@lowdefy/api 4.0.0-rc.8 → 4.0.0

package/dist/context/createApiContext.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -14,22 +14,9 @@
   limitations under the License.
 */ import createAuthorize from './createAuthorize.js';
 import createReadConfigFile from './createReadConfigFile.js';
-function createApiContext({ buildDirectory , config , connections , fileCache , logger , operators , secrets , session  }) {
-    const readConfigFile = createReadConfigFile({
-        buildDirectory,
-        fileCache
-    });
-    return {
-        authorize: createAuthorize({
-            session
-        }),
-        config,
-        connections,
-        logger,
-        operators,
-        readConfigFile,
-        secrets,
-        user: session?.user
-    };
+function createApiContext(context) {
+    context.readConfigFile = createReadConfigFile(context);
+    context.authorize = createAuthorize(context);
+    context.user = context?.session?.user;
 }
 export default createApiContext;

package/dist/context/createAuthorize.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -12,13 +12,13 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-*/ import { ServerError } from '../context/errors.js';
-function createAuthorize({ session  }) {
+*/ import { ServerError } from './errors.js';
+function createAuthorize({ session }) {
     // Next-auth getSession provides a session object if the user is authenticated
     // else session will be null
     const authenticated = !!session;
     const roles = session?.user?.roles ?? [];
-    function authorize({ auth  }) {
+    function authorize({ auth }) {
         if (auth.public === true) return true;
         if (auth.public === false) {
             if (auth.roles) {

package/dist/context/createReadConfigFile.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -15,7 +15,7 @@
 */ import path from 'path';
 import { cachedPromises } from '@lowdefy/helpers';
 import { getFileExtension, readFile } from '@lowdefy/node-utils';
-function createReadConfigFile({ buildDirectory , fileCache  }) {
+function createReadConfigFile({ buildDirectory, fileCache }) {
     async function readConfigFile(filePath) {
         const fileContent = await readFile(path.resolve(buildDirectory, filePath));
         if (getFileExtension(filePath) === 'json') {

package/dist/context/errors.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.

package/dist/index.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.

package/dist/routes/auth/callbacks/addUserFieldsToSession.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -12,15 +12,16 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-*/ function addUserFieldsToSession(context, { session , token , authConfig , user  }) {
+*/ import { get, set } from '@lowdefy/helpers';
+function addUserFieldsToSession({ session, token, authConfig, user }) {
     if (token) {
         Object.keys(authConfig.userFields).forEach((fieldName)=>{
-            session.user[fieldName] = token[fieldName];
+            set(session.user, fieldName, get(token, fieldName));
         });
     }
     if (user) {
         Object.keys(authConfig.userFields).forEach((fieldName)=>{
-            session.user[fieldName] = user[fieldName];
+            set(session.user, fieldName, get(user, fieldName));
         });
     }
 }

package/dist/routes/auth/callbacks/addUserFieldsToToken.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -12,25 +12,19 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-*/ import { get } from '@lowdefy/helpers';
-function addUserFieldsToToken(context, { account , authConfig , profile , token , user  }) {
-    // const { debug } = context.logger;
+*/ import { get, set } from '@lowdefy/helpers';
+function addUserFieldsToToken({ account, authConfig, logger, profile, token, user }) {
     const objects = {
         account,
         profile,
         user
     };
-    // TODO: Add when debug is fixed.
-    // debug('Adding userFields to user. Available provider data is:');
-    // debug(objects);
+    logger.debug('Adding userFields to user. Available provider data is:');
+    logger.debug(objects);
     Object.entries(authConfig.userFields).forEach(([lowdefyFieldName, providerFieldName])=>{
         const value = get(objects, providerFieldName);
-        // debug(
-        //   `Adding provider field "${providerFieldName}" with value ${JSON.stringify(
-        //     value
-        //   )} as "${lowdefyFieldName}"`
-        // );
-        token[lowdefyFieldName] = value;
+        logger.debug(`Adding provider field "${providerFieldName}" with value ${JSON.stringify(value)} as "${lowdefyFieldName}"`);
+        set(token, lowdefyFieldName, value);
     });
 }
 export default addUserFieldsToToken;

package/dist/routes/auth/callbacks/createCallbackPlugins.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -12,7 +12,7 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-*/ function createCallbackPlugins({ authConfig , plugins , type  }) {
+*/ function createCallbackPlugins({ authConfig, plugins, type }) {
     return authConfig.callbacks.map((callbackConfig)=>({
             fn: plugins.callbacks[callbackConfig.type],
             properties: callbackConfig.properties

