@kanjijs/cli 0.2.0-beta.55 → 0.2.0-beta.57

package/templates/starter/node_modules/@auth/core/src/providers/zoom.ts

@@ -0,0 +1,119 @@
+/**
+ * <div style={{backgroundColor: "#000", display: "flex", justifyContent: "space-between", color: "#fff", padding: 16}}>
+ * <span>Built-in <b>Zoom</b> integration.</span>
+ * <a href="https://zoom.us/">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/zoom.svg" height="48" />
+ * </a>
+ * </div>
+ *
+ * @module providers/zoom
+ */
+
+import type { OAuthConfig, OAuthUserConfig } from "./index.js"
+
+/**
+ * See: https://developers.zoom.us/docs/integrations/oauth/#using-an-access-token
+ */
+export interface ZoomProfile extends Record<string, any> {
+  id: string
+  first_name: string
+  last_name: string
+  email: string
+  type: number
+  role_name: string
+  pmi: number
+  use_pmi: boolean
+  vanity_url: string
+  personal_meeting_url: string
+  timezone: string
+  verified: number
+  dept: string
+  created_at: string
+  last_login_time: string
+  last_client_version: string
+  pic_url: string
+  host_key: string
+  jid: string
+  group_ids: string[]
+  im_group_ids: string[]
+  account_id: string
+  language: string
+  phone_country: string
+  phone_number: string
+  status: string
+}
+
+/**
+ * Add Zoom login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/zoom
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import Zoom from "@auth/core/providers/zoom"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     Zoom({ clientId: ZOOM_CLIENT_ID, clientSecret: ZOOM_CLIENT_SECRET }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ * - [Zoom OAuth 2.0 Integration Guide](https://developers.zoom.us/docs/integrations/oauth/)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the Zoom provider is
+ * based on the [OAuth 2](https://www.rfc-editor.org/rfc/rfc6749.html) specification.
+ *
+ * :::tip
+ *
+ * The Zoom provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/zoom.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function Zoom(
+  config: OAuthUserConfig<ZoomProfile>
+): OAuthConfig<ZoomProfile> {
+  return {
+    id: "zoom",
+    name: "Zoom",
+    type: "oauth",
+    authorization: "https://zoom.us/oauth/authorize?scope",
+    token: "https://zoom.us/oauth/token",
+    userinfo: "https://api.zoom.us/v2/users/me",
+    profile(profile) {
+      return {
+        id: profile.id,
+        name: `${profile.first_name} ${profile.last_name}`,
+        email: profile.email,
+        image: profile.pic_url,
+      }
+    },
+    style: {
+      bg: "#0b5cff",
+      text: "#fff",
+    },
+    options: config,
+  }
+}

package/templates/starter/node_modules/@auth/core/src/types.ts

@@ -0,0 +1,432 @@
+/**
+ *
+ * This module contains public types and interfaces of the core package.
+ *
+ * ## Installation
+ *
+ * ```bash npm2yarn
+ * npm install @auth/core
+ * ```
+ *
+ * You can then import this submodule from `@auth/core/types`.
+ *
+ * ## Usage
+ *
+ * Even if you don't use TypeScript, IDEs like VS Code will pick up types to provide you with a better developer experience.
+ * While you are typing, you will get suggestions about what certain objects/functions look like,
+ * and sometimes links to documentation, examples, and other valuable resources.
+ *
+ * Generally, you will not need to import types from this module.
+ * Mostly when using the `Auth` function and optionally the `AuthConfig` interface,
+ * everything inside there will already be typed.
+ *
+ * :::tip
+ * Inside the `Auth` function, you won't need to use a single type from this module.
+ *
+ * @example
+ * ```ts title=index.ts
+ * import { Auth } from "@auth/core"
+ *
+ * const request = new Request("https://example.com")
+ * const response = await Auth(request, {
+ *   callbacks: {
+ *     jwt(): JWT { // <-- This is unnecessary!
+ *       return { foo: "bar" }
+ *     },
+ *     session(
+ *        { session, token }: { session: Session; token: JWT } // <-- This is unnecessary!
