@meistrari/auth-nuxt 4.2.0 → 4.3.0

package/README.md

@@ -38,6 +38,52 @@ Application auth auto-imports `useTelaApplicationAuth()` and the application-mod
 
 First-party auth auto-imports `useTelaSession()`, `useTelaSessionAssurance()`, `useTelaOrganization()`, and `useTelaApiKey()`.
 
+## Runtime configuration
+
+Set deployment-specific values under `runtimeConfig.telaAuth`. These take precedence
+over `telaAuth` module options, which provide defaults (including nested application settings).
+
+```ts
+export default defineNuxtConfig({
+  modules: ['@meistrari/auth-nuxt'],
+  telaAuth: {
+    application: { enabled: true },
+  },
+  runtimeConfig: {
+    telaAuth: {
+      apiUrl: '',
+      application: {
+        applicationId: '',
+        dashboardUrl: '',
+        redirectUri: '',
+      },
+    },
+  },
+})
+```
+
+Override these values in the deployed server's environment without rebuilding:
+
+```sh
+NUXT_TELA_AUTH_API_URL=https://auth.example.com
+NUXT_TELA_AUTH_JWT_COOKIE_NAME=my-jwt
+NUXT_TELA_AUTH_APPLICATION_APPLICATION_ID=app_123
+NUXT_TELA_AUTH_APPLICATION_DASHBOARD_URL=https://accounts.example.com
+NUXT_TELA_AUTH_APPLICATION_REDIRECT_URI=https://app.example.com/auth/callback
+NUXT_TELA_AUTH_APPLICATION_LOGIN_PATH=/login
+NUXT_TELA_AUTH_APPLICATION_UNAUTHORIZED_PATH=/unauthorized
+```
+
+The module declares these runtime keys even when omitted from your config. Server
+handlers read `runtimeConfig.telaAuth`; the SDK copies its supported settings to
+`runtimeConfig.public.telaAuth` per request for browser composables and plugins.
+These settings are public: do not use them for credentials or secrets.
+
+`application.enabled` and `skipServerMiddleware` select registrations at build time;
+set them in `telaAuth` or `runtimeConfig.telaAuth` before building. Changing those
+flags in the deployed environment cannot change which routes or plugins were built.
+Static prerendered output retains the values from prerendering.
+
 ## API Reference
 
 See it on [Pantry](https://pantry.tela.tools/ingredients/auth-nuxt/api)

package/dist/module.d.mts

@@ -57,6 +57,13 @@ interface ModuleOptions {
  *   and organization composables.
  */
 declare const module$1: NuxtModule<ModuleOptions, ModuleOptions, false>;
+declare module '@nuxt/schema' {
+    interface RuntimeConfig {
+        telaAuth: Partial<Omit<ModuleOptions, 'application'>> & {
+            application?: Partial<NonNullable<ModuleOptions['application']>>;
+        };
+    }
+}
 
 export { module$1 as default };
 export type { ModuleOptions };

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/auth-nuxt",
   "configKey": "telaAuth",
-  "version": "4.2.0",
+  "version": "4.3.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -1,4 +1,4 @@
-import { defineNuxtModule, createResolver, addImports, addComponent, addServerImportsDir, addServerHandler, addPlugin } from '@nuxt/kit';
+import { defineNuxtModule, createResolver, addServerPlugin, addImports, addComponent, addServerImportsDir, addServerHandler, addPlugin } from '@nuxt/kit';
 
 const module$1 = defineNuxtModule({
   meta: {
@@ -6,12 +6,31 @@ const module$1 = defineNuxtModule({
     configKey: "telaAuth"
   },
   defaults: {
+    apiUrl: "",
     jwtCookieName: "tela-jwt",
     skipServerMiddleware: false
   },
   setup(options, nuxt) {
     const resolver = createResolver(import.meta.url);
-    nuxt.options.runtimeConfig.public.telaAuth = options;
+    const runtimeOptions = nuxt.options.runtimeConfig.telaAuth;
+    options = {
+      ...options,
+      apiUrl: options.apiUrl ?? "",
+      ...runtimeOptions,
+      application: {
+        enabled: false,
+        dashboardUrl: "",
+        applicationId: "",
+        redirectUri: "",
+        loginPath: "/login",
+        unauthorizedPath: "/unauthorized",
+        ...options.application,
+        ...runtimeOptions?.application
+      }
+    };
+    nuxt.options.runtimeConfig.telaAuth = options;
+    nuxt.options.runtimeConfig.public.telaAuth = { ...options };
+    addServerPlugin(resolver.resolve("./runtime/server/plugins/config"));
     addImports({
       name: "useTelaApiKey",
       as: "useTelaApiKey",

package/dist/runtime/server/middleware/application-auth.js

@@ -11,7 +11,7 @@ async function setApplicationAuthContext(event) {
   if (!token) {
     return;
   }
-  const authConfig = useRuntimeConfig(event).public.telaAuth;
+  const authConfig = useRuntimeConfig(event).telaAuth;
   const { apiUrl, application } = authConfig;
   const { applicationId } = application ?? {};
   if (!applicationId || !apiUrl) {

package/dist/runtime/server/middleware/auth.js

@@ -6,7 +6,7 @@ async function setAuthContext(event) {
     user: null,
     workspace: null
   };
-  const authConfig = useRuntimeConfig(event).public.telaAuth;
+  const authConfig = useRuntimeConfig(event).telaAuth;
   const tokenCookie = getCookie(event, authConfig.jwtCookieName);
   if (!tokenCookie)
     return;

package/dist/runtime/server/plugins/config.d.ts

@@ -0,0 +1,3 @@
+/** Publishes the resolved, browser-safe auth settings for each request's Nuxt payload. */
+declare const _default: import("nitropack/types").NitroAppPlugin;
+export default _default;

