@moteurio/plugin-auth-github 0.0.0-stage → 2026.10.23

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+import type { PluginManifest, PluginRouteContext, PluginRouteContribution } from '@moteurio/types/Plugin.js';
+import { type PluginInitContext as PluginContext } from '@moteurio/plugin-sdk';
+export declare const manifest: PluginManifest;
+export declare function init(_ctx: PluginContext): void;
+export declare function getRoutes(ctx: PluginRouteContext): PluginRouteContribution;
+export declare function getAuthProviders(): {
+    id: string;
+    label: string;
+    enabled: boolean;
+    loginPath: string;
+    callbackPath: string;
+}[];
+declare const _default: {
+    manifest: PluginManifest;
+    init: typeof init;
+    getRoutes: typeof getRoutes;
+    getAuthProviders: typeof getAuthProviders;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC7G,OAAO,EAMH,KAAK,iBAAiB,IAAI,aAAa,EAC1C,MAAM,sBAAsB,CAAC;AAM9B,eAAO,MAAM,QAAQ,EAAE,cAOtB,CAAC;AAEF,wBAAgB,IAAI,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAAG;AAiGlD,wBAAgB,SAAS,CAAC,GAAG,EAAE,kBAAkB,GAAG,uBAAuB,CAM1E;AAED,wBAAgB,gBAAgB;;;;;;IAU/B;;;;;;;AAED,wBAA+D"}

package/dist/index.js

@@ -0,0 +1,119 @@
+/**
+ * Optional plugin: GitHub OAuth. Registers GET /auth/github and GET /auth/github/callback.
+ */
+import { Router } from 'express';
+import axios from 'axios';
+import { beginOAuth, completeOAuth, oauthConfig, redirectAfterLogin, redirectLoginFailed } from '@moteurio/plugin-sdk';
+import { loginWithProvider } from '@moteurio/core/auth.js';
+const NOT_OFFERED = { error: 'GitHub sign-in is not available on this server.' };
+export const manifest = {
+    id: 'auth-github',
+    label: 'GitHub OAuth',
+    description: 'Sign in with GitHub',
+    source: 'opensource',
+    kind: 'optional',
+    scope: 'global'
+};
+export function init(_ctx) { }
+function createGitHubRouter(ctx) {
+    const router = Router();
+    router.get('/github', (req, res) => {
+        const config = oauthConfig('github');
+        if (!config) {
+            res.status(404).json(NOT_OFFERED);
+            return;
+        }
+        const params = new URLSearchParams({
+            client_id: config.clientId,
+            redirect_uri: config.redirectUri,
+            scope: 'read:user user:email',
+            state: beginOAuth(req, res, 'github')
+        });
+        res.redirect(`https://github.com/login/oauth/authorize?${params.toString()}`);
+    });
+    router.get('/github/callback', async (req, res) => {
+        const config = oauthConfig('github');
+        if (!config) {
+            res.status(404).json(NOT_OFFERED);
+            return;
+        }
+        const started = completeOAuth(req, res, 'github');
+        if (!started)
+            return redirectLoginFailed(res, 'state');
+        const code = req.query.code;
+        if (typeof code !== 'string' || !code)
+            return redirectLoginFailed(res, 'failed');
+        try {
+            const tokenRes = await axios.post('https://github.com/login/oauth/access_token', {
+                client_id: config.clientId,
+                client_secret: config.clientSecret,
+                code,
+                redirect_uri: config.redirectUri
+            }, { headers: { Accept: 'application/json' } });
+            const accessToken = tokenRes.data.access_token;
+            if (!accessToken)
+                return redirectLoginFailed(res, 'failed');
+            const headers = { Authorization: `Bearer ${accessToken}` };
+            const [userRes, emailsRes] = await Promise.all([
+                axios.get('https://api.github.com/user', { headers }),
+                axios.get('https://api.github.com/user/emails', { headers })
+            ]);
+            const email = emailsRes.data.find((e) => e.primary && e.verified)?.email;
+            if (!email)
+                return redirectLoginFailed(res, 'email');
+            const profile = userRes.data;
+            const { token } = await loginWithProvider({ auth: { githubId: profile.id }, email, name: profile.name || profile.login }, ctx.authCallbacks?.runOnboardingForNewUser);
+            redirectAfterLogin(res, token, started.next);
+        }
+        catch (err) {
+            if (err instanceof Error && err.message === 'User is not active') {
+                return redirectLoginFailed(res, 'inactive');
+            }
+            console.error('GitHub callback error:', err);
+            redirectLoginFailed(res, 'failed');
+        }
+    });
+    return router;
+}
+const openapi = {
+    '/auth/github': {
+        get: {
+            summary: 'Redirect to GitHub login',
+            tags: ['Auth'],
+            description: "Redirects the user to GitHub's OAuth login screen. `next` (a path in the app) is where they land after signing in.",
+            parameters: [{ name: 'next', in: 'query', required: false, schema: { type: 'string' } }],
+            responses: { '302': { description: 'Redirect to GitHub OAuth screen' } }
+        }
+    },
+    '/auth/github/callback': {
+        get: {
+            summary: 'GitHub OAuth callback',
+            tags: ['Auth'],
+            description: 'Checks `state` against the browser that started the sign-in, creates or reuses the account with the verified primary email, then redirects to `AUTH_REDIRECT_AFTER_LOGIN` with `#token=…&next=…`, or `#error=state|email|inactive|failed`.',
+            parameters: [
+                { name: 'code', in: 'query', required: true, schema: { type: 'string' } },
+                { name: 'state', in: 'query', required: true, schema: { type: 'string' } }
+            ],
+            responses: { '302': { description: 'Redirect to the app with a token or an error in the fragment' } }
+        }
+    }
+};
+export function getRoutes(ctx) {
+    return {
+        path: '/auth',
+        router: createGitHubRouter(ctx),
+        openapi: { paths: openapi }
+    };
+}
+export function getAuthProviders() {
+    return [
+        {
+            id: 'github',
+            label: 'GitHub',
+            enabled: oauthConfig('github') !== null,
+            loginPath: '/auth/github',
+            callbackPath: '/auth/github/callback'
+        }
+    ];
+}
+export default { manifest, init, getRoutes, getAuthProviders };

package/package.json

@@ -1,6 +1,34 @@
 {
-  "name": "@moteurio/plugin-auth-github",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+    "name":  "@moteurio/plugin-auth-github",
+    "version": "2026.10.23",
+    "type":  "module",
+    "main":  "./dist/index.js",
+    "types":  "./dist/index.d.ts",
+    "exports":  {
+                    ".":  "./dist/index.js"
+                },
+    "files":  [
+                  "dist"
+              ],
+    "scripts":  {
+                    "build":  "tsc -b",
+                    "clean":  "rimraf dist",
+                    "prepublishOnly":  "pnpm run build",
+                    "test":  "vitest run --passWithNoTests"
+                },
+    "dependencies":  {
+                         "@moteurio/core":  "^2026.10.23",
+                         "@moteurio/plugin-sdk":  "^2026.10.23",
+                         "@moteurio/types":  "^2026.10.23",
+                         "axios":  "^1.13.6",
+                         "express":  "^4.19.2",
+                         "openapi-types":  "^12.1.3"
+                     },
+    "devDependencies":  {
+                            "@types/express":  "^5.0.3"
+                        },
+    "license":  "MIT",
+    "publishConfig":  {
+                          "access":  "public"
+                      }
 }

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.