@logto/nuxt 0.3.3 → 1.0.0

package/dist/module.d.mts

@@ -13,6 +13,14 @@ type LogtoModuleOptions = {
      * @see {@link CookieConfig.cookieKey} for the default value.
      */
     cookieName?: string;
+    /**
+     * Whether the Logto cookie should be secure.
+     *
+     * Set this to `true` if you are using https.
+     *
+     * @see {@link CookieConfig.isSecure}
+     */
+    cookieSecure?: boolean;
     /**
      * If Logto should fetch from the [userinfo endpoint](https://openid.net/specs/openid-connect-core-1_0.html#UserInfo)
      * in the server side for the `event.context.logtoUser` property (used by `useLogtoUser` composable).
@@ -68,6 +76,21 @@ type LogtoRuntimeConfig = LogtoModuleOptions & {
      * The secret used to encrypt the Logto cookie. It should be a random string.
      */
     cookieEncryptionKey: string;
+    /**
+     * Custom base URL for redirects
+     *
+     * This URL is used as the base for generating redirect and callback URLs.
+     * It's particularly useful in environments where the application is behind
+     * a proxy or where URLs are rewritten.
+     *
+     * If set, this value will be used instead of the automatically detected URL.
+     * If not set, the system will use the URL obtained from `getRequestURL`.
+     *
+     * Example: 'https://your-public-facing-domain.com'
+     *
+     * Note: Provide only the base URL without paths or query parameters.
+     */
+    customRedirectBaseUrl: string;
 } & Omit<LogtoConfig, 'appSecret'> & Required<Pick<LogtoConfig, 'appSecret'>>;
 type LogtoRuntimeConfigInput = DeepPartial<LogtoRuntimeConfig>;
 
@@ -82,6 +105,7 @@ declare const defaults: Readonly<{
     readonly appId: "<replace-with-logto-app-id>";
     readonly appSecret: "<replace-with-logto-app-secret>";
     readonly cookieEncryptionKey: "<replace-with-random-string>";
+    readonly customRedirectBaseUrl: "<replace-with-custom-redirect-base-url>";
 }>;
 
 declare const logtoModule: NuxtModule<LogtoRuntimeConfigInput>;

package/dist/module.d.ts

@@ -13,6 +13,14 @@ type LogtoModuleOptions = {
      * @see {@link CookieConfig.cookieKey} for the default value.
      */
     cookieName?: string;
+    /**
+     * Whether the Logto cookie should be secure.
+     *
+     * Set this to `true` if you are using https.
+     *
+     * @see {@link CookieConfig.isSecure}
+     */
+    cookieSecure?: boolean;
     /**
      * If Logto should fetch from the [userinfo endpoint](https://openid.net/specs/openid-connect-core-1_0.html#UserInfo)
      * in the server side for the `event.context.logtoUser` property (used by `useLogtoUser` composable).
@@ -68,6 +76,21 @@ type LogtoRuntimeConfig = LogtoModuleOptions & {
      * The secret used to encrypt the Logto cookie. It should be a random string.
      */
     cookieEncryptionKey: string;
+    /**
+     * Custom base URL for redirects
+     *
+     * This URL is used as the base for generating redirect and callback URLs.
+     * It's particularly useful in environments where the application is behind
+     * a proxy or where URLs are rewritten.
+     *
+     * If set, this value will be used instead of the automatically detected URL.
+     * If not set, the system will use the URL obtained from `getRequestURL`.
+     *
+     * Example: 'https://your-public-facing-domain.com'
+     *
+     * Note: Provide only the base URL without paths or query parameters.
+     */
+    customRedirectBaseUrl: string;
 } & Omit<LogtoConfig, 'appSecret'> & Required<Pick<LogtoConfig, 'appSecret'>>;
 type LogtoRuntimeConfigInput = DeepPartial<LogtoRuntimeConfig>;
 
@@ -82,6 +105,7 @@ declare const defaults: Readonly<{
     readonly appId: "<replace-with-logto-app-id>";
     readonly appSecret: "<replace-with-logto-app-secret>";
     readonly cookieEncryptionKey: "<replace-with-random-string>";
+    readonly customRedirectBaseUrl: "<replace-with-custom-redirect-base-url>";
 }>;
 
 declare const logtoModule: NuxtModule<LogtoRuntimeConfigInput>;

package/dist/module.json

@@ -1,5 +1,5 @@
 {
   "name": "@logto/nuxt",
   "configKey": "logto",
-  "version": "0.3.3"
+  "version": "1.0.0"
 }

package/dist/module.mjs

@@ -11,7 +11,8 @@ const defaults = Object.freeze({
   endpoint: "<replace-with-logto-endpoint>",
   appId: "<replace-with-logto-app-id>",
   appSecret: "<replace-with-logto-app-secret>",
-  cookieEncryptionKey: "<replace-with-random-string>"
+  cookieEncryptionKey: "<replace-with-random-string>",
+  customRedirectBaseUrl: "<replace-with-custom-redirect-base-url>"
 });
 
