@getstrata/core 0.5.69 → 0.5.71

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @getstrata/core changelog
 
+## 0.5.71
+
+- OpenAPI treats `POST /auth/login` and `POST /auth/register` as public (no bearer), including when routes are registered under `API_PREFIX`.
+- Route summaries look up `PUBLIC_ROUTE_DESCRIPTIONS` after stripping `API_PREFIX`.
+
+## 0.5.70
+
+- `OAuthProvider.getAuthorizationUrl` / `exchangeCode` accept an optional `redirectUri` so HTMX login can use `/oauth/:provider/callback` while the API keeps `OAUTH_REDIRECT_URI`.
+
 ## 0.5.69
 
 - `MembershipLookup.updateMemberRole(organizationId, userId, role)` is required. The uninitialized lookup throws until `configureMembershipLookup()` is called. `MembershipService.updateMemberRole` delegates to the adapter.

package/README.md

@@ -82,7 +82,7 @@ import type { Migration } from "@getstrata/core/database/migrations/types";
 Package name: **`@getstrata/core`** (npm org [`@getstrata`](https://www.npmjs.com/org/getstrata)).
 
 1. Add `NPM_TOKEN` to GitHub repository secrets.
-2. Tag a release: `git tag v0.5.70 && git push origin v0.5.70`
+2. Tag a release: `git tag v0.5.71 && git push origin v0.5.71`
 3. [Release workflow](../../.github/workflows/release.yml) builds and runs `npm publish --access public`.
 
 Previously published as `@eyk-workhub/framework@0.1.0`, deprecated in favor of this package.

package/dist/core/auth/oauth/oidcProvider.d.ts

@@ -11,8 +11,8 @@ declare class OidcProvider implements OAuthProvider {
     private readonly options;
     readonly name: string;
     constructor(options: OidcProviderOptions);
-    getAuthorizationUrl(state: string): string;
-    exchangeCode(code: string): Promise<OAuthProfile>;
+    getAuthorizationUrl(state: string, redirectUri?: string): string;
+    exchangeCode(code: string, redirectUri?: string): Promise<OAuthProfile>;
 }
 export type { OidcProviderOptions };
 export { OidcProvider };

package/dist/core/auth/oauth/providers.d.ts

@@ -8,8 +8,8 @@ declare class GitHubOAuthProvider implements OAuthProvider {
     private readonly options;
     readonly name = "github";
     constructor(options: GitHubOAuthOptions);
-    getAuthorizationUrl(state: string): string;
-    exchangeCode(code: string): Promise<OAuthProfile>;
+    getAuthorizationUrl(state: string, redirectUri?: string): string;
+    exchangeCode(code: string, redirectUri?: string): Promise<OAuthProfile>;
 }
 declare class MockOAuthProvider implements OAuthProvider {
     private readonly profile;

package/dist/core/auth/oauth/types.d.ts

@@ -5,7 +5,7 @@ interface OAuthProfile {
 }
 interface OAuthProvider {
     readonly name: string;
-    getAuthorizationUrl(state: string): string;
-    exchangeCode(code: string): Promise<OAuthProfile>;
+    getAuthorizationUrl(state: string, redirectUri?: string): string;
+    exchangeCode(code: string, redirectUri?: string): Promise<OAuthProfile>;
 }
 export type { OAuthProfile, OAuthProvider };

package/dist/entries/auth/oauth/oidcProvider.js

@@ -7,24 +7,24 @@ class OidcProvider {
     this.options = options;
     this.name = options.name;
   }
-  getAuthorizationUrl(state) {
+  getAuthorizationUrl(state, redirectUri = this.options.redirectUri) {
     const params = new URLSearchParams({
       client_id: this.options.clientId,
-      redirect_uri: this.options.redirectUri,
+      redirect_uri: redirectUri,
       response_type: "code",
       scope: (this.options.scopes ?? ["openid", "email", "profile"]).join(" "),
       state
     });
     return `${this.options.issuer.replace(/\/$/, "")}/authorize?${params.toString()}`;
   }
-  async exchangeCode(code) {
+  async exchangeCode(code, redirectUri = this.options.redirectUri) {
     const tokenResponse = await fetch(`${this.options.issuer.replace(/\/$/, "")}/token`, {
       method: "POST",
       headers: { "content-type": "application/x-www-form-urlencoded" },
       body: new URLSearchParams({
         grant_type: "authorization_code",
         code,
-        redirect_uri: this.options.redirectUri,
+        redirect_uri: redirectUri,
         client_id: this.options.clientId,
         client_secret: this.options.clientSecret
       })

