@moteurio/plugin-auth-microsoft 2026.10.23 → 2026.10.28

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC7G,OAAO,EASH,KAAK,iBAAiB,IAAI,aAAa,EAC1C,MAAM,sBAAsB,CAAC;AAe9B,eAAO,MAAM,QAAQ,EAAE,cAOtB,CAAC;AAEF,wBAAgB,IAAI,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAAG;AAiFlD,wBAAgB,SAAS,CAAC,GAAG,EAAE,kBAAkB,GAAG,uBAAuB,CAM1E;AAED,wBAAgB,gBAAgB;;;;;;IAU/B;;;;;;;AAED,wBAA+D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACR,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAUH,KAAK,iBAAiB,IAAI,aAAa,EAC1C,MAAM,sBAAsB,CAAC;AAe9B,eAAO,MAAM,QAAQ,EAAE,cAYtB,CAAC;AAEF,wBAAgB,IAAI,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAAG;AAsGlD,wBAAgB,SAAS,CAAC,GAAG,EAAE,kBAAkB,GAAG,uBAAuB,CAM1E;AAED,wBAAgB,gBAAgB;;;;;;IAU/B;;;;;;;AAED,wBAA+D"}

package/dist/index.js

@@ -4,8 +4,8 @@
  * optional AUTH_MICROSOFT_TENANT (default `common`: work + personal Microsoft accounts).
  */
 import { Router } from 'express';
-import { beginOAuth, completeOAuth, exchangeAuthorizationCode, emailFromOidcClaims, fetchOidcUserInfo, oauthConfig, redirectAfterLogin, redirectLoginFailed } from '@moteurio/plugin-sdk';
-import { loginWithProvider } from '@moteurio/core/auth.js';
+import { beginOAuth, completeOAuth, oauthChallenge, exchangeAuthorizationCode, emailFromOidcClaims, fetchOidcUserInfo, oauthConfig, redirectProviderSignIn, redirectLoginFailed } from '@moteurio/plugin-sdk';
+import { startProviderSignIn } from '@moteurio/core/host.js';
 const PROVIDER = 'microsoft';
 const NOT_OFFERED = { error: 'Microsoft sign-in is not available on this server.' };
 function tenant() {
@@ -20,7 +20,12 @@ export const manifest = {
     description: 'Sign in with Microsoft work or school accounts',
     source: 'opensource',
     kind: 'optional',
-    scope: 'global'
+    scope: 'global',
+    categories: ['auth'],
+    contributes: {
+        api: { mounts: ['/auth'], openApi: true },
+        auth: { providers: ['microsoft'] }
+    }
 };
 export function init(_ctx) { }
 function createMicrosoftRouter(ctx) {
@@ -31,13 +36,16 @@ function createMicrosoftRouter(ctx) {
             res.status(404).json(NOT_OFFERED);
             return;
         }
+        const state = beginOAuth(req, res, PROVIDER);
         const params = new URLSearchParams({
             client_id: config.clientId,
             redirect_uri: config.redirectUri,
             response_type: 'code',
             scope: 'openid profile email User.Read',
             response_mode: 'query',
-            state: beginOAuth(req, res, PROVIDER)
+            state,
+            code_challenge: oauthChallenge(state),
+            code_challenge_method: 'S256'
         });
         res.redirect(`${microsoftBase()}/authorize?${params.toString()}`);
     });
@@ -54,15 +62,24 @@ function createMicrosoftRouter(ctx) {
         if (typeof code !== 'string' || !code)
             return redirectLoginFailed(res, 'failed');
         try {
-            const tokens = await exchangeAuthorizationCode(`${microsoftBase()}/token`, config, code);
+            const tokens = await exchangeAuthorizationCode(`${microsoftBase()}/token`, config, code, started.verifier);
             const claims = await fetchOidcUserInfo('https://graph.microsoft.com/oidc/userinfo', tokens.access_token);
             const email = emailFromOidcClaims(claims);
-            if (!email)
-                return redirectLoginFailed(res, 'email');
             const sub = typeof claims.sub === 'string' ? claims.sub : '';
+            if (!sub)
+                throw new Error('Microsoft subject is required');
             const name = typeof claims.name === 'string' ? claims.name : undefined;
-            const { token } = await loginWithProvider({ auth: { microsoftSub: sub }, email, name }, ctx.authCallbacks?.runOnboardingForNewUser);
-            redirectAfterLogin(res, token, started.next);
+            const result = await startProviderSignIn({
+                auth: { microsoftSub: sub },
+                email: email ?? '',
+                suggestedEmail: typeof claims.email === 'string'
+                    ? claims.email
+                    : typeof claims.preferred_username === 'string'
+                        ? claims.preferred_username
+                        : undefined,
+                name
+            }, ctx.authCallbacks?.runOnboardingForNewUser, { link: started.link });
+            redirectProviderSignIn(req, res, result, started.next);
         }
         catch (err) {
             if (err instanceof Error && err.message === 'User is not active') {
@@ -79,7 +96,9 @@ const openapi = {
         get: {
             summary: 'Redirect to Microsoft login',
             tags: ['Auth'],
-            parameters: [{ name: 'next', in: 'query', required: false, schema: { type: 'string' } }],
+            parameters: [
+                { name: 'next', in: 'query', required: false, schema: { type: 'string' } }
+            ],
             responses: { '302': { description: 'Redirect to Microsoft' } }
         }
     },

package/package.json

@@ -1,31 +1,37 @@
 {
-    "name": "@moteurio/plugin-auth-microsoft",
-    "version": "2026.10.23",
-    "type": "module",
-    "main": "./dist/index.js",
-    "types": "./dist/index.d.ts",
-    "exports": {
-        ".": "./dist/index.js"
-    },
-    "files": ["dist"],
-    "scripts": {
-        "build": "tsc -b",
-        "clean": "rimraf dist",
-        "prepublishOnly": "pnpm run build",
-        "test": "vitest run --passWithNoTests"
-    },
-    "dependencies": {
-        "@moteurio/core": "^2026.10.23",
-        "@moteurio/plugin-sdk": "^2026.10.23",
-        "@moteurio/types": "^2026.10.23",
-        "express": "^4.19.2",
-        "openapi-types": "^12.1.3"
-    },
-    "devDependencies": {
-        "@types/express": "^5.0.3"
-    },
-    "license": "MIT",
-    "publishConfig": {
-        "access": "public"
-    }
-}
+  "name": "@moteurio/plugin-auth-microsoft",
+  "version": "2026.10.28",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "express": "^4.19.2",
+    "openapi-types": "^12.1.3"
+  },
+  "peerDependencies": {
+    "@moteurio/core": "^2026.10.28",
+    "@moteurio/plugin-sdk": "^2026.10.28",
+    "@moteurio/types": "^2026.10.28"
+  },
+  "devDependencies": {
+    "@moteurio/core": "^2026.10.28",
+    "@moteurio/plugin-sdk": "^2026.10.28",
+    "@moteurio/types": "^2026.10.28",
+    "@types/express": "^5.0.3"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "rimraf dist",
+    "test": "vitest run --passWithNoTests"
+  }
+}