@mulverse/mulguard-core 1.0.0

package/src/providers/pipedrive.ts

@@ -0,0 +1,120 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#000", display: "flex", justifyContent: "space-between", color: "#fff", padding: 16}}>
+ * <span>Built-in <b>Pipedrive</b> integration.</span>
+ * <a href="https://www.pipedrive.com/">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/pipedrive.svg" height="48" />
+ * </a>
+ * </div>
+ *
+ * @module providers/pipedrive
+ */
+import type { OAuthConfig, OAuthUserConfig } from "./index.js"
+
+export interface PipedriveProfile extends Record<string, any> {
+  success: boolean
+  data: {
+    id: number
+    name: string
+    default_currency?: string
+    locale?: string
+    lang?: number
+    email: string
+    phone?: string
+    activated?: boolean
+    last_login?: Date
+    created?: Date
+    modified?: Date
+    signup_flow_variation?: string
+    has_created_company?: boolean
+    is_admin?: number
+    active_flag?: boolean
+    timezone_name?: string
+    timezone_offset?: string
+    role_id?: number
+    icon_url?: string
+    is_you?: boolean
+    company_id?: number
+    company_name?: string
+    company_domain?: string
+    company_country?: string
+    company_industry?: string
+    language?: {
+      language_code?: string
+      country_code?: string
+    }
+  }
+}
+
+/**
+ * Add Pipedrive login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/pipedrive
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import Pipedrive from "@auth/core/providers/pipedrive"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     Pipedrive({
+ *       clientId: PIPEDRIVE_CLIENT_ID,
+ *       clientSecret: PIPEDRIVE_CLIENT_SECRET,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ *  - [Pipedrive OAuth documentation](https://pipedrive.readme.io/docs/marketplace-oauth-authorization)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the Pipedrive provider is
+ * based on the [OAuth 2](https://www.rfc-editor.org/rfc/rfc6749.html) specification.
+ *
+ * :::tip
+ *
+ * The Pipedrive provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/pipedrive.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function Pipedrive<P extends PipedriveProfile>(
+  options: OAuthUserConfig<P>
+): OAuthConfig<P> {
+  return {
+    id: "pipedrive",
+    name: "Pipedrive",
+    type: "oauth",
+    authorization: "https://oauth.pipedrive.com/oauth/authorize",
+    token: "https://oauth.pipedrive.com/oauth/token",
+    userinfo: "https://api.pipedrive.com/users/me",
+    profile: ({ data: profile }) => {
+      return {
+        id: profile.id.toString(),
+        name: profile.name,
+        email: profile.email,
+        image: profile.icon_url,
+      }
+    },
+    options,
+  }
+}

package/src/providers/postmark.ts

@@ -0,0 +1,38 @@
+import type { EmailConfig, EmailUserConfig } from "./index.js"
+import { html, text } from "../lib/utils/email.js"
+
+/** @todo Document this */
+export default function Postmark(config: EmailUserConfig): EmailConfig {
+  return {
+    id: "postmark",
+    type: "email",
+    name: "Postmark",
+    from: "Auth.js <no-reply@authjs.dev>",
+    maxAge: 24 * 60 * 60,
+    async sendVerificationRequest(params) {
+      const { identifier: to, provider, url, theme } = params
+      const { host } = new URL(url)
+      if (!provider.apiKey) throw new TypeError("Missing Postmark API Key")
+      const res = await fetch("https://api.postmarkapp.com/email", {
+        method: "POST",
+        headers: {
+          Accept: "application/json",
+          "Content-Type": "application/json",
+          "X-Postmark-Server-Token": provider.apiKey,
+        },
+        body: JSON.stringify({
+          From: provider.from,
+          To: to,
+          Subject: `Sign in to ${host}`,
+          TextBody: text({ url, host }),
+          HtmlBody: html({ url, host, theme }),
+          MessageStream: "outbound",
+        }),
+      })
+
+      if (!res.ok)
+        throw new Error("Postmark error: " + JSON.stringify(await res.json()))
+    },
+    options: config,
+  }
+}

