@nest-boot/auth 7.9.5 → 7.11.0

package/dist/utils/assert-no-duplicate-generic-oauth-plugin.d.ts

@@ -0,0 +1,2 @@
+import { BetterAuthPlugin } from "better-auth";
+export declare function assertNoDuplicateGenericOAuthPlugin(plugins?: BetterAuthPlugin[]): void;

package/dist/utils/assert-no-duplicate-generic-oauth-plugin.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertNoDuplicateGenericOAuthPlugin = assertNoDuplicateGenericOAuthPlugin;
+function assertNoDuplicateGenericOAuthPlugin(plugins) {
+    if (!plugins?.some((plugin) => plugin.id === "generic-oauth")) {
+        return;
+    }
+    throw new Error("AUTH_OIDC_* cannot be used together with a manually configured genericOAuth plugin.\n" +
+        "Configure all generic OAuth providers in plugins, or remove the custom genericOAuth plugin and use AUTH_OIDC_* only.");
+}
+//# sourceMappingURL=assert-no-duplicate-generic-oauth-plugin.js.map

package/dist/utils/assert-no-duplicate-generic-oauth-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-no-duplicate-generic-oauth-plugin.js","sourceRoot":"","sources":["../../src/utils/assert-no-duplicate-generic-oauth-plugin.ts"],"names":[],"mappings":";;AAEA,kFAWC;AAXD,SAAgB,mCAAmC,CACjD,OAA4B;IAE5B,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,eAAe,CAAC,EAAE,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,MAAM,IAAI,KAAK,CACb,uFAAuF;QACrF,sHAAsH,CACzH,CAAC;AACJ,CAAC"}

package/dist/utils/assert-no-duplicate-generic-oauth-plugin.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/assert-no-duplicate-generic-oauth-plugin.spec.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert_no_duplicate_generic_oauth_plugin_1 = require("./assert-no-duplicate-generic-oauth-plugin");
+describe("assertNoDuplicateGenericOAuthPlugin", () => {
+    it("should allow undefined plugins", () => {
+        expect(() => {
+            (0, assert_no_duplicate_generic_oauth_plugin_1.assertNoDuplicateGenericOAuthPlugin)();
+        }).not.toThrow();
+    });
+    it("should allow non-generic-oauth plugins", () => {
+        expect(() => {
+            (0, assert_no_duplicate_generic_oauth_plugin_1.assertNoDuplicateGenericOAuthPlugin)([
+                {
+                    id: "custom-plugin",
+                },
+            ]);
+        }).not.toThrow();
+    });
+    it("should reject manually configured genericOAuth plugins", () => {
+        expect(() => {
+            (0, assert_no_duplicate_generic_oauth_plugin_1.assertNoDuplicateGenericOAuthPlugin)([
+                {
+                    id: "generic-oauth",
+                },
+            ]);
+        }).toThrow("AUTH_OIDC_*");
+    });
+});
+//# sourceMappingURL=assert-no-duplicate-generic-oauth-plugin.spec.js.map

package/dist/utils/assert-no-duplicate-generic-oauth-plugin.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-no-duplicate-generic-oauth-plugin.spec.js","sourceRoot":"","sources":["../../src/utils/assert-no-duplicate-generic-oauth-plugin.spec.ts"],"names":[],"mappings":";;AAAA,yGAAiG;AAEjG,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,EAAE;YACV,IAAA,8EAAmC,GAAE,CAAC;QACxC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,GAAG,EAAE;YACV,IAAA,8EAAmC,EAAC;gBAClC;oBACE,EAAE,EAAE,eAAe;iBACpB;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,EAAE;YACV,IAAA,8EAAmC,EAAC;gBAClC;oBACE,EAAE,EAAE,eAAe;iBACpB;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/create-email-and-password-config.d.ts

@@ -0,0 +1,4 @@
+import { AuthModuleOptions } from "../auth-module-options.interface";
+type EmailAndPasswordConfig = NonNullable<AuthModuleOptions["emailAndPassword"]>;
+export declare function createEmailAndPasswordConfig(disableSignUp: boolean, options?: EmailAndPasswordConfig): EmailAndPasswordConfig | undefined;
+export {};

package/dist/utils/create-email-and-password-config.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createEmailAndPasswordConfig = createEmailAndPasswordConfig;
+const is_env_true_1 = require("./is-env-true");
+function createEmailAndPasswordConfig(disableSignUp, options) {
+    const hasEnabledEnv = process.env.AUTH_EMAIL_ENABLED !== undefined;
+    const shouldDisableSignUp = disableSignUp || (0, is_env_true_1.isEnvTrue)("AUTH_EMAIL_DISABLE_SIGNUP");
+    if (!options && !hasEnabledEnv) {
+        return undefined;
+    }
+    return {
+        ...(options ?? {
+            enabled: process.env.AUTH_EMAIL_ENABLED !== "false",
+        }),
+        ...(hasEnabledEnv
+            ? { enabled: process.env.AUTH_EMAIL_ENABLED !== "false" }
+            : {}),
+        disableSignUp: shouldDisableSignUp || options?.disableSignUp === true,
+    };
+}
+//# sourceMappingURL=create-email-and-password-config.js.map

