise<unknown>;
+    updateMemberRole(organizationId: number, userId: number, role: OrganizationMemberRole): Promise<import("../contracts/membership").MembershipRecord>;
 }
 export type { MembershipRepositoryLike };
 export default MembershipService;

package/dist/core/auth/oauth/oidcProvider.d.ts

@@ -11,8 +11,8 @@ declare class OidcProvider implements OAuthProvider {
     private readonly options;
     readonly name: string;
     constructor(options: OidcProviderOptions);
-    getAuthorizationUrl(state: string): string;
-    exchangeCode(code: string): Promise<OAuthProfile>;
+    getAuthorizationUrl(state: string, redirectUri?: string): string;
+    exchangeCode(code: string, redirectUri?: string): Promise<OAuthProfile>;
 }
 export type { OidcProviderOptions };
 export { OidcProvider };

package/dist/core/auth/oauth/providers.d.ts

@@ -8,8 +8,8 @@ declare class GitHubOAuthProvider implements OAuthProvider {
     private readonly options;
     readonly name = "github";
     constructor(options: GitHubOAuthOptions);
-    getAuthorizationUrl(state: string): string;
-    exchangeCode(code: string): Promise<OAuthProfile>;
+    getAuthorizationUrl(state: string, redirectUri?: string): string;
+    exchangeCode(code: string, redirectUri?: string): Promise<OAuthProfile>;
 }
 declare class MockOAuthProvider implements OAuthProvider {
     private readonly profile;

package/dist/core/auth/oauth/types.d.ts

@@ -5,7 +5,7 @@ interface OAuthProfile {
 }
 interface OAuthProvider {
     readonly name: string;
-    getAuthorizationUrl(state: string): string;
-    exchangeCode(code: string): Promise<OAuthProfile>;
+    getAuthorizationUrl(state: string, redirectUri?: string): string;
+    exchangeCode(code: string, redirectUri?: string): Promise<OAuthProfile>;
 }
 export type { OAuthProfile, OAuthProvider };

package/dist/core/contracts/membership.d.ts

@@ -16,5 +16,6 @@ interface MembershipLookup {
         role?: OrganizationMemberRole;
     }): Promise<MembershipRecord>;
     removeMember(organizationId: number, userId: number): Promise<unknown>;
+    updateMemberRole(organizationId: number, userId: number, role: OrganizationMemberRole): Promise<MembershipRecord>;
 }
 export type { MembershipLookup, MembershipRecord, OrganizationMemberRole };

package/dist/entries/auth/membershipMiddleware.js

@@ -69,6 +69,9 @@ var uninitializedMembershipLookup = {
   },
   async removeMember() {
     throw new Error("configureMembershipLookup() must be called before mutating memberships.");
+  },
+  async updateMemberRole() {
+    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
   }
 };
 var membershipRepository = uninitializedMembershipLookup;

package/dist/entries/auth/membershipScope.js

@@ -73,6 +73,9 @@ var uninitializedMembershipLookup = {
   },
   async removeMember() {
     throw new Error("configureMembershipLookup() must be called before mutating memberships.");
+  },
+  async updateMemberRole() {
+    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
   }
 };
 var membershipRepository = uninitializedMembershipLookup;

package/dist/entries/auth/membershipService.js

@@ -72,6 +72,9 @@ var uninitializedMembershipLookup = {
   },
   async removeMember() {
     throw new Error("configureMembershipLookup() must be called before mutating memberships.");
+  },
+  async updateMemberRole() {
+    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
   }
 };
 var membershipRepository = uninitializedMembershipLookup;
@@ -157,6 +160,9 @@ class MembershipService {
   removeMember(organizationId, userId) {
     return this.members.removeMember(organizationId, userId);
   }
+  updateMemberRole(organizationId, userId, role) {
+    return this.members.updateMemberRole(organizationId, userId, role);
+  }
 }
 var membershipService_default = MembershipService;
 export {

package/dist/entries/auth/oauth/oidcProvider.js

@@ -7,24 +7,24 @@ class OidcProvider {
     this.options = options;
     this.name = options.name;
   }
-  getAuthorizationUrl(state) {
+  getAuthorizationUrl(state, redirectUri = this.options.redirectUri) {
     const params = new URLSearchParams({
       client_id: this.options.clientId,
-      redirect_uri: this.options.redirectUri,
+      redirect_uri: redirectUri,
       response_type: "code",
       scope: (this.options.scopes ?? ["openid", "email", "profile"]).join(" "),
       state
     });
     return `${this.options.issuer.replace(/\/$/, "")}/authorize?${params.toString()}`;
   }
-  async exchangeCode(code) {
+  async exchangeCode(code, redirectUri = this.options.redirectUri) {
     const tokenResponse = await fetch(`${this.options.issuer.replace(/\/$/, "")}/token`, {
       method: "POST",
       headers: { "content-type": "application/x-www-form-urlencoded" },
       body: new URLSearchParams({
         grant_type: "authorization_code",
         code,
-        redirect_uri: this.options.redirectUri,
+        redirect_uri: redirectUri,
         client_id: this.options.clientId,
         client_secret: this.options.clientSecret
       })

package/dist/entries/auth/oauth/providers.js

@@ -54,16 +54,16 @@ class GitHubOAuthProvider {
   constructor(options) {
     this.options = options;
   }
-  getAuthorizationUrl(state) {
+  getAuthorizationUrl(state, redirectUri = this.options.redirectUri) {
     const params = new URLSearchParams({
       client_id: this.options.clientId,
-      redirect_uri: this.options.redirectUri,
+      redirect_uri: redirectUri,
       scope: "read:user user:email",
       state
     });
     return `https://github.com/login/oauth/authorize?${params.toString()}`;
   }
-  async exchangeCode(code) {
+  async exchangeCode(code, redirectUri = this.options.redirectUri) {
     const tokenResponse = await fetch("https://github.com/login/oauth/access_token", {
       method: "POST",
       headers: {
@@ -74,7 +74,7 @@ class GitHubOAuthProvider {
         client_id: this.options.clientId,
         client_secret: this.options.clientSecret,
         code,
-        redirect_uri: this.options.redirectUri
+        redirect_uri: redirectUri
       })
     });
     const tokenBody = await tokenResponse.json();

package/dist/index.js

@@ -364,6 +364,9 @@ var uninitializedMembershipLookup = {
   },
   async removeMember() {
     throw new Error("configureMembershipLookup() must be called before mutating memberships.");
+  },
+  async updateMemberRole() {
+    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
   }
 };
 var membershipRepository = uninitializedMembershipLookup;
@@ -688,6 +691,9 @@ class MembershipService {
   removeMember(organizationId, userId) {
     return this.members.removeMember(organizationId, userId);
   }
+  updateMemberRole(organizationId, userId, role) {
+    return this.members.updateMemberRole(organizationId, userId, role);
+  }
 }
 var membershipService_default = MembershipService;
 // ../../src/core/auth/policy.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/core",
-  "version": "0.5.68",
+  "version": "0.5.70",
   "description": "Strata — Laravel-inspired Bun framework public API",
   "type": "module",
   "license": "MIT",