@nytejs/auth 1.0.1

package/dist/routes.js

@@ -0,0 +1,152 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthRoutes = createAuthRoutes;
+/*
+ * This file is part of the Nyte.js Project.
+ * Copyright (c) 2026 itsmuzin
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const nyte_1 = require("nyte");
+const core_1 = require("./core");
+/**
+ * Cria o handler catch-all para /api/auth/[...value]
+ */
+function createAuthRoutes(config) {
+    const auth = new core_1.HWebAuth(config);
+    /**
+     * Handler principal que gerencia todas as rotas de auth
+     * Uso: /api/auth/[...value].ts
+     */
+    return {
+        pattern: '/api/auth/[...value]',
+        async GET(req, params) {
+            const path = params["value"];
+            const route = Array.isArray(path) ? path.join('/') : path || '';
+            // Verifica rotas adicionais dos providers primeiro
+            const additionalRoutes = auth.getAllAdditionalRoutes();
+            for (const { provider, route: additionalRoute } of additionalRoutes) {
+                if (additionalRoute.method === 'GET' && additionalRoute.path.includes(route)) {
+                    try {
+                        return await additionalRoute.handler(req, params);
+                    }
+                    catch (error) {
+                        console.error(`[${provider} Provider] Error in additional route:`, error);
+                        return nyte_1.NyteResponse.json({ error: 'Provider route error' }, { status: 500 });
+                    }
+                }
+            }
+            // Rotas padrão do sistema
+            switch (route) {
+                case 'session':
+                    return await handleSession(req, auth);
+                case 'csrf':
+                    return await handleCsrf(req);
+                case 'providers':
+                    return await handleProviders(auth);
+                default:
+                    return nyte_1.NyteResponse.json({ error: 'Route not found' }, { status: 404 });
+            }
+        },
+        async POST(req, params) {
+            const path = params["value"];
+            const route = Array.isArray(path) ? path.join('/') : path || '';
+            // Verifica rotas adicionais dos providers primeiro
+            const additionalRoutes = auth.getAllAdditionalRoutes();
+            for (const { provider, route: additionalRoute } of additionalRoutes) {
+                if (additionalRoute.method === 'POST' && additionalRoute.path.includes(route)) {
+                    try {
+                        return await additionalRoute.handler(req, params);
+                    }
+                    catch (error) {
+                        console.error(`[${provider} Provider] Error in additional route:`, error);
+                        return nyte_1.NyteResponse.json({ error: 'Provider route error' }, { status: 500 });
+                    }
+                }
+            }
+            // Rotas padrão do sistema
+            switch (route) {
+                case 'signin':
+                    return await handleSignIn(req, auth);
+                case 'signout':
+                    return await handleSignOut(req, auth);
+                default:
+                    return nyte_1.NyteResponse.json({ error: 'Route not found' }, { status: 404 });
+            }
+        },
+        // Instância do auth para uso manual
+        auth
+    };
+}
+/**
+ * Handler para GET /api/auth/session
+ */
+async function handleSession(req, auth) {
+    const session = await auth.getSession(req);
+    if (!session) {
+        return nyte_1.NyteResponse.json({ session: null });
+    }
+    return nyte_1.NyteResponse.json({ session });
+}
+/**
+ * Handler para GET /api/auth/csrf
+ */
+async function handleCsrf(req) {
+    // Token CSRF simples para proteção
+    const csrfToken = Math.random().toString(36).substring(2, 15) +
+        Math.random().toString(36).substring(2, 15);
+    return nyte_1.NyteResponse.json({ csrfToken });
+}
+/**
+ * Handler para GET /api/auth/providers
+ */
+async function handleProviders(auth) {
+    const providers = auth.getProviders();
+    return nyte_1.NyteResponse.json({ providers });
+}
+/**
+ * Handler para POST /api/auth/signin
+ */
+async function handleSignIn(req, auth) {
+    try {
+        const { provider = 'credentials', ...credentials } = await req.json();
+        const result = await auth.signIn(provider, credentials);
+        if (!result) {
+            return nyte_1.NyteResponse.json({ error: 'Invalid credentials' }, { status: 401 });
+        }
+        // Se tem redirectUrl, é OAuth - retorna URL para redirecionamento
+        if ('redirectUrl' in result) {
+            return nyte_1.NyteResponse.json({
+                success: true,
+                redirectUrl: result.redirectUrl,
+                type: 'oauth'
+            });
+        }
+        // Se tem session, é credentials - retorna sessão
+        return auth.createAuthResponse(result.token, {
+            success: true,
+            user: result.session.user,
+            type: 'session'
+        });
+    }
+    catch (error) {
+        console.error('[hweb-auth] Error on handleSignIn:', error);
+        return nyte_1.NyteResponse.json({ error: 'Authentication failed' }, { status: 500 });
+    }
+}
+/**
+ * Handler para POST /api/auth/signout
+ */
+async function handleSignOut(req, auth) {
+    return await auth.signOut(req);
+}

