@merkaly/nuxt 0.12.0 → 0.12.1

package/README.md

@@ -37,7 +37,7 @@ On boot the module restores an existing session (user and token) and then runs t
 
 ### Session lifetime
 
-The SPA keeps the session with **refresh tokens**: the client uses `useRefreshTokens` with `localStorage` cache and logs in with `audience` and `scope: openid profile email offline_access`. Before each API call the module asks Auth0 for the current access token, which is cached and renewed with the refresh token once it expires (2 hours for `https://api.merkaly.io`). When the refresh token is gone or expired, protected surfaces (`requiresAuth: true`) go back to login instead of calling the API without a token. Account linking (`linkWithConnection(connection)`) uses a separate Auth0 client, the account linking client (named `account.merkaly.io` in Auth0, no app behind it), with an in-memory cache, created only on the first call (no extra `checkSession` on page load). It opens a login popup for that connection and sends the popup's raw ID token to `POST /identities` as `{ idToken }`; the api verifies the token (signature, issuer, audience = the account linking client, expiry) and links the identity from its `sub` into the logged-in user. Requires an api with that contract (older clients that sent `{ provider, userId }` get `400`).
+The SPA keeps the session with **refresh tokens**: the client uses `useRefreshTokens` with `localStorage` cache and logs in with `audience` and `scope: openid profile email offline_access`. Before each API call the module asks Auth0 for the current access token, which is cached and renewed with the refresh token once it expires (2 hours for `https://api.merkaly.io`). When the refresh token is gone or expired, protected surfaces (`requiresAuth: true`) go back to login instead of calling the API without a token. Account linking (`linkWithConnection(connection)`) uses a separate Auth0 client, the `auth.merkaly.io` SPA client in Auth0, with an in-memory cache, created only on the first call (no extra `checkSession` on page load). It opens a login popup for that connection and sends the popup's raw ID token to `POST /identities` as `{ idToken }`; the api verifies the token (signature, issuer, audience = the account linking client, expiry) and links the identity from its `sub` into the logged-in user. Requires an api with that contract (older clients that sent `{ provider, userId }` get `400`).
 
 The Auth0 side (tenant, API, app settings, refresh token rotation and lifetimes, organizations, and the checklist for a new app) is documented in the auth.merkaly.io repo: [`docs/tenant-setup.md`](https://github.com/merkaly-io/auth.merkaly.io/blob/master/docs/tenant-setup.md).
 

package/dist/module.json

@@ -4,7 +4,7 @@
   "compatibility": {
     "nuxt": ">=3.14.0"
   },
-  "version": "0.12.0",
+  "version": "0.12.1",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/runtime/components/table/TableDatagrid.vue

@@ -193,14 +193,12 @@ function getRowAttrs(item, idx) {
           <BTh v-if="hasDetailsSlot" class="w-25px" style="padding: unset !important;" />
 
           <BTh v-if="!props.hideSelect" class="w-40px px-0">
-            <div class="form-check form-check-sm form-check-custom cell-checkbox">
-              <input
-                :disabled="$datagrid.loading"
-                class="form-check-input"
-                type="checkbox"
-                v-bind="selectionState.checkboxAllAttrs"
-                @input="toggleCheckAll()">
-            </div>
+            <BFormCheckbox
+              :disabled="$datagrid.loading"
+              :indeterminate="selectionState.checkboxAllAttrs.indeterminate"
+              :model-value="selectionState.allChecked"
+              class="form-check-sm form-check-custom cell-checkbox"
+              @update:model-value="toggleCheckAll()" />
           </BTh>
 
           <template v-for="[key, column] in visibleColumns" :key="key">
@@ -238,9 +236,10 @@ function getRowAttrs(item, idx) {
             </BTd>
 
             <BTd v-if="!props.hideSelect" class="w-40px px-0">
-              <div class="form-check form-check-sm form-check-custom cell-checkbox">
-                <input v-model="item._checked" :disabled="$datagrid.loading" class="form-check-input" type="checkbox">
-              </div>
+              <BFormCheckbox
+                v-model="item._checked"
+                :disabled="$datagrid.loading"
+                class="form-check-sm form-check-custom cell-checkbox" />
             </BTd>
 
             <template v-for="[key, column] in visibleColumns" :key="key">
@@ -282,9 +281,9 @@ function getRowAttrs(item, idx) {
       <template v-if="!props.hidePagination">
         <BRow align-h="between" align-v="center" class="w-100">
           <BCol cols="auto">
-            <select v-model="$datagrid.limit" class="form-select form-select-sm form-select-solid" disabled>
+            <BFormSelect v-model="$datagrid.limit" class="form-select-solid" disabled size="sm">
               <BFormSelectOption :value="10">10</BFormSelectOption>
-            </select>
+            </BFormSelect>
           </BCol>
 
           <BCol v-show="!$datagrid.loading" cols="auto">

package/dist/runtime/plugins/auth0.client.js

@@ -77,8 +77,8 @@ export default defineNuxtPlugin(async ({ callHook, hook }) => {
       redirect_uri: URL.canParse($config.merkaly.auth0.callbackUrl) ? $config.merkaly.auth0.callbackUrl : location.origin.concat($config.merkaly.auth0.callbackUrl)
     },
     cacheLocation: "memory",
-    clientId: "AwD3uBHhLhFBbJhwSWXYFh9cZYidNc6L",
-    // account.merkaly.io, the api checks this audience
+    clientId: "15yd1Ag668M0mQVbmjA60NaCD53UDIRQ",
+    // auth.merkaly.io SPA, the api checks this audience
     domain: $config.merkaly.auth0.domain
   });
   auth0.linkWithConnection = async (connection) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@merkaly/nuxt",
-  "version": "0.12.0",
+  "version": "0.12.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/merkaly-io/nuxt.git"