package/dist/utils/create-email-and-password-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-email-and-password-config.js","sourceRoot":"","sources":["../../src/utils/create-email-and-password-config.ts"],"names":[],"mappings":";;AAOA,oEAqBC;AA3BD,+CAA0C;AAM1C,SAAgB,4BAA4B,CAC1C,aAAsB,EACtB,OAAgC;IAEhC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC;IACnE,MAAM,mBAAmB,GACvB,aAAa,IAAI,IAAA,uBAAS,EAAC,2BAA2B,CAAC,CAAC;IAE1D,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,GAAG,CAAC,OAAO,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,OAAO;SACpD,CAAC;QACF,GAAG,CAAC,aAAa;YACf,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,OAAO,EAAE;YACzD,CAAC,CAAC,EAAE,CAAC;QACP,aAAa,EAAE,mBAAmB,IAAI,OAAO,EAAE,aAAa,KAAK,IAAI;KACtE,CAAC;AACJ,CAAC"}

package/dist/utils/create-email-and-password-config.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/create-email-and-password-config.spec.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const create_email_and_password_config_1 = require("./create-email-and-password-config");
+describe("createEmailAndPasswordConfig", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_EMAIL_DISABLE_SIGNUP;
+        delete process.env.AUTH_EMAIL_ENABLED;
+    });
+    it("should preserve better-auth defaults when email auth is not configured", () => {
+        expect((0, create_email_and_password_config_1.createEmailAndPasswordConfig)(false)).toBeUndefined();
+    });
+    it("should enable email auth when AUTH_EMAIL_ENABLED is true", () => {
+        process.env.AUTH_EMAIL_ENABLED = "true";
+        expect((0, create_email_and_password_config_1.createEmailAndPasswordConfig)(false)).toEqual({
+            disableSignUp: false,
+            enabled: true,
+        });
+    });
+    it("should disable email auth when AUTH_EMAIL_ENABLED is false", () => {
+        process.env.AUTH_EMAIL_ENABLED = "false";
+        expect((0, create_email_and_password_config_1.createEmailAndPasswordConfig)(false)).toEqual({
+            disableSignUp: false,
+            enabled: false,
+        });
+    });
+    it("should not create email auth config for signup disable flags alone", () => {
+        process.env.AUTH_EMAIL_DISABLE_SIGNUP = "true";
+        expect((0, create_email_and_password_config_1.createEmailAndPasswordConfig)(true)).toBeUndefined();
+    });
+    it("should disable signup when the global disable flag is true and email auth is configured", () => {
+        process.env.AUTH_EMAIL_ENABLED = "true";
+        expect((0, create_email_and_password_config_1.createEmailAndPasswordConfig)(true)).toEqual({
+            disableSignUp: true,
+            enabled: true,
+        });
+    });
+    it("should disable signup when AUTH_EMAIL_DISABLE_SIGNUP is true and email auth is configured", () => {
+        process.env.AUTH_EMAIL_ENABLED = "true";
+        process.env.AUTH_EMAIL_DISABLE_SIGNUP = "true";
+        expect((0, create_email_and_password_config_1.createEmailAndPasswordConfig)(false)).toEqual({
+            disableSignUp: true,
+            enabled: true,
+        });
+    });
+    it("should merge with explicit email auth options", () => {
+        process.env.AUTH_EMAIL_DISABLE_SIGNUP = "true";
+        expect((0, create_email_and_password_config_1.createEmailAndPasswordConfig)(false, {
+            enabled: true,
+            maxPasswordLength: 128,
+        })).toEqual({
+            disableSignUp: true,
+            enabled: true,
+            maxPasswordLength: 128,
+        });
+    });
+    it("should preserve explicit signup disable from email auth options", () => {
+        expect((0, create_email_and_password_config_1.createEmailAndPasswordConfig)(false, {
+            disableSignUp: true,
+            enabled: true,
+        })).toEqual({
+            disableSignUp: true,
+            enabled: true,
+        });
+    });
+});
+//# sourceMappingURL=create-email-and-password-config.spec.js.map

package/dist/utils/create-email-and-password-config.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-email-and-password-config.spec.js","sourceRoot":"","sources":["../../src/utils/create-email-and-password-config.spec.ts"],"names":[],"mappings":";;AAAA,yFAAkF;AAElF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,IAAA,+DAA4B,EAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC;QAExC,MAAM,CAAC,IAAA,+DAA4B,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAClD,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,OAAO,CAAC;QAEzC,MAAM,CAAC,IAAA,+DAA4B,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAClD,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,MAAM,CAAC;QAE/C,MAAM,CAAC,IAAA,+DAA4B,EAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC;QAExC,MAAM,CAAC,IAAA,+DAA4B,EAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YACjD,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,MAAM,CAAC;QAE/C,MAAM,CAAC,IAAA,+DAA4B,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAClD,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,MAAM,CAAC;QAE/C,MAAM,CACJ,IAAA,+DAA4B,EAAC,KAAK,EAAE;YAClC,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,GAAG;SACvB,CAAC,CACH,CAAC,OAAO,CAAC;YACR,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,GAAG;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CACJ,IAAA,+DAA4B,EAAC,KAAK,EAAE;YAClC,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI;SACd,CAAC,CACH,CAAC,OAAO,CAAC;YACR,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/create-oidc-config.d.ts

