@jskit-ai/auth-provider-supabase-core 0.1.51 → 0.1.53

package/package.descriptor.mjs

@@ -1,7 +1,7 @@
 export default Object.freeze({
   "packageVersion": 1,
   "packageId": "@jskit-ai/auth-provider-supabase-core",
-  "version": "0.1.51",
+  "version": "0.1.53",
   "kind": "runtime",
   "options": {
     "auth-supabase-url": {
@@ -83,8 +83,8 @@ export default Object.freeze({
   "mutations": {
     "dependencies": {
       "runtime": {
-        "@jskit-ai/auth-core": "0.1.51",
-        "@jskit-ai/kernel": "0.1.52",
+        "@jskit-ai/auth-core": "0.1.53",
+        "@jskit-ai/kernel": "0.1.54",
         "dotenv": "^16.4.5",
         "@supabase/supabase-js": "^2.57.4",
         "jose": "^6.1.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/auth-provider-supabase-core",
-  "version": "0.1.51",
+  "version": "0.1.53",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -12,8 +12,8 @@
     "./client": "./src/client/index.js"
   },
   "dependencies": {
-    "@jskit-ai/auth-core": "0.1.51",
-    "@jskit-ai/kernel": "0.1.52",
+    "@jskit-ai/auth-core": "0.1.53",
+    "@jskit-ai/kernel": "0.1.54",
     "jose": "^6.1.0",
     "@supabase/supabase-js": "^2.57.4"
   }

package/src/server/providers/AuthSupabaseServiceProvider.js

@@ -1,6 +1,7 @@
 import { resolveAllowedOriginsFromSurfaceDefinitions } from "@jskit-ai/kernel/shared/support/returnToPath";
 import { withActionDefaults } from "@jskit-ai/kernel/shared/actions";
 import { normalizeRecordId } from "@jskit-ai/kernel/shared/support/normalize";
+import { resolveAuthServiceDecorators } from "@jskit-ai/auth-core/server/authServiceDecoratorRegistry";
 import { createService } from "../lib/service.js";
 import { createStandaloneProfileSyncService } from "../lib/standaloneProfileSyncService.js";
 import { createAuthSessionEventsService } from "../lib/authSessionEventsService.js";
@@ -185,6 +186,19 @@ function resolveOptionalRepositories(scope) {
   return repositories;
 }
 
+function applyAuthServiceDecorators(scope, authService) {
+  let decoratedAuthService = authService;
+
+  for (const decorator of resolveAuthServiceDecorators(scope)) {
+    decoratedAuthService = decorator.decorateAuthService(decoratedAuthService);
+    if (!decoratedAuthService || typeof decoratedAuthService !== "object") {
+      throw new Error(`Auth service decorator "${decorator.decoratorId}" must return an auth service object.`);
+    }
+  }
+
+  return decoratedAuthService;
+}
+
 class AuthSupabaseServiceProvider {
   static id = "auth.provider.supabase";
 
@@ -225,7 +239,7 @@ class AuthSupabaseServiceProvider {
           userProfileSyncService = scope.make("users.profile.sync.service");
         }
 
-        return createService({
+        const authService = createService({
           authProvider,
           appPublicUrl: String(env.APP_PUBLIC_URL || "").trim(),
           authAllowedReturnToOrigins: resolveAllowedReturnToOrigins({
@@ -241,6 +255,8 @@ class AuthSupabaseServiceProvider {
           devAuthAccessTtlSeconds: env.AUTH_DEV_ACCESS_TTL_SECONDS,
           devAuthRefreshTtlSeconds: env.AUTH_DEV_REFRESH_TTL_SECONDS
         });
+
+        return applyAuthServiceDecorators(scope, authService);
       });
     }
 

package/test/providerRuntime.test.js

@@ -1,6 +1,7 @@
 import assert from "node:assert/strict";
 import test from "node:test";
 import { createApplication } from "@jskit-ai/kernel/_testable";
+import { registerAuthServiceDecorator } from "@jskit-ai/auth-core/server/authServiceDecoratorRegistry";
 import { ActionRuntimeServiceProvider } from "@jskit-ai/kernel/server/actions";
 import { AuthSupabaseServiceProvider } from "../src/server/providers/AuthSupabaseServiceProvider.js";
 
@@ -220,6 +221,46 @@ test("auth supabase provider can boot dev auth without Supabase credentials", as
   assert.equal(definitions.some((definition) => definition.id === "auth.dev.loginAs"), true);
 });
 
+test("auth supabase provider applies registered auth service decorators", async () => {
+  const app = createApplication();
+  app.instance("appConfig", createAppConfigFixture());
+  app.instance("jskit.env", {
+    AUTH_SUPABASE_URL: "https://example.supabase.co",
+    AUTH_SUPABASE_PUBLISHABLE_KEY: "sb_publishable_test_key",
+    AUTH_PROFILE_MODE: "standalone",
+    APP_PUBLIC_URL: "http://localhost:5173",
+    NODE_ENV: "test"
+  });
+  app.instance("jskit.logger", {
+    info() {},
+    warn() {},
+    error() {},
+    debug() {}
+  });
+  app.instance("domainEvents", {
+    async publish() {}
+  });
+
+  registerAuthServiceDecorator(app, "test.auth.decorator.marker", () => ({
+    decoratorId: "marker",
+    order: 10,
+    decorateAuthService(authService) {
+      return {
+        ...authService,
+        marker: "decorated"
+      };
+    }
+  }));
+
+  await app.start({
+    providers: [ActionRuntimeServiceProvider, AuthSupabaseServiceProvider]
+  });
+
+  const authService = app.make("authService");
+  assert.equal(authService.marker, "decorated");
+  assert.equal(typeof authService.login, "function");
+});
+
 test("auth supabase provider rejects dev auth bypass in production", async () => {
   const app = createApplication();
   app.instance("appConfig", createAppConfigFixture());