@korajs/cli 0.4.0 → 0.5.0

package/templates/react-basic/vite.config.ts

@@ -1,5 +1,5 @@
-import { existsSync, readdirSync, copyFileSync } from 'node:fs'
-import { resolve, join } from 'node:path'
+import { copyFileSync, existsSync, readdirSync } from 'node:fs'
+import { join, resolve } from 'node:path'
 import react from '@vitejs/plugin-react'
 import type { Plugin } from 'vite'
 import { defineConfig } from 'vite'
@@ -10,23 +10,23 @@ import { defineConfig } from 'vite'
  * cannot be used and SQLite WASM falls back to in-memory storage (no persistence).
  */
 function crossOriginIsolation(): Plugin {
-  return {
-    name: 'cross-origin-isolation',
-    configureServer(server) {
-      server.middlewares.use((_req, res, next) => {
-        res.setHeader('Cross-Origin-Opener-Policy', 'same-origin')
-        res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')
-        next()
-      })
-    },
-    configurePreviewServer(server) {
-      server.middlewares.use((_req, res, next) => {
-        res.setHeader('Cross-Origin-Opener-Policy', 'same-origin')
-        res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')
-        next()
-      })
-    },
-  }
+	return {
+		name: 'cross-origin-isolation',
+		configureServer(server) {
+			server.middlewares.use((_req, res, next) => {
+				res.setHeader('Cross-Origin-Opener-Policy', 'same-origin')
+				res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')
+				next()
+			})
+		},
+		configurePreviewServer(server) {
+			server.middlewares.use((_req, res, next) => {
+				res.setHeader('Cross-Origin-Opener-Policy', 'same-origin')
+				res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')
+				next()
+			})
+		},
+	}
 }
 
 /**
@@ -36,40 +36,47 @@ function crossOriginIsolation(): Plugin {
  *    sqlite3 loads it dynamically) so the full OPFS VFS can initialize without errors
  */
 function sqliteWasmHotfix(): Plugin {
-  return {
-    name: 'sqlite-wasm-hotfix',
-    apply: 'build',
-    closeBundle() {
-      const assetsDir = resolve('dist', 'assets')
-      if (!existsSync(assetsDir)) return
+	return {
+		name: 'sqlite-wasm-hotfix',
+		apply: 'build',
+		closeBundle() {
+			const assetsDir = resolve('dist', 'assets')
+			if (!existsSync(assetsDir)) return
 
-      // Copy hashed sqlite3.wasm to unhashed name
-      for (const file of readdirSync(assetsDir)) {
-        if (/^sqlite3-.+\.wasm$/.test(file)) {
-          copyFileSync(join(assetsDir, file), join(assetsDir, 'sqlite3.wasm'))
-          break
-        }
-      }
+			// Copy hashed sqlite3.wasm to unhashed name
+			for (const file of readdirSync(assetsDir)) {
+				if (/^sqlite3-.+\.wasm$/.test(file)) {
+					copyFileSync(join(assetsDir, file), join(assetsDir, 'sqlite3.wasm'))
+					break
+				}
+			}
 
-      // Copy OPFS async proxy worker (dynamically loaded by sqlite3, not detected by Vite)
-      const proxyFile = resolve('node_modules', '@sqlite.org', 'sqlite-wasm', 'sqlite-wasm', 'jswasm', 'sqlite3-opfs-async-proxy.js')
-      if (existsSync(proxyFile)) {
-        copyFileSync(proxyFile, join(assetsDir, 'sqlite3-opfs-async-proxy.js'))
-      }
-    },
-  }
+			// Copy OPFS async proxy worker (dynamically loaded by sqlite3, not detected by Vite)
+			const proxyFile = resolve(
+				'node_modules',
+				'@sqlite.org',
+				'sqlite-wasm',
+				'sqlite-wasm',
+				'jswasm',
+				'sqlite3-opfs-async-proxy.js',
+			)
+			if (existsSync(proxyFile)) {
+				copyFileSync(proxyFile, join(assetsDir, 'sqlite3-opfs-async-proxy.js'))
+			}
+		},
+	}
 }
 