 const logtoModule = defineNuxtModule({

package/dist/runtime/server/event-handler.mjs

@@ -9,10 +9,12 @@ export default defineEventHandler(async (event) => {
   const {
     cookieName,
     cookieEncryptionKey,
+    cookieSecure,
     fetchUserInfo,
     pathnames,
     postCallbackRedirectUri,
     postLogoutRedirectUri,
+    customRedirectBaseUrl,
     ...clientConfig
   } = logtoConfig;
   const defaultValueKeys = Object.entries(defaults).filter(([key, value]) => logtoConfig[key] === value).map(([key]) => key);
@@ -23,18 +25,17 @@ export default defineEventHandler(async (event) => {
       )}. Please replace them with your own values.`
     );
   }
-  const url = getRequestURL(event);
-  const storage = new CookieStorage(
-    {
-      cookieKey: cookieName,
-      encryptionKey: cookieEncryptionKey,
-      getCookie: (name) => getCookie(event, name),
-      setCookie: (name, value, options) => {
-        setCookie(event, name, value, options);
-      }
-    },
-    { headers: event.headers, url: url.href }
-  );
+  const requestUrl = getRequestURL(event);
+  const url = customRedirectBaseUrl ? new URL(requestUrl.pathname + requestUrl.search + requestUrl.hash, customRedirectBaseUrl) : requestUrl;
+  const storage = new CookieStorage({
+    cookieKey: cookieName,
+    encryptionKey: cookieEncryptionKey,
+    isSecure: cookieSecure,
+    getCookie: (name) => getCookie(event, name),
+    setCookie: (name, value, options) => {
+      setCookie(event, name, value, options);
+    }
+  });
   await storage.init();
   const logto = new LogtoClient(clientConfig, {
     navigate: async (url2) => {

package/dist/runtime/utils/constants.d.ts

@@ -9,4 +9,5 @@ export declare const defaults: Readonly<{
     readonly appId: "<replace-with-logto-app-id>";
     readonly appSecret: "<replace-with-logto-app-secret>";
     readonly cookieEncryptionKey: "<replace-with-random-string>";
+    readonly customRedirectBaseUrl: "<replace-with-custom-redirect-base-url>";
 }>;

package/dist/runtime/utils/constants.mjs

@@ -6,5 +6,6 @@ export const defaults = Object.freeze({
   endpoint: "<replace-with-logto-endpoint>",
   appId: "<replace-with-logto-app-id>",
   appSecret: "<replace-with-logto-app-secret>",
-  cookieEncryptionKey: "<replace-with-random-string>"
+  cookieEncryptionKey: "<replace-with-random-string>",
+  customRedirectBaseUrl: "<replace-with-custom-redirect-base-url>"
 });

package/dist/runtime/utils/types.d.ts

@@ -9,6 +9,14 @@ type LogtoModuleOptions = {
      * @see {@link CookieConfig.cookieKey} for the default value.
      */
     cookieName?: string;
+    /**
+     * Whether the Logto cookie should be secure.
+     *
+     * Set this to `true` if you are using https.
+     *
+     * @see {@link CookieConfig.isSecure}
+     */
+    cookieSecure?: boolean;
     /**
      * If Logto should fetch from the [userinfo endpoint](https://openid.net/specs/openid-connect-core-1_0.html#UserInfo)
      * in the server side for the `event.context.logtoUser` property (used by `useLogtoUser` composable).
@@ -64,6 +72,21 @@ export type LogtoRuntimeConfig = LogtoModuleOptions & {
      * The secret used to encrypt the Logto cookie. It should be a random string.
      */
     cookieEncryptionKey: string;
+    /**
+     * Custom base URL for redirects
+     *
+     * This URL is used as the base for generating redirect and callback URLs.
+     * It's particularly useful in environments where the application is behind
+     * a proxy or where URLs are rewritten.
+     *
+     * If set, this value will be used instead of the automatically detected URL.
+     * If not set, the system will use the URL obtained from `getRequestURL`.
+     *
+     * Example: 'https://your-public-facing-domain.com'
+     *
+     * Note: Provide only the base URL without paths or query parameters.
+     */
+    customRedirectBaseUrl: string;
 } & Omit<LogtoConfig, 'appSecret'> & Required<Pick<LogtoConfig, 'appSecret'>>;
 export type LogtoRuntimeConfigInput = DeepPartial<LogtoRuntimeConfig>;
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/nuxt",
-  "version": "0.3.3",
+  "version": "1.0.0",
   "type": "module",
   "exports": {
     ".": {
@@ -45,7 +45,7 @@
     "@nuxt/kit": "^3.10.2",
     "@silverhand/essentials": "^2.8.7",
     "defu": "^6.1.4",
-    "@logto/node": "^2.5.5"
+    "@logto/node": "^2.5.7"
   },
   "scripts": {
     "precommit": "lint-staged",