@meistrari/auth-nuxt 3.23.0 → 3.24.0

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/auth-nuxt",
   "configKey": "telaAuth",
-  "version": "3.23.0",
+  "version": "3.24.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/runtime/composables/admin.d.ts

@@ -1,4 +1,4 @@
-import type { AdminApplicationRecord, AdminApplicationEntitlementRecord, AdminOrganization, AdminOrganizationSummary, AdminOrganizationTeamRecord, AdminUser, AdminUserAccess, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminOrganizationOptions, CreateAdminOrganizationTeamOptions, GetAdminOrganizationOptions, GetAdminOrganizationsSummaryOptions, InviteAdminOrganizationUsersOptions, InviteAdminOrganizationUsersResult, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminOrganizationTeamsOptions, ListAdminOrganizationTeamsResult, ListAdminUsersOptions, ListAdminUsersResult, AdminMember, RemoveAdminMemberOptions, ResendAdminInviteOptions, SetAdminUserApplicationRoleOptions, SetAdminUserTeamOptions, UpdateAdminMemberRoleOptions, UpdateAdminOrganizationOptions } from '@meistrari/auth-core';
+import type { AdminApplicationRecord, AdminApplicationEntitlementRecord, AdminEntitlementWithRules, AdminOrganization, AdminOrganizationSummary, AdminOrganizationTeamRecord, AdminUser, AdminUserAccess, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminOrganizationOptions, CreateAdminOrganizationTeamOptions, GetAdminOrganizationOptions, GetAdminOrganizationsSummaryOptions, InviteAdminOrganizationUsersOptions, InviteAdminOrganizationUsersResult, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminOrganizationTeamsOptions, ListAdminOrganizationTeamsResult, ListAdminUsersOptions, ListAdminUsersResult, AdminMember, RemoveAdminMemberOptions, ResendAdminInviteOptions, SetAdminEntitlementRulesOptions, SetAdminUserApplicationRoleOptions, SetAdminUserTeamOptions, UpdateAdminEntitlementOptions, UpdateAdminMemberRoleOptions, UpdateAdminOrganizationOptions } from '@meistrari/auth-core';
 export interface UseTelaAdminReturn {
     /**
      * Lists users as a global admin, optionally with organization previews
@@ -39,6 +39,32 @@ export interface UseTelaAdminReturn {
      * @returns The created entitlement
      */
     createApplicationEntitlement: (applicationId: string, options: CreateAdminApplicationEntitlementOptions) => Promise<AdminApplicationEntitlementRecord>;
+    /**
+     * Fetches a single entitlement together with its ordered access rules.
+     * @param entitlementId - ID of the entitlement to fetch
+     * @returns The entitlement and its rules
+     */
+    getEntitlement: (entitlementId: string) => Promise<AdminEntitlementWithRules>;
+    /**
+     * Replaces all access rules on an entitlement in a single call.
+     * @param entitlementId - ID of the entitlement whose rules are replaced
+     * @param options - The full set of rules to persist
+     * @returns The entitlement with the saved rules
+     */
+    setEntitlementRules: (entitlementId: string, options: SetAdminEntitlementRulesOptions) => Promise<AdminEntitlementWithRules>;
+    /**
+     * Enables or disables an entitlement.
+     * @param entitlementId - ID of the entitlement to update
+     * @param options - The desired enabled state
+     * @returns The updated entitlement
+     */
+    updateEntitlement: (entitlementId: string, options: UpdateAdminEntitlementOptions) => Promise<AdminApplicationEntitlementRecord>;
+    /**
+     * Deletes an entitlement and all of its access rules.
+     * @param entitlementId - ID of the entitlement to delete
+     * @returns The deleted entitlement
+     */
+    deleteEntitlement: (entitlementId: string) => Promise<AdminApplicationEntitlementRecord>;
     /**
      * Lists all organizations as a global admin, optionally with member and
      * application previews and totals when a preview size is requested.
@@ -161,6 +187,9 @@ export interface UseTelaAdminReturn {
  * Composable for global admin operations.
  *
  * All operations require the authenticated user to hold the global admin role.
+ * The admin API authenticates first-party callers with the session cookie, so
+ * this client never attaches the JWT: the API reads a bearer token only as an
+ * internal API key and rejects anything else.
  *
  * @returns An object containing admin management functions.
  */