package/dist/runtime/server/plugins/config.js

@@ -0,0 +1,20 @@
+import { defineNitroPlugin, useRuntimeConfig } from "nitropack/runtime";
+export default defineNitroPlugin((nitroApp) => {
+  nitroApp.hooks.hook("request", (event) => {
+    const config = useRuntimeConfig(event);
+    const { apiUrl, jwtCookieName, skipServerMiddleware, application } = config.telaAuth;
+    config.public.telaAuth = {
+      apiUrl,
+      jwtCookieName,
+      skipServerMiddleware,
+      application: application && {
+        enabled: application.enabled,
+        dashboardUrl: application.dashboardUrl,
+        applicationId: application.applicationId,
+        redirectUri: application.redirectUri,
+        loginPath: application.loginPath,
+        unauthorizedPath: application.unauthorizedPath
+      }
+    };
+  });
+});

package/dist/runtime/server/routes/auth/api-key-proxy.js

@@ -32,7 +32,7 @@ function getBearerToken(authorization) {
   return value.slice("bearer ".length).trimStart() || void 0;
 }
 export default defineEventHandler(async (event) => {
-  const authConfig = useRuntimeConfig(event).public.telaAuth;
+  const authConfig = useRuntimeConfig(event).telaAuth;
   const requestUrl = getRequestURL(event);
   const requestHeaders = getHeaders(event);
   const cookieAccessToken = getCookie(event, "tela-access-token");

package/dist/runtime/server/routes/auth/callback.js

@@ -5,8 +5,8 @@ export default defineEventHandler(async (event) => {
   const query = getQuery(event);
   const code = query.code;
   const state = query.state;
-  const config = useRuntimeConfig();
-  const authConfig = config.public.telaAuth;
+  const config = useRuntimeConfig(event);
+  const authConfig = config.telaAuth;
   const loginPath = authConfig.application?.loginPath ?? "/login";
   if (!code || !state) {
     console.error("[Auth Callback] Missing code or state parameter");

package/dist/runtime/server/routes/auth/logout.js

@@ -2,7 +2,7 @@ import { useRuntimeConfig } from "#imports";
 import { defineEventHandler, deleteCookie, getCookie } from "h3";
 import { createNuxtAuthClient } from "../../../shared.js";
 export default defineEventHandler(async (event) => {
-  const authConfig = useRuntimeConfig().public.telaAuth;
+  const authConfig = useRuntimeConfig(event).telaAuth;
   const refreshToken = getCookie(event, "tela-refresh-token");
   deleteCookie(event, "tela-access-token", { path: "/" });
   deleteCookie(event, "tela-refresh-token", { path: "/" });

package/dist/runtime/server/routes/auth/organization-proxy.js

@@ -49,7 +49,7 @@ function getBearerToken(authorization) {
   return value.slice("bearer ".length).trimStart() || void 0;
 }
 export default defineEventHandler(async (event) => {
-  const authConfig = useRuntimeConfig(event).public.telaAuth;
+  const authConfig = useRuntimeConfig(event).telaAuth;
   const requestUrl = getRequestURL(event);
   const requestHeaders = getHeaders(event);
   const cookieAccessToken = getCookie(event, "tela-access-token");

package/dist/runtime/server/routes/auth/refresh.js

@@ -4,8 +4,8 @@ import { parseTokenExpiry } from "../../../helpers/token.js";
 import { createNuxtAuthClient } from "../../../shared.js";
 import { planRefreshFailure, shouldWriteTokens } from "../../utils/refresh-upstream.js";
 export default defineEventHandler(async (event) => {
-  const config = useRuntimeConfig();
-  const authConfig = config.public.telaAuth;
+  const config = useRuntimeConfig(event);
+  const authConfig = config.telaAuth;
   const refreshToken = getCookie(event, "tela-refresh-token");
   if (!refreshToken) {
     throw createError({

package/dist/runtime/server/routes/auth/switch-organization.js

@@ -2,8 +2,8 @@ import { createError, useRuntimeConfig } from "#imports";
 import { defineEventHandler, getCookie, readBody, setCookie } from "h3";
 import { createNuxtAuthClient } from "../../../shared.js";
 export default defineEventHandler(async (event) => {
-  const config = useRuntimeConfig();
-  const authConfig = config.public.telaAuth;
+  const config = useRuntimeConfig(event);
+  const authConfig = config.telaAuth;
   const accessToken = getCookie(event, "tela-access-token");
   if (!accessToken) {
     throw createError({

package/dist/runtime/server/routes/auth/whoami.js

@@ -2,8 +2,8 @@ import { createError, useRuntimeConfig } from "#imports";
 import { defineEventHandler, getCookie } from "h3";
 import { createNuxtAuthClient } from "../../../shared.js";
 export default defineEventHandler(async (event) => {
-  const config = useRuntimeConfig();
-  const authConfig = config.public.telaAuth;
+  const config = useRuntimeConfig(event);
+  const authConfig = config.telaAuth;
   const authClient = createNuxtAuthClient(authConfig.apiUrl, () => null);
   const accessToken = getCookie(event, "tela-access-token");
   if (!accessToken) {

package/dist/runtime/server/utils/require-auth.js

@@ -18,7 +18,7 @@ export function requireAuth(handler, options) {
       return await handler(event);
     }
     const token = getCookie(event, "tela-access-token");
-    const authConfig = useRuntimeConfig(event).public.telaAuth;
+    const authConfig = useRuntimeConfig(event).telaAuth;
     const { apiUrl, application } = authConfig;
     const { applicationId } = application ?? {};
     if (!applicationId) {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@meistrari/auth-nuxt",
-    "version": "4.2.0",
+    "version": "4.3.0",
     "type": "module",
     "exports": {
         ".": {