package/dist/routes/auth/callbacks/createCallbacks.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -16,24 +16,27 @@
 import createRedirectCallback from './createRedirectCallback.js';
 import createSessionCallback from './createSessionCallback.js';
 import createSignInCallback from './createSignInCallback.js';
-function createCallbacks(context, { authConfig , plugins  }) {
+function createCallbacks({ authConfig, logger, plugins }) {
     const callbacks = {
-        session: createSessionCallback(context, {
+        session: createSessionCallback({
             authConfig,
+            logger,
             plugins
         })
     };
-    const jwt = createJWTCallback(context, {
+    const jwt = createJWTCallback({
         authConfig,
+        logger,
         plugins
     });
     if (jwt) callbacks.jwt = jwt;
-    const redirect = createRedirectCallback(context, {
+    const redirect = createRedirectCallback({
         authConfig,
+        logger,
         plugins
     });
     if (redirect) callbacks.redirect = redirect;
-    const signIn = createSignInCallback(context, {
+    const signIn = createSignInCallback({
         authConfig,
         plugins
     });

package/dist/routes/auth/callbacks/createJWTCallback.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -14,16 +14,17 @@
   limitations under the License.
 */ import addUserFieldsToToken from './addUserFieldsToToken.js';
 import createCallbackPlugins from './createCallbackPlugins.js';
-function createJWTCallback(context, { authConfig , plugins  }) {
+function createJWTCallback({ authConfig, logger, plugins }) {
     const jwtCallbackPlugins = createCallbackPlugins({
         authConfig,
         plugins,
         type: 'jwt'
     });
-    async function jwtCallback({ token , user , account , profile , isNewUser  }) {
+    async function jwtCallback({ token, user, account, profile, isNewUser }) {
         if (profile) {
-            const { sub , name , given_name , family_name , middle_name , nickname , preferred_username , profile: profile_claim , picture , website , email , email_verified , gender , birthdate , zoneinfo , locale , phone_number , phone_number_verified , address , updated_at  } = profile;
+            const { id, sub, name, given_name, family_name, middle_name, nickname, preferred_username, profile: profile_claim, picture, website, email, email_verified, gender, birthdate, zoneinfo, locale, phone_number, phone_number_verified, address, updated_at } = profile;
             token = {
+                id,
                 sub,
                 name,
                 given_name,
@@ -49,9 +50,10 @@ function createJWTCallback(context, { authConfig , plugins  }) {
         }
         if (profile || user) {
             if (authConfig.userFields) {
-                addUserFieldsToToken(context, {
+                addUserFieldsToToken({
                     authConfig,
                     account,
+                    logger,
                     profile,
                     token,
                     user

package/dist/routes/auth/callbacks/createRedirectCallback.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -13,18 +13,23 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */ import createCallbackPlugins from './createCallbackPlugins.js';
-function createRedirectCallback(context, { authConfig , plugins  }) {
+function defaultRedirect({ url, baseUrl }) {
+    if (url.startsWith('/')) return `${baseUrl}${url}`;
+    else if (new URL(url).origin === baseUrl) return url;
+    return baseUrl;
+}
+function createRedirectCallback({ authConfig, plugins }) {
     const redirectCallbackPlugins = createCallbackPlugins({
         authConfig,
         plugins,
         type: 'redirect'
     });
-    if (redirectCallbackPlugins.length === 0) return undefined;
+    if (redirectCallbackPlugins.length === 0) return defaultRedirect;
     if (redirectCallbackPlugins.length !== 1) {
         throw new Error('More than one auth redirect callbacks are configured. Only one is allowed.');
     }
     const [plugin] = redirectCallbackPlugins;
-    async function redirectCallback({ url , baseUrl  }) {
+    function redirectCallback({ url, baseUrl }) {
         return plugin.fn({
             properties: plugin.properties ?? {},
             baseUrl,

