@nuxt-customer-portal/core 0.8.8 → 0.8.9

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @nuxt-customer-portal/core
 
+## 0.8.9
+
+### Patch Changes
+
+- 6cfe8bc: Resolve login and signup provider visibility from the runtime server opt-in flags and credentials, including in prebuilt images, without requiring public Nuxt overrides.
+
 ## 0.8.8
 
 ## 0.8.7

package/nuxt.config.ts

@@ -1,19 +1,10 @@
 import { fileURLToPath } from 'node:url'
-import { socialAuthProviderEnabled } from './shared/social-auth'
+import { socialAuthProviders } from './shared/social-auth'
 
 const registrationMode = ['open', 'invitation-only', 'disabled'].includes(process.env.PORTAL_REGISTRATION_MODE || '')
   ? (process.env.PORTAL_REGISTRATION_MODE as 'open' | 'invitation-only' | 'disabled')
   : 'open'
-const githubEnabled = socialAuthProviderEnabled(
-  process.env.PORTAL_GITHUB_ENABLED,
-  process.env.GITHUB_CLIENT_ID,
-  process.env.GITHUB_CLIENT_SECRET
-)
-const googleEnabled = socialAuthProviderEnabled(
-  process.env.PORTAL_GOOGLE_ENABLED,
-  process.env.GOOGLE_CLIENT_ID,
-  process.env.GOOGLE_CLIENT_SECRET
-)
+const { githubEnabled, googleEnabled } = socialAuthProviders(process.env)
 
 export default defineNuxtConfig({
   $meta: { name: 'nuxt-customer-portal-core' },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nuxt-customer-portal/core",
-  "version": "0.8.8",
+  "version": "0.8.9",
   "license": "MIT",
   "homepage": "https://nuxt-customer-portal.com",
   "repository": {

package/portal.manifest.mjs

@@ -1,6 +1,6 @@
 export default {
   id: 'core',
-  version: '0.8.8',
+  version: '0.8.9',
   source: '@nuxt-customer-portal/core',
   dependsOn: [],
   schema: './server/db/schema/index.ts',

package/server/middleware/social-auth-config.ts

@@ -0,0 +1,8 @@
+import { defineEventHandler } from 'h3'
+import { socialAuthProviders } from '../../shared/social-auth'
+
+export default defineEventHandler((event) => {
+  // Nitro gives each request its own runtime config. Replace build-time defaults
+  // and public overrides with the same availability checks used by Better Auth.
+  Object.assign(useRuntimeConfig(event).public.portalAuth, socialAuthProviders(process.env))
+})

package/server/utils/auth.ts

@@ -34,7 +34,7 @@ import {
 import { canViewOrganizationDirectory } from '../../shared/feature-registry'
 import { isSystemAdminEmail, parseSystemAdminEmails } from './admin-email-allowlist'
 import { runUserIdentityChangedHooks } from './business-hooks'
-import { socialAuthProviderEnabled } from '../../shared/social-auth'
+import { socialAuthProviders } from '../../shared/social-auth'
 
 /**
  * Generate an ID in the same format as better-auth uses (nanoid)
@@ -48,16 +48,7 @@ const portalAuthConfig = useRuntimeConfig().portalAuth
 const registrationMode = ['open', 'invitation-only', 'disabled'].includes(process.env.PORTAL_REGISTRATION_MODE || '')
   ? process.env.PORTAL_REGISTRATION_MODE
   : portalAuthConfig.registrationMode
-const githubEnabled = socialAuthProviderEnabled(
-  process.env.PORTAL_GITHUB_ENABLED,
-  process.env.GITHUB_CLIENT_ID,
-  process.env.GITHUB_CLIENT_SECRET
-)
-const googleEnabled = socialAuthProviderEnabled(
-  process.env.PORTAL_GOOGLE_ENABLED,
-  process.env.GOOGLE_CLIENT_ID,
-  process.env.GOOGLE_CLIENT_SECRET
-)
+const { githubEnabled, googleEnabled } = socialAuthProviders(process.env)
 const systemAdminEmails = isPortalDemo() ? new Set<string>() : parseSystemAdminEmails(process.env.ADMIN_EMAILS)
 
 export const auth = betterAuth({

package/shared/social-auth.ts

@@ -3,3 +3,8 @@ export const socialAuthProviderEnabled = (
   clientId: string | undefined,
   clientSecret: string | undefined
 ) => enabled === 'true' && Boolean(clientId?.trim()) && Boolean(clientSecret?.trim())
+
+export const socialAuthProviders = (env: Record<string, string | undefined>) => ({
+  googleEnabled: socialAuthProviderEnabled(env.PORTAL_GOOGLE_ENABLED, env.GOOGLE_CLIENT_ID, env.GOOGLE_CLIENT_SECRET),
+  githubEnabled: socialAuthProviderEnabled(env.PORTAL_GITHUB_ENABLED, env.GITHUB_CLIENT_ID, env.GITHUB_CLIENT_SECRET)
+})