@objectstack/plugin-auth 2.0.2

package/dist/index.js

@@ -0,0 +1,165 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  AuthPlugin: () => AuthPlugin
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/auth-plugin.ts
+var AuthPlugin = class {
+  constructor(options = {}) {
+    this.name = "com.objectstack.auth";
+    this.type = "standard";
+    this.version = "1.0.0";
+    this.dependencies = ["com.objectstack.server.hono"];
+    this.authManager = null;
+    this.options = {
+      registerRoutes: true,
+      basePath: "/api/v1/auth",
+      ...options
+    };
+  }
+  async init(ctx) {
+    ctx.logger.info("Initializing Auth Plugin...");
+    if (!this.options.secret) {
+      throw new Error("AuthPlugin: secret is required");
+    }
+    this.authManager = new AuthManager(this.options);
+    ctx.registerService("auth", this.authManager);
+    ctx.logger.info("Auth Plugin initialized successfully");
+  }
+  async start(ctx) {
+    ctx.logger.info("Starting Auth Plugin...");
+    if (!this.authManager) {
+      throw new Error("Auth manager not initialized");
+    }
+    if (this.options.registerRoutes) {
+      try {
+        const httpServer = ctx.getService("http-server");
+        this.registerAuthRoutes(httpServer, ctx);
+        ctx.logger.info(`Auth routes registered at ${this.options.basePath}`);
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        ctx.logger.error("Failed to register auth routes:", err);
+        throw err;
+      }
+    }
+    ctx.logger.info("Auth Plugin started successfully");
+  }
+  async destroy() {
+    this.authManager = null;
+  }
+  /**
+   * Register authentication routes with HTTP server
+   */
+  registerAuthRoutes(httpServer, ctx) {
+    if (!this.authManager) return;
+    const basePath = this.options.basePath || "/api/v1/auth";
+    httpServer.post(`${basePath}/login`, async (req, res) => {
+      try {
+        const body = req.body;
+        const result = await this.authManager.login(body);
+        res.status(200).json(result);
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        ctx.logger.error("Login error:", err);
+        res.status(401).json({
+          success: false,
+          error: err.message
+        });
+      }
+    });
+    httpServer.post(`${basePath}/register`, async (req, res) => {
+      try {
+        const body = req.body;
+        const result = await this.authManager.register(body);
+        res.status(201).json(result);
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        ctx.logger.error("Registration error:", err);
+        res.status(400).json({
+          success: false,
+          error: err.message
+        });
+      }
+    });
+    httpServer.post(`${basePath}/logout`, async (req, res) => {
+      try {
+        const authHeader = req.headers["authorization"];
+        const token = typeof authHeader === "string" ? authHeader.replace("Bearer ", "") : void 0;
+        await this.authManager.logout(token);
+        res.status(200).json({ success: true });
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        ctx.logger.error("Logout error:", err);
+        res.status(400).json({
+          success: false,
+          error: err.message
+        });
+      }
+    });
+    httpServer.get(`${basePath}/session`, async (req, res) => {
+      try {
+        const authHeader = req.headers["authorization"];
+        const token = typeof authHeader === "string" ? authHeader.replace("Bearer ", "") : void 0;
+        const session = await this.authManager.getSession(token);
+        res.status(200).json({ success: true, data: session });
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        res.status(401).json({
+          success: false,
+          error: err.message
+        });
+      }
+    });
+    ctx.logger.debug("Auth routes registered:", {
+      basePath,
+      routes: [
+        `POST ${basePath}/login`,
