@meistrari/auth-nuxt 3.23.1 → 3.25.0

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/auth-nuxt",
   "configKey": "telaAuth",
-  "version": "3.23.1",
+  "version": "3.25.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/runtime/composables/admin.d.ts

@@ -1,4 +1,4 @@
-import type { AdminApplicationRecord, AdminApplicationEntitlementRecord, AdminOrganization, AdminOrganizationSummary, AdminOrganizationTeamRecord, AdminUser, AdminUserAccess, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminOrganizationOptions, CreateAdminOrganizationTeamOptions, GetAdminOrganizationOptions, GetAdminOrganizationsSummaryOptions, InviteAdminOrganizationUsersOptions, InviteAdminOrganizationUsersResult, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminOrganizationTeamsOptions, ListAdminOrganizationTeamsResult, ListAdminUsersOptions, ListAdminUsersResult, AdminMember, RemoveAdminMemberOptions, ResendAdminInviteOptions, SetAdminUserApplicationRoleOptions, SetAdminUserTeamOptions, UpdateAdminMemberRoleOptions, UpdateAdminOrganizationOptions } from '@meistrari/auth-core';
+import type { AdminApplicationRecord, AdminApplicationRole, AdminApplicationEntitlementRecord, AdminEntitlementWithRules, AdminOrganization, AdminOrganizationSummary, AdminOrganizationTeamRecord, AdminUser, AdminUserAccess, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminApplicationRoleOptions, CreateAdminOrganizationOptions, CreateAdminOrganizationTeamOptions, GetAdminOrganizationOptions, GetAdminOrganizationsSummaryOptions, InviteAdminOrganizationUsersOptions, InviteAdminOrganizationUsersResult, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminOrganizationTeamsOptions, ListAdminOrganizationTeamsResult, ListAdminUsersOptions, ListAdminUsersResult, AdminMember, RemoveAdminMemberOptions, ResendAdminInviteOptions, SetAdminEntitlementRulesOptions, SetAdminUserApplicationRoleOptions, SetAdminUserTeamOptions, UpdateAdminEntitlementOptions, UpdateAdminApplicationRoleOptions, UpdateAdminMemberRoleOptions, UpdateAdminOrganizationOptions } from '@meistrari/auth-core';
 export interface UseTelaAdminReturn {
     /**
      * Lists users as a global admin, optionally with organization previews
@@ -32,6 +32,14 @@ export interface UseTelaAdminReturn {
      * @returns The updated application
      */
     updateApplication: (applicationId: string, options: CreateAdminApplicationOptions) => Promise<AdminApplicationRecord>;
+    /** Lists application-scoped role definitions. */
+    listApplicationRoles: (applicationId: string) => Promise<AdminApplicationRole[]>;
+    /** Creates an application-scoped role definition. */
+    createApplicationRole: (applicationId: string, options: CreateAdminApplicationRoleOptions) => Promise<AdminApplicationRole>;
+    /** Updates an application-scoped role definition. */
+    updateApplicationRole: (applicationId: string, currentName: string, options: UpdateAdminApplicationRoleOptions) => Promise<AdminApplicationRole>;
+    /** Deletes an application-scoped role definition. */
+    deleteApplicationRole: (applicationId: string, name: string) => Promise<AdminApplicationRole>;
     /**
      * Enables an organization for an application as a global admin.
      * @param applicationId - ID of the application to update
@@ -39,6 +47,32 @@ export interface UseTelaAdminReturn {
      * @returns The created entitlement
      */
     createApplicationEntitlement: (applicationId: string, options: CreateAdminApplicationEntitlementOptions) => Promise<AdminApplicationEntitlementRecord>;
+    /**
+     * Fetches a single entitlement together with its ordered access rules.
+     * @param entitlementId - ID of the entitlement to fetch
+     * @returns The entitlement and its rules
+     */
+    getEntitlement: (entitlementId: string) => Promise<AdminEntitlementWithRules>;
+    /**
+     * Replaces all access rules on an entitlement in a single call.
+     * @param entitlementId - ID of the entitlement whose rules are replaced
+     * @param options - The full set of rules to persist
+     * @returns The entitlement with the saved rules
+     */
+    setEntitlementRules: (entitlementId: string, options: SetAdminEntitlementRulesOptions) => Promise<AdminEntitlementWithRules>;
+    /**
+     * Enables or disables an entitlement.
