@kubun/provider-google 0.15.0 → 0.17.0

package/lib/index.d.ts

@@ -1,7 +1,15 @@
-import type { OAuthProviderDefinition } from '@kubun/credential-types';
+import type { OAuthProviderDefinition } from '@kokuin/oauth';
+export declare const googleAuthorizationParams: Record<string, string>;
 type CreateGoogleProviderParams = {
+    mode: 'confidential';
     clientID: string;
     clientSecret: string;
+} | {
+    mode: 'native';
+    clientID: string;
+    clientSecret?: string;
+};
+export declare function createGoogleProvider(params: CreateGoogleProviderParams): OAuthProviderDefinition & {
+    authorizationParams?: Record<string, string>;
 };
-export declare function createGoogleProvider(params: CreateGoogleProviderParams): OAuthProviderDefinition;
 export {};

package/lib/index.js

@@ -1,11 +1,18 @@
+export const googleAuthorizationParams = {
+    // Offline access requests a refresh token (issuance stays provider-dependent);
+    // consent keeps that guarantee for repeat authorizations. select_account forces
+    // the account chooser, avoiding the multi-account authuser dead-end.
+    access_type: 'offline',
+    prompt: 'select_account consent'
+};
 export function createGoogleProvider(params) {
     if (!params.clientID) {
         throw new Error('Google provider requires a non-empty clientID');
     }
-    if (!params.clientSecret) {
-        throw new Error('Google provider requires a non-empty clientSecret');
+    if (params.mode === 'confidential' && !params.clientSecret) {
+        throw new Error('A confidential Google provider requires a non-empty clientSecret');
     }
-    return {
+    const base = {
         name: 'google',
         authorizationEndpoint: 'https://accounts.google.com/o/oauth2/v2/auth',
         tokenEndpoint: 'https://oauth2.googleapis.com/token',
@@ -14,7 +21,19 @@ export function createGoogleProvider(params) {
             'profile',
             'email'
         ],
+        authorizationParams: googleAuthorizationParams
+    };
+    return params.mode === 'confidential' ? {
+        ...base,
+        mode: 'confidential',
         clientID: params.clientID,
         clientSecret: params.clientSecret
+    } : {
+        ...base,
+        mode: 'native',
+        clientID: params.clientID,
+        ...params.clientSecret ? {
+            clientSecret: params.clientSecret
+        } : {}
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kubun/provider-google",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "keywords": [],
   "license": "see LICENSE.md",
   "sideEffects": false,
@@ -15,7 +15,7 @@
     "LICENSE.md"
   ],
   "dependencies": {
-    "@kubun/credential-types": "^0.15.0"
+    "@kokuin/oauth": "^0.1.0"
   },
   "publishConfig": {
     "access": "public"
@@ -23,8 +23,8 @@
   "scripts": {
     "build": "pnpm run build:clean && pnpm run build:js && pnpm run build:types",
     "build:clean": "del lib",
-    "build:js": "swc src -d ./lib --config-file ../../node_modules/@kigu/dev/swc.json --strip-leading-paths",
-    "build:types": "tsc --emitDeclarationOnly --skipLibCheck",
+    "build:js": "del 'lib/**/*.js' && swc src -d ./lib --config-file ../../node_modules/@kigu/dev/swc.json --strip-leading-paths",
+    "build:types": "del 'lib/**/*.d.ts' 'lib/**/*.d.ts.map' && tsc --emitDeclarationOnly --skipLibCheck",
     "build:types:ci": "tsc --emitDeclarationOnly --declarationMap false",
     "test": "pnpm run test:types && pnpm run test:unit",
     "test:types": "tsc --noEmit -p tsconfig.test.json",