@jskit-ai/auth-web 0.1.53 → 0.1.55

package/package.descriptor.mjs

@@ -1,7 +1,7 @@
 export default Object.freeze({
   "packageVersion": 1,
   "packageId": "@jskit-ai/auth-web",
-  "version": "0.1.53",
+  "version": "0.1.55",
   "kind": "runtime",
   "description": "Auth web module: Fastify auth routes plus web login/sign-out scaffolds.",
   "dependsOn": [
@@ -220,10 +220,10 @@ export default Object.freeze({
         "@tanstack/vue-query": "5.92.12",
         "@mdi/js": "^7.4.47",
         "@fastify/type-provider-typebox": "^6.1.0",
-        "@jskit-ai/auth-core": "0.1.51",
-        "@jskit-ai/http-runtime": "0.1.51",
-        "@jskit-ai/kernel": "0.1.52",
-        "@jskit-ai/shell-web": "0.1.51",
+        "@jskit-ai/auth-core": "0.1.53",
+        "@jskit-ai/http-runtime": "0.1.53",
+        "@jskit-ai/kernel": "0.1.54",
+        "@jskit-ai/shell-web": "0.1.53",
         "vuetify": "^4.0.0"
       },
       "dev": {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/auth-web",
-  "version": "0.1.53",
+  "version": "0.1.55",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -18,13 +18,13 @@
   },
   "dependencies": {
     "@tanstack/vue-query": "^5.90.5",
-    "@jskit-ai/auth-core": "0.1.51",
+    "@jskit-ai/auth-core": "0.1.53",
     "@mdi/js": "^7.4.47",
     "@fastify/type-provider-typebox": "^6.1.0",
-    "@jskit-ai/kernel": "0.1.52",
-    "@jskit-ai/shell-web": "0.1.51",
+    "@jskit-ai/kernel": "0.1.54",
+    "@jskit-ai/shell-web": "0.1.53",
     "pinia": "^3.0.4",
     "vuetify": "^4.0.0",
-    "@jskit-ai/http-runtime": "0.1.51"
+    "@jskit-ai/http-runtime": "0.1.53"
   }
 }

package/src/client/runtime/authGuardRuntime.js

@@ -3,6 +3,7 @@ import { AUTH_PATHS } from "@jskit-ai/auth-core/shared/authPaths";
 import { isExternalLinkTarget } from "@jskit-ai/kernel/shared/support/linkPath";
 import { normalizePathname as normalizeSurfacePathname } from "@jskit-ai/kernel/shared/surface/paths";
 import { createListenerSubscription } from "@jskit-ai/kernel/shared/support/listenerSet";
+import { normalizePermissionList } from "@jskit-ai/kernel/shared/support/permissions";
 
 const GLOBAL_GUARD_EVALUATOR_KEY = "__JSKIT_WEB_SHELL_GUARD_EVALUATOR__";
 const AUTH_POLICY_AUTHENTICATED = "authenticated";
@@ -34,6 +35,8 @@ const KEEP_PREVIOUS_AUTH_STATE = Symbol("keepPreviousAuthState");
 const DEFAULT_AUTH_STATE = Object.freeze({
   authenticated: false,
   username: "",
+  email: "",
+  permissions: Object.freeze([]),
   oauthDefaultProvider: "",
   oauthProviders: Object.freeze([])
 });
@@ -102,10 +105,14 @@ function normalizeAuthState(payload = {}) {
     .toLowerCase();
   const authenticated = Boolean(payload.authenticated);
   const username = authenticated ? String(payload.username || "").trim() : "";
+  const email = authenticated ? String(payload.email || "").trim().toLowerCase() : "";
+  const permissions = authenticated ? Object.freeze(normalizePermissionList(payload.permissions)) : Object.freeze([]);
 
   return Object.freeze({
     authenticated,
     username,
+    email,
+    permissions,
     oauthDefaultProvider,
     oauthProviders
   });
@@ -129,6 +136,8 @@ function applyAuthContext(nextState, placementRuntime) {
     {
       auth: {
         authenticated: nextState.authenticated,
+        email: nextState.email,
+        permissions: nextState.permissions,
         oauthDefaultProvider: nextState.oauthDefaultProvider,
         oauthProviders: nextState.oauthProviders
       }

package/src/server/controllers/AuthController.js

@@ -157,6 +157,8 @@ class AuthController {
     reply.code(200).send({
       authenticated: true,
       username: authResult.profile.displayName,
+      email: authResult.profile.email,
+      permissions: Array.isArray(authResult.permissions) ? authResult.permissions : [],
       csrfToken,
       ...oauthCatalogPayload
     });

package/test/authGuardRuntime.test.js

@@ -170,6 +170,8 @@ test("auth guard runtime only updates placement auth context", async () => {
           return {
             authenticated: true,
             username: "ada",
+            email: "ada@example.com",
+            permissions: ["settings.allowed"],
             oauthProviders: [{ id: "github", label: "GitHub" }],
             oauthDefaultProvider: "github"
           };
@@ -191,6 +193,8 @@ test("auth guard runtime only updates placement auth context", async () => {
   });
   assert.deepEqual(context.auth, {
     authenticated: true,
+    email: "ada@example.com",
+    permissions: ["settings.allowed"],
     oauthDefaultProvider: "github",
     oauthProviders: [{ id: "github", label: "GitHub" }]
   });