package/dist/routes/auth/callbacks/createSessionCallback.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -12,18 +12,21 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-*/ import addUserFieldsToSession from './addUserFieldsToSession.js';
+*/ import crypto from 'crypto';
+import addUserFieldsToSession from './addUserFieldsToSession.js';
 import createCallbackPlugins from './createCallbackPlugins.js';
-function createSessionCallback(context, { authConfig , plugins  }) {
+function createSessionCallback({ authConfig, plugins }) {
     const sessionCallbackPlugins = createCallbackPlugins({
         authConfig,
         plugins,
         type: 'session'
     });
-    async function sessionCallback({ session , token , user  }) {
+    async function sessionCallback({ session, token, user }) {
+        const identifier = user ? user.id ?? user.sub ?? user.email : token.id ?? token.sub ?? token.email;
         if (token) {
-            const { sub , name , given_name , family_name , middle_name , nickname , preferred_username , profile , picture , website , email , email_verified , gender , birthdate , zoneinfo , locale , phone_number , phone_number_verified , address , updated_at  } = token;
+            const { id, sub, name, given_name, family_name, middle_name, nickname, preferred_username, profile, picture, website, email, email_verified, gender, birthdate, zoneinfo, locale, phone_number, phone_number_verified, address, updated_at } = token;
             session.user = {
+                id,
                 sub,
                 name,
                 given_name,
@@ -48,7 +51,7 @@ function createSessionCallback(context, { authConfig , plugins  }) {
             };
         }
         if (authConfig.userFields) {
-            addUserFieldsToSession(context, {
+            addUserFieldsToSession({
                 authConfig,
                 session,
                 token,
@@ -64,6 +67,9 @@ function createSessionCallback(context, { authConfig , plugins  }) {
                 user
             });
         }
+        // TODO: Should this be session.hashed_id or session.user.hashed_id
+        // Only session.user will be available using the _user operator
+        session.hashed_id = crypto.createHash('sha256').update(identifier ?? '').digest('base64');
         return session;
     }
     return sessionCallback;

package/dist/routes/auth/callbacks/createSignInCallback.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -13,14 +13,14 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */ import createCallbackPlugins from './createCallbackPlugins.js';
-function createSignInCallback(context, { authConfig , plugins  }) {
+function createSignInCallback({ authConfig, plugins }) {
     const signInCallbackPlugins = createCallbackPlugins({
         authConfig,
         plugins,
         type: 'signIn'
     });
     if (signInCallbackPlugins.length === 0) return undefined;
-    async function signInCallback({ account , credentials , email , profile , user  }) {
+    async function signInCallback({ account, credentials, email, profile, user }) {
         let allowSignIn = true;
         for (const plugin of signInCallbackPlugins){
             allowSignIn = await plugin.fn({

package/dist/routes/auth/createAdapter.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -12,7 +12,7 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-*/ function createAdapter(context, { authConfig , plugins  }) {
+*/ function createAdapter({ authConfig, plugins }) {
     const adapterConfig = authConfig.adapter;
     if (!adapterConfig) {
         return undefined;

package/dist/routes/auth/createLogger.js

@@ -0,0 +1,34 @@
+/*
+  Copyright 2020-2024 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ function createLogger({ logger }) {
+    return {
+        error: (code, metadata)=>logger.error({
+                code,
+                metadata,
+                event: 'auth_error'
+            }),
+        warn: (code, metadata)=>logger.warn({
+                code,
+                metadata,
+                event: 'auth_warning'
+            }),
+        debug: (code, metadata)=>logger.debug({
+                code,
+                metadata,
+                event: 'auth_debug'
+            })
+    };
+}
+export default createLogger;

package/dist/routes/auth/createProviders.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -16,7 +16,7 @@
 // Callback url to configure with provider will be: {{ protocol }}{{ host }}/api/auth/callback/{{ providerId }}
 // This depends on providerId, which might cause some issues if users copy an example and change the id.
 // We need to allow users to configure ids, since they might have more than one of the same type.
-function createProviders(context, { authConfig , plugins  }) {
+function createProviders({ authConfig, plugins }) {
     return authConfig.providers.map((providerConfig)=>plugins.providers[providerConfig.type]({
             ...providerConfig.properties,
             id: providerConfig.id

package/dist/routes/auth/events/createCreateUserEvent.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -13,14 +13,22 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */ import createEventPlugins from './createEventPlugins.js';
-function createCreateUserEvent(context, { authConfig , plugins  }) {
+function createCreateUserEvent({ authConfig, logger, plugins }) {
     const createUserPlugins = createEventPlugins({
         authConfig,
         plugins,
         type: 'createUser'
     });
-    if (createUserPlugins.length === 0) return undefined;
-    async function createUserEvent({ user  }) {
+    async function createUserEvent({ user }) {
+        logger.info({
+            event: 'auth_create_user',
+            user: {
+                id: user.id,
+                roles: user.roles,
+                sub: user.sub,
+                session_id: user.session_id
+            }
+        });
         for (const plugin of createUserPlugins){
             await plugin.fn({
                 properties: plugin.properties ?? {},

package/dist/routes/auth/events/createEventPlugins.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -12,7 +12,7 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-*/ function createEventPlugins({ authConfig , plugins , type  }) {
+*/ function createEventPlugins({ authConfig, plugins, type }) {
     return authConfig.events.map((eventConfig)=>({
             fn: plugins.events[eventConfig.type],
             properties: eventConfig.properties