 export default defineConfig({
-  plugins: [react(), crossOriginIsolation(), sqliteWasmHotfix()],
-  worker: {
-    format: 'es',
-  },
-  optimizeDeps: {
-    exclude: ['@sqlite.org/sqlite-wasm', '@korajs/store'],
-    include: ['yjs'],
-  },
-  resolve: {
-    dedupe: ['yjs'],
-  },
+	plugins: [react(), crossOriginIsolation(), sqliteWasmHotfix()],
+	worker: {
+		format: 'es',
+	},
+	optimizeDeps: {
+		exclude: ['@sqlite.org/sqlite-wasm', '@korajs/store'],
+		include: ['yjs'],
+	},
+	resolve: {
+		dedupe: ['yjs'],
+	},
 })

package/templates/react-sync/.env.example

@@ -4,3 +4,22 @@ VITE_SYNC_URL=ws://localhost:3001
 
 # Sync server port
 PORT=3001
+
+# Server database
+# Leave DATABASE_URL empty to use SQLite at KORA_SERVER_DB.
+KORA_SERVER_DB=./kora-server.db
+DATABASE_URL=
+
+# Operational endpoints (/__kora, /__kora/status, /__kora/events, /__kora/metrics, backups)
+# Set these in production. Use Authorization: Bearer <token> when calling protected endpoints.
+KORA_ADMIN_TOKEN=
+KORA_METRICS_TOKEN=
+KORA_BACKUP_TOKEN=
+
+# Optional sync path
+KORA_SYNC_PATH=/kora-sync
+
+# Auth
+# Set this to enable built-in /auth/* routes and authenticated sync.
+# Generate with: node -e "console.log(require('node:crypto').randomBytes(32).toString('hex'))"
+KORA_AUTH_SECRET=

package/templates/react-sync/README.md.hbs

@@ -17,21 +17,63 @@ This starts both the Vite dev server and the Kora sync server.
 
 ```
 src/
-  schema.ts        # Data schema definition
+  schema.ts        # Schema entry point
+  auth.ts          # Auth client and OAuth callback handling
   main.tsx         # App initialization and Kora setup
   App.tsx          # Main application component
+  modules/
+    todos/
+      todo.schema.ts     # Todo collection definition
+      todo.queries.ts    # Reusable todo query builders
+      todo.mutations.ts  # Todo mutation helpers
+      useTodos.ts        # React hook connecting todos to the UI
   kora-worker.ts   # SQLite WASM web worker
   index.css        # Styles
 server.ts          # Kora sync server
 kora.config.ts     # Kora configuration
 ```
 
+In a feature module, `schema` defines data shape, `queries` contain reads only, `mutations` contain
+writes, and `useTodos.ts` is the React binding that exposes todo data and actions to components.
+
 ## Environment Variables
 
 | Variable | Default | Description |
 |----------|---------|-------------|
 | `VITE_SYNC_URL` | `ws://localhost:3001` | WebSocket URL for the sync server |
+| `VITE_AUTH_URL` | current origin | HTTP URL for `/auth/*` routes |
 | `PORT` | `3001` | Sync server port |
+| `KORA_SERVER_DB` | `./kora-server.db` | SQLite file used by the sync server when `DATABASE_URL` is empty |
+| `KORA_AUTH_DB` | `./kora-auth.db` | SQLite file used by OAuth state and linked identities when `DATABASE_URL` is empty |
+| `DATABASE_URL` | (none) | PostgreSQL connection string for production sync server deployments |
+| `KORA_SYNC_PATH` | `/kora-sync` | WebSocket path exposed by the sync server |
+| `KORA_AUTH_SECRET` | (none) | Enables built-in `/auth/*` routes and authenticated sync when set |
+| `KORA_GOOGLE_CLIENT_ID` | (none) | Enables Google OAuth when set with `KORA_GOOGLE_REDIRECT_URI` |
+| `KORA_GOOGLE_CLIENT_SECRET` | (none) | Google OAuth client secret for confidential web clients |
+| `KORA_GOOGLE_REDIRECT_URI` | (none) | OAuth callback URL, usually your app URL that handles `code` and `state` |
+| `KORA_OAUTH_PKCE` | `true` when no client secret | Enables PKCE for public desktop/mobile OAuth clients |
+| `KORA_ADMIN_TOKEN` | (none) | Protects `/__kora`, `/__kora/status`, and `/__kora/events` |
+| `KORA_METRICS_TOKEN` | (none) | Protects `/__kora/metrics` |
+| `KORA_BACKUP_TOKEN` | (none) | Protects server backup and restore endpoints |
+
+## Authentication
+
+Set `KORA_AUTH_SECRET` to enable built-in auth on the sync server. Generate a secret with:
+
+```bash
+node -e "console.log(require('node:crypto').randomBytes(32).toString('hex'))"
+```
+
+The template already creates `src/auth.ts`, wraps the app in `AuthProvider`, and wires sync with `createKoraAuthSync({ authClient, schema })`. To enable Google OAuth, set:
+
+```bash
+KORA_AUTH_SECRET=...
+KORA_GOOGLE_CLIENT_ID=...
+KORA_GOOGLE_CLIENT_SECRET=...
+KORA_GOOGLE_REDIRECT_URI=http://localhost:5173
+```
+
+Use `authClient.signInWithOAuth('google')` for web redirect sign-in, or `authClient.getOAuthAuthorizationUrl('google')` plus `authClient.completeOAuthSignIn('google', { code, state })` for custom handoff flows. See the [Authentication Guide](https://ehoneahobed.github.io/kora/guide/authentication).
 
