@mastra/auth-google 0.0.0

package/CHANGELOG.md

@@ -0,0 +1,5 @@
+# @mastra/auth-google
+
+## 0.0.1
+
+- Initial Google Workspace authentication and RBAC package.

package/dist/auth-provider.d.ts

@@ -0,0 +1,48 @@
+/**
+ * MastraAuthGoogle - Google OpenID Connect authentication provider.
+ *
+ * Supports Google OAuth 2.0 / OIDC login, encrypted session cookies, Bearer ID
+ * token verification, and Google Workspace hosted-domain restrictions.
+ */
+import type { IUserProvider } from '@mastra/core/auth';
+import { MastraAuthProvider } from '@mastra/core/server';
+import type { GoogleUser, MastraAuthGoogleOptions } from './types.js';
+type HonoRequestLike = {
+    raw?: Request;
+    headers?: Headers;
+    header(name: string): string | undefined;
+};
+type MastraAuthRequest = Request | HonoRequestLike;
+export declare class MastraAuthGoogle extends MastraAuthProvider<GoogleUser> implements IUserProvider<GoogleUser> {
+    protected clientId: string;
+    private clientSecret;
+    private redirectUri;
+    private scopes;
+    private cookieName;
+    private cookieMaxAge;
+    private cookiePassword;
+    private secureCookies;
+    private allowedDomains;
+    private hostedDomain?;
+    private ssoEnabled;
+    private jwks;
+    constructor(options?: MastraAuthGoogleOptions);
+    authenticateToken(token: string, request?: MastraAuthRequest): Promise<GoogleUser | null>;
+    authorizeUser(user: GoogleUser): boolean;
+    getCurrentUser(request: Request): Promise<GoogleUser | null>;
+    getUser(_userId: string): Promise<GoogleUser | null>;
+    getUserProfileUrl(user: GoogleUser): string;
+    isSSOEnabled(): boolean;
+    getAllowedDomains(): string[];
+    getHostedDomain(): string | undefined;
+    getClientId(): string;
+    private verifyIdToken;
+    private isHostedDomainAllowed;
+    private extractBearerToken;
+    private cookieFlags;
+    private getUserFromSessionCookie;
+    private attachSSOProvider;
+    private attachSessionProvider;
+}
+export {};
+//# sourceMappingURL=auth-provider.d.ts.map

package/dist/auth-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.d.ts","sourceRoot":"","sources":["../src/auth-provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAGV,aAAa,EAId,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAIzD,OAAO,KAAK,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAGnE,KAAK,eAAe,GAAG;IACrB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC1C,CAAC;AAEF,KAAK,iBAAiB,GAAG,OAAO,GAAG,eAAe,CAAC;AA6MnD,qBAAa,gBAAiB,SAAQ,kBAAkB,CAAC,UAAU,CAAE,YAAW,aAAa,CAAC,UAAU,CAAC;IACvG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,cAAc,CAAW;IACjC,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,UAAU,CAAU;IAC5B,OAAO,CAAC,IAAI,CAAwC;gBAExC,OAAO,CAAC,EAAE,uBAAuB;IA0DvC,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAkB/F,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO;IAOlC,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAY5D,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI1D,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM;IAI3C,YAAY,IAAI,OAAO;IAIvB,iBAAiB,IAAI,MAAM,EAAE;IAI7B,eAAe,IAAI,MAAM,GAAG,SAAS;IAIrC,WAAW,IAAI,MAAM;YAIP,aAAa;IA0B3B,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,WAAW;YAKL,wBAAwB;IAsCtC,OAAO,CAAC,iBAAiB;IA0GzB,OAAO,CAAC,qBAAqB;CA8C9B"}