+ *     ) {
+ *       return session
+ *     },
+ *   }
+ * })
+ * ```
+ * :::
+ *
+ * ## Resources
+ *
+ * - [TypeScript - The Basics](https://www.typescriptlang.org/docs/handbook/2/basic-types.html)
+ * - [Extending built-in types](https://authjs.dev/getting-started/typescript#module-augmentation)
+ *
+ * @module types
+ */
+
+import type { CookieSerializeOptions } from "cookie"
+import type {
+  OAuth2TokenEndpointResponse,
+  OpenIDTokenEndpointResponse,
+} from "oauth4webapi"
+import type { Adapter } from "./adapters.js"
+import { AuthConfig } from "./index.js"
+import type { JWTOptions } from "./jwt.js"
+import type { Cookie } from "./lib/utils/cookie.js"
+import type { LoggerInstance } from "./lib/utils/logger.js"
+import type {
+  CredentialsConfig,
+  EmailConfig,
+  OAuthConfigInternal,
+  OIDCConfigInternal,
+  ProviderType,
+} from "./providers/index.js"
+import type {
+  WebAuthnConfig,
+  WebAuthnProviderType,
+} from "./providers/webauthn.js"
+
+export type { WebAuthnOptionsResponseBody } from "./lib/utils/webauthn-utils.js"
+export type { AuthConfig } from "./index.js"
+export type { LoggerInstance }
+export type Awaitable<T> = T | PromiseLike<T>
+export type Awaited<T> = T extends Promise<infer U> ? U : T
+
+export type SemverString =
+  | `v${number}`
+  | `v${number}.${number}`
+  | `v${number}.${number}.${number}`
+
+/**
+ * Change the theme of the built-in pages.
+ *
+ * [Documentation](https://authjs.dev/reference/core#theme) |
+ * [Pages](https://authjs.dev/guides/pages/signin)
+ */
+export interface Theme {
+  colorScheme?: "auto" | "dark" | "light"
+  logo?: string
+  brandColor?: string
+  buttonText?: string
+}
+
+/**
+ * Different tokens returned by OAuth Providers.
+ * Some of them are available with different casing,
+ * but they refer to the same value.
+ */
+export type TokenSet = Partial<
+  OAuth2TokenEndpointResponse | OpenIDTokenEndpointResponse
+> & {
+  /**
+   * Date of when the `access_token` expires in seconds.
+   * This value is calculated from the `expires_in` value.
+   *
+   * @see https://www.ietf.org/rfc/rfc6749.html#section-4.2.2
+   */
+  expires_at?: number
+}
+
+/**
+ * Usually contains information about the provider being used
+ * and also extends `TokenSet`, which is different tokens returned by OAuth Providers.
+ */
+export interface Account extends Partial<OpenIDTokenEndpointResponse> {
+  /** Provider's id for this account. Eg.: "google" */
+  provider: string
+  /**
+   * This value depends on the type of the provider being used to create the account.
+   * - oauth/oidc: The OAuth account's id, returned from the `profile()` callback.
+   * - email: The user's email address.
+   * - credentials: `id` returned from the `authorize()` callback
+   */
+  providerAccountId: string
+  /** Provider's type for this account */
+  type: ProviderType
+  /**
+   * id of the user this account belongs to
+   *
+   * @see https://authjs.dev/reference/core/adapters#adapteruser
+   */
+  userId?: string
+  /**
+   * Calculated value based on {@link OAuth2TokenEndpointResponse.expires_in}.
+   *
+   * It is the absolute timestamp (in seconds) when the {@link OAuth2TokenEndpointResponse.access_token} expires.
+   *
+   * This value can be used for implementing token rotation together with {@link OAuth2TokenEndpointResponse.refresh_token}.
+   *
+   * @see https://authjs.dev/guides/refresh-token-rotation#database-strategy
+   * @see https://www.rfc-editor.org/rfc/rfc6749#section-5.1
+   */
+  expires_at?: number
+}
+
+/**
+ * The user info returned from your OAuth provider.