 ## Scripts
 

package/templates/react-sync/package.json.hbs

@@ -12,6 +12,7 @@
   },
   "dependencies": {
     "korajs": "{{koraVersion}}",
+    "@korajs/auth": "{{koraVersion}}",
     "@korajs/react": "{{koraVersion}}",
     "@korajs/store": "{{koraVersion}}",
     "@sqlite.org/sqlite-wasm": ">=3.51.0-build1",
@@ -34,6 +35,8 @@
     "@types/react-dom": "^19.0.0",
     "@types/ws": "^8.5.0",
     "@vitejs/plugin-react": "^4.3.0",
+    "better-sqlite3": "^12.9.0",
+    "postgres": "^3.4.0",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0",
     "vite": "^6.0.0"

package/templates/react-sync/server.ts

@@ -1,26 +1,90 @@
-import { createProductionServer, createSqliteServerStore } from '@korajs/server'
-
-// SQLite persists data to disk — survives server restarts
-const store = createSqliteServerStore({ filename: './kora-server.db' })
-
-// To use PostgreSQL instead:
-// 1. Install: pnpm add postgres
-// 2. Replace the store above with:
-//
-// import { createPostgresServerStore } from '@korajs/server'
-// const store = await createPostgresServerStore({
-//   connectionString: 'postgresql://user:password@localhost:5432/mydb',
-// })
-
-// Production server: serves static files + WebSocket sync on a single port.
-// One port means one tunnel (ngrok, cloudflared) handles everything.
-const server = createProductionServer({
-  store,
-  port: Number(process.env.PORT) || 3001,
-  staticDir: './dist',
-  syncPath: '/kora-sync',
-})
-
-server.start().then((url) => {
-  console.log(`Kora app running at ${url}`)
-})
+import {
+	type CreateKoraAuthServerOptions,
+	createKoraAuthServer,
+	createPostgresOAuthStores,
+	createSqliteOAuthStores,
+	googleProvider,
+} from '@korajs/auth/server'
+import {
+	createPostgresServerStore,
+	createProductionServer,
+	createSqliteServerStore,
+} from '@korajs/server'
+import schema from './src/schema'
+
+async function createStore() {
+	if (process.env.DATABASE_URL) {
+		return createPostgresServerStore({
+			connectionString: process.env.DATABASE_URL,
+		})
+	}
+
+	return createSqliteServerStore({
+		filename: process.env.KORA_SERVER_DB || './kora-server.db',
+	})
+}
+
+async function start() {
+	const store = await createStore()
+	await store.setSchema(schema)
+
+	const syncPath = process.env.KORA_SYNC_PATH || '/kora-sync'
+	const auth = await createAuth()
+	const server = createProductionServer({
+		store,
+		port: Number(process.env.PORT) || 3001,
+		staticDir: './dist',
+		syncPath,
+		httpRoutes: auth ? [{ path: '/auth', handle: auth.handleRequest }] : undefined,
+		syncOptions: auth ? { auth: auth.auth } : undefined,
+		operationalAuth: {
+			adminToken: process.env.KORA_ADMIN_TOKEN,
+			metricsToken: process.env.KORA_METRICS_TOKEN,
+			backupToken: process.env.KORA_BACKUP_TOKEN,
+		},
+	})
+
+	const url = await server.start()
+	console.log(`Kora app running at ${url}`)
+	console.log(`  Sync endpoint: ${url.replace('http', 'ws')}${syncPath}`)
+	if (auth) console.log(`  Auth endpoint: ${url}/auth`)
+}
+
+void start()
+
+async function createAuth() {
+	if (!process.env.KORA_AUTH_SECRET) {
+		return null
+	}
+
+	const oauth = await createOAuthConfig()
+	return createKoraAuthServer({
+		jwtSecret: process.env.KORA_AUTH_SECRET,
+		...(oauth ? { oauth } : {}),
+	})
+}
+
+async function createOAuthConfig(): Promise<CreateKoraAuthServerOptions['oauth'] | undefined> {
+	if (!process.env.KORA_GOOGLE_CLIENT_ID || !process.env.KORA_GOOGLE_REDIRECT_URI) {
+		return undefined
+	}
+
+	const oauthStores = process.env.DATABASE_URL
+		? await createPostgresOAuthStores({ connectionString: process.env.DATABASE_URL })
+		: await createSqliteOAuthStores({
+				filename: process.env.KORA_AUTH_DB || './kora-auth.db',
+			})
+
+	return {
+		providers: [
+			googleProvider({
+				clientId: process.env.KORA_GOOGLE_CLIENT_ID,
+				clientSecret: process.env.KORA_GOOGLE_CLIENT_SECRET,
+				redirectUri: process.env.KORA_GOOGLE_REDIRECT_URI,
+				pkce: process.env.KORA_OAUTH_PKCE === 'true' || !process.env.KORA_GOOGLE_CLIENT_SECRET,
+			}),
+		],
+		stateStore: oauthStores.stateStore,
+		linkedIdentityStore: oauthStores.linkedIdentityStore,
+	}
+}