package/dist/types.d.ts

@@ -0,0 +1,76 @@
+export type User = Record<string, any>;
+export interface Session {
+    user: User;
+    expires: string;
+    accessToken?: string;
+}
+export interface SignInOptions {
+    redirect?: boolean;
+    callbackUrl?: string;
+    [key: string]: any;
+}
+export interface SignInResult {
+    error?: string;
+    status?: number;
+    ok?: boolean;
+    url?: string;
+}
+export interface SessionContextType {
+    data: Session | null;
+    status: 'loading' | 'authenticated' | 'unauthenticated';
+    signIn: (provider?: string, options?: SignInOptions) => Promise<SignInResult | undefined>;
+    signOut: (options?: {
+        callbackUrl?: string;
+    }) => Promise<void>;
+    update: () => Promise<Session | null>;
+}
+export interface AuthRoute {
+    method: 'GET' | 'POST' | 'PUT' | 'DELETE';
+    path: string;
+    handler: (req: any, params: any) => Promise<any>;
+}
+export interface AuthProviderClass {
+    id: string;
+    name: string;
+    type: string;
+    handleOauth?(credentials: Record<string, string>): Promise<string> | string;
+    handleSignIn(credentials: Record<string, string>): Promise<User | string | null>;
+    handleSignOut?(): Promise<void>;
+    additionalRoutes?: AuthRoute[];
+    getConfig?(): any;
+}
+export interface AuthConfig {
+    providers: AuthProviderClass[];
+    pages?: {
+        signIn?: string;
+        signOut?: string;
+        error?: string;
+    };
+    callbacks?: {
+        signIn?: (user: User, account: any, profile: any) => boolean | Promise<boolean>;
+        session?: ({ session, user, provider }: {
+            session: Session;
+            user: User;
+            provider: string;
+        }) => Session | Promise<Session>;
+        jwt?: (token: any, user: User, account: any, profile: any) => any | Promise<any>;
+    };
+    session?: {
+        strategy?: 'jwt' | 'database';
+        maxAge?: number;
+        updateAge?: number;
+    };
+    secret?: string;
+    debug?: boolean;
+    secureCookies?: boolean;
+}
+export interface CredentialsConfig {
+    id?: string;
+    name?: string;
+    credentials: Record<string, {
+        label: string;
+        type: string;
+        placeholder?: string;
+    }>;
+    authorize: (credentials: Record<string, string>) => Promise<User | null> | User | null;
+}

package/dist/types.js

@@ -0,0 +1,18 @@
+"use strict";
+/*
+ * This file is part of the Nyte.js Project.
+ * Copyright (c) 2026 itsmuzin
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@nytejs/auth",
+  "version": "1.0.1",
+  "description": "Authentication package for Nyte.js framework",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "private": false,
+  "author": "itsmuzin",
+  "license": "Apache-2.0",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
+    },
+    "./react": {
+      "types": "./dist/react/index.d.ts",
+      "import": "./dist/react/index.js",
+      "require": "./dist/react/index.js"
+    }
+  },
+  "keywords": [
+    "hightjs",
+    "nytejs",
+    "nyte",
+    "auth",
+    "authentication",
+    "framework"
+  ],
+  "files": [
+    "dist",
+    "README.md",
+    "src"
+  ],
+  "devDependencies": {
+    "@types/node": "^20.11.24",
+    "rimraf": "^5.0.0",
+    "typescript": "^5.9.3"
+  },
+  "dependencies": {
+    "@types/react": "^19.2.2",
+    "react": "^19.2.0",
+    "nyte": "1.0.1"
+  },
+  "scripts": {
+    "build": "tsc",
+    "build:watch": "tsc --watch",
+    "clean": "rimraf dist",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  }
+}

