@merkaly/nuxt 0.12.4 → 0.12.5

package/README.md

@@ -35,6 +35,20 @@ On boot the module restores an existing session (user and token) and then runs t
 | store | optional | required | `merkaly:tenant` resolves the store from the host (public); a signed-in buyer is restored too; protected pages (account, checkout) ask for login. |
 | www | optional | not used | No hooks; anonymous or signed-in. |
 
+### Login entry points (`MKAuth`)
+
+The callback page renders `MKAuth`, which reads its query string:
+
+| Query | Behavior |
+|---|---|
+| `?code=...` (Auth0 callback) | Completes the login, navigates to the `appState.target` set when it started (or `/`) and emits `success` with that `appState`. |
+| `?error=...&error_description=...` | Emits `error` and shows a 400 error page. |
+| `?invitation=<ticket>&organization=<org_id>` | Accepts an organization invitation (Auth0 Organizations). |
+| `?organization=<org_id>[&redirect=/path]` | Logs in straight into that organization (a silent login when the Auth0 session exists) and lands on `redirect`, e.g. `https://admin.merkaly.io/auth?organization=org_123&redirect=/onboarding` right after creating a store in www. |
+| `?redirect=/path` | Plain login, lands on `redirect` (the auth middleware sends protected pages here). |
+
+To open the Auth0 signup screen instead of the login one, use `useAuth().signup({ redirectTo })`: it calls `loginWithRedirect` with `screen_hint: 'signup'` and `appState: { target: redirectTo }`, so after the callback the app lands on `redirectTo` (default `/`).
+
 ### Session lifetime
 
 The SPA keeps the session with **refresh tokens**: the client uses `useRefreshTokens` with `localStorage` cache and logs in with `audience` and `scope: openid profile email offline_access`. Before each API call the module asks Auth0 for the current access token, which is cached and renewed with the refresh token once it expires (2 hours for `https://api.merkaly.io`). When the refresh token is gone or expired, protected surfaces (`requiresAuth: true`) go back to login instead of calling the API without a token. Account linking (`linkWithConnection(connection)`) uses a separate Auth0 client, the `auth.merkaly.io` SPA client in Auth0, with an in-memory cache, created only on the first call (no extra `checkSession` on page load). It opens a login popup for that connection and sends the popup's raw ID token to `POST /auth/identities` as `{ idToken }`; the api verifies the token (signature, issuer, audience = the account linking client, expiry) and links the identity from its `sub` into the logged-in user. Requires an api with that contract (older clients that sent `{ provider, userId }` get `400`).

package/dist/module.json

@@ -4,7 +4,7 @@
   "compatibility": {
     "nuxt": ">=3.14.0"
   },
-  "version": "0.12.4",
+  "version": "0.12.5",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/runtime/components/auth.d.vue.ts

@@ -1,9 +1,13 @@
 declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {} & {
     error: (reason: string) => any;
-    success: () => any;
+    success: (appState?: {
+        target?: string;
+    } | undefined) => any;
 }, string, import("vue").PublicProps, Readonly<{}> & Readonly<{
     onError?: ((reason: string) => any) | undefined;
-    onSuccess?: (() => any) | undefined;
+    onSuccess?: ((appState?: {
+        target?: string;
+    } | undefined) => any) | undefined;
 }>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
 declare const _default: typeof __VLS_export;
 export default _default;

package/dist/runtime/components/auth.vue

@@ -12,6 +12,9 @@ const redirect = params.get("redirect");
 function handleInvite() {
   return $auth0.loginWithRedirect({ authorizationParams: { organization, invitation } });
 }
+function handleOrganization() {
+  return $auth0.loginWithRedirect({ appState: { target: redirect || "/" }, authorizationParams: { organization } });
+}
 function handleError() {
   const errorDescription = params.get("error_description") ?? "Auth error";
   emit("error", errorDescription);
@@ -21,12 +24,13 @@ function handleError() {
   });
 }
 function handleCode() {
-  return void $auth0.handleRedirectCallback().then(() => emit("success"));
+  return void $auth0.handleRedirectCallback().then((result) => emit("success", result?.appState));
 }
 callOnce(async () => {
   if (error) return handleError();
   if (code) return handleCode();
   if (invitation && organization) return handleInvite();
+  if (organization) return handleOrganization();
   return $auth0.loginWithRedirect({ appState: { target: redirect || "/" } });
 });
 </script>

