@jskit-ai/auth-provider-supabase-core 0.1.96 → 0.1.98

package/package.descriptor.mjs

@@ -1,7 +1,7 @@
 export default Object.freeze({
   "packageVersion": 1,
   "packageId": "@jskit-ai/auth-provider-supabase-core",
-  "version": "0.1.96",
+  "version": "0.1.98",
   "kind": "runtime",
   "options": {
     "auth-supabase-url": {
@@ -83,8 +83,8 @@ export default Object.freeze({
   "mutations": {
     "dependencies": {
       "runtime": {
-        "@jskit-ai/auth-core": "0.1.96",
-        "@jskit-ai/kernel": "0.1.98",
+        "@jskit-ai/auth-core": "0.1.97",
+        "@jskit-ai/kernel": "0.1.99",
         "dotenv": "^16.4.5",
         "@supabase/supabase-js": "^2.57.4",
         "jose": "^6.1.0"
@@ -137,8 +137,21 @@ export default Object.freeze({
         "op": "append-text",
         "file": "config/server.js",
         "position": "bottom",
-        "skipIfContains": "config.auth = {",
-        "value": "\nconfig.auth = {\n  oauth: {\n    providers: [],\n    defaultProvider: \"\"\n  }\n};\n",
+        "skipIfContains": "config.auth.profileMode =",
+        "value": "\nconfig.auth ||= {};\nconfig.auth.profileMode = \"standalone\";\n",
+        "reason": "Use standalone auth profile sync until a users package enables users-backed sync.",
+        "category": "runtime-config",
+        "id": "auth-profile-mode-standalone"
+      },
+      {
+        "op": "append-text",
+        "file": "config/server.js",
+        "position": "bottom",
+        "skipIfContains": [
+          "config.auth.oauth = {",
+          "config.auth = {\n  oauth: {"
+        ],
+        "value": "\nconfig.auth ||= {};\nconfig.auth.oauth = {\n  providers: [],\n  defaultProvider: \"\"\n};\n",
         "reason": "Append app-owned OAuth provider visibility config for stock auth screens.",
         "category": "runtime-config",
         "id": "auth-oauth-app-config"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/auth-provider-supabase-core",
-  "version": "0.1.96",
+  "version": "0.1.98",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -12,8 +12,8 @@
     "./client": "./src/client/index.js"
   },
   "dependencies": {
-    "@jskit-ai/auth-core": "0.1.96",
-    "@jskit-ai/kernel": "0.1.98",
+    "@jskit-ai/auth-core": "0.1.97",
+    "@jskit-ai/kernel": "0.1.99",
     "json-rest-schema": "1.x.x",
     "jose": "^6.1.0",
     "@supabase/supabase-js": "^2.57.4",

package/src/server/providers/AuthSupabaseServiceProvider.js

@@ -6,9 +6,9 @@ import { createService } from "../lib/service.js";
 import { createStandaloneProfileSyncService } from "../lib/standaloneProfileSyncService.js";
 import { createAuthSessionEventsService } from "../lib/authSessionEventsService.js";
 import { buildAuthActions } from "../lib/actions/auth.contributor.js";
-const AUTH_PROFILE_MODE_STANDALONE = "standalone";
-const AUTH_PROFILE_MODE_USERS = "users";
-const SUPPORTED_AUTH_PROFILE_MODES = Object.freeze([AUTH_PROFILE_MODE_STANDALONE, AUTH_PROFILE_MODE_USERS]);
+const PROFILE_MODE_STANDALONE = "standalone";
+const PROFILE_MODE_USERS = "users";
+const SUPPORTED_PROFILE_MODES = Object.freeze([PROFILE_MODE_STANDALONE, PROFILE_MODE_USERS]);
 const INTERNAL_JSON_REST_API = "internal.json-rest-api";
 
 function splitCsv(value) {
@@ -91,16 +91,16 @@ function resolveAuthProviderConfig(env, appConfig = {}) {
   };
 }
 
-function resolveAuthProfileMode(env) {
-  const source = env && typeof env === "object" ? env : {};
-  const mode = String(source.AUTH_PROFILE_MODE || AUTH_PROFILE_MODE_STANDALONE)
+function resolveAuthProfileMode(appConfig = {}) {
+  const auth = normalizeRecord(normalizeRecord(appConfig).auth);
+  const mode = String(auth.profileMode || PROFILE_MODE_USERS)
     .trim()
     .toLowerCase();
-  if (SUPPORTED_AUTH_PROFILE_MODES.includes(mode)) {
+  if (SUPPORTED_PROFILE_MODES.includes(mode)) {
     return mode;
   }
   throw new Error(
-    `Unsupported AUTH_PROFILE_MODE "${mode}". Supported values: ${SUPPORTED_AUTH_PROFILE_MODES.join(", ")}.`
+    `Unsupported config.auth.profileMode "${mode}". Supported values: ${SUPPORTED_PROFILE_MODES.join(", ")}.`
   );
 }
 