@@ -0,0 +1,2 @@
+import { GenericOAuthProviderConfig } from "./generic-oauth-provider-config.type";
+export declare function createOidcConfig(disableSignUp: boolean): GenericOAuthProviderConfig | undefined;

package/dist/utils/create-oidc-config.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOidcConfig = createOidcConfig;
+const is_env_true_1 = require("./is-env-true");
+const resolve_oidc_prompt_1 = require("./resolve-oidc-prompt");
+const resolve_oidc_scopes_1 = require("./resolve-oidc-scopes");
+const resolve_required_oidc_env_1 = require("./resolve-required-oidc-env");
+function createOidcConfig(disableSignUp) {
+    if (!(0, is_env_true_1.isEnvTrue)("AUTH_OIDC_ENABLED")) {
+        return undefined;
+    }
+    return {
+        providerId: "oidc",
+        clientId: (0, resolve_required_oidc_env_1.resolveRequiredOidcEnv)("AUTH_OIDC_CLIENT_ID"),
+        clientSecret: (0, resolve_required_oidc_env_1.resolveRequiredOidcEnv)("AUTH_OIDC_CLIENT_SECRET"),
+        discoveryUrl: (0, resolve_required_oidc_env_1.resolveRequiredOidcEnv)("AUTH_OIDC_DISCOVERY_URL"),
+        prompt: (0, resolve_oidc_prompt_1.resolveOidcPrompt)(),
+        scopes: (0, resolve_oidc_scopes_1.resolveOidcScopes)(),
+        disableSignUp: disableSignUp || (0, is_env_true_1.isEnvTrue)("AUTH_OIDC_DISABLE_SIGNUP"),
+    };
+}
+//# sourceMappingURL=create-oidc-config.js.map

package/dist/utils/create-oidc-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-oidc-config.js","sourceRoot":"","sources":["../../src/utils/create-oidc-config.ts"],"names":[],"mappings":";;AAMA,4CAgBC;AArBD,+CAA0C;AAC1C,+DAA0D;AAC1D,+DAA0D;AAC1D,2EAAqE;AAErE,SAAgB,gBAAgB,CAC9B,aAAsB;IAEtB,IAAI,CAAC,IAAA,uBAAS,EAAC,mBAAmB,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,UAAU,EAAE,MAAM;QAClB,QAAQ,EAAE,IAAA,kDAAsB,EAAC,qBAAqB,CAAC;QACvD,YAAY,EAAE,IAAA,kDAAsB,EAAC,yBAAyB,CAAC;QAC/D,YAAY,EAAE,IAAA,kDAAsB,EAAC,yBAAyB,CAAC;QAC/D,MAAM,EAAE,IAAA,uCAAiB,GAAE;QAC3B,MAAM,EAAE,IAAA,uCAAiB,GAAE;QAC3B,aAAa,EAAE,aAAa,IAAI,IAAA,uBAAS,EAAC,0BAA0B,CAAC;KACtE,CAAC;AACJ,CAAC"}