package/src/providers/provider-types.ts

@@ -0,0 +1,107 @@
+
+// THIS FILE IS AUTOGENERATED. DO NOT EDIT.
+export type OAuthProviderId = 
+  | "42-school"
+  | "apple"
+  | "asgardeo"
+  | "atlassian"
+  | "auth0"
+  | "authentik"
+  | "azure-ad-b2c"
+  | "azure-ad"
+  | "azure-devops"
+  | "bankid-no"
+  | "battlenet"
+  | "beyondidentity"
+  | "bitbucket"
+  | "box"
+  | "boxyhq-saml"
+  | "bungie"
+  | "click-up"
+  | "cognito"
+  | "coinbase"
+  | "concept2"
+  | "descope"
+  | "discord"
+  | "dribbble"
+  | "dropbox"
+  | "duende-identity-server6"
+  | "eventbrite"
+  | "eveonline"
+  | "facebook"
+  | "faceit"
+  | "figma"
+  | "foursquare"
+  | "freshbooks"
+  | "frontegg"
+  | "fusionauth"
+  | "github"
+  | "gitlab"
+  | "google"
+  | "hubspot"
+  | "huggingface"
+  | "identity-server4"
+  | "instagram"
+  | "kakao"
+  | "keycloak"
+  | "kinde"
+  | "line"
+  | "linkedin"
+  | "logto"
+  | "loops"
+  | "mailchimp"
+  | "mailru"
+  | "mastodon"
+  | "mattermost"
+  | "medium"
+  | "microsoft-entra-id"
+  | "naver"
+  | "netlify"
+  | "netsuite"
+  | "nextcloud"
+  | "notion"
+  | "okta"
+  | "onelogin"
+  | "ory-hydra"
+  | "osso"
+  | "osu"
+  | "passage"
+  | "patreon"
+  | "ping-id"
+  | "pinterest"
+  | "pipedrive"
+  | "reddit"
+  | "roblox"
+  | "salesforce"
+  | "simplelogin"
+  | "slack"
+  | "spotify"
+  | "strava"
+  | "threads"
+  | "tiktok"
+  | "todoist"
+  | "trakt"
+  | "twitch"
+  | "twitter"
+  | "united-effects"
+  | "vipps"
+  | "vk"
+  | "webex"
+  | "wechat"
+  | "wikimedia"
+  | "wordpress"
+  | "workos"
+  | "yandex"
+  | "zitadel"
+  | "zoho"
+  | "zoom"
+
+export type EmailProviderId = 
+  | "email"
+  | "forwardemail"
+  | "mailgun"
+  | "nodemailer"
+  | "passkey"
+  | "postmark"
+  | "resend"
+  | "sendgrid"

package/src/providers/reddit.ts

@@ -0,0 +1,104 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#000", display: "flex", justifyContent: "space-between", color: "#fff", padding: 16}}>
+ * <span>Built-in <b>Reddit</b> integration.</span>
+ * <a href="https://www.reddit.com/">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/reddit.svg" height="48" />
+ * </a>
+ * </div>
+ *
+ * @module providers/reddit
+ */
+import type { OAuthConfig, OAuthUserConfig } from "./index.js"
+
+/**
+ * Add Reddit login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/reddit
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import Reddit from "@auth/core/providers/reddit"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     Reddit({ clientId: REDDIT_CLIENT_ID, clientSecret: REDDIT_CLIENT_SECRET }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ * - [Reddit API documentation](https://www.reddit.com/dev/api/)
+ * - [Reddit app console](https://www.reddit.com/prefs/apps/ )
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the Reddit provider is
+ * based on the [OAuth 2](https://www.rfc-editor.org/rfc/rfc6749.html) specification.
+ *
+ * :::danger
+ *
+ * Reddit requires authorization every time you go through their page.
+ * Only allows one callback URL per Client ID / Client Secret.
+ *
+ * :::
+ *
+ * :::tip
+ *
+ * This Provider template only has a one hour access token to it and only has the "identity" scope. If you want to get a refresh token as well you must follow this:
+ *```ts
+ * providers: [
+ *  Reddit({
+ *    clientId: process.env.REDDIT_CLIENT_ID,
+ *    clientSecret: process.env.REDDIT_CLIENT_SECRET,
+ *    authorization: {
+ *      params: {
+ *        duration: 'permanent',
+ *      },
+ *    },
+ *  }),
+ * ]
+ * ```
+ * :::
+ *
+ * :::tip
+ *
+ * The Reddit provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/reddit.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function Reddit(
+  config: OAuthUserConfig<Record<string, any>>
+): OAuthConfig<Record<string, any>> {
+  return {
+    id: "reddit",
+    name: "Reddit",
+    type: "oauth",
+    authorization: "https://www.reddit.com/api/v1/authorize?scope=identity",
+    token: "https://www.reddit.com/api/v1/access_token",
+    userinfo: "https://oauth.reddit.com/api/v1/me",
+    checks: ["state"],
+    style: {
+      brandColor: "#FF4500",
+    },
+    options: config,
+  }
+}

package/src/providers/resend.ts

@@ -0,0 +1,35 @@
+import type { EmailConfig, EmailUserConfig } from "./index.js"
+import { html, text } from "../lib/utils/email.js"
+
+/** @todo Document this */
+export default function Resend(config: EmailUserConfig): EmailConfig {
+  return {
+    id: "resend",
+    type: "email",
+    name: "Resend",
+    from: "Auth.js <no-reply@authjs.dev>",
+    maxAge: 24 * 60 * 60,
+    async sendVerificationRequest(params) {
+      const { identifier: to, provider, url, theme } = params
+      const { host } = new URL(url)
+      const res = await fetch("https://api.resend.com/emails", {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${provider.apiKey}`,
+          "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+          from: provider.from,
+          to,
+          subject: `Sign in to ${host}`,
+          html: html({ url, host, theme }),
+          text: text({ url, host }),
+        }),
+      })
+
+      if (!res.ok)
+        throw new Error("Resend error: " + JSON.stringify(await res.json()))
+    },
+    options: config,
+  }
+}