package/dist/routes/auth/events/createEvents.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -18,38 +18,39 @@ import createSessionEvent from './createSessionEvent.js';
 import createSignInEvent from './createSignInEvent.js';
 import createSignOutEvent from './createSignOutEvent.js';
 import createUpdateUserEvent from './createUpdateUserEvent.js';
-function createEvents(context, { authConfig , plugins  }) {
-    const events = {};
-    const createUser = createCreateUserEvent(context, {
-        authConfig,
-        plugins
-    });
-    if (createUser) events.createUser = createUser;
-    const linkAccount = createLinkAccountEvent(context, {
-        authConfig,
-        plugins
-    });
-    if (linkAccount) events.linkAccount = linkAccount;
-    const session = createSessionEvent(context, {
+function createEvents({ authConfig, logger, plugins }) {
+    const events = {
+        createUser: createCreateUserEvent({
+            authConfig,
+            logger,
+            plugins
+        }),
+        linkAccount: createLinkAccountEvent({
+            authConfig,
+            logger,
+            plugins
+        }),
+        signIn: createSignInEvent({
+            authConfig,
+            logger,
+            plugins
+        }),
+        signOut: createSignOutEvent({
+            authConfig,
+            logger,
+            plugins
+        }),
+        updateUser: createUpdateUserEvent({
+            authConfig,
+            logger,
+            plugins
+        })
+    };
+    const session = createSessionEvent({
         authConfig,
         plugins
     });
     if (session) events.session = session;
-    const signIn = createSignInEvent(context, {
-        authConfig,
-        plugins
-    });
-    if (signIn) events.signIn = signIn;
-    const signOut = createSignOutEvent(context, {
-        authConfig,
-        plugins
-    });
-    if (signOut) events.signOut = signOut;
-    const updateUser = createUpdateUserEvent(context, {
-        authConfig,
-        plugins
-    });
-    if (updateUser) events.updateUser = updateUser;
     return events;
 }
 export default createEvents;

package/dist/routes/auth/events/createLinkAccountEvent.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -13,14 +13,22 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */ import createEventPlugins from './createEventPlugins.js';
-function createLinkAccountEvent(context, { authConfig , plugins  }) {
+function createLinkAccountEvent({ authConfig, logger, plugins }) {
     const linkAccountPlugins = createEventPlugins({
         authConfig,
         plugins,
         type: 'linkAccount'
     });
-    if (linkAccountPlugins.length === 0) return undefined;
-    async function linkAccountEvent({ account , profile , user  }) {
+    async function linkAccountEvent({ account, profile, user }) {
+        logger.info({
+            event: 'auth_link_account',
+            user: {
+                id: user.id,
+                roles: user.roles,
+                sub: user.sub,
+                session_id: user.session_id
+            }
+        });
         for (const plugin of linkAccountPlugins){
             await plugin.fn({
                 properties: plugin.properties ?? {},

package/dist/routes/auth/events/createSessionEvent.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -13,14 +13,14 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */ import createEventPlugins from './createEventPlugins.js';
-function createSessionEvent(context, { authConfig , plugins  }) {
+function createSessionEvent({ authConfig, plugins }) {
     const sessionPlugins = createEventPlugins({
         authConfig,
         plugins,
         type: 'session'
     });
     if (sessionPlugins.length === 0) return undefined;
-    async function sessionEvent({ session , token  }) {
+    async function sessionEvent({ session, token }) {
         for (const plugin of sessionPlugins){
             await plugin.fn({
                 properties: plugin.properties ?? {},

package/dist/routes/auth/events/createSignInEvent.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -13,14 +13,24 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */ import createEventPlugins from './createEventPlugins.js';
-function createSignInEvent(context, { authConfig , plugins  }) {
+function createSignInEvent({ authConfig, logger, plugins }) {
     const signInPlugins = createEventPlugins({
         authConfig,
         plugins,
         type: 'signIn'
     });
-    if (signInPlugins.length === 0) return undefined;
-    async function signInEvent({ account , isNewUser , profile , user  }) {
+    async function signInEvent({ account, isNewUser, profile, user }) {
+        logger.info({
+            event: 'auth_sign_in',
+            isNewUser,
+            provider: account?.provider,
+            user: {
+                id: user.id,
+                roles: user.roles,
+                sub: user.sub,
+                session_id: user.session_id
+            }
+        });
         for (const plugin of signInPlugins){
             await plugin.fn({
                 properties: plugin.properties ?? {},