package/dist/utils/create-oidc-config.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/create-oidc-config.spec.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const create_oidc_config_1 = require("./create-oidc-config");
+describe("createOidcConfig", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_OIDC_CLIENT_ID;
+        delete process.env.AUTH_OIDC_CLIENT_SECRET;
+        delete process.env.AUTH_OIDC_DISCOVERY_URL;
+        delete process.env.AUTH_OIDC_DISABLE_SIGNUP;
+        delete process.env.AUTH_OIDC_ENABLED;
+        delete process.env.AUTH_OIDC_PROMPT;
+        delete process.env.AUTH_OIDC_SCOPES;
+    });
+    it("should return undefined when OIDC env is not configured", () => {
+        expect((0, create_oidc_config_1.createOidcConfig)(false)).toBeUndefined();
+    });
+    it("should return undefined when OIDC credentials are configured but AUTH_OIDC_ENABLED is unset", () => {
+        process.env.AUTH_OIDC_CLIENT_ID = "client-id";
+        process.env.AUTH_OIDC_CLIENT_SECRET = "client-secret";
+        process.env.AUTH_OIDC_DISCOVERY_URL =
+            "https://oidc.example.com/.well-known/openid-configuration";
+        expect((0, create_oidc_config_1.createOidcConfig)(false)).toBeUndefined();
+    });
+    it("should return undefined when AUTH_OIDC_ENABLED is false", () => {
+        process.env.AUTH_OIDC_ENABLED = "false";
+        process.env.AUTH_OIDC_CLIENT_ID = "client-id";
+        process.env.AUTH_OIDC_CLIENT_SECRET = "client-secret";
+        process.env.AUTH_OIDC_DISCOVERY_URL =
+            "https://oidc.example.com/.well-known/openid-configuration";
+        expect((0, create_oidc_config_1.createOidcConfig)(false)).toBeUndefined();
+    });
+    it("should create OIDC config from env", () => {
+        process.env.AUTH_OIDC_ENABLED = "true";
+        process.env.AUTH_OIDC_CLIENT_ID = "client-id";
+        process.env.AUTH_OIDC_CLIENT_SECRET = "client-secret";
+        process.env.AUTH_OIDC_DISCOVERY_URL =
+            "https://oidc.example.com/.well-known/openid-configuration";
+        process.env.AUTH_OIDC_PROMPT = "login";
+        process.env.AUTH_OIDC_SCOPES = "openid, email,";
+        expect((0, create_oidc_config_1.createOidcConfig)(false)).toEqual({
+            clientId: "client-id",
+            clientSecret: "client-secret",
+            disableSignUp: false,
+            discoveryUrl: "https://oidc.example.com/.well-known/openid-configuration",
+            prompt: "login",
+            providerId: "oidc",
+            scopes: ["openid", "email"],
+        });
+    });
+    it("should use default scopes and global signup disable", () => {
+        process.env.AUTH_OIDC_ENABLED = "true";
+        process.env.AUTH_OIDC_CLIENT_ID = "client-id";
+        process.env.AUTH_OIDC_CLIENT_SECRET = "client-secret";
+        process.env.AUTH_OIDC_DISCOVERY_URL =
+            "https://oidc.example.com/.well-known/openid-configuration";
+        expect((0, create_oidc_config_1.createOidcConfig)(true)).toEqual(expect.objectContaining({
+            disableSignUp: true,
+            scopes: ["openid", "profile", "email"],
+        }));
+    });
+    it("should disable signup when AUTH_OIDC_DISABLE_SIGNUP is true", () => {
+        process.env.AUTH_OIDC_ENABLED = "true";
+        process.env.AUTH_OIDC_CLIENT_ID = "client-id";
+        process.env.AUTH_OIDC_CLIENT_SECRET = "client-secret";
+        process.env.AUTH_OIDC_DISCOVERY_URL =
+            "https://oidc.example.com/.well-known/openid-configuration";
+        process.env.AUTH_OIDC_DISABLE_SIGNUP = "true";
+        expect((0, create_oidc_config_1.createOidcConfig)(false)).toEqual(expect.objectContaining({
+            disableSignUp: true,
+        }));
+    });
+});
+//# sourceMappingURL=create-oidc-config.spec.js.map

package/dist/utils/create-oidc-config.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-oidc-config.spec.js","sourceRoot":"","sources":["../../src/utils/create-oidc-config.spec.ts"],"names":[],"mappings":";;AAAA,6DAAwD;AAExD,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QAC5C,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACpC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,IAAA,qCAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,WAAW,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,eAAe,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,uBAAuB;YACjC,2DAA2D,CAAC;QAE9D,MAAM,CAAC,IAAA,qCAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,WAAW,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,eAAe,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,uBAAuB;YACjC,2DAA2D,CAAC;QAE9D,MAAM,CAAC,IAAA,qCAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,WAAW,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,eAAe,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,uBAAuB;YACjC,2DAA2D,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,OAAO,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QAEhD,MAAM,CAAC,IAAA,qCAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACtC,QAAQ,EAAE,WAAW;YACrB,YAAY,EAAE,eAAe;YAC7B,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,2DAA2D;YACzE,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,WAAW,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,eAAe,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,uBAAuB;YACjC,2DAA2D,CAAC;QAE9D,MAAM,CAAC,IAAA,qCAAgB,EAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CACpC,MAAM,CAAC,gBAAgB,CAAC;YACtB,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;SACvC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,WAAW,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,eAAe,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,uBAAuB;YACjC,2DAA2D,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,MAAM,CAAC;QAE9C,MAAM,CAAC,IAAA,qCAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CACrC,MAAM,CAAC,gBAAgB,CAAC;YACtB,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/create-social-provider-config.d.ts

