@mirrormedia/lilith-google-auth 0.1.0

package/lib/with-google-auth.js

@@ -0,0 +1,54 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.withGoogleAuth = withGoogleAuth;
+
+var _miniApp = require("./mini-app");
+
+var _passwordPlugin = require("./password-plugin");
+
+/**
+ * Wraps a Keystone config with Google sign-in: mounts the mini-app at the head
+ * of `server.extendExpressApp` and, when the password kill switch is on, adds
+ * the Apollo block plugin the mini-app's HTTP guard cannot replace.
+ *
+ * Mounting first is what lets the mini-app answer `/signin` before the Admin
+ * UI middleware claims it; it also means the mini-app stamps its own
+ * `X-Robots-Tag` rather than inheriting the host's.
+ */
+function withGoogleAuth(config, options) {
+  var _config$server;
+
+  const {
+    isEnabled,
+    ...miniAppOptions
+  } = options;
+  if (isEnabled === false) return config;
+  const originalExtendExpressApp = (_config$server = config.server) === null || _config$server === void 0 ? void 0 : _config$server.extendExpressApp;
+  const next = { ...config,
+    server: { ...config.server,
+      extendExpressApp: async (app, context) => {
+        app.use((0, _miniApp.createGoogleAuthMiniApp)({ ...miniAppOptions,
+          // Keystone's generated context is structurally compatible with
+          // the narrow KeystoneContext this package declares.
+          keystoneContext: context
+        }));
+        await (originalExtendExpressApp === null || originalExtendExpressApp === void 0 ? void 0 : originalExtendExpressApp(app, context));
+      }
+    }
+  };
+
+  if (options.passwordLoginEnabled === false) {
+    var _config$graphql, _config$graphql2, _config$graphql2$apol;
+
+    next.graphql = { ...config.graphql,
+      apolloConfig: { ...((_config$graphql = config.graphql) === null || _config$graphql === void 0 ? void 0 : _config$graphql.apolloConfig),
+        plugins: [(0, _passwordPlugin.createPasswordLoginBlockPlugin)(), ...(((_config$graphql2 = config.graphql) === null || _config$graphql2 === void 0 ? void 0 : (_config$graphql2$apol = _config$graphql2.apolloConfig) === null || _config$graphql2$apol === void 0 ? void 0 : _config$graphql2$apol.plugins) ?? [])]
+      }
+    };
+  }
+
+  return next;
+}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@mirrormedia/lilith-google-auth",
+  "version": "0.1.0",
+  "description": "Google Workspace sign-in mini-app for Lilith Keystone CMS packages",
+  "main": "lib/index.js",
+  "types": "@types/index.d.ts",
+  "scripts": {
+    "build": "make build",
+    "clean": "make clean",
+    "test": "tsx --test 'src/**/*.test.ts'"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/mirror-media/Lilith.git",
+    "directory": "packages/google-auth"
+  },
+  "keywords": [
+    "Google Workspace",
+    "OAuth",
+    "KeystoneJS",
+    "Keystone 6",
+    "CMS"
+  ],
+  "license": "MIT",
+  "files": [
+    "lib",
+    "@types"
+  ],
+  "dependencies": {
+    "@types/express": "^4.17.14",
+    "cookie": "^0.5.0",
+    "google-auth-library": "^10.5.0"
+  },
+  "peerDependencies": {
+    "express": "^4.17.1",
+    "graphql": "^16"
+  },
+  "devDependencies": {
+    "@types/cookie": "^0.5.1",
+    "express": "^4.17.1",
+    "graphql": "^16.12.0",
+    "graphql-upload": "^15.0.2",
+    "tsx": "^4.23.13",
+    "typescript": "^4.7.4"
+  }
+}