+     * @param entitlementId - ID of the entitlement to update
+     * @param options - The desired enabled state
+     * @returns The updated entitlement
+     */
+    updateEntitlement: (entitlementId: string, options: UpdateAdminEntitlementOptions) => Promise<AdminApplicationEntitlementRecord>;
+    /**
+     * Deletes an entitlement and all of its access rules.
+     * @param entitlementId - ID of the entitlement to delete
+     * @returns The deleted entitlement
+     */
+    deleteEntitlement: (entitlementId: string) => Promise<AdminApplicationEntitlementRecord>;
     /**
      * Lists all organizations as a global admin, optionally with member and
      * application previews and totals when a preview size is requested.
@@ -161,6 +195,9 @@ export interface UseTelaAdminReturn {
  * Composable for global admin operations.
  *
  * All operations require the authenticated user to hold the global admin role.
+ * The admin API authenticates first-party callers with the session cookie, so
+ * this client never attaches the JWT: the API reads a bearer token only as an
+ * internal API key and rejects anything else.
  *
  * @returns An object containing admin management functions.
  */

package/dist/runtime/composables/admin.js

@@ -1,44 +1,8 @@
-import { useCookie, useRuntimeConfig } from "#app";
+import { useRuntimeConfig } from "#app";
 import { createNuxtAuthClient } from "../shared.js";
-function buildApplicationsUrl(apiUrl) {
-  const base = apiUrl.endsWith("/") ? apiUrl : `${apiUrl}/`;
-  return new URL("applications/", base);
-}
-function buildApplicationUrl(apiUrl, applicationId) {
-  return new URL(encodeURIComponent(applicationId), buildApplicationsUrl(apiUrl));
-}
-function buildApplicationEntitlementsUrl(apiUrl, applicationId) {
-  return new URL("entitlements", `${buildApplicationUrl(apiUrl, applicationId).toString()}/`);
-}
-function buildListApplicationsUrl(apiUrl, options = {}) {
-  const url = buildApplicationsUrl(apiUrl);
-  if (options.limit !== void 0)
-    url.searchParams.set("limit", String(options.limit));
-  if (options.membersPreview !== void 0)
-    url.searchParams.set("membersPreview", String(options.membersPreview));
-  if (options.offset !== void 0)
-    url.searchParams.set("offset", String(options.offset));
-  if (options.orderBy)
-    url.searchParams.set("orderBy", options.orderBy);
-  if (options.orderDirection)
-    url.searchParams.set("orderDirection", options.orderDirection);
-  if (options.organizationId)
-    url.searchParams.set("organizationId", options.organizationId);
-  if (options.search)
-    url.searchParams.set("search", options.search);
-  return url;
-}
-async function parseAdminResponseError(response) {
-  try {
-    const body = await response.json();
-    return body.error ?? body.message ?? response.statusText;
-  } catch {
-    return response.statusText;
-  }
-}
 export function useTelaAdmin() {
-  const { jwtCookieName, apiUrl } = useRuntimeConfig().public.telaAuth;
-  const authClient = createNuxtAuthClient(apiUrl, () => useCookie(jwtCookieName).value ?? null);
+  const { apiUrl } = useRuntimeConfig().public.telaAuth;
+  const authClient = createNuxtAuthClient(apiUrl, () => null);
   async function listUsers(options) {
     return await authClient.admin.listUsers(options);
   }
@@ -46,83 +10,28 @@ export function useTelaAdmin() {
     return await authClient.admin.getUser(userId);
   }
   async function listApplications(options) {
-    const token = useCookie(jwtCookieName).value;
-    const headers = new Headers({ Accept: "application/json" });
-    if (token) {
-      headers.set("Authorization", `Bearer ${token}`);
-    }
-    const response = await fetch(buildListApplicationsUrl(apiUrl, options), {
-      credentials: "include",
-      headers
-    });
-    if (!response.ok) {
-      const message = await parseAdminResponseError(response);
-      throw new Error(`Failed to list applications: ${message}`);
-    }
-    return await response.json();
+    return await authClient.admin.listApplications(options);
   }
   async function createApplication(options) {
-    const token = useCookie(jwtCookieName).value;
-    const headers = new Headers({
-      "Accept": "application/json",
-      "Content-Type": "application/json"
-    });
-    if (token) {
-      headers.set("Authorization", `Bearer ${token}`);
-    }
-    const response = await fetch(buildApplicationsUrl(apiUrl), {