@@ -0,0 +1,6 @@
+import { AuthModuleOptions } from "../auth-module-options.interface";
+import { SocialProviderId } from "./social-provider.constants";
+type SocialProvidersConfig = NonNullable<AuthModuleOptions["socialProviders"]>;
+type SocialProviderConfig<T extends SocialProviderId> = NonNullable<SocialProvidersConfig[T]>;
+export declare function createSocialProviderConfig<T extends SocialProviderId>(provider: T, disableSignUp: boolean, options?: SocialProviderConfig<T>): SocialProviderConfig<T> | undefined;
+export {};

package/dist/utils/create-social-provider-config.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSocialProviderConfig = createSocialProviderConfig;
+const has_social_provider_credential_env_config_1 = require("./has-social-provider-credential-env-config");
+const is_env_true_1 = require("./is-env-true");
+const resolve_required_social_provider_env_1 = require("./resolve-required-social-provider-env");
+const resolve_social_provider_enabled_1 = require("./resolve-social-provider-enabled");
+const social_provider_constants_1 = require("./social-provider.constants");
+function createSocialProviderConfig(provider, disableSignUp, options) {
+    const providerConfig = social_provider_constants_1.SOCIAL_PROVIDER_ENV_CONFIGS[provider];
+    const hasCredentialEnvConfig = (0, has_social_provider_credential_env_config_1.hasSocialProviderCredentialEnvConfig)(provider);
+    const shouldDisableSignUp = disableSignUp || (0, is_env_true_1.isEnvTrue)(providerConfig.disableSignUp);
+    const hasEnabledEnv = process.env[providerConfig.enabled] !== undefined;
+    const enabled = (0, resolve_social_provider_enabled_1.resolveSocialProviderEnabled)(provider);
+    const shouldUseCredentialEnv = enabled && hasCredentialEnvConfig;
+    const shouldCreateProvider = !!options || enabled;
+    if (!shouldCreateProvider) {
+        return undefined;
+    }
+    if (!shouldUseCredentialEnv) {
+        if (!options) {
+            (0, resolve_required_social_provider_env_1.resolveRequiredSocialProviderEnv)(provider, "clientId");
+        }
+        return {
+            ...options,
+            ...(hasEnabledEnv ? { enabled } : {}),
+            ...(shouldDisableSignUp || options?.disableSignUp === true
+                ? { disableSignUp: true }
+                : {}),
+        };
+    }
+    return {
+        ...options,
+        clientId: (0, resolve_required_social_provider_env_1.resolveRequiredSocialProviderEnv)(provider, "clientId"),
+        clientSecret: (0, resolve_required_social_provider_env_1.resolveRequiredSocialProviderEnv)(provider, "clientSecret"),
+        ...(hasEnabledEnv ? { enabled } : {}),
+        disableSignUp: shouldDisableSignUp || options?.disableSignUp === true,
+    };
+}
+//# sourceMappingURL=create-social-provider-config.js.map

package/dist/utils/create-social-provider-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-social-provider-config.js","sourceRoot":"","sources":["../../src/utils/create-social-provider-config.ts"],"names":[],"mappings":";;AAeA,gEAuCC;AArDD,2GAAmG;AACnG,+CAA0C;AAC1C,iGAA0F;AAC1F,uFAAiF;AACjF,2EAGqC;AAOrC,SAAgB,0BAA0B,CACxC,QAAW,EACX,aAAsB,EACtB,OAAiC;IAEjC,MAAM,cAAc,GAAG,uDAA2B,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,sBAAsB,GAAG,IAAA,gFAAoC,EAAC,QAAQ,CAAC,CAAC;IAC9E,MAAM,mBAAmB,GACvB,aAAa,IAAI,IAAA,uBAAS,EAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;IACxE,MAAM,OAAO,GAAG,IAAA,8DAA4B,EAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,sBAAsB,GAAG,OAAO,IAAI,sBAAsB,CAAC;IACjE,MAAM,oBAAoB,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;IAElD,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAA,uEAAgC,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzD,CAAC;QAED,OAAO;YACL,GAAG,OAAO;YACV,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,mBAAmB,IAAI,OAAO,EAAE,aAAa,KAAK,IAAI;gBACxD,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE;gBACzB,CAAC,CAAC,EAAE,CAAC;SACmB,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QACV,QAAQ,EAAE,IAAA,uEAAgC,EAAC,QAAQ,EAAE,UAAU,CAAC;QAChE,YAAY,EAAE,IAAA,uEAAgC,EAAC,QAAQ,EAAE,cAAc,CAAC;QACxE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,aAAa,EAAE,mBAAmB,IAAI,OAAO,EAAE,aAAa,KAAK,IAAI;KAC3C,CAAC;AAC/B,CAAC"}

