@moteurio/plugin-auth-microsoft 0.0.0-stage → 2026.10.23-2

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+import type { PluginManifest, PluginRouteContext, PluginRouteContribution } from '@moteurio/types/Plugin.js';
+import { type PluginInitContext as PluginContext } from '@moteurio/plugin-sdk';
+export declare const manifest: PluginManifest;
+export declare function init(_ctx: PluginContext): void;
+export declare function getRoutes(ctx: PluginRouteContext): PluginRouteContribution;
+export declare function getAuthProviders(): {
+    id: string;
+    label: string;
+    enabled: boolean;
+    loginPath: string;
+    callbackPath: string;
+}[];
+declare const _default: {
+    manifest: PluginManifest;
+    init: typeof init;
+    getRoutes: typeof getRoutes;
+    getAuthProviders: typeof getAuthProviders;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC7G,OAAO,EASH,KAAK,iBAAiB,IAAI,aAAa,EAC1C,MAAM,sBAAsB,CAAC;AAe9B,eAAO,MAAM,QAAQ,EAAE,cAOtB,CAAC;AAEF,wBAAgB,IAAI,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAAG;AAiFlD,wBAAgB,SAAS,CAAC,GAAG,EAAE,kBAAkB,GAAG,uBAAuB,CAM1E;AAED,wBAAgB,gBAAgB;;;;;;IAU/B;;;;;;;AAED,wBAA+D"}

package/dist/index.js

@@ -0,0 +1,116 @@
+/**
+ * Microsoft Entra ID (Azure AD) OAuth login.
+ * Env: AUTH_MICROSOFT_CLIENT_ID, AUTH_MICROSOFT_CLIENT_SECRET, AUTH_MICROSOFT_REDIRECT_URI,
+ * optional AUTH_MICROSOFT_TENANT (default `common`: work + personal Microsoft accounts).
+ */
+import { Router } from 'express';
+import { beginOAuth, completeOAuth, exchangeAuthorizationCode, emailFromOidcClaims, fetchOidcUserInfo, oauthConfig, redirectAfterLogin, redirectLoginFailed } from '@moteurio/plugin-sdk';
+import { loginWithProvider } from '@moteurio/core/auth.js';
+const PROVIDER = 'microsoft';
+const NOT_OFFERED = { error: 'Microsoft sign-in is not available on this server.' };
+function tenant() {
+    return process.env.AUTH_MICROSOFT_TENANT?.trim() || 'common';
+}
+function microsoftBase() {
+    return `https://login.microsoftonline.com/${tenant()}/oauth2/v2.0`;
+}
+export const manifest = {
+    id: 'auth-microsoft',
+    label: 'Microsoft',
+    description: 'Sign in with Microsoft work or school accounts',
+    source: 'opensource',
+    kind: 'optional',
+    scope: 'global'
+};
+export function init(_ctx) { }
+function createMicrosoftRouter(ctx) {
+    const router = Router();
+    router.get('/microsoft', (req, res) => {
+        const config = oauthConfig(PROVIDER);
+        if (!config) {
+            res.status(404).json(NOT_OFFERED);
+            return;
+        }
+        const params = new URLSearchParams({
+            client_id: config.clientId,
+            redirect_uri: config.redirectUri,
+            response_type: 'code',
+            scope: 'openid profile email User.Read',
+            response_mode: 'query',
+            state: beginOAuth(req, res, PROVIDER)
+        });
+        res.redirect(`${microsoftBase()}/authorize?${params.toString()}`);
+    });
+    router.get('/microsoft/callback', async (req, res) => {
+        const config = oauthConfig(PROVIDER);
+        if (!config) {
+            res.status(404).json(NOT_OFFERED);
+            return;
+        }
+        const started = completeOAuth(req, res, PROVIDER);
+        if (!started)
+            return redirectLoginFailed(res, 'state');
+        const code = req.query.code;
+        if (typeof code !== 'string' || !code)
+            return redirectLoginFailed(res, 'failed');
+        try {
+            const tokens = await exchangeAuthorizationCode(`${microsoftBase()}/token`, config, code);
+            const claims = await fetchOidcUserInfo('https://graph.microsoft.com/oidc/userinfo', tokens.access_token);
+            const email = emailFromOidcClaims(claims);
+            if (!email)
+                return redirectLoginFailed(res, 'email');
+            const sub = typeof claims.sub === 'string' ? claims.sub : '';
+            const name = typeof claims.name === 'string' ? claims.name : undefined;
+            const { token } = await loginWithProvider({ auth: { microsoftSub: sub }, email, name }, ctx.authCallbacks?.runOnboardingForNewUser);
+            redirectAfterLogin(res, token, started.next);
+        }
+        catch (err) {
+            if (err instanceof Error && err.message === 'User is not active') {
+                return redirectLoginFailed(res, 'inactive');
+            }
+            console.error('Microsoft auth error:', err);
+            redirectLoginFailed(res, 'failed');
+        }
+    });
+    return router;
+}
+const openapi = {
+    '/auth/microsoft': {
+        get: {
+            summary: 'Redirect to Microsoft login',
+            tags: ['Auth'],
+            parameters: [{ name: 'next', in: 'query', required: false, schema: { type: 'string' } }],
+            responses: { '302': { description: 'Redirect to Microsoft' } }
+        }
+    },
+    '/auth/microsoft/callback': {
+        get: {
+            summary: 'Microsoft OAuth callback',
+            tags: ['Auth'],
+            parameters: [
+                { name: 'code', in: 'query', required: true, schema: { type: 'string' } },
+                { name: 'state', in: 'query', required: true, schema: { type: 'string' } }
+            ],
+            responses: { '302': { description: 'Redirect to the app with token or error' } }
+        }
+    }
+};
+export function getRoutes(ctx) {
+    return {
+        path: '/auth',
+        router: createMicrosoftRouter(ctx),
+        openapi: { paths: openapi }
+    };
+}
+export function getAuthProviders() {
+    return [
+        {
+            id: 'microsoft',
+            label: 'Microsoft',
+            enabled: oauthConfig(PROVIDER) !== null,
+            loginPath: '/auth/microsoft',
+            callbackPath: '/auth/microsoft/callback'
+        }
+    ];
+}
+export default { manifest, init, getRoutes, getAuthProviders };

package/package.json

@@ -1,6 +1,32 @@
 {
   "name": "@moteurio/plugin-auth-microsoft",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "2026.10.23-2",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@moteurio/core": "^2026.10.23-2",
+    "@moteurio/plugin-sdk": "^2026.10.23-2",
+    "@moteurio/types": "^2026.10.23-2",
+    "express": "^4.19.2",
+    "openapi-types": "^12.1.3"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.3"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "rimraf dist",
+    "test": "vitest run --passWithNoTests"
+  }
 }

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.