package/src/client.ts

@@ -0,0 +1,171 @@
+/*
+ * This file is part of the Nyte.js Project.
+ * Copyright (c) 2026 itsmuzin
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { SignInOptions, SignInResult, Session } from './types';
+// Configuração global do client
+let basePath = '/api/auth';
+
+export function setBasePath(path: string) {
+    basePath = path;
+}
+
+/**
+ * Função para obter a sessão atual (similar ao NextAuth getSession)
+ */
+export async function getSession(): Promise<Session | null> {
+    try {
+        const response = await fetch(`${basePath}/session`, {
+            credentials: 'include'
+        });
+
+        if (!response.ok) {
+            return null;
+        }
+
+        const data = await response.json();
+        return data.session || null;
+    } catch (error) {
+        console.error('[hweb-auth] Error fetching session:', error);
+        return null;
+    }
+}
+
+/**
+ * Função para obter token CSRF
+ */
+export async function getCsrfToken(): Promise<string | null> {
+    try {
+        const response = await fetch(`${basePath}/csrf`, {
+            credentials: 'include'
+        });
+
+        if (!response.ok) {
+            return null;
+        }
+
+        const data = await response.json();
+        return data.csrfToken || null;
+    } catch (error) {
+        console.error('[hweb-auth] Error fetching CSRF token:', error);
+        return null;
+    }
+}
+
+/**
+ * Função para obter providers disponíveis
+ */
+export async function getProviders(): Promise<any[] | null> {
+    try {
+        const response = await fetch(`${basePath}/providers`, {
+            credentials: 'include'
+        });
+
+        if (!response.ok) {
+            return null;
+        }
+
+        const data = await response.json();
+        return data.providers || [];
+    } catch (error) {
+        console.error('[hweb-auth] Error searching for providers:', error);
+        return null;
+    }
+}
+
+/**
+ * Função para fazer login (similar ao NextAuth signIn)
+ */
+export async function signIn(
+    provider: string = 'credentials',
+    options: SignInOptions = {}
+): Promise<SignInResult | undefined> {
+    try {
+        const { redirect = true, callbackUrl, ...credentials } = options;
+
+        const response = await fetch(`${basePath}/signin`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            credentials: 'include',
+            body: JSON.stringify({
+                provider,
+                ...credentials
+            })
+        });
+
+        const data = await response.json();
+
+        if (response.ok && data.success) {
+            // Se é OAuth, redireciona para URL fornecida
+            if (data.type === 'oauth' && data.redirectUrl) {
+                if (redirect && typeof window !== 'undefined') {
+                    window.location.href = data.redirectUrl;
+                }
+
+                return {
+                    ok: true,
+                    status: 200,
+                    url: data.redirectUrl
+                };
+            }
+
+            // Se é sessão (credentials), redireciona para callbackUrl
+            if (data.type === 'session') {
+                if (redirect && typeof window !== 'undefined') {
+                    window.location.href = callbackUrl || '/';
+                }
+
+                return {
+                    ok: true,
+                    status: 200,
+                    url: callbackUrl || '/'
+                };
+            }
+        } else {
+            return {
+                error: data.error || 'Authentication failed',
+                status: response.status,
+                ok: false
+            };
+        }
+    } catch (error) {
+        console.error('[hweb-auth] Error on signIn:', error);
+        return {
+            error: 'Network error',
+            status: 500,
+            ok: false
+        };
+    }
+}
+
+/**
+ * Função para fazer logout (similar ao NextAuth signOut)
+ */
+export async function signOut(options: { callbackUrl?: string } = {}): Promise<void> {
+    try {
+        await fetch(`${basePath}/signout`, {
+            method: 'POST',
+            credentials: 'include'
+        });
+
+        if (typeof window !== 'undefined') {
+            window.location.href = options.callbackUrl || '/';
+        }
+    } catch (error) {
+        console.error('[hweb-auth] Error on signOut:', error);
+    }
+}

package/src/components.tsx

@@ -0,0 +1,84 @@
+/*
+ * This file is part of the Nyte.js Project.
+ * Copyright (c) 2026 itsmuzin
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import React, { ReactNode } from 'react';
+import { useAuth } from './react';
+import { router } from 'nyte/react';
+
+
+interface GuardProps {
+    children: ReactNode;
+    fallback?: ReactNode;
+    redirectTo?: string;
+}
+
+/**
+ * Guard simples que só renderiza children se estiver autenticado
+ */
+export function AuthGuard({ children, fallback, redirectTo }: GuardProps) {
+    const { isAuthenticated, isLoading } = useAuth();
+
+    if(redirectTo && !isLoading && !isAuthenticated) {
+        router.push(redirectTo);
+    }
+
+    if (isLoading) {
+        return fallback || <div></div>;
+    }
+
+    if (!isAuthenticated) {
+        return fallback || null;
+    }
+
+    return <>{children}</>;
+}
+
+/**
+ * Componente para mostrar conteúdo apenas para usuários não autenticados
+ */
+export function GuestOnly({ children, fallback, redirectTo }: GuardProps) {
+    const { isAuthenticated, isLoading } = useAuth();
+
+    if(redirectTo && !isLoading && isAuthenticated) {
+        router.push(redirectTo);
+    }
+
+    if (isLoading || isAuthenticated) {
+        return fallback || <div></div>;
+    }
+
+    return <>{children}</>;
+}
+
+/**
+ * Hook para redirecionar baseado no status de autenticação
+ */
+export function useAuthRedirect(
+    authenticatedRedirect?: string,
+    unauthenticatedRedirect?: string
+) {
+    const { isAuthenticated, isLoading } = useAuth();
+
+    React.useEffect(() => {
+        if (isLoading) return;
+
+        if (isAuthenticated && authenticatedRedirect) {
+            window.location.href = authenticatedRedirect;
+        } else if (!isAuthenticated && unauthenticatedRedirect) {
+            window.location.href = unauthenticatedRedirect;
+        }
+    }, [isAuthenticated, isLoading, authenticatedRedirect, unauthenticatedRedirect]);
+}