@@ -244,12 +244,12 @@ class AuthSupabaseServiceProvider {
             return null;
           }
         }
-        const authProfileMode = resolveAuthProfileMode(env);
+        const authProfileMode = resolveAuthProfileMode(appConfig);
         let userProfileSyncService = fallbackStandaloneProfileSyncService;
-        if (authProfileMode === AUTH_PROFILE_MODE_USERS) {
+        if (authProfileMode === PROFILE_MODE_USERS) {
           if (!scope.has("users.profile.sync.service")) {
             throw new Error(
-              "AuthSupabaseServiceProvider requires users.profile.sync.service when AUTH_PROFILE_MODE=users."
+              "AuthSupabaseServiceProvider requires users.profile.sync.service when config.auth.profileMode is \"users\"."
             );
           }
           userProfileSyncService = scope.make("users.profile.sync.service");

package/test/providerRuntime.test.js

@@ -6,8 +6,8 @@ import { ActionRuntimeServiceProvider } from "@jskit-ai/kernel/server/actions";
 import { createProviderClass } from "../../kernel/shared/runtime/application.js";
 import { AuthSupabaseServiceProvider } from "../src/server/providers/AuthSupabaseServiceProvider.js";
 
-function createAppConfigFixture() {
-  return {
+function createAppConfigFixture({ auth = null } = {}) {
+  const config = {
     surfaceModeAll: "all",
     surfaceDefaultId: "home",
     surfaceDefinitions: {
@@ -21,6 +21,10 @@ function createAppConfigFixture() {
       }
     }
   };
+  if (auth && typeof auth === "object") {
+    config.auth = auth;
+  }
+  return config;
 }
 
 function isBootFailureWithCause(error, pattern) {
@@ -31,13 +35,12 @@ function isBootFailureWithCause(error, pattern) {
   );
 }
 
-test("auth supabase provider registers authService and contributes auth actions in users mode", async () => {
+test("auth supabase provider defaults to users mode and contributes auth actions", async () => {
   const app = createApplication();
   app.instance("appConfig", createAppConfigFixture());
   app.instance("jskit.env", {
     AUTH_SUPABASE_URL: "https://example.supabase.co",
     AUTH_SUPABASE_PUBLISHABLE_KEY: "sb_publishable_test_key",
-    AUTH_PROFILE_MODE: "users",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "test"
   });
@@ -86,11 +89,14 @@ test("auth supabase provider registers authService and contributes auth actions
 
 test("auth supabase provider registers authService in standalone mode without users.profile.sync.service", async () => {
   const app = createApplication();
-  app.instance("appConfig", createAppConfigFixture());
+  app.instance("appConfig", createAppConfigFixture({
+    auth: {
+      profileMode: "standalone"
+    }
+  }));
   app.instance("jskit.env", {
     AUTH_SUPABASE_URL: "https://example.supabase.co",
     AUTH_SUPABASE_PUBLISHABLE_KEY: "sb_publishable_test_key",
-    AUTH_PROFILE_MODE: "standalone",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "test"
   });
@@ -112,13 +118,12 @@ test("auth supabase provider registers authService in standalone mode without us
   assert.equal(typeof authService?.login, "function");
 });
 
-test("auth supabase provider requires users.profile.sync.service when AUTH_PROFILE_MODE=users", async () => {
+test("auth supabase provider requires users.profile.sync.service in default users mode", async () => {
   const app = createApplication();
   app.instance("appConfig", createAppConfigFixture());
   app.instance("jskit.env", {
     AUTH_SUPABASE_URL: "https://example.supabase.co",
     AUTH_SUPABASE_PUBLISHABLE_KEY: "sb_publishable_test_key",
-    AUTH_PROFILE_MODE: "users",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "test"
   });
@@ -136,16 +141,19 @@ test("auth supabase provider requires users.profile.sync.service when AUTH_PROFI
     providers: [ActionRuntimeServiceProvider, AuthSupabaseServiceProvider]
   });
 
-  assert.throws(() => app.make("authService"), /AUTH_PROFILE_MODE=users/);
+  assert.throws(() => app.make("authService"), /config\.auth\.profileMode is "users"/);
 });
 
-test("auth supabase provider rejects unsupported AUTH_PROFILE_MODE values", async () => {
+test("auth supabase provider rejects unsupported config.auth.profileMode values", async () => {
   const app = createApplication();
-  app.instance("appConfig", createAppConfigFixture());
+  app.instance("appConfig", createAppConfigFixture({
+    auth: {
+      profileMode: "invalid"
+    }
+  }));
   app.instance("jskit.env", {
     AUTH_SUPABASE_URL: "https://example.supabase.co",
     AUTH_SUPABASE_PUBLISHABLE_KEY: "sb_publishable_test_key",
-    AUTH_PROFILE_MODE: "invalid",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "test"
   });
@@ -163,7 +171,7 @@ test("auth supabase provider rejects unsupported AUTH_PROFILE_MODE values", asyn
     providers: [ActionRuntimeServiceProvider, AuthSupabaseServiceProvider]
   });
 