+        `POST ${basePath}/register`,
+        `POST ${basePath}/logout`,
+        `GET ${basePath}/session`
+      ]
+    });
+  }
+};
+var AuthManager = class {
+  constructor(_config) {
+  }
+  async login(_credentials) {
+    throw new Error("Login not yet implemented");
+  }
+  async register(_userData) {
+    throw new Error("Registration not yet implemented");
+  }
+  async logout(_token) {
+    throw new Error("Logout not yet implemented");
+  }
+  async getSession(_token) {
+    throw new Error("Session retrieval not yet implemented");
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AuthPlugin
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/auth-plugin.ts"],"sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * @objectstack/plugin-auth\n * \n * Authentication & Identity Plugin for ObjectStack\n * Powered by better-auth for robust, secure authentication\n */\n\nexport * from './auth-plugin';\nexport type { AuthConfig, AuthProviderConfig, AuthPluginConfig } from '@objectstack/spec/system';\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { Plugin, PluginContext, IHttpServer } from '@objectstack/core';\nimport { AuthConfig } from '@objectstack/spec/system';\n\n/**\n * Auth Plugin Options\n * Extends AuthConfig from spec with additional runtime options\n */\nexport interface AuthPluginOptions extends Partial<AuthConfig> {\n  /**\n   * Whether to automatically register auth routes\n   * @default true\n   */\n  registerRoutes?: boolean;\n  \n  /**\n   * Base path for auth routes\n   * @default '/api/v1/auth'\n   */\n  basePath?: string;\n}\n\n/**\n * Authentication Plugin\n * \n * Provides authentication and identity services for ObjectStack applications.\n * \n * Features:\n * - Session management\n * - User registration/login\n * - OAuth providers (Google, GitHub, etc.)\n * - Organization/team support\n * - 2FA, passkeys, magic links\n * \n * This plugin registers:\n * - `auth` service (auth manager instance)\n * - HTTP routes for authentication endpoints\n * \n * @planned This is a stub implementation. Full better-auth integration\n * will be added in a future version. For now, it provides the plugin\n * structure and basic route registration.\n */\nexport class AuthPlugin implements Plugin {\n  name = 'com.objectstack.auth';\n  type = 'standard';\n  version = '1.0.0';\n  dependencies = ['com.objectstack.server.hono']; // Requires HTTP server\n  \n  private options: AuthPluginOptions;\n  private authManager: AuthManager | null = null;\n\n  constructor(options: AuthPluginOptions = {}) {\n    this.options = {\n      registerRoutes: true,\n      basePath: '/api/v1/auth',\n      ...options\n    };\n  }\n\n  async init(ctx: PluginContext): Promise<void> {\n    ctx.logger.info('Initializing Auth Plugin...');\n\n    // Validate required configuration\n    if (!this.options.secret) {\n      throw new Error('AuthPlugin: secret is required');\n    }\n\n    // Initialize auth manager\n    this.authManager = new AuthManager(this.options);\n\n    // Register auth service\n    ctx.registerService('auth', this.authManager);\n    \n    ctx.logger.info('Auth Plugin initialized successfully');\n  }\n\n  async start(ctx: PluginContext): Promise<void> {\n    ctx.logger.info('Starting Auth Plugin...');\n\n    if (!this.authManager) {\n      throw new Error('Auth manager not initialized');\n    }\n\n    // Register HTTP routes if enabled\n    if (this.options.registerRoutes) {\n      try {\n        const httpServer = ctx.getService<IHttpServer>('http-server');\n        this.registerAuthRoutes(httpServer, ctx);\n        ctx.logger.info(`Auth routes registered at ${this.options.basePath}`);\n      } catch (error) {\n        const err = error instanceof Error ? error : new Error(String(error));\n        ctx.logger.error('Failed to register auth routes:', err);\n        throw err;\n      }\n    }\n\n    ctx.logger.info('Auth Plugin started successfully');\n  }\n\n  