@megacorp-ai/auth-react 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Megacorp Logistics
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,69 @@
+# @megacorp-ai/auth-react
+
+React client for [`@megacorp-ai/auth`](https://www.npmjs.com/package/@megacorp-ai/auth): a Better Auth React client preconfigured with the email-OTP and admin plugins, plus a `<SignIn />` form, `useSession`, `useRole`, and `<ImpersonationBanner />`. Talks only to `/api/auth/*` on your origin.
+
+Requires React 19+.
+
+## Install
+
+```bash
+npm install @megacorp-ai/auth-react react react-dom
+```
+
+## Usage
+
+```tsx
+// auth.ts
+import { createAuthClient } from "@megacorp-ai/auth-react";
+export const authClient = createAuthClient(); // same origin; pass { baseURL } for a separate API host
+```
+
+```tsx
+import { ImpersonationBanner, SignIn, useRole, useSession } from "@megacorp-ai/auth-react";
+import { authClient } from "./auth";
+
+function SignInPage() {
+  const { refetch } = useSession(authClient);
+  return (
+    <SignIn
+      client={authClient}
+      initialEmail={new URLSearchParams(location.search).get("email") ?? ""}
+      onSignedIn={() => refetch().then(() => navigate("/app"))}
+      classNames={{ form: "stack", error: "error" }}
+    />
+  );
+}
+
+function App() {
+  const { user, isPending, signOut } = useSession(authClient);
+  const { canInvite } = useRole(authClient);
+  if (isPending) return null;
+  if (!user) return <SignInPage />;
+  return (
+    <>
+      <ImpersonationBanner client={authClient} className="banner" />
+      {canInvite && <InvitePanel />}
+      <button onClick={() => signOut()}>Sign out</button>
+    </>
+  );
+}
+```
+
+## API
+
+- `createAuthClient({ baseURL? })` returns the Better Auth client. Use `authClient.emailOtp.*` and `authClient.admin.*` directly for custom UI.
+- `useSession(client)` returns `{ data, user, isPending, error, refetch, signOut }`.
+- `useRole(client)` returns `{ roles, isPending, hasRole(...roles), isMegacorpAdmin, isCustomerAdmin, canInvite }`.
+- `parseRoles(role)` splits the server's role string. Roles are `megacorp_admin`, `customer_admin`, `member`.
+- `<SignIn client initialEmail? onSignedIn? classNames? labels? />` renders the two-step email and code form. Unstyled; pass `classNames` for `root`, `form`, `label`, `input`, `button`, `secondaryButton`, `error`, `hint`, and `labels` to change copy.
+- `<ImpersonationBanner client className? buttonClassName? onStopped? />` shows who is impersonating whom with a stop button. Renders nothing otherwise.
+
+## Notes
+
+- Cookies carry the session, so the API must be same-origin or behind a proxy that forwards `/api/auth`. In Vite dev, proxy `/api` to your server with `xfwd: true`.
+- Sign-up is disabled server-side. Unknown emails see the same "code sent" screen and receive nothing.
+- No analytics or telemetry in this package.
+
+## License
+
+MIT