package/dist/utils/create-social-provider-config.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/create-social-provider-config.spec.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const create_social_provider_config_1 = require("./create-social-provider-config");
+describe("createSocialProviderConfig", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_GITHUB_CLIENT_ID;
+        delete process.env.AUTH_GITHUB_CLIENT_SECRET;
+        delete process.env.AUTH_GITHUB_DISABLE_SIGNUP;
+        delete process.env.AUTH_GITHUB_ENABLED;
+        delete process.env.AUTH_GOOGLE_CLIENT_ID;
+        delete process.env.AUTH_GOOGLE_CLIENT_SECRET;
+        delete process.env.AUTH_GOOGLE_DISABLE_SIGNUP;
+        delete process.env.AUTH_GOOGLE_ENABLED;
+    });
+    it("should return undefined when provider env and options are not configured", () => {
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", false)).toBeUndefined();
+    });
+    it("should return undefined when only provider signup disable env is configured", () => {
+        process.env.AUTH_GOOGLE_DISABLE_SIGNUP = "true";
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", false)).toBeUndefined();
+    });
+    it("should return undefined when provider credentials are configured but enabled env is unset", () => {
+        process.env.AUTH_GOOGLE_CLIENT_ID = "google-client-id";
+        process.env.AUTH_GOOGLE_CLIENT_SECRET = "google-client-secret";
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", false)).toBeUndefined();
+    });
+    it("should create Google config from env", () => {
+        process.env.AUTH_GOOGLE_ENABLED = "true";
+        process.env.AUTH_GOOGLE_CLIENT_ID = "google-client-id";
+        process.env.AUTH_GOOGLE_CLIENT_SECRET = "google-client-secret";
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", false)).toEqual({
+            clientId: "google-client-id",
+            clientSecret: "google-client-secret",
+            disableSignUp: false,
+            enabled: true,
+        });
+    });
+    it("should enable provider when provider enabled env is true", () => {
+        process.env.AUTH_GOOGLE_CLIENT_ID = "google-client-id";
+        process.env.AUTH_GOOGLE_CLIENT_SECRET = "google-client-secret";
+        process.env.AUTH_GOOGLE_ENABLED = "true";
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", false)).toEqual({
+            clientId: "google-client-id",
+            clientSecret: "google-client-secret",
+            disableSignUp: false,
+            enabled: true,
+        });
+    });
+    it("should disable provider when provider enabled env is false", () => {
+        process.env.AUTH_GOOGLE_ENABLED = "false";
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", false, {
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+            enabled: true,
+        })).toEqual({
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+            enabled: false,
+        });
+    });
+    it("should not override option credentials when provider enabled env is unset", () => {
+        process.env.AUTH_GOOGLE_CLIENT_ID = "env-client-id";
+        process.env.AUTH_GOOGLE_CLIENT_SECRET = "env-client-secret";
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", false, {
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+        })).toEqual({
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+        });
+    });
+    it("should not override option credentials when provider enabled env is false", () => {
+        process.env.AUTH_GOOGLE_ENABLED = "false";
+        process.env.AUTH_GOOGLE_CLIENT_ID = "env-client-id";
+        process.env.AUTH_GOOGLE_CLIENT_SECRET = "env-client-secret";
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", false, {
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+        })).toEqual({
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+            enabled: false,
+        });
+    });
+    it("should reject enabled provider env without credentials or options", () => {
+        process.env.AUTH_GOOGLE_ENABLED = "true";
+        expect(() => (0, create_social_provider_config_1.createSocialProviderConfig)("google", false)).toThrow("AUTH_GOOGLE_CLIENT_ID");
+    });
+    it("should create GitHub config from env", () => {
+        process.env.AUTH_GITHUB_ENABLED = "true";
+        process.env.AUTH_GITHUB_CLIENT_ID = "github-client-id";
+        process.env.AUTH_GITHUB_CLIENT_SECRET = "github-client-secret";
+        process.env.AUTH_GITHUB_DISABLE_SIGNUP = "true";
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("github", false)).toEqual({
+            clientId: "github-client-id",
+            clientSecret: "github-client-secret",
+            disableSignUp: true,
+            enabled: true,
+        });
+    });
+    it("should merge options without dropping signup disable flags", () => {
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", true, {
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+            scope: ["email"],
+        })).toEqual({
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+            disableSignUp: true,
+            scope: ["email"],
+        });
+    });
+    it("should apply provider signup disable env without requiring env credentials when options are configured", () => {
+        process.env.AUTH_GOOGLE_DISABLE_SIGNUP = "true";
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", false, {
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+        })).toEqual({
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+            disableSignUp: true,
+        });
+    });
+    it("should prefer provider env credentials over option credentials", () => {
+        process.env.AUTH_GOOGLE_ENABLED = "true";
+        process.env.AUTH_GOOGLE_CLIENT_ID = "env-client-id";
+        process.env.AUTH_GOOGLE_CLIENT_SECRET = "env-client-secret";
+        expect((0, create_social_provider_config_1.createSocialProviderConfig)("google", false, {
+            clientId: "option-client-id",
+            clientSecret: "option-client-secret",
+        })).toEqual({
+            clientId: "env-client-id",
+            clientSecret: "env-client-secret",
+            disableSignUp: false,
+            enabled: true,
+        });
+    });
+});
+//# sourceMappingURL=create-social-provider-config.spec.js.map