-  assert.throws(() => app.make("authService"), /Unsupported AUTH_PROFILE_MODE/);
+  assert.throws(() => app.make("authService"), /Unsupported config\.auth\.profileMode/);
 });
 
 test("auth supabase provider can boot dev auth without Supabase credentials", async () => {
@@ -172,7 +180,6 @@ test("auth supabase provider can boot dev auth without Supabase credentials", as
   app.instance("jskit.env", {
     AUTH_DEV_BYPASS_ENABLED: "true",
     AUTH_DEV_BYPASS_SECRET: "dev-bootstrap-secret",
-    AUTH_PROFILE_MODE: "users",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "development"
   });
@@ -224,11 +231,14 @@ test("auth supabase provider can boot dev auth without Supabase credentials", as
 
 test("auth supabase provider applies registered auth service decorators", async () => {
   const app = createApplication();
-  app.instance("appConfig", createAppConfigFixture());
+  app.instance("appConfig", createAppConfigFixture({
+    auth: {
+      profileMode: "standalone"
+    }
+  }));
   app.instance("jskit.env", {
     AUTH_SUPABASE_URL: "https://example.supabase.co",
     AUTH_SUPABASE_PUBLISHABLE_KEY: "sb_publishable_test_key",
-    AUTH_PROFILE_MODE: "standalone",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "test"
   });
@@ -268,7 +278,6 @@ test("auth supabase provider rejects dev auth bypass in production", async () =>
   app.instance("jskit.env", {
     AUTH_DEV_BYPASS_ENABLED: "true",
     AUTH_DEV_BYPASS_SECRET: "dev-bootstrap-secret",
-    AUTH_PROFILE_MODE: "users",
     APP_PUBLIC_URL: "https://example.com",
     NODE_ENV: "production"
   });
@@ -318,7 +327,6 @@ test("auth supabase provider rejects dev auth bypass without a secret during boo
   app.instance("appConfig", createAppConfigFixture());
   app.instance("jskit.env", {
     AUTH_DEV_BYPASS_ENABLED: "true",
-    AUTH_PROFILE_MODE: "users",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "development"
   });
@@ -369,7 +377,6 @@ test("auth supabase provider rejects dev auth bypass without internal.repository
   app.instance("jskit.env", {
     AUTH_DEV_BYPASS_ENABLED: "true",
     AUTH_DEV_BYPASS_SECRET: "dev-bootstrap-secret",
-    AUTH_PROFILE_MODE: "users",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "development"
   });
@@ -440,7 +447,6 @@ test("auth supabase provider defers eager dev auth materialization until json-re
   app.instance("jskit.env", {
     AUTH_DEV_BYPASS_ENABLED: "true",
     AUTH_DEV_BYPASS_SECRET: "dev-bootstrap-secret",
-    AUTH_PROFILE_MODE: "users",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "development"
   });
@@ -486,6 +492,7 @@ test("auth supabase provider reads oauth providers from appConfig.auth.oauth", a
   app.instance("appConfig", {
     ...createAppConfigFixture(),
     auth: {
+      profileMode: "standalone",
       oauth: {
         providers: ["github"],
         defaultProvider: "github"
@@ -495,7 +502,6 @@ test("auth supabase provider reads oauth providers from appConfig.auth.oauth", a
   app.instance("jskit.env", {
     AUTH_SUPABASE_URL: "https://example.supabase.co",
     AUTH_SUPABASE_PUBLISHABLE_KEY: "sb_publishable_test_key",
-    AUTH_PROFILE_MODE: "standalone",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "test"
   });
@@ -524,6 +530,7 @@ test("auth supabase provider lets env oauth settings override appConfig.auth.oau
   app.instance("appConfig", {
     ...createAppConfigFixture(),
     auth: {
+      profileMode: "standalone",
       oauth: {
         providers: ["github"],
         defaultProvider: "github"
@@ -535,7 +542,6 @@ test("auth supabase provider lets env oauth settings override appConfig.auth.oau
     AUTH_SUPABASE_PUBLISHABLE_KEY: "sb_publishable_test_key",
     AUTH_OAUTH_PROVIDERS: "google",
     AUTH_OAUTH_DEFAULT_PROVIDER: "google",
-    AUTH_PROFILE_MODE: "standalone",
     APP_PUBLIC_URL: "http://localhost:5173",
     NODE_ENV: "test"
   });