@main12/auth-login 0.1.6 → 0.1.8

package/dist/components/pages/LoginPage.js

@@ -4,9 +4,13 @@ import { pluginConfig } from '../../config.js';
 import LoginPageTailwind from './LoginPageTailwind.js';
 import LoginPageHero from './LoginPageHero.js';
 export default function LoginPage(props) {
-    return pluginConfig.style === 'hero-ui' ? /*#__PURE__*/ _jsx(LoginPageHero, {
+    const resolved = {
+        showGoogleOAuth: pluginConfig.googleOAuthEnabled,
         ...props
+    };
+    return pluginConfig.style === 'hero-ui' ? /*#__PURE__*/ _jsx(LoginPageHero, {
+        ...resolved
     }) : /*#__PURE__*/ _jsx(LoginPageTailwind, {
-        ...props
+        ...resolved
     });
 }

package/dist/components/pages/SignupPage.js

@@ -4,9 +4,13 @@ import { pluginConfig } from '../../config.js';
 import SignupPageTailwind from './SignupPageTailwind.js';
 import SignupPageHero from './SignupPageHero.js';
 export default function SignupPage(props) {
-    return pluginConfig.style === 'hero-ui' ? /*#__PURE__*/ _jsx(SignupPageHero, {
+    const resolved = {
+        showGoogleOAuth: pluginConfig.googleOAuthEnabled,
         ...props
+    };
+    return pluginConfig.style === 'hero-ui' ? /*#__PURE__*/ _jsx(SignupPageHero, {
+        ...resolved
     }) : /*#__PURE__*/ _jsx(SignupPageTailwind, {
-        ...props
+        ...resolved
     });
 }

package/dist/config.d.ts

@@ -6,4 +6,5 @@ export type AuthStyle = 'tailwind' | 'hero-ui';
 export declare const pluginConfig: {
     style: AuthStyle;
     logoUrl?: string;
+    googleOAuthEnabled: boolean;
 };

package/dist/config.js

@@ -2,5 +2,6 @@
  * Shared plugin configuration — set by the plugin factory at init time,
  * read by all client components at render time.
  */ export const pluginConfig = {
-    style: 'tailwind'
+    style: 'tailwind',
+    googleOAuthEnabled: true
 };

package/dist/endpoints/googleOAuth.js

@@ -0,0 +1,144 @@
+/**
+ * Google OAuth 2.0 — zero dependencies, pure REST.
+ *
+ * Flow:
+ * 1. GET /api/auth/oauth/google → Google consent screen
+ * 2. GET /api/auth/oauth/google/callback → exchange code, get profile, login, redirect
+ *
+ * Requires env vars: GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET
+ */ const GOOGLE_AUTH_URL = 'https://accounts.google.com/o/oauth2/v2/auth';
+const GOOGLE_TOKEN_URL = 'https://oauth2.googleapis.com/token';
+const GOOGLE_USERINFO_URL = 'https://www.googleapis.com/oauth2/v3/userinfo';
+function env(key, fb = '') {
+    return process.env[key] || fb;
+}
+/**
+ * GET /api/auth/oauth/google — start Google OAuth flow
+ */ export const googleOAuthStart = {
+    path: '/api/auth/oauth/google',
+    method: 'get',
+    handler: async (req)=>{
+        const clientId = env('GOOGLE_CLIENT_ID');
+        if (!clientId) return Response.json({
+            error: 'Google OAuth not configured'
+        }, {
+            status: 501
+        });
+        const url = new URL(req.url || 'http://localhost');
+        const redirect = url.searchParams.get('redirect') || '/';
+        const base = env('NEXT_PUBLIC_SERVER_URL', 'http://localhost:3000');
+        const params = new URLSearchParams({
+            client_id: clientId,
+            redirect_uri: `${base}/api/auth/oauth/google/callback`,
+            response_type: 'code',
+            scope: 'openid email profile',
+            access_type: 'online',
+            state: encodeURIComponent(redirect)
+        });
+        return Response.redirect(`${GOOGLE_AUTH_URL}?${params.toString()}`, 302);
+    }
+};
+/**
+ * GET /api/auth/oauth/google/callback — handle Google's redirect back
+ */ export const googleOAuthCallback = {
+    path: '/api/auth/oauth/google/callback',
+    method: 'get',
+    handler: async (req)=>{
+        const url = new URL(req.url || 'http://localhost');
+        const code = url.searchParams.get('code');
+        const state = url.searchParams.get('state') || '/';
+        const redirectTo = decodeURIComponent(state);
+        if (!code) return Response.redirect(`/login?error=${url.searchParams.get('error') || 'oauth_failed'}`, 302);
+        const clientId = env('GOOGLE_CLIENT_ID');
+        const clientSecret = env('GOOGLE_CLIENT_SECRET');
+        const base = env('NEXT_PUBLIC_SERVER_URL', 'http://localhost:3000');
+        try {
+            // 1. Exchange code for access token
+            const tokenRes = await fetch(GOOGLE_TOKEN_URL, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded'
+                },
+                body: new URLSearchParams({
+                    code,
+                    client_id: clientId,
+                    client_secret: clientSecret,
+                    redirect_uri: `${base}/api/auth/oauth/google/callback`,
+                    grant_type: 'authorization_code'
+                })
+            });
+            if (!tokenRes.ok) return Response.redirect(`/login?error=oauth_failed`, 302);
+            const tokens = await tokenRes.json();
+            const accessToken = tokens.access_token;
+            // 2. Get Google profile
+            const profileRes = await fetch(GOOGLE_USERINFO_URL, {
+                headers: {
+                    Authorization: `Bearer ${accessToken}`
+                }
+            });
+            if (!profileRes.ok) return Response.redirect(`/login?error=oauth_failed`, 302);
+            const profile = await profileRes.json();
+            const email = profile.email?.toLowerCase();
+            const name = profile.name || email?.split('@')[0];
+            if (!email) return Response.redirect(`/login?error=oauth_failed`, 302);
+            // 3. Find or create user
+            const users = await req.payload.find({
+                collection: 'users',
+                where: {
+                    email: {
+                        equals: email
+                    }
+                },
+                limit: 1
+            });
+            let userId;
+            let userPw;
+            if (users.docs?.length) {
+                userId = users.docs[0].id;
+                // Set a known temp password so we can login
+                userPw = `g_tmp_${Date.now()}`;
+                await req.payload.update({
+                    collection: 'users',
+                    id: userId,
+                    data: {
+                        password: userPw
+                    }
+                });
+            } else {
+                userPw = `g_new_${Date.now()}`;
+                const newUser = await req.payload.create({
+                    collection: 'users',
+                    data: {
+                        email,
+                        name,
+                        password: userPw,
+                        authProvider: 'google'
+                    }
+                });
+                userId = newUser.id;
+            }
+            // 4. Login
+            const loginResult = await req.payload.login({
+                collection: 'users',
+                data: {
+                    email,
+                    password: userPw
+                },
+                req: req
+            });
+            // 5. Set cookie + redirect
+            const response = Response.redirect(redirectTo, 302);
+            if (loginResult.token) {
+                response.headers.set('Set-Cookie', `payload-token=${loginResult.token}; Path=/; HttpOnly; SameSite=Lax` + `${process.env.NODE_ENV === 'production' ? '; Secure' : ''}` + `; Max-Age=${loginResult.exp || 7200}`);
+            }
+            return response;
+        } catch (err) {
+            console.error('[auth-login] Google OAuth error:', err);
+            return Response.redirect(`/login?error=oauth_failed`, 302);
+        }
+    }
+};
+export const googleOAuthEndpoints = [
+    googleOAuthStart,
+    googleOAuthCallback
+];