package/dist/utils/create-social-provider-config.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-social-provider-config.spec.js","sourceRoot":"","sources":["../../src/utils/create-social-provider-config.spec.ts"],"names":[],"mappings":";;AAAA,mFAA6E;AAE7E,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,MAAM,CAAC;QAEhD,MAAM,CAAC,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,kBAAkB,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,sBAAsB,CAAC;QAE/D,MAAM,CAAC,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,kBAAkB,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,sBAAsB,CAAC;QAE/D,MAAM,CAAC,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1D,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;YACpC,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,kBAAkB,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,sBAAsB,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC;QAEzC,MAAM,CAAC,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1D,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;YACpC,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC;QAE1C,MAAM,CACJ,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,EAAE;YAC1C,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;YACpC,OAAO,EAAE,IAAI;SACd,CAAC,CACH,CAAC,OAAO,CAAC;YACR,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;YACpC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,eAAe,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,mBAAmB,CAAC;QAE5D,MAAM,CACJ,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,EAAE;YAC1C,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;SACrC,CAAC,CACH,CAAC,OAAO,CAAC;YACR,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;SACrC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,eAAe,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,mBAAmB,CAAC;QAE5D,MAAM,CACJ,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,EAAE;YAC1C,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;SACrC,CAAC,CACH,CAAC,OAAO,CAAC;YACR,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;YACpC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC;QAEzC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAC/D,uBAAuB,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,kBAAkB,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,sBAAsB,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,MAAM,CAAC;QAEhD,MAAM,CAAC,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1D,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;YACpC,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CACJ,IAAA,0DAA0B,EAAC,QAAQ,EAAE,IAAI,EAAE;YACzC,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;YACpC,KAAK,EAAE,CAAC,OAAO,CAAC;SACjB,CAAC,CACH,CAAC,OAAO,CAAC;YACR,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;YACpC,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,CAAC,OAAO,CAAC;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,GAAG,EAAE;QAChH,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,MAAM,CAAC;QAEhD,MAAM,CACJ,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,EAAE;YAC1C,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;SACrC,CAAC,CACH,CAAC,OAAO,CAAC;YACR,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;YACpC,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,eAAe,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,mBAAmB,CAAC;QAE5D,MAAM,CACJ,IAAA,0DAA0B,EAAC,QAAQ,EAAE,KAAK,EAAE;YAC1C,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,sBAAsB;SACrC,CAAC,CACH,CAAC,OAAO,CAAC;YACR,QAAQ,EAAE,eAAe;YACzB,YAAY,EAAE,mBAAmB;YACjC,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/create-social-providers-config.d.ts

@@ -0,0 +1,4 @@
+import { AuthModuleOptions } from "../auth-module-options.interface";
+type SocialProvidersConfig = NonNullable<AuthModuleOptions["socialProviders"]>;
+export declare function createSocialProvidersConfig(disableSignUp: boolean, options?: SocialProvidersConfig): SocialProvidersConfig | undefined;
+export {};

package/dist/utils/create-social-providers-config.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSocialProvidersConfig = createSocialProvidersConfig;
+const create_social_provider_config_1 = require("./create-social-provider-config");
+function createSocialProvidersConfig(disableSignUp, options) {
+    const githubConfig = (0, create_social_provider_config_1.createSocialProviderConfig)("github", disableSignUp, options?.github);
+    const googleConfig = (0, create_social_provider_config_1.createSocialProviderConfig)("google", disableSignUp, options?.google);
+    if (!options && !githubConfig && !googleConfig) {
+        return undefined;
+    }
+    return {
+        ...options,
+        ...(githubConfig ? { github: githubConfig } : {}),
+        ...(googleConfig ? { google: googleConfig } : {}),
+    };
+}
+//# sourceMappingURL=create-social-providers-config.js.map