package/dist/entries/auth/oauth/providers.js

@@ -54,16 +54,16 @@ class GitHubOAuthProvider {
   constructor(options) {
     this.options = options;
   }
-  getAuthorizationUrl(state) {
+  getAuthorizationUrl(state, redirectUri = this.options.redirectUri) {
     const params = new URLSearchParams({
       client_id: this.options.clientId,
-      redirect_uri: this.options.redirectUri,
+      redirect_uri: redirectUri,
       scope: "read:user user:email",
       state
     });
     return `https://github.com/login/oauth/authorize?${params.toString()}`;
   }
-  async exchangeCode(code) {
+  async exchangeCode(code, redirectUri = this.options.redirectUri) {
     const tokenResponse = await fetch("https://github.com/login/oauth/access_token", {
       method: "POST",
       headers: {
@@ -74,7 +74,7 @@ class GitHubOAuthProvider {
         client_id: this.options.clientId,
         client_secret: this.options.clientSecret,
         code,
-        redirect_uri: this.options.redirectUri
+        redirect_uri: redirectUri
       })
     });
     const tokenBody = await tokenResponse.json();

package/dist/entries/openapi/generator.js

@@ -51,6 +51,7 @@ function sdkClientClassName() {
 var PUBLIC_ROUTE_DESCRIPTIONS = {
   "GET /auth/me": "Current authenticated user",
   "POST /auth/login": "Login with email and password",
+  "POST /auth/register": "Register with name, email, and password",
   "GET /auth/tokens": "List API tokens",
   "POST /auth/tokens": "Create API token",
   "DELETE /auth/tokens/:id": "Revoke API token",
@@ -83,27 +84,38 @@ var PUBLIC_ROUTE_DESCRIPTIONS = {
 function toOpenApiPath(path) {
   return path.replace(/:([A-Za-z_]+)/g, "{$1}");
 }
+function toRelativeApiPath(path) {
+  const prefix = apiPrefix();
+  if (path === prefix) {
+    return "/";
+  }
+  if (path.startsWith(`${prefix}/`)) {
+    return path.slice(prefix.length);
+  }
+  return path;
+}
 function requiresBearerAuth(path, method) {
-  if (path.startsWith("/auth/login") || path.startsWith("/auth/oauth")) {
+  const relative = toRelativeApiPath(path);
+  if (relative.startsWith("/auth/login") || relative.startsWith("/auth/register") || relative.startsWith("/auth/oauth")) {
     return false;
   }
-  if (path.startsWith("/scim/") || path.startsWith("/billing/webhooks/")) {
+  if (relative.startsWith("/scim/") || relative.startsWith("/billing/webhooks/") || path.startsWith("/scim/") || path.startsWith("/billing/webhooks/")) {
     return false;
   }
-  if (["/health", "/ready", "/metrics", "/"].includes(path)) {
+  if (["/health", "/ready", "/metrics", "/"].includes(relative) || ["/health", "/ready", "/metrics", "/"].includes(path)) {
     return false;
   }
-  if (method === "GET" && ["/organizations", "/projects", "/tasks", "/search"].some((prefix) => path.startsWith(prefix))) {
+  if (method === "GET" && ["/organizations", "/projects", "/tasks", "/search"].some((prefix) => relative.startsWith(prefix) || path.startsWith(prefix))) {
     return false;
   }
-  return path.startsWith("/auth/") || ["POST", "PATCH", "PUT", "DELETE"].includes(method);
+  return relative.startsWith("/auth/") || ["POST", "PATCH", "PUT", "DELETE"].includes(method);
 }
 function generateOpenApiSpec(routes) {
   const paths = {};
   for (const route of routes) {
     const openApiPath = toOpenApiPath(route.path);
     const method = route.method.toLowerCase();
-    const description = PUBLIC_ROUTE_DESCRIPTIONS[`${route.method} ${route.path}`] ?? `${route.method} ${route.path}`;
+    const description = PUBLIC_ROUTE_DESCRIPTIONS[`${route.method} ${toRelativeApiPath(route.path)}`] ?? PUBLIC_ROUTE_DESCRIPTIONS[`${route.method} ${route.path}`] ?? `${route.method} ${route.path}`;
     paths[openApiPath] ??= {};
     paths[openApiPath][method] = {
       summary: description,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/core",
-  "version": "0.5.69",
+  "version": "0.5.71",
   "description": "Strata — Laravel-inspired Bun framework public API",
   "type": "module",
   "license": "MIT",