@meistrari/auth-nuxt 2.3.1 → 2.4.0

package/README.md

@@ -8,6 +8,13 @@ A Nuxt module that provides comprehensive authentication, organization managemen
 npm install @meistrari/auth-nuxt
 ```
 
+## Prerequisites
+
+Before setting up the SDK, make sure the following are configured in the Auth API:
+
+1. **Allowed Origins**: Your application URL (e.g., `https://your-app.com`) must be added to the allowed origins list in the Auth API. This ensures the Auth API accepts requests from your application.
+2. **Allowed Email Domains**: The email domains of users who will access the application must be added to the allowed email domains list in the Auth API. For example, if your users sign in with `@company.com` emails, that domain must be whitelisted.
+
 ## Setup
 
 Add the module to your `nuxt.config.ts`:

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/auth-nuxt",
   "configKey": "telaAuth",
-  "version": "2.3.1",
+  "version": "2.4.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/runtime/composables/application-auth.d.ts

@@ -40,6 +40,7 @@ export declare function useTelaApplicationAuth(): {
     getAvailableOrganizations: () => Promise<FullOrganization[]>;
     switchOrganization: (organizationId: string) => Promise<void>;
     refreshToken: () => Promise<void>;
+    getToken: () => Promise<string | null | undefined>;
     user: import("vue").Ref<{
         id: string;
         createdAt: Date;

package/dist/runtime/composables/application-auth.js

@@ -1,6 +1,7 @@
 import { navigateTo, useCookie, useRuntimeConfig } from "#app";
 import { AuthorizationFlowError, isTokenExpired, RefreshTokenExpiredError, UserNotLoggedInError } from "@meistrari/auth-core";
 import { useApplicationSessionState } from "./state.js";
+import { willTokenExpireIn } from "../helpers/token.js";
 const FIFTEEN_MINUTES = 60 * 15;
 const ONE_MINUTE = 60 * 1e3;
 export function useTelaApplicationAuth() {
@@ -87,6 +88,13 @@ export function useTelaApplicationAuth() {
       throw error;
     }
   }
+  async function getToken() {
+    const shouldRefresh = accessTokenCookie.value ? willTokenExpireIn(accessTokenCookie.value, ONE_MINUTE * 2) : true;
+    if (shouldRefresh) {
+      await refreshToken();
+    }
+    return accessTokenCookie.value;
+  }
   return {
     ...state,
     login,
@@ -94,6 +102,7 @@ export function useTelaApplicationAuth() {
     initSession,
     getAvailableOrganizations,
     switchOrganization,
-    refreshToken
+    refreshToken,
+    getToken
   };
 }

package/dist/runtime/composables/state.d.ts

@@ -100,13 +100,12 @@ export declare function useSessionState(): {
 export declare function useOrganizationState(): {
     activeOrganization: import("vue").Ref<FullOrganization | null, FullOrganization | null>;
     activeMember: import("vue").Ref<{
-        [x: string]: string | number | boolean | string[] | Record<string, any> | (string & Record<never, never>) | Date | number[] | undefined;
         id: string;
         organizationId: string;
         role: "org:admin" | "org:member" | "org:reviewer";
         createdAt: Date;
         userId: string;
-        teamId?: string | undefined | undefined;
+        teamId?: string | undefined | undefined | undefined;
         user: {
             id: string;
             email: string;
@@ -114,13 +113,12 @@ export declare function useOrganizationState(): {
             image?: string | undefined;
         };
     } | null, {
-        [x: string]: string | number | boolean | string[] | Record<string, any> | (string & Record<never, never>) | Date | number[] | undefined;
         id: string;
         organizationId: string;
         role: "org:admin" | "org:member" | "org:reviewer";
         createdAt: Date;
         userId: string;
-        teamId?: string | undefined | undefined;
+        teamId?: string | undefined | undefined | undefined;
         user: {
             id: string;
             email: string;

package/dist/runtime/helpers/token.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Parses a JWT token to extract its expiration time
+ *
+ * @param token - The JWT token string
+ * @returns The expiration timestamp in milliseconds, or null if parsing fails
+ */
+export declare function parseTokenExpiry(token: string): number | null;
+/**
+ * Checks if a JWT token will expire within a certain time window, or if it is already expired
+ *
+ * @param token - The JWT token string
+ * @param timeWindow - The time window in milliseconds
+ * @returns True if the token will expire within the time window, false otherwise
+ */
+export declare function willTokenExpireIn(token: string, timeWindow: number): boolean | 0;

package/dist/runtime/helpers/token.js

@@ -0,0 +1,19 @@
+import { decodeJwt } from "jose";
+export function parseTokenExpiry(token) {
+  try {
+    const payload = decodeJwt(token);
+    if (!payload.exp)
+      return null;
+    return payload.exp * 1e3;
+  } catch {
+    return null;
+  }
+}
+export function willTokenExpireIn(token, timeWindow) {
+  const now = Date.now();
+  const expiry = parseTokenExpiry(token);
+  if (expiry === null) {
+    return true;
+  }
+  return expiry && expiry - timeWindow <= now;
+}

package/dist/runtime/plugins/application-token-refresh.js

@@ -1,22 +1,12 @@
 import { defineNuxtPlugin, useCookie, useRuntimeConfig } from "#app";
 import { isTokenExpired } from "@meistrari/auth-core";
-import { decodeJwt } from "jose";
 import { useTelaApplicationAuth } from "../composables/application-auth.js";
 import { useApplicationSessionState } from "../composables/state.js";
 import { createNuxtAuthClient } from "../shared.js";
+import { parseTokenExpiry } from "../helpers/token.js";
 const SEVEN_DAYS = 60 * 60 * 24 * 7;
 const FIFTEEN_MINUTES = 60 * 15;
 const TWO_MINUTES = 2 * 60 * 1e3;
-function parseTokenExpiry(token) {
-  try {
-    const payload = decodeJwt(token);
-    if (!payload.exp)
-      return null;
-    return payload.exp * 1e3;
-  } catch {
-    return null;
-  }
-}
 export default defineNuxtPlugin({
   name: "tela-application-token-refresh",
   enforce: "post",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/auth-nuxt",
-  "version": "2.3.1",
+  "version": "2.4.0",
   "type": "module",
   "exports": {
     ".": {
@@ -31,7 +31,7 @@
     "build": "nuxt-module-build build --stub && nuxt-module-build prepare && nuxt-module-build build"
   },
   "dependencies": {
-    "@meistrari/auth-core": "1.11.1",
+    "@meistrari/auth-core": "1.11.2",
     "jose": "6.1.3"
   },
   "peerDependencies": {