package/templates/react-sync/src/App.tsx

@@ -1,150 +1,152 @@
+import { useAuth } from '@korajs/auth/react'
+import { useSyncStatus } from '@korajs/react'
 import { useState } from 'react'
-import { useQuery, useMutation, useSyncStatus, useCollection } from '@korajs/react'
+import { useTodos } from './modules/todos/useTodos'
 
 type Filter = 'all' | 'active' | 'completed'
 
 export function App() {
-  const todos = useCollection('todos')
-  const allTodos = useQuery(todos.where({}).orderBy('createdAt', 'desc'))
-  const { mutate: addTodo } = useMutation(
-    (data: { title: string }) => todos.insert(data)
-  )
-  const { mutate: toggleTodo } = useMutation(
-    (id: string, data: { completed: boolean }) => todos.update(id, data)
-  )
-  const { mutate: deleteTodo } = useMutation(
-    (id: string) => todos.delete(id)
-  )
-  const status = useSyncStatus()
+	const { allTodos, activeTodos, completedTodos, addTodo, toggleTodo, deleteTodo } = useTodos()
+	const status = useSyncStatus()
+	const { user, isAuthenticated, signInWithOAuth, signOut, error } = useAuth()
 
-  const [filter, setFilter] = useState<Filter>('all')
-  const [input, setInput] = useState('')
+	const [filter, setFilter] = useState<Filter>('all')
+	const [input, setInput] = useState('')
 
-  const activeTodos = allTodos.filter((t) => !t.completed)
-  const completedTodos = allTodos.filter((t) => !!t.completed)
-  const filteredTodos =
-    filter === 'active' ? activeTodos : filter === 'completed' ? completedTodos : allTodos
+	const filteredTodos =
+		filter === 'active' ? activeTodos : filter === 'completed' ? completedTodos : allTodos
 
-  const handleSubmit = (e: React.FormEvent) => {
-    e.preventDefault()
-    const title = input.trim()
-    if (title) {
-      addTodo({ title })
-      setInput('')
-    }
-  }
+	const handleSubmit = (e: React.FormEvent) => {
+		e.preventDefault()
+		const title = input.trim()
+		if (title) {
+			addTodo.mutate({ title })
+			setInput('')
+		}
+	}
 
