@meistrari/auth-nuxt 3.25.0 → 3.27.0

package/README.md

@@ -4,11 +4,13 @@ A Nuxt module for authentication, organization management, and API key capabilit
 
 ## Auth Types
 
-This SDK supports two authentication models:
+This SDK supports two interactive authentication models:
 
 - **Application Authentication (recommended)**: Use this for product applications that need end-user authentication and authorization scoped to a specific application. See [Application Authentication Guide](./docs/APPLICATION_AUTH.md).
 - **First-Party Authentication**: Use this only for trusted first-party tools that interact directly with the Auth API in an administrative way, such as the Accounts Dashboard and Backoffice. See [First-Party Authentication Guide](./docs/FIRST_PARTY_AUTH.md).
 
+For machine-to-machine authentication, use `@meistrari/auth-core` directly on the server. See the [Client Credentials Guide](https://github.com/meistrari/auth-api/blob/main/packages/core/docs/CLIENT_CREDENTIALS.md).
+
 ## Installation
 
 ```bash

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/auth-nuxt",
   "configKey": "telaAuth",
-  "version": "3.25.0",
+  "version": "3.27.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/runtime/composables/admin.d.ts

@@ -1,4 +1,4 @@
-import type { AdminApplicationRecord, AdminApplicationRole, AdminApplicationEntitlementRecord, AdminEntitlementWithRules, AdminOrganization, AdminOrganizationSummary, AdminOrganizationTeamRecord, AdminUser, AdminUserAccess, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminApplicationRoleOptions, CreateAdminOrganizationOptions, CreateAdminOrganizationTeamOptions, GetAdminOrganizationOptions, GetAdminOrganizationsSummaryOptions, InviteAdminOrganizationUsersOptions, InviteAdminOrganizationUsersResult, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminOrganizationTeamsOptions, ListAdminOrganizationTeamsResult, ListAdminUsersOptions, ListAdminUsersResult, AdminMember, RemoveAdminMemberOptions, ResendAdminInviteOptions, SetAdminEntitlementRulesOptions, SetAdminUserApplicationRoleOptions, SetAdminUserTeamOptions, UpdateAdminEntitlementOptions, UpdateAdminApplicationRoleOptions, UpdateAdminMemberRoleOptions, UpdateAdminOrganizationOptions } from '@meistrari/auth-core';
+import type { AdminApplicationRecord, AdminApplicationRole, AdminApplicationEntitlementRecord, AdminApplicationSecret, AdminEntitlementWithRules, AdminOrganization, AdminOrganizationSummary, AdminOrganizationTeamRecord, AdminUser, AdminUserAccess, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminApplicationRoleOptions, CreateAdminApplicationSecretOptions, CreateAdminOrganizationOptions, CreateAdminOrganizationTeamOptions, CreatedAdminApplicationSecret, GetAdminOrganizationOptions, GetAdminOrganizationsSummaryOptions, InviteAdminOrganizationUsersOptions, InviteAdminOrganizationUsersResult, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminOrganizationTeamsOptions, ListAdminOrganizationTeamsResult, ListAdminUsersOptions, ListAdminUsersResult, AdminMember, RemoveAdminMemberOptions, ResendAdminInviteOptions, SetAdminEntitlementRulesOptions, SetAdminUserApplicationRoleOptions, SetAdminUserTeamOptions, UpdateAdminEntitlementOptions, UpdateAdminApplicationRoleOptions, UpdateAdminMemberRoleOptions, UpdateAdminOrganizationOptions } from '@meistrari/auth-core';
 export interface UseTelaAdminReturn {
     /**
      * Lists users as a global admin, optionally with organization previews
@@ -47,6 +47,32 @@ export interface UseTelaAdminReturn {
      * @returns The created entitlement
      */
     createApplicationEntitlement: (applicationId: string, options: CreateAdminApplicationEntitlementOptions) => Promise<AdminApplicationEntitlementRecord>;
+    /**
+     * Lists client secrets for an application as a global admin.
+     * @param applicationId - ID of the application to inspect
+     * @returns Secret metadata without plaintext values
+     */
+    listApplicationSecrets: (applicationId: string) => Promise<AdminApplicationSecret[]>;
+    /**
+     * Creates a client secret for an application as a global admin.
+     * @param applicationId - ID of the application to update
+     * @param options - Optional secret display name
+     * @returns The created secret, including the plaintext value shown only once
+     */
+    createApplicationSecret: (applicationId: string, options?: CreateAdminApplicationSecretOptions) => Promise<CreatedAdminApplicationSecret>;
+    /**
+     * Deletes a client secret for an application as a global admin.
+     * @param applicationId - ID of the application to update
+     * @param secretId - ID of the secret to delete
+     * @returns The deleted secret metadata
+     */
+    deleteApplicationSecret: (applicationId: string, secretId: string) => Promise<AdminApplicationSecret>;
+    /**