package/dist/runtime/composables/admin.js

@@ -1,44 +1,8 @@
-import { useCookie, useRuntimeConfig } from "#app";
+import { useRuntimeConfig } from "#app";
 import { createNuxtAuthClient } from "../shared.js";
-function buildApplicationsUrl(apiUrl) {
-  const base = apiUrl.endsWith("/") ? apiUrl : `${apiUrl}/`;
-  return new URL("applications/", base);
-}
-function buildApplicationUrl(apiUrl, applicationId) {
-  return new URL(encodeURIComponent(applicationId), buildApplicationsUrl(apiUrl));
-}
-function buildApplicationEntitlementsUrl(apiUrl, applicationId) {
-  return new URL("entitlements", `${buildApplicationUrl(apiUrl, applicationId).toString()}/`);
-}
-function buildListApplicationsUrl(apiUrl, options = {}) {
-  const url = buildApplicationsUrl(apiUrl);
-  if (options.limit !== void 0)
-    url.searchParams.set("limit", String(options.limit));
-  if (options.membersPreview !== void 0)
-    url.searchParams.set("membersPreview", String(options.membersPreview));
-  if (options.offset !== void 0)
-    url.searchParams.set("offset", String(options.offset));
-  if (options.orderBy)
-    url.searchParams.set("orderBy", options.orderBy);
-  if (options.orderDirection)
-    url.searchParams.set("orderDirection", options.orderDirection);
-  if (options.organizationId)
-    url.searchParams.set("organizationId", options.organizationId);
-  if (options.search)
-    url.searchParams.set("search", options.search);
-  return url;
-}
-async function parseAdminResponseError(response) {
-  try {
-    const body = await response.json();
-    return body.error ?? body.message ?? response.statusText;
-  } catch {
-    return response.statusText;
-  }
-}
 export function useTelaAdmin() {
-  const { jwtCookieName, apiUrl } = useRuntimeConfig().public.telaAuth;
-  const authClient = createNuxtAuthClient(apiUrl, () => useCookie(jwtCookieName).value ?? null);
+  const { apiUrl } = useRuntimeConfig().public.telaAuth;
+  const authClient = createNuxtAuthClient(apiUrl, () => null);
   async function listUsers(options) {
     return await authClient.admin.listUsers(options);
   }
@@ -46,83 +10,16 @@ export function useTelaAdmin() {
     return await authClient.admin.getUser(userId);
   }
   async function listApplications(options) {
-    const token = useCookie(jwtCookieName).value;
-    const headers = new Headers({ Accept: "application/json" });
-    if (token) {
-      headers.set("Authorization", `Bearer ${token}`);
-    }
-    const response = await fetch(buildListApplicationsUrl(apiUrl, options), {
-      credentials: "include",
-      headers
-    });
-    if (!response.ok) {
-      const message = await parseAdminResponseError(response);
-      throw new Error(`Failed to list applications: ${message}`);
-    }
-    return await response.json();
+    return await authClient.admin.listApplications(options);
   }
   async function createApplication(options) {
-    const token = useCookie(jwtCookieName).value;
-    const headers = new Headers({
-      "Accept": "application/json",
-      "Content-Type": "application/json"
-    });
-    if (token) {
-      headers.set("Authorization", `Bearer ${token}`);
-    }
-    const response = await fetch(buildApplicationsUrl(apiUrl), {
-      body: JSON.stringify(options),
-      credentials: "include",
-      headers,
-      method: "POST"
-    });
-    if (!response.ok) {
-      const message = await parseAdminResponseError(response);
-      throw new Error(`Failed to create application: ${message}`);
-    }
-    return await response.json();
+    return await authClient.admin.createApplication(options);
   }
   async function updateApplication(applicationId, options) {
-    const token = useCookie(jwtCookieName).value;
-    const headers = new Headers({
-      "Accept": "application/json",
-      "Content-Type": "application/json"
-    });
-    if (token) {
-      headers.set("Authorization", `Bearer ${token}`);
-    }
-    const response = await fetch(buildApplicationUrl(apiUrl, applicationId), {
-      body: JSON.stringify(options),
-      credentials: "include",
-      headers,
-      method: "PUT"
-    });
-    if (!response.ok) {
-      const message = await parseAdminResponseError(response);
-      throw new Error(`Failed to update application: ${message}`);
-    }
-    return await response.json();
+    return await authClient.admin.updateApplication(applicationId, options);
   }
   async function createApplicationEntitlement(applicationId, options) {
-    const token = useCookie(jwtCookieName).value;
-    const headers = new Headers({
-      "Accept": "application/json",
-      "Content-Type": "application/json"
-    });
-    if (token) {
-      headers.set("Authorization", `Bearer ${token}`);
-    }
-    const response = await fetch(buildApplicationEntitlementsUrl(apiUrl, applicationId), {
-      body: JSON.stringify(options),
-      credentials: "include",
-      headers,
-      method: "POST"
-    });
-    if (!response.ok) {
-      const message = await parseAdminResponseError(response);
-      throw new Error(`Failed to add organization to application: ${message}`);
-    }
-    return await response.json();
+    return await authClient.admin.createApplicationEntitlement(applicationId, options);
   }
   async function listOrganizations(options) {
     return await authClient.admin.listOrganizations(options);
@@ -145,6 +42,18 @@ export function useTelaAdmin() {
   async function getUserAccess(userId) {
     return await authClient.admin.getUserAccess(userId);
   }
+  async function getEntitlement(entitlementId) {
+    return await authClient.admin.getEntitlement(entitlementId);
+  }
+  async function setEntitlementRules(entitlementId, options) {
+    return await authClient.admin.setEntitlementRules(entitlementId, options);
+  }
+  async function updateEntitlement(entitlementId, options) {
+    return await authClient.admin.updateEntitlement(entitlementId, options);
+  }
+  async function deleteEntitlement(entitlementId) {
+    return await authClient.admin.deleteEntitlement(entitlementId);
+  }
   async function createOrganization(options) {
     return await authClient.admin.createOrganization(options);
   }
@@ -188,6 +97,10 @@ export function useTelaAdmin() {
     createApplication,
     updateApplication,
     createApplicationEntitlement,
+    getEntitlement,
+    setEntitlementRules,
+    updateEntitlement,
+    deleteEntitlement,
     listOrganizations,
     getOrganization,
     getOrganizationsSummary,