package/src/providers/roblox.ts

@@ -0,0 +1,94 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#000", display: "flex", justifyContent: "space-between", color: "#fff", padding: 16}}>
+ * <span>Built-in <b>Roblox</b> integration.</span>
+ * <a href="https://roblox.com/">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/roblox.svg" height="48" width="48"/>
+ * </a>
+ * </div>
+ *
+ * @module providers/roblox
+ */
+import type { OIDCUserConfig, OIDCConfig } from "./index.js"
+
+/**
+ * Corresponds to the user structure documented here:
+ * https://create.roblox.com/docs/cloud/reference/oauth2 (Example User with Profile Scope)
+ */
+export interface RobloxProfile extends Record<string, any> {
+  /* Roblox user id */
+  sub: string
+
+  /* Roblox display name */
+  name: string
+
+  /* Roblox display name */
+  nickname: string
+
+  /* Roblox username */
+  preferred_username: string
+
+  /* Creation time of the Roblox account as a Unix timestamp. */
+  created_at: number
+
+  /* Roblox account profile URL */
+  profile: string
+
+  /* Roblox avatar headshot image. Can be null if the avatar headshot image hasn't yet been generated or has been moderated */
+  picture: string | null
+}
+
+/**
+ * Add Roblox login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/roblox
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import Roblox from "@auth/providers/roblox"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     Roblox({
+ *       clientId: AUTH_ROBLOX_ID,
+ *       clientSecret: AUTH_ROBLOX_SECRET,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ *  - [Roblox OAuth documentation](https://create.roblox.com/docs/cloud/open-cloud/oauth2-overview)
+ *  - [Roblox OAuth apps](https://create.roblox.com/dashboard/credentials?activeTab=OAuthTab)
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function Roblox(
+  options: OIDCUserConfig<RobloxProfile>
+): OIDCConfig<RobloxProfile> {
+  return {
+    id: "roblox",
+    name: "Roblox",
+    type: "oidc",
+    authorization: { params: { scope: "openid profile" } },
+    issuer: "https://apis.roblox.com/oauth/",
+    checks: ["pkce", "state"],
+    style: { bg: "#5865F2", text: "#fff" },
+    options,
+  }
+}

package/src/providers/salesforce.ts

@@ -0,0 +1,73 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#00a1e0", display: "flex", justifyContent: "space-between", color: "#fff", padding: 16}}>
+ * <span>Built-in <b>Salesforce</b> integration.</span>
+ * <a href="https://www.salesforce.com/ap/?ir=1">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/salesforce.svg" height="48" />
+ * </a>
+ * </div>
+ *
+ * @module providers/salesforce
+ */
+import type { OIDCConfig, OIDCUserConfig } from "./index.js"
+
+export interface SalesforceProfile extends Record<string, any> {
+  sub: string
+  nickname: string
+  email: string
+  picture: string
+}
+
+/**
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/salesforce
+ * ```
+ *
+ * #### Configuration
+ * ```ts
+ * import { Auth } from "@auth/core"
+ * import Salesforce from "@auth/core/providers/salesforce"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     Salesforce({
+ *       clientId: AUTH_SALESFORCE_ID,
+ *       clientSecret: AUTH_SALESFORCE_SECRET,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ * - [Auth0 docs](https://auth0.com/docs/authenticate)
+ *
+ * ### Notes
+ *
+ * The Salesforce provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/salesforce.ts). To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * ## Help
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ */
+export default function Salesforce(
+  options: OIDCUserConfig<SalesforceProfile>
+): OIDCConfig<SalesforceProfile> {
+  return {
+    id: "salesforce",
+    name: "Salesforce",
+    type: "oidc",
+    issuer: "https://login.salesforce.com",
+    idToken: false,
+    checks: ["pkce", "state", "nonce"],
+    style: { bg: "#00a1e0" },
+    options,
+  }
+}

package/src/providers/sendgrid.ts

@@ -0,0 +1,36 @@
+import type { EmailConfig, EmailUserConfig } from "./index.js"
+import { html, text } from "../lib/utils/email.js"
+
+/** @todo Document this */
+export default function SendGrid(config: EmailUserConfig): EmailConfig {
+  return {
+    id: "sendgrid",
+    type: "email",
+    name: "SendGrid",
+    from: "Auth.js <no-reply@authjs.dev>",
+    maxAge: 24 * 60 * 60,
+    async sendVerificationRequest(params) {
+      const { identifier: to, provider, url, theme } = params
+      const { host } = new URL(url)
+      const res = await fetch("https://api.sendgrid.com/v3/mail/send", {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${provider.apiKey}`,
+          "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+          personalizations: [{ to: [{ email: to }] }],
+          from: { email: provider.from },
+          subject: `Sign in to ${host}`,
+          content: [
+            { type: "text/plain", value: text({ url, host }) },
+            { type: "text/html", value: html({ url, host, theme }) },
+          ],
+        }),
+      })
+      // REVIEW: Clean up error handling
+      if (!res.ok) throw new Error("Sendgrid error: " + (await res.text()))
+    },
+    options: config,
+  }
+}