+     * Retires an application's service-account identity as a global admin.
+     * @param applicationId - ID of the application to update
+     * @returns The updated application
+     */
+    retireApplicationServiceAccount: (applicationId: string) => Promise<AdminApplicationRecord>;
     /**
      * Fetches a single entitlement together with its ordered access rules.
      * @param entitlementId - ID of the entitlement to fetch

package/dist/runtime/composables/admin.js

@@ -33,6 +33,18 @@ export function useTelaAdmin() {
   async function createApplicationEntitlement(applicationId, options) {
     return await authClient.admin.createApplicationEntitlement(applicationId, options);
   }
+  async function listApplicationSecrets(applicationId) {
+    return await authClient.admin.listApplicationSecrets(applicationId);
+  }
+  async function createApplicationSecret(applicationId, options) {
+    return await authClient.admin.createApplicationSecret(applicationId, options);
+  }
+  async function deleteApplicationSecret(applicationId, secretId) {
+    return await authClient.admin.deleteApplicationSecret(applicationId, secretId);
+  }
+  async function retireApplicationServiceAccount(applicationId) {
+    return await authClient.admin.retireApplicationServiceAccount(applicationId);
+  }
   async function listOrganizations(options) {
     return await authClient.admin.listOrganizations(options);
   }
@@ -113,6 +125,10 @@ export function useTelaAdmin() {
     updateApplicationRole,
     deleteApplicationRole,
     createApplicationEntitlement,
+    listApplicationSecrets,
+    createApplicationSecret,
+    deleteApplicationSecret,
+    retireApplicationServiceAccount,
     getEntitlement,
     setEntitlementRules,
     updateEntitlement,

package/dist/runtime/composables/organization.d.ts

@@ -1,4 +1,4 @@
-import type { AcceptInvitationResult, CreateTeamPayload, FullOrganization, Invitation, InviteUserToOrganizationOptions, ListMembersOptions, Member, RemoveUserFromOrganizationOptions, Team, TeamMember, UpdateMemberRoleOptions, UpdateOrganizationPayload, UpdateTeamPayload } from '@meistrari/auth-core';
+import type { AcceptInvitationResult, CreateTeamPayload, FullOrganization, Invitation, InviteUserToOrganizationOptions, ListMembersOptions, ListOrganizationsOptions, ListOrganizationsWithRoleOptions, Member, OrganizationWithRole, RemoveUserFromOrganizationOptions, Team, TeamMember, UpdateMemberRoleOptions, UpdateOrganizationPayload, UpdateTeamPayload } from '@meistrari/auth-core';
 import type { Ref } from 'vue';
 export interface UseTelaOrganizationReturn {
     /** Reactive reference to the active organization with members, invitations, and teams. */
@@ -14,7 +14,10 @@ export interface UseTelaOrganizationReturn {
      * Lists all organizations for the current user session.
      * @returns A list of organizations
      */
-    listOrganizations: () => Promise<FullOrganization[]>;
+    listOrganizations: {
+        (options: ListOrganizationsWithRoleOptions): Promise<Array<FullOrganization & OrganizationWithRole>>;
+        (options?: ListOrganizationsOptions): Promise<FullOrganization[]>;
+    };
     /**
      * Sets the active organization for the current user session and updates the active organization state.
      * @param id - The ID of the organization to set as active

package/dist/runtime/composables/organization.js

@@ -15,17 +15,25 @@ export function useTelaOrganization() {
     activeOrganization.value = organization;
     return organization;
   }
-  async function listOrganizations() {
-    return await authClient.organization.listOrganizations();
+  async function listOrganizations(options) {
+    return await authClient.organization.listOrganizations(options);
   }
   async function setActiveOrganization(id) {
     await authClient.organization.setActiveOrganization(id);
-    const [organization, { token }] = await Promise.all([
+    const [organization, member, { token }] = await Promise.all([
       authClient.organization.getOrganization(id),
+      authClient.organization.getActiveMember(),
       authClient.session.getToken()
     ]);
     useCookie(jwtCookieName).value = token;
     activeOrganization.value = organization;
+    activeMember.value = member;
+    if (session.value) {
+      session.value = {
+        ...session.value,
+        activeOrganizationId: id
+      };
+    }
   }
   async function updateOrganization(payload) {
     if (!activeOrganization.value) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/auth-nuxt",
-  "version": "3.25.0",
+  "version": "3.27.0",
   "type": "module",
   "exports": {
     ".": {
@@ -36,7 +36,7 @@
     "docs": "nuxt-module-build prepare && typedoc"
   },
   "dependencies": {
-    "@meistrari/auth-core": "1.35.0",
+    "@meistrari/auth-core": "1.37.0",
     "jose": "6.1.3"
   },
   "peerDependencies": {