async destroy(): Promise<void> {\n    // Cleanup if needed\n    this.authManager = null;\n  }\n\n  /**\n   * Register authentication routes with HTTP server\n   */\n  private registerAuthRoutes(httpServer: IHttpServer, ctx: PluginContext): void {\n    if (!this.authManager) return;\n\n    const basePath = this.options.basePath || '/api/v1/auth';\n\n    // Login endpoint\n    httpServer.post(`${basePath}/login`, async (req, res) => {\n      try {\n        const body = req.body;\n        const result = await this.authManager!.login(body);\n        res.status(200).json(result);\n      } catch (error) {\n        const err = error instanceof Error ? error : new Error(String(error));\n        ctx.logger.error('Login error:', err);\n        res.status(401).json({\n          success: false,\n          error: err.message,\n        });\n      }\n    });\n\n    // Register endpoint\n    httpServer.post(`${basePath}/register`, async (req, res) => {\n      try {\n        const body = req.body;\n        const result = await this.authManager!.register(body);\n        res.status(201).json(result);\n      } catch (error) {\n        const err = error instanceof Error ? error : new Error(String(error));\n        ctx.logger.error('Registration error:', err);\n        res.status(400).json({\n          success: false,\n          error: err.message,\n        });\n      }\n    });\n\n    // Logout endpoint\n    httpServer.post(`${basePath}/logout`, async (req, res) => {\n      try {\n        const authHeader = req.headers['authorization'];\n        const token = typeof authHeader === 'string' ? authHeader.replace('Bearer ', '') : undefined;\n        await this.authManager!.logout(token);\n        res.status(200).json({ success: true });\n      } catch (error) {\n        const err = error instanceof Error ? error : new Error(String(error));\n        ctx.logger.error('Logout error:', err);\n        res.status(400).json({\n          success: false,\n          error: err.message,\n        });\n      }\n    });\n\n    // Session endpoint\n    httpServer.get(`${basePath}/session`, async (req, res) => {\n      try {\n        const authHeader = req.headers['authorization'];\n        const token = typeof authHeader === 'string' ? authHeader.replace('Bearer ', '') : undefined;\n        const session = await this.authManager!.getSession(token);\n        res.status(200).json({ success: true, data: session });\n      } catch (error) {\n        const err = error instanceof Error ? error : new Error(String(error));\n        res.status(401).json({\n          success: false,\n          error: err.message,\n        });\n      }\n    });\n\n    ctx.logger.debug('Auth routes registered:', {\n      basePath,\n      routes: [\n        `POST ${basePath}/login`,\n        `POST ${basePath}/register`,\n        `POST ${basePath}/logout`,\n        `GET ${basePath}/session`,\n      ],\n    });\n  }\n}\n\n/**\n * Auth Manager\n * \n * @planned This is a stub implementation. Real authentication logic\n * will be implemented using better-auth or similar library in future versions.\n */\nclass AuthManager {\n  constructor(_config: AuthPluginOptions) {\n    // Store config for future use\n  }\n\n  async login(_credentials: any): Promise<any> {\n    // @planned Implement actual login logic with better-auth\n    throw new Error('Login not yet implemented');\n  }\n\n  async register(_userData: any): Promise<any> {\n    // @planned Implement actual registration logic with better-auth\n    throw new Error('Registration not yet implemented');\n  }\n\n  async logout(_token?: string): Promise<void> {\n    // @planned Implement actual logout logic\n    throw new Error('Logout not yet implemented');\n  }\n\n  async getSession(_token?: string): Promise<any> {\n    // @planned Implement actual session retrieval\n    throw new Error('Session retrieval not yet implemented');\n  }\n}\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;AC2CO,IAAM,aAAN,MAAmC;AAAA,EASxC,YAAY,UAA6B,CAAC,GAAG;AAR7C,gBAAO;AACP,gBAAO;AACP,mBAAU;AACV,wBAAe,CAAC,6BAA6B;AAG7C,SAAQ,cAAkC;AAGxC,SAAK,UAAU;AAAA,MACb,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,GAAG;AAAA,IACL;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,KAAmC;AAC5C,QAAI,OAAO,KAAK,6BAA6B;AAG7C,QAAI,CAAC,KAAK,QAAQ,QAAQ;AACxB,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAGA,SAAK,cAAc,IAAI,YAAY,KAAK,OAAO;AAG/C,QAAI,gBAAgB,QAAQ,KAAK,WAAW;AAE5C,QAAI,OAAO,KAAK,sCAAsC;AAAA,EACxD;AAAA,EAEA,MAAM,MAAM,KAAmC;AAC7C,QAAI,OAAO,KAAK,yBAAyB;AAEzC,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AAGA,QAAI,KAAK,QAAQ,gBAAgB;AAC/B,UAAI;AACF,cAAM,aAAa,IAAI,WAAwB,aAAa;AAC5D,aAAK,mBAAmB,YAAY,GAAG;AACvC,YAAI,OAAO,KAAK,6BAA6B,KAAK,QAAQ,QAAQ,EAAE;AAAA,MACtE,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,YAAI,OAAO,MAAM,mCAAmC,GAAG;AACvD,cAAM;AAAA,MACR;AAAA,IACF;AAEA,QAAI,OAAO,KAAK,kCAAkC;AAAA,EACpD;AAAA,EAEA,MAAM,UAAyB;AAE7B,SAAK,cAAc;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,YAAyB,KAA0B;AAC5E,QAAI,CAAC,KAAK,YAAa;AAEvB,UAAM,WAAW,KAAK,QAAQ,YAAY;AAG1C,eAAW,KAAK,GAAG,QAAQ,UAAU,OAAO,KAAK,QAAQ;AACvD,UAAI;AACF,cAAM,OAAO,IAAI;AACjB,cAAM,SAAS,MAAM,KAAK,YAAa,MAAM,IAAI;AACjD,YAAI,OAAO,GAAG,EAAE,KAAK,MAAM;AAAA,MAC7B,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,YAAI,OAAO,MAAM,gBAAgB,GAAG;AACpC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,SAAS;AAAA,UACT,OAAO,IAAI;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAGD,eAAW,KAAK,GAAG,QAAQ,aAAa,OAAO,KAAK,QAAQ;AAC1D,UAAI;AACF,cAAM,OAAO,IAAI;AACjB,cAAM,SAAS,MAAM,KAAK,YAAa,SAAS,IAAI;AACpD,YAAI,OAAO,GAAG,EAAE,KAAK,MAAM;AAAA,MAC7B,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,YAAI,OAAO,MAAM,uBAAuB,GAAG;AAC3C,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,SAAS;AAAA,UACT,OAAO,IAAI;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAGD,eAAW,KAAK,GAAG,QAAQ,WAAW,OAAO,KAAK,QAAQ;AACxD,UAAI;AACF,cAAM,aAAa,IAAI,QAAQ,eAAe;AAC9C,cAAM,QAAQ,OAAO,eAAe,WAAW,WAAW,QAAQ,WAAW,EAAE,IAAI;AACnF,cAAM,KAAK,YAAa,OAAO,KAAK;AACpC,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,MACxC,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,YAAI,OAAO,MAAM,iBAAiB,GAAG;AACrC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,SAAS;AAAA,UACT,OAAO,IAAI;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAGD,eAAW,IAAI,GAAG,QAAQ,YAAY,OAAO,KAAK,QAAQ;AACxD,UAAI;AACF,cAAM,aAAa,IAAI,QAAQ,eAAe;AAC9C,cAAM,QAAQ,OAAO,eAAe,WAAW,WAAW,QAAQ,WAAW,EAAE,IAAI;AACnF,cAAM,UAAU,MAAM,KAAK,YAAa,WAAW,KAAK;AACxD,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,QAAQ,CAAC;AAAA,MACvD,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,SAAS;AAAA,UACT,OAAO,IAAI;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,QAAI,OAAO,MAAM,2BAA2B;AAAA,MAC1C;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,QAChB,OAAO,QAAQ;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAQA,IAAM,cAAN,MAAkB;AAAA,EAChB,YAAY,SAA4B;AAAA,EAExC;AAAA,EAEA,MAAM,MAAM,cAAiC;AAE3C,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC7C;AAAA,EAEA,MAAM,SAAS,WAA8B;AAE3C,UAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD;AAAA,EAEA,MAAM,OAAO,QAAgC;AAE3C,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAAA,EAEA,MAAM,WAAW,QAA+B;AAE9C,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AACF;","names":[]}

package/dist/index.mjs

@@ -0,0 +1,138 @@
+// src/auth-plugin.ts
+var AuthPlugin = class {
+  constructor(options = {}) {
+    this.name = "com.objectstack.auth";
+    this.type = "standard";
+    this.version = "1.0.0";
+    this.dependencies = ["com.objectstack.server.hono"];
+    this.authManager = null;
+    this.options = {
+      registerRoutes: true,
+      basePath: "/api/v1/auth",
+      ...options
+    };
+  }
+  async init(ctx) {
+    ctx.logger.info("Initializing Auth Plugin...");
+    if (!this.options.secret) {
+      throw new Error("AuthPlugin: secret is required");
+    }