+ *
+ * @see https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims
+ */
+export interface Profile {
+  id?: string | null
+  sub?: string | null
+  name?: string | null
+  given_name?: string | null
+  family_name?: string | null
+  middle_name?: string | null
+  nickname?: string | null
+  preferred_username?: string | null
+  profile?: string | null
+  picture?: string | null | any
+  website?: string | null
+  email?: string | null
+  email_verified?: boolean | null
+  gender?: string | null
+  birthdate?: string | null
+  zoneinfo?: string | null
+  locale?: string | null
+  phone_number?: string | null
+  updated_at?: Date | string | number | null
+  address?: {
+    formatted?: string | null
+    street_address?: string | null
+    locality?: string | null
+    region?: string | null
+    postal_code?: string | null
+    country?: string | null
+  } | null
+  [claim: string]: unknown
+}
+
+/** [Documentation](https://authjs.dev/reference/core#cookies) */
+export interface CookieOption {
+  name: string
+  options: CookieSerializeOptions
+}
+
+/** [Documentation](https://authjs.dev/reference/core#cookies) */
+export interface CookiesOptions {
+  sessionToken: Partial<CookieOption>
+  callbackUrl: Partial<CookieOption>
+  csrfToken: Partial<CookieOption>
+  pkceCodeVerifier: Partial<CookieOption>
+  state: Partial<CookieOption>
+  nonce: Partial<CookieOption>
+  webauthnChallenge: Partial<CookieOption>
+}
+
+/** TODO: Check if all these are used/correct */
+export type ErrorPageParam = "Configuration" | "AccessDenied" | "Verification"
+
+/** TODO: Check if all these are used/correct */
+export type SignInPageErrorParam =
+  | "Signin"
+  | "OAuthSignin"
+  | "OAuthCallbackError"
+  | "OAuthCreateAccount"
+  | "EmailCreateAccount"
+  | "Callback"
+  | "OAuthAccountNotLinked"
+  | "EmailSignin"
+  | "CredentialsSignin"
+  | "SessionRequired"
+
+export interface PagesOptions {
+  /**
+   * The path to the sign in page.
+   *
+   * The optional "error" query parameter is set to
+   * one of the {@link SignInPageErrorParam available} values.
+   *
+   * @default "/signin"
+   */
+  signIn: string
+  signOut: string
+  /**
+   * The path to the error page.
+   *
+   * The optional "error" query parameter is set to
+   * one of the {@link ErrorPageParam available} values.
+   *
+   * @default "/error"
+   */
+  error: string
+  verifyRequest: string
+  /** If set, new users will be directed here on first sign in */
+  newUser: string
+}
+
+type ISODateString = string
+
+export interface DefaultSession {
+  user?: User
+  expires: ISODateString
+}
+
+/** The active session of the logged in user. */
+export interface Session extends DefaultSession {}
+
+/**
+ * The shape of the returned object in the OAuth providers' `profile` callback,
+ * available in the `jwt` and `session` callbacks,
+ * or the second parameter of the `session` callback, when using a database.
+ */
+export interface User {
+  id?: string
+  name?: string | null
+  email?: string | null
+  image?: string | null
+}
+
+// Below are types that are only supposed be used by next-auth internally
+
+/** @internal */
+export type InternalProvider<T = ProviderType> = (T extends "oauth"
+  ? OAuthConfigInternal<any>
+  : T extends "oidc"
+    ? OIDCConfigInternal<any>
+    : T extends "email"
+      ? EmailConfig
+      : T extends "credentials"
+        ? CredentialsConfig
+        : T extends WebAuthnProviderType
+          ? WebAuthnConfig
+          : never) & {
+  signinUrl: string
+  /** @example `"https://example.com/api/auth/callback/id"` */
+  callbackUrl: string
+}
+
+export interface PublicProvider {
+  id: string
+  name: string
+  type: string
+  signinUrl: string
+  callbackUrl: string
+}
+
+/**
+ * Supported actions by Auth.js. Each action map to a REST API endpoint.
+ * Some actions have a `GET` and `POST` variant, depending on if the action
+ * changes the state of the server.
+ *
+ * - **`"callback"`**:
+ *   - **`GET`**: Handles the callback from an [OAuth provider](https://authjs.dev/reference/core/providers#oauth2configprofile).
+ *   - **`POST`**: Handles the callback from a [Credentials provider](https://authjs.dev/getting-started/providers/credentials#credentialsconfigcredentialsinputs).
+ * - **`"csrf"`**: Returns the raw CSRF token, which is saved in a cookie (encrypted).
+ * It is used for CSRF protection, implementing the [double submit cookie](https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html#double-submit-cookie) technique.
+ * :::note
+ * Some frameworks have built-in CSRF protection and can therefore disable this action. In this case, the corresponding endpoint will return a 404 response. Read more at [`skipCSRFCheck`](https://authjs.dev/reference/core#skipcsrfcheck).