-  const clearCompleted = () => {
-    for (const todo of completedTodos) {
-      deleteTodo(todo.id)
-    }
-  }
+	const clearCompleted = () => {
+		for (const todo of completedTodos) {
+			deleteTodo.mutate(todo.id)
+		}
+	}
 
-  return (
-    <div className="app">
-      <div className="header">
-        <h1>My Tasks</h1>
-        <div className="sync-badge">
-          <span className={`sync-dot ${status.status}`} />
-          <span>{status.status}</span>
-        </div>
-      </div>
+	return (
+		<div className="app">
+			<div className="header">
+				<h1>My Tasks</h1>
+				<div className="header-actions">
+					<div className="sync-badge">
+						<span className={`sync-dot ${status.status}`} />
+						<span>{status.status}</span>
+					</div>
+					{isAuthenticated ? (
+						<button type="button" className="auth-button" onClick={() => signOut()}>
+							{user?.email || 'Sign out'}
+						</button>
+					) : (
+						<button type="button" className="auth-button" onClick={() => signInWithOAuth('google')}>
+							Sign in
+						</button>
+					)}
+				</div>
+			</div>
 
-      <div className="stats">
-        <div className="stat-card">
-          <div className="label">Total</div>
-          <div className="value muted">{allTodos.length}</div>
-        </div>
-        <div className="stat-card">
-          <div className="label">Remaining</div>
-          <div className="value warning">{activeTodos.length}</div>
-        </div>
-        <div className="stat-card">
-          <div className="label">Done</div>
-          <div className="value success">{completedTodos.length}</div>
-        </div>
-      </div>
+			{error && <div className="auth-error">{error}</div>}
 
-      <form className="add-form" onSubmit={handleSubmit}>
-        <input
-          type="text"
-          value={input}
-          onChange={(e) => setInput(e.target.value)}
-          placeholder="What needs to be done?"
-        />
-        <button type="submit" disabled={!input.trim()}>
-          Add
-        </button>
-      </form>
+			<div className="stats">
+				<div className="stat-card">
+					<div className="label">Total</div>
+					<div className="value muted">{allTodos.length}</div>
+				</div>
+				<div className="stat-card">
+					<div className="label">Remaining</div>
+					<div className="value warning">{activeTodos.length}</div>
+				</div>
+				<div className="stat-card">
+					<div className="label">Done</div>
+					<div className="value success">{completedTodos.length}</div>
+				</div>
+			</div>
 
-      <div className="filters">
-        {(['all', 'active', 'completed'] as const).map((f) => {
-          const count = f === 'all' ? allTodos.length : f === 'active' ? activeTodos.length : completedTodos.length
-          return (
-            <button
-              key={f}
-              className={`filter-btn ${filter === f ? 'active' : ''}`}
-              onClick={() => setFilter(f)}
-            >
-              {f.charAt(0).toUpperCase() + f.slice(1)}
-              <span className="badge">{count}</span>
-            </button>
-          )
-        })}
-      </div>
+			<form className="add-form" onSubmit={handleSubmit}>
+				<input
+					type="text"
+					value={input}
+					onChange={(e) => setInput(e.target.value)}
+					placeholder="What needs to be done?"
+				/>
+				<button type="submit" disabled={!input.trim()}>
+					Add
+				</button>
+			</form>
 
-      <div className="todo-list">
-        {filteredTodos.length === 0 ? (
-          <div className="empty-state">
-            {filter === 'all' && 'No tasks yet. Add one above!'}
-            {filter === 'active' && 'All caught up! No active tasks.'}
-            {filter === 'completed' && 'No completed tasks yet.'}
-          </div>
-        ) : (
-          filteredTodos.map((todo) => (
-            <div key={todo.id} className="todo-item">
-              <button
-                className={`toggle ${todo.completed ? 'checked' : ''}`}
-                onClick={() => toggleTodo(todo.id, { completed: !todo.completed })}
-              >
-                {todo.completed ? '\u2713' : ''}
-              </button>
-              <span className={`title ${todo.completed ? 'done' : ''}`}>
-                {String(todo.title)}
-              </span>
-              {todo.createdAt && (
-                <span className="time">{formatTime(Number(todo.createdAt))}</span>
-              )}
-              <button
-                className="delete-btn"
-                onClick={() => deleteTodo(todo.id)}
-              >
-                \u00d7
-              </button>
-            </div>
-          ))
-        )}
-      </div>
+			<div className="filters">
+				{(['all', 'active', 'completed'] as const).map((f) => {
+					const count =
+						f === 'all'
+							? allTodos.length
+							: f === 'active'
+								? activeTodos.length
+								: completedTodos.length
+					return (
+						<button
+							key={f}
+							className={`filter-btn ${filter === f ? 'active' : ''}`}
+							onClick={() => setFilter(f)}
+						>
+							{f.charAt(0).toUpperCase() + f.slice(1)}
+							<span className="badge">{count}</span>
+						</button>
+					)
+				})}
+			</div>
 