-      body: JSON.stringify(options),
-      credentials: "include",
-      headers,
-      method: "POST"
-    });
-    if (!response.ok) {
-      const message = await parseAdminResponseError(response);
-      throw new Error(`Failed to create application: ${message}`);
-    }
-    return await response.json();
+    return await authClient.admin.createApplication(options);
   }
   async function updateApplication(applicationId, options) {
-    const token = useCookie(jwtCookieName).value;
-    const headers = new Headers({
-      "Accept": "application/json",
-      "Content-Type": "application/json"
-    });
-    if (token) {
-      headers.set("Authorization", `Bearer ${token}`);
-    }
-    const response = await fetch(buildApplicationUrl(apiUrl, applicationId), {
-      body: JSON.stringify(options),
-      credentials: "include",
-      headers,
-      method: "PUT"
-    });
-    if (!response.ok) {
-      const message = await parseAdminResponseError(response);
-      throw new Error(`Failed to update application: ${message}`);
-    }
-    return await response.json();
+    return await authClient.admin.updateApplication(applicationId, options);
+  }
+  async function listApplicationRoles(applicationId) {
+    return await authClient.admin.listApplicationRoles(applicationId);
+  }
+  async function createApplicationRole(applicationId, options) {
+    return await authClient.admin.createApplicationRole(applicationId, options);
+  }
+  async function updateApplicationRole(applicationId, currentName, options) {
+    return await authClient.admin.updateApplicationRole(applicationId, currentName, options);
+  }
+  async function deleteApplicationRole(applicationId, name) {
+    return await authClient.admin.deleteApplicationRole(applicationId, name);
   }
   async function createApplicationEntitlement(applicationId, options) {
-    const token = useCookie(jwtCookieName).value;
-    const headers = new Headers({
-      "Accept": "application/json",
-      "Content-Type": "application/json"
-    });
-    if (token) {
-      headers.set("Authorization", `Bearer ${token}`);
-    }
-    const response = await fetch(buildApplicationEntitlementsUrl(apiUrl, applicationId), {
-      body: JSON.stringify(options),
-      credentials: "include",
-      headers,
-      method: "POST"
-    });
-    if (!response.ok) {
-      const message = await parseAdminResponseError(response);
-      throw new Error(`Failed to add organization to application: ${message}`);
-    }
-    return await response.json();
+    return await authClient.admin.createApplicationEntitlement(applicationId, options);
   }
   async function listOrganizations(options) {
     return await authClient.admin.listOrganizations(options);
@@ -145,6 +54,18 @@ export function useTelaAdmin() {
   async function getUserAccess(userId) {
     return await authClient.admin.getUserAccess(userId);
   }
+  async function getEntitlement(entitlementId) {
+    return await authClient.admin.getEntitlement(entitlementId);
+  }
+  async function setEntitlementRules(entitlementId, options) {
+    return await authClient.admin.setEntitlementRules(entitlementId, options);
+  }
+  async function updateEntitlement(entitlementId, options) {
+    return await authClient.admin.updateEntitlement(entitlementId, options);
+  }
+  async function deleteEntitlement(entitlementId) {
+    return await authClient.admin.deleteEntitlement(entitlementId);
+  }
   async function createOrganization(options) {
     return await authClient.admin.createOrganization(options);
   }
@@ -187,7 +108,15 @@ export function useTelaAdmin() {
     listApplications,
     createApplication,
     updateApplication,
+    listApplicationRoles,
+    createApplicationRole,
+    updateApplicationRole,
+    deleteApplicationRole,
     createApplicationEntitlement,
+    getEntitlement,
+    setEntitlementRules,
+    updateEntitlement,
+    deleteEntitlement,
     listOrganizations,
     getOrganization,
     getOrganizationsSummary,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/auth-nuxt",
-  "version": "3.23.1",
+  "version": "3.25.0",
   "type": "module",
   "exports": {
     ".": {
@@ -36,7 +36,7 @@
     "docs": "nuxt-module-build prepare && typedoc"
   },
   "dependencies": {
-    "@meistrari/auth-core": "1.33.1",
+    "@meistrari/auth-core": "1.35.0",
     "jose": "6.1.3"
   },
   "peerDependencies": {