package/dist/runtime/composables/application/organization.d.ts

@@ -79,12 +79,12 @@ export interface UseTelaApplicationOrganizationReturn {
      *
      * For an application-scoped invitation, accepting **grants the user access to
      * the associated application** (the Auth API writes an entitlement rule) and
-     * returns that application's `homeUrl`. For an invitation with no application,
-     * `homeUrl` is `null`. The active organization's member list is refreshed
-     * afterwards.
+     * returns that application's identity and `homeUrl`. For an invitation with no
+     * application, it returns the configured post-acceptance URL. The active
+     * organization's member list is refreshed afterwards.
      *
      * @param id - The invitation id to accept.
-     * @returns The accepted member and the application's home URL, or `null`.
+     * @returns The accepted member and the invitation's post-acceptance context.
      */
     acceptInvitation: (id: string) => Promise<AcceptInvitationResult>;
     /**

package/dist/runtime/composables/organization.d.ts

@@ -46,8 +46,8 @@ export interface UseTelaOrganizationReturn {
     /**
      * Accepts an organization invitation and updates the active organization state.
      * @param id - The invitation ID to accept
-     * @returns The accepted member and the application's `homeUrl` when the invitation
-     *   is scoped to an application that defines one; otherwise `null`.
+     * @returns The accepted member, application context for app-scoped invitations,
+     *   and the configured post-acceptance URL for plain organization invitations.
      */
     acceptInvitation: (id: string) => Promise<AcceptInvitationResult>;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/auth-nuxt",
-  "version": "3.23.0",
+  "version": "3.24.0",
   "type": "module",
   "exports": {
     ".": {
@@ -36,7 +36,7 @@
     "docs": "nuxt-module-build prepare && typedoc"
   },
   "dependencies": {
-    "@meistrari/auth-core": "1.33.0",
+    "@meistrari/auth-core": "1.34.0",
     "jose": "6.1.3"
   },
   "peerDependencies": {