package/dist/index.d.ts

@@ -7,7 +7,7 @@ export interface AuthLoginPluginOptions {
     domain?: string;
     style?: AuthStyle;
     logo?: string;
-    /** Enable Google OAuth — reads GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET from env */
+    /** Enable Google OAuth. Default: auto-detects GOOGLE_CLIENT_ID env var. Set false to force-disable. */
     googleOAuth?: boolean;
 }
 export declare const authLoginPlugin: (options?: AuthLoginPluginOptions) => (config: Config) => Config;

package/dist/index.js

@@ -1,20 +1,35 @@
 import { authEndpoints } from './endpoints/authEndpoints.js';
+import { googleOAuthEndpoints } from './endpoints/googleOAuth.js';
 import { pluginConfig } from './config.js';
 export const authLoginPlugin = (options = {})=>(config)=>{
         if (options.enabled === false) return config;
-        // Set global style config — all page components read this at render time
+        // Set global config — all components read this at render time
         pluginConfig.style = options.style || 'tailwind';
         pluginConfig.logoUrl = options.logo;
+        // Google OAuth: auto-detect from env vars
+        if (options.googleOAuth === false) {
+            pluginConfig.googleOAuthEnabled = false;
+        } else {
+            const hasGoogleCreds = !!(process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET);
+            pluginConfig.googleOAuthEnabled = options.googleOAuth === true || hasGoogleCreds;
+        }
         // Register auth API endpoints
         config.endpoints = [
             ...config.endpoints || [],
             ...authEndpoints
         ];
+        // Register Google OAuth endpoints only if enabled
+        if (pluginConfig.googleOAuthEnabled) {
+            config.endpoints = [
+                ...config.endpoints,
+                ...googleOAuthEndpoints
+            ];
+        }
         // Chain onInit
         const incomingOnInit = config.onInit;
         config.onInit = async (payload)=>{
             if (incomingOnInit) await incomingOnInit(payload);
-            payload.logger.info(`[auth-login] Initialized (style: ${pluginConfig.style}) for ${options.projectName || 'project'}`);
+            payload.logger.info(`[auth-login] Initialized (style: ${pluginConfig.style}, googleOAuth: ${pluginConfig.googleOAuthEnabled}) for ${options.projectName || 'project'}`);
         };
         return config;
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@main12/auth-login",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Reusable Payload CMS auth plugin — login, signup, OTP, forgot password, branded emails, Powered by Main12",
   "license": "MIT",
   "type": "module",