@meistrari/auth-core 0.1.0

package/dist/index.mjs

@@ -0,0 +1,81 @@
+import { createRemoteJWKSet, jwtVerify } from 'jose';
+import { createAuthClient as createAuthClient$1 } from 'better-auth/client';
+import { organizationClient } from 'better-auth/client/plugins';
+import { ssoClient } from '@better-auth/sso/client';
+import { createAccessControl } from 'better-auth/plugins/access';
+import { defaultStatements } from 'better-auth/plugins/organization/access';
+
+const version = "0.1.0";
+
+function isTokenExpired(token) {
+  const payload = JSON.parse(atob(token.split(".")[1] ?? ""));
+  return payload.exp && Date.now() / 1e3 > payload.exp;
+}
+async function validateToken(token, apiUrl) {
+  try {
+    const JWKS = createRemoteJWKSet(
+      new URL(`${apiUrl}/api/auth/jwks`)
+    );
+    await jwtVerify(token, JWKS, {
+      issuer: apiUrl
+    });
+    return true;
+  } catch (error) {
+    return false;
+  }
+}
+const statements = {
+  ...defaultStatements,
+  access: ["admin", "member", "reviewer"]
+};
+const ac = createAccessControl(statements);
+const Roles = {
+  ORG_ADMIN: "org:admin",
+  ORG_MEMBER: "org:member",
+  ORG_REVIEWER: "org:reviewer"
+};
+const rolesAccessControl = {
+  [Roles.ORG_ADMIN]: ac.newRole({
+    access: ["admin"],
+    organization: ["update"],
+    team: ["create", "update", "delete"],
+    member: ["create", "update", "delete"],
+    invitation: ["create", "cancel"]
+  }),
+  [Roles.ORG_MEMBER]: ac.newRole({
+    access: ["member"]
+  }),
+  [Roles.ORG_REVIEWER]: ac.newRole({
+    access: ["reviewer"]
+  })
+};
+const customEndpointsPluginClient = () => {
+  return {
+    id: "custom-endpoints",
+    $InferServerPlugin: {}
+  };
+};
+function createAuthClient(baseURL) {
+  return createAuthClient$1({
+    baseURL,
+    plugins: [
+      organizationClient({
+        ac,
+        roles: rolesAccessControl,
+        teams: {
+          enabled: true
+        }
+      }),
+      customEndpointsPluginClient(),
+      ssoClient()
+    ],
+    fetchOptions: {
+      credentials: "include",
+      headers: {
+        "User-Agent": `auth-sdk:${version}`
+      }
+    }
+  });
+}
+
+export { Roles, ac, createAuthClient, isTokenExpired, rolesAccessControl, validateToken };

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@meistrari/auth-core",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "unbuild"
+  },
+  "dependencies": {
+    "@better-auth/sso": "1.3.28",
+    "better-auth": "1.3.28",
+    "jose": "6.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "latest",
+    "typescript": "5.9.2",
+    "unbuild": "3.6.1"
+  }
+}