package/dist/runtime/components/auth.vue.d.ts

@@ -1,9 +1,13 @@
 declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {} & {
     error: (reason: string) => any;
-    success: () => any;
+    success: (appState?: {
+        target?: string;
+    } | undefined) => any;
 }, string, import("vue").PublicProps, Readonly<{}> & Readonly<{
     onError?: ((reason: string) => any) | undefined;
-    onSuccess?: (() => any) | undefined;
+    onSuccess?: ((appState?: {
+        target?: string;
+    } | undefined) => any) | undefined;
 }>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
 declare const _default: typeof __VLS_export;
 export default _default;

package/dist/runtime/composables/useAuth.d.ts

@@ -20,6 +20,9 @@ export declare const useAuth: () => {
     isLoading: import("vue").Ref<boolean, boolean>;
     logout: () => any;
     retry: () => Promise<void>;
+    signup: ({ redirectTo }?: {
+        redirectTo?: string;
+    }) => any;
     token: import("vue").Ref<string | null, string | null>;
     user: import("vue").Ref<User | undefined, User | undefined>;
 };

package/dist/runtime/composables/useAuth.js

@@ -9,6 +9,10 @@ export const useAuth = () => {
   const isAuthenticated = computed(() => Boolean(user.value?.sub));
   const clear = () => error.value = void 0;
   const logout = () => nuxtApp.$auth0.logout();
+  const signup = ({ redirectTo = "/" } = {}) => nuxtApp.$auth0.loginWithRedirect({
+    appState: { target: redirectTo },
+    authorizationParams: { screen_hint: "signup" }
+  });
   const retry = async () => {
     isLoading.value = true;
     clear();
@@ -31,6 +35,7 @@ export const useAuth = () => {
     isLoading,
     logout,
     retry,
+    signup,
     token,
     user
   };

package/dist/runtime/plugins/auth0.client.js

@@ -53,10 +53,12 @@ export default defineNuxtPlugin(async ({ callHook, hook }) => {
     return initTenantContext();
   };
   hook("merkaly:auth:retry", () => resolveIdentity().then(startSession));
-  auth0.handleRedirectCallback = () => self0.handleRedirectCallback().then(async ({ appState }) => {
+  auth0.handleRedirectCallback = () => self0.handleRedirectCallback().then(async (result) => {
+    const { appState } = result;
     await resolveIdentity();
     await startSession();
     void navigateTo(appState?.target || "/");
+    return result;
   }, (reason) => fail({ message: reason.error_description || reason.message, stage: "callback" }));
   auth0.loginWithRedirect = (options = {}) => self0.loginWithRedirect(defu(options, {
     authorizationParams: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@merkaly/nuxt",
-  "version": "0.12.4",
+  "version": "0.12.5",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/merkaly-io/nuxt.git"
@@ -30,7 +30,7 @@
   "dependencies": {
     "@auth0/auth0-spa-js": "^2.30.0",
     "@bootstrap-vue-next/nuxt": "^1.0.0",
-    "@nuxt/devtools": "^4.0.0",
+    "@nuxt/devtools": "^4.1.0",
     "@nuxt/eslint": "1.17.0",
     "@nuxt/eslint-config": "^1.17.0",
     "@nuxt/fonts": "1.2.0",
@@ -40,7 +40,7 @@
     "@nuxtjs/plausible": "^4.0.0",
     "@nuxtjs/robots": "^7.0.2",
     "@nuxtjs/sitemap": "^9.1.0",
-    "@sentry/nuxt": "^11.10.0",
+    "@sentry/nuxt": "^11.11.0",
     "@types/node": "latest",
     "@types/vue-select": "^3.16.8",
     "@vueuse/components": "^15.0.0",
@@ -57,9 +57,9 @@
     "gsap": "^3.15.0",
     "notivue": "^2.4.5",
     "nuxt": "^4.6.3",
-    "posthog-js": "^1.446.0",
+    "posthog-js": "^1.447.1",
     "reflect-metadata": "^0.2.2",
-    "sass": "^1.107.1",
+    "sass": "^1.108.0",
     "typescript": "~5.9.3",
     "v-money3": "^3.26.1",
     "vite-svg-loader": "^5.1.1",