package/dist/utils/create-social-providers-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-social-providers-config.js","sourceRoot":"","sources":["../../src/utils/create-social-providers-config.ts"],"names":[],"mappings":";;AAKA,kEAwBC;AA5BD,mFAA6E;AAI7E,SAAgB,2BAA2B,CACzC,aAAsB,EACtB,OAA+B;IAE/B,MAAM,YAAY,GAAG,IAAA,0DAA0B,EAC7C,QAAQ,EACR,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;IACF,MAAM,YAAY,GAAG,IAAA,0DAA0B,EAC7C,QAAQ,EACR,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;IAEF,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QACV,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/utils/create-social-providers-config.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/create-social-providers-config.spec.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const create_social_providers_config_1 = require("./create-social-providers-config");
+describe("createSocialProvidersConfig", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_GITHUB_CLIENT_ID;
+        delete process.env.AUTH_GITHUB_CLIENT_SECRET;
+        delete process.env.AUTH_GITHUB_DISABLE_SIGNUP;
+        delete process.env.AUTH_GITHUB_ENABLED;
+        delete process.env.AUTH_GOOGLE_CLIENT_ID;
+        delete process.env.AUTH_GOOGLE_CLIENT_SECRET;
+        delete process.env.AUTH_GOOGLE_DISABLE_SIGNUP;
+        delete process.env.AUTH_GOOGLE_ENABLED;
+    });
+    it("should return undefined when provider env and options are not configured", () => {
+        expect((0, create_social_providers_config_1.createSocialProvidersConfig)(false)).toBeUndefined();
+    });
+    it("should create Google and GitHub configs from env", () => {
+        process.env.AUTH_GOOGLE_ENABLED = "true";
+        process.env.AUTH_GOOGLE_CLIENT_ID = "google-client-id";
+        process.env.AUTH_GOOGLE_CLIENT_SECRET = "google-client-secret";
+        process.env.AUTH_GITHUB_ENABLED = "true";
+        process.env.AUTH_GITHUB_CLIENT_ID = "github-client-id";
+        process.env.AUTH_GITHUB_CLIENT_SECRET = "github-client-secret";
+        expect((0, create_social_providers_config_1.createSocialProvidersConfig)(false)).toEqual({
+            github: {
+                clientId: "github-client-id",
+                clientSecret: "github-client-secret",
+                disableSignUp: false,
+                enabled: true,
+            },
+            google: {
+                clientId: "google-client-id",
+                clientSecret: "google-client-secret",
+                disableSignUp: false,
+                enabled: true,
+            },
+        });
+    });
+    it("should preserve custom providers from options", () => {
+        expect((0, create_social_providers_config_1.createSocialProvidersConfig)(true, {
+            apple: {
+                clientId: "apple-client-id",
+                clientSecret: "apple-client-secret",
+            },
+            google: {
+                clientId: "google-client-id",
+                clientSecret: "google-client-secret",
+            },
+        })).toEqual({
+            apple: {
+                clientId: "apple-client-id",
+                clientSecret: "apple-client-secret",
+            },
+            google: {
+                clientId: "google-client-id",
+                clientSecret: "google-client-secret",
+                disableSignUp: true,
+            },
+        });
+    });
+});
+//# sourceMappingURL=create-social-providers-config.spec.js.map

package/dist/utils/create-social-providers-config.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-social-providers-config.spec.js","sourceRoot":"","sources":["../../src/utils/create-social-providers-config.spec.ts"],"names":[],"mappings":";;AAAA,qFAA+E;AAE/E,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,IAAA,4DAA2B,EAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,kBAAkB,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,sBAAsB,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,kBAAkB,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,sBAAsB,CAAC;QAE/D,MAAM,CAAC,IAAA,4DAA2B,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACjD,MAAM,EAAE;gBACN,QAAQ,EAAE,kBAAkB;gBAC5B,YAAY,EAAE,sBAAsB;gBACpC,aAAa,EAAE,KAAK;gBACpB,OAAO,EAAE,IAAI;aACd;YACD,MAAM,EAAE;gBACN,QAAQ,EAAE,kBAAkB;gBAC5B,YAAY,EAAE,sBAAsB;gBACpC,aAAa,EAAE,KAAK;gBACpB,OAAO,EAAE,IAAI;aACd;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CACJ,IAAA,4DAA2B,EAAC,IAAI,EAAE;YAChC,KAAK,EAAE;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,YAAY,EAAE,qBAAqB;aACpC;YACD,MAAM,EAAE;gBACN,QAAQ,EAAE,kBAAkB;gBAC5B,YAAY,EAAE,sBAAsB;aACrC;SACF,CAAC,CACH,CAAC,OAAO,CAAC;YACR,KAAK,EAAE;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,YAAY,EAAE,qBAAqB;aACpC;YACD,MAAM,EAAE;gBACN,QAAQ,EAAE,kBAAkB;gBAC5B,YAAY,EAAE,sBAAsB;gBACpC,aAAa,EAAE,IAAI;aACpB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/estimate-entropy.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/estimate-entropy.spec.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const estimate_entropy_1 = require("./estimate-entropy");
+describe("estimateEntropy", () => {
+    it("should return zero for empty strings", () => {
+        expect((0, estimate_entropy_1.estimateEntropy)("")).toBe(0);
+    });
+    it("should estimate entropy from unique characters and length", () => {
+        expect((0, estimate_entropy_1.estimateEntropy)("aaaa")).toBe(0);
+        expect((0, estimate_entropy_1.estimateEntropy)("abcd")).toBe(8);
+    });
+});
+//# sourceMappingURL=estimate-entropy.spec.js.map

package/dist/utils/estimate-entropy.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"estimate-entropy.spec.js","sourceRoot":"","sources":["../../src/utils/estimate-entropy.spec.ts"],"names":[],"mappings":";;AAAA,yDAAqD;AAErD,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,IAAA,kCAAe,EAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,IAAA,kCAAe,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,IAAA,kCAAe,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/generic-oauth-provider-config.type.d.ts

@@ -0,0 +1,3 @@
+import { type genericOAuth } from "better-auth/plugins";
+export type GenericOAuthProviderConfig = Parameters<typeof genericOAuth>[0]["config"][number];
+export type OidcPrompt = NonNullable<GenericOAuthProviderConfig["prompt"]>;

package/dist/utils/generic-oauth-provider-config.type.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=generic-oauth-provider-config.type.js.map