+ * _⚠ We don't recommend manually disabling CSRF protection, unless you know what you're doing._
+ * :::
+ * - **`"error"`**: Renders the built-in error page.
+ * - **`"providers"`**: Returns a client-safe list of all configured providers.
+ * - **`"session"`**:
+ *   - **`GET`**: Returns the user's session if it exists, otherwise `null`.
+ *   - **`POST`**: Updates the user's session and returns the updated session.
+ * - **`"signin"`**:
+ *   - **`GET`**: Renders the built-in sign-in page.
+ *   - **`POST`**: Initiates the sign-in flow.
+ * - **`"signout"`**:
+ *   - **`GET`**: Renders the built-in sign-out page.
+ *   - **`POST`**: Initiates the sign-out flow. This will invalidate the user's session (deleting the cookie, and if there is a session in the database, it will be deleted as well).
+ * - **`"verify-request"`**: Renders the built-in verification request page.
+ * - **`"webauthn-options"`**:
+ *   - **`GET`**: Returns the options for the WebAuthn authentication and registration flows.
+ */
+export type AuthAction =
+  | "callback"
+  | "csrf"
+  | "error"
+  | "providers"
+  | "session"
+  | "signin"
+  | "signout"
+  | "verify-request"
+  | "webauthn-options"
+
+/** @internal */
+export interface RequestInternal {
+  url: URL
+  method: "GET" | "POST"
+  cookies?: Partial<Record<string, string>>
+  headers?: Record<string, any>
+  query?: Record<string, any>
+  body?: Record<string, any>
+  action: AuthAction
+  providerId?: string
+  error?: string
+}
+
+// Should only be used by frameworks
+export interface ResponseInternal<
+  Body extends string | Record<string, any> | any[] | null = any,
+> {
+  status?: number
+  headers?: Headers | HeadersInit
+  body?: Body
+  redirect?: string
+  cookies?: Cookie[]
+}
+
+/**
+ * A webauthn authenticator.
+ * Represents an entity capable of authenticating the account it references,
+ * and contains the auhtenticator's credentials and related information.
+ *
+ * @see https://www.w3.org/TR/webauthn/#authenticator
+ */
+export interface Authenticator {
+  /**
+   * ID of the user this authenticator belongs to.
+   */
+  userId?: string
+  /**
+   * The provider account ID connected to the authenticator.
+   */
+  providerAccountId: string
+  /**
+   * Number of times the authenticator has been used.
+   */
+  counter: number
+  /**
+   * Whether the client authenticator backed up the credential.
+   */
+  credentialBackedUp: boolean
+  /**
+   * Base64 encoded credential ID.
+   */
+  credentialID: string
+  /**
+   * Base64 encoded credential public key.
+   */
+  credentialPublicKey: string
+  /**
+   * Concatenated transport flags.
+   */
+  transports?: string | null
+  /**
+   * Device type of the authenticator.
+   */
+  credentialDeviceType: string
+}
+
+/** @internal */
+export interface InternalOptions<TProviderType = ProviderType> {
+  providers: InternalProvider[]
+  url: URL
+  action: AuthAction
+  provider: InternalProvider<TProviderType>
+  csrfToken?: string
+  /**
+   * `true` if the [Double-submit CSRF check](https://owasp.org/www-chapter-london/assets/slides/David_Johansson-Double_Defeat_of_Double-Submit_Cookie.pdf) was succesful
+   * or [`skipCSRFCheck`](https://authjs.dev/reference/core#skipcsrfcheck) was enabled.
+   */
+  csrfTokenVerified?: boolean
+  secret: string | string[]
+  theme: Theme
+  debug: boolean
+  logger: LoggerInstance
+  session: NonNullable<Required<AuthConfig["session"]>>
+  pages: Partial<PagesOptions>
+  jwt: JWTOptions
+  events: NonNullable<AuthConfig["events"]>
+  adapter: Required<Adapter> | undefined
+  callbacks: NonNullable<Required<AuthConfig["callbacks"]>>
+  cookies: Record<keyof CookiesOptions, CookieOption>
+  callbackUrl: string
+  /**
+   * If true, the OAuth callback is being proxied by the server to the original URL.
+   * See also {@link OAuthConfigInternal.redirectProxyUrl}.
+   */
+  isOnRedirectProxy: boolean
+  experimental: NonNullable<AuthConfig["experimental"]>
+  basePath: string
+}