@monocloud/auth-node-core 0.0.0-canary-20251223204113

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 MonoCloud
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,143 @@
+![MonoCloud Logo](https://raw.githubusercontent.com/monocloud/auth-js/refs/heads/main/MonoCloud.png)
+
+## Introduction
+
+**MonoCloud Auth Node SDK – secure authentication and session management for Node.js backends.**
+
+[MonoCloud](https://www.monocloud.com?utm_source=github&utm_medium=auth_js) is a modern, developer-friendly Identity & Access Management platform.
+
+This package provides a **high-level authentication client for Node.js applications**, built on top of MonoCloud’s OpenID Connect (OIDC) implementation. It abstracts the complexity of OAuth/OIDC while remaining framework-agnostic.
+
+The SDK handles:
+
+- **Authorization Code Flow** with PKCE
+- **Secure session management** using encrypted cookies
+- **Automatic token rotation** via refresh tokens
+- **State and CSRF validation** out of the box
+
+> This package builds on **`@monocloud/auth-core`** and adds Node.js–specific session and cookie handling.
+
+## 📘 Documentation
+
+- **Documentation:** [https://www.monocloud.com/docs](https://www.monocloud.com/docs?utm_source=github&utm_medium=auth_js)
+
+## Supported Platforms
+
+- **Node.js >= 16.0.0**
+
+## Requirements
+
+- A **MonoCloud Tenant**
+- A **Client ID** and **Client Secret** (configured as a *Web Application*)
+- A **Random secret** (32+ characters) for encrypting session cookies
+
+## 📦 Installation
+
+```bash
+npm install @monocloud/auth-node-core
+```
+
+### Initialization
+
+Initialize the client with your tenant and application configuration.
+
+```typescript
+import { MonoCloudCoreClient } from '@monocloud/auth-node-core';
+
+const nodeClient = new MonoCloudCoreClient({
+  tenantDomain: 'https://<your-tenant-domain>',
+  clientId: '<your-client-id>',
+  clientSecret: '<your-client-secret>',
+  appUrl: '<application-server-url>',
+  cookieSecret: '<cookie-secret>', // Used to encrypt the session cookie
+});
+```
+
+⚠️ Security Note: Never commit secrets to source control. Always load them from environment variables.
+
+## Usage
+
+The SDK is **framework-agnostic**. It operates on generic request/response adapters so it can be used with Express, Fastify, Hapi, or custom servers.
+
+### Sign In
+
+Redirects the user to MonoCloud to start authentication.
+
+```typescript
+import type { MonoCloudRequest, MonoCloudResponse } from '@monocloud/auth-node-core';
+
+const request: MonoCloudRequest =   /* framework adapter */;
+const response: MonoCloudResponse = /* framework adapter */;
+
+// Default route: /api/auth/signin
+await nodeClient.signIn(request, response);
+```
+
+### Handle Callback
+
+Handles the redirect from MonoCloud, validates state, exchanges the authorization code for tokens, and sets the encrypted session cookie.
+
+```typescript
+import type { MonoCloudRequest, MonoCloudResponse } from '@monocloud/auth-node-core';
+
+const request: MonoCloudRequest =   /* framework adapter */;
+const response: MonoCloudResponse = /* framework adapter */;
+
+// Default route: /api/auth/callback
+await nodeClient.callback(request, response);
+```
+
+### Get Session
+
+Retrieve the current authenticated session from the request.
+
+```typescript
+const session = await nodeClient.getSession(request, response);
+
+console.log(session);
+```
+
+### Sign Out
+
+Clears the local session and redirects the user to MonoCloud to terminate the SSO session.
+
+```typescript
+import type { MonoCloudRequest, MonoCloudResponse } from '@monocloud/auth-node-core';
+
+const request: MonoCloudRequest =   /* framework adapter */;
+const response: MonoCloudResponse = /* framework adapter */;
+
+// Default route: /api/auth/signout
+await nodeClient.signOut(request, response);
+```
+
+## When should I use `auth-node-core`?
+
+Use **`@monocloud/auth-node-core`** if you are building a **Node.js backend** and want a secure authentication solution without tying yourself to a specific framework.
+
+This package is a good fit if you:
+
+- Are building an **API or server-rendered application** in Node.js
+- Want **cookie-based sessions** with encryption handled for you
+- Need built-in handling for **OIDC redirects, state validation, and token exchange**
+- Want to manage authentication in a **custom servers**
+- Prefer a **framework-agnostic** solution with sensible security defaults
+
+`auth-node-core` builds on top of `@monocloud/auth-core` and adds Node-specific features such as encrypted session cookies and refresh token rotation.
+
+Higher-level packages reuse the same underlying OIDC implementation but provide framework-specific ergonomics.
+
+## 🤝 Contributing & Support
+
+### Issues & Feedback
+
+- Use **GitHub Issues** for bug reports and feature requests.
+- For tenant or account-specific help, contact MonoCloud Support through your dashboard.
+
+### Security
+
+Do **not** report security issues publicly. Please follow the contact instructions at: [https://www.monocloud.com/contact](https://www.monocloud.com/contact?utm_source=github&utm_medium=auth_js)
+
+## 📄 License
+
+Licensed under the **MIT License**. See the included [`LICENSE`](https://github.com/monocloud/auth-js/blob/main/LICENSE) file.