-      {allTodos.length > 0 && (
-        <div className="footer">
-          <span>{activeTodos.length} item{activeTodos.length !== 1 ? 's' : ''} left</span>
-          {completedTodos.length > 0 && (
-            <button onClick={clearCompleted}>Clear completed</button>
-          )}
-        </div>
-      )}
+			<div className="todo-list">
+				{filteredTodos.length === 0 ? (
+					<div className="empty-state">
+						{filter === 'all' && 'No tasks yet. Add one above!'}
+						{filter === 'active' && 'All caught up! No active tasks.'}
+						{filter === 'completed' && 'No completed tasks yet.'}
+					</div>
+				) : (
+					filteredTodos.map((todo) => (
+						<div key={todo.id} className="todo-item">
+							<button
+								className={`toggle ${todo.completed ? 'checked' : ''}`}
+								onClick={() => toggleTodo.mutate(todo.id, { completed: !todo.completed })}
+							>
+								{todo.completed ? '\u2713' : ''}
+							</button>
+							<span className={`title ${todo.completed ? 'done' : ''}`}>{String(todo.title)}</span>
+							{todo.createdAt && <span className="time">{formatTime(Number(todo.createdAt))}</span>}
+							<button className="delete-btn" onClick={() => deleteTodo.mutate(todo.id)}>
+								\u00d7
+							</button>
+						</div>
+					))
+				)}
+			</div>
 
-      <p className="branding">Powered by Kora &mdash; offline-first, real-time sync</p>
-    </div>
-  )
+			{allTodos.length > 0 && (
+				<div className="footer">
+					<span>
+						{activeTodos.length} item{activeTodos.length !== 1 ? 's' : ''} left
+					</span>
+					{completedTodos.length > 0 && <button onClick={clearCompleted}>Clear completed</button>}
+				</div>
+			)}
+
+			<p className="branding">Powered by Kora &mdash; offline-first, real-time sync</p>
+		</div>
+	)
 }
 
 function formatTime(timestamp: number): string {
-  const date = new Date(timestamp)
-  const now = new Date()
-  if (date.toDateString() === now.toDateString()) {
-    return date.toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' })
-  }
-  return date.toLocaleDateString([], { month: 'short', day: 'numeric' })
+	const date = new Date(timestamp)
+	const now = new Date()
+	if (date.toDateString() === now.toDateString()) {
+		return date.toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' })
+	}
+	return date.toLocaleDateString([], { month: 'short', day: 'numeric' })
 }

package/templates/react-sync/src/auth.ts

@@ -0,0 +1,25 @@
+import { createKoraAuth } from '@korajs/auth'
+
+export const authServerUrl =
+	import.meta.env.VITE_AUTH_URL || `${window.location.protocol}//${window.location.host}`
+
+export const authClient = createKoraAuth({
+	serverUrl: authServerUrl,
+})
+
+export async function completeOAuthCallbackFromLocation(): Promise<void> {
+	const url = new URL(window.location.href)
+	const code = url.searchParams.get('code')
+	const state = url.searchParams.get('state')
+	const provider = url.searchParams.get('provider') || 'google'
+
+	if (!code || !state) {
+		return
+	}
+
+	await authClient.completeOAuthSignIn(provider, { code, state })
+	url.searchParams.delete('code')
+	url.searchParams.delete('state')
+	url.searchParams.delete('provider')
+	window.history.replaceState({}, document.title, `${url.pathname}${url.search}${url.hash}`)
+}