+    this.authManager = new AuthManager(this.options);
+    ctx.registerService("auth", this.authManager);
+    ctx.logger.info("Auth Plugin initialized successfully");
+  }
+  async start(ctx) {
+    ctx.logger.info("Starting Auth Plugin...");
+    if (!this.authManager) {
+      throw new Error("Auth manager not initialized");
+    }
+    if (this.options.registerRoutes) {
+      try {
+        const httpServer = ctx.getService("http-server");
+        this.registerAuthRoutes(httpServer, ctx);
+        ctx.logger.info(`Auth routes registered at ${this.options.basePath}`);
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        ctx.logger.error("Failed to register auth routes:", err);
+        throw err;
+      }
+    }
+    ctx.logger.info("Auth Plugin started successfully");
+  }
+  async destroy() {
+    this.authManager = null;
+  }
+  /**
+   * Register authentication routes with HTTP server
+   */
+  registerAuthRoutes(httpServer, ctx) {
+    if (!this.authManager) return;
+    const basePath = this.options.basePath || "/api/v1/auth";
+    httpServer.post(`${basePath}/login`, async (req, res) => {
+      try {
+        const body = req.body;
+        const result = await this.authManager.login(body);
+        res.status(200).json(result);
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        ctx.logger.error("Login error:", err);
+        res.status(401).json({
+          success: false,
+          error: err.message
+        });
+      }
+    });
+    httpServer.post(`${basePath}/register`, async (req, res) => {
+      try {
+        const body = req.body;
+        const result = await this.authManager.register(body);
+        res.status(201).json(result);
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        ctx.logger.error("Registration error:", err);
+        res.status(400).json({
+          success: false,
+          error: err.message
+        });
+      }
+    });
+    httpServer.post(`${basePath}/logout`, async (req, res) => {
+      try {
+        const authHeader = req.headers["authorization"];
+        const token = typeof authHeader === "string" ? authHeader.replace("Bearer ", "") : void 0;
+        await this.authManager.logout(token);
+        res.status(200).json({ success: true });
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        ctx.logger.error("Logout error:", err);
+        res.status(400).json({
+          success: false,
+          error: err.message
+        });
+      }
+    });
+    httpServer.get(`${basePath}/session`, async (req, res) => {
+      try {
+        const authHeader = req.headers["authorization"];
+        const token = typeof authHeader === "string" ? authHeader.replace("Bearer ", "") : void 0;
+        const session = await this.authManager.getSession(token);
+        res.status(200).json({ success: true, data: session });
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        res.status(401).json({
+          success: false,
+          error: err.message
+        });
+      }
+    });
+    ctx.logger.debug("Auth routes registered:", {
+      basePath,
+      routes: [
+        `POST ${basePath}/login`,
+        `POST ${basePath}/register`,
+        `POST ${basePath}/logout`,
+        `GET ${basePath}/session`
+      ]
+    });
+  }
+};
+var AuthManager = class {
+  constructor(_config) {
+  }
+  async login(_credentials) {
+    throw new Error("Login not yet implemented");
+  }
+  async register(_userData) {
+    throw new Error("Registration not yet implemented");
+  }
+  async logout(_token) {
+    throw new Error("Logout not yet implemented");
+  }
+  async getSession(_token) {
+    throw new Error("Session retrieval not yet implemented");
+  }
+};
+export {
+  AuthPlugin
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/auth-plugin.ts"],"sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { Plugin, PluginContext, IHttpServer } from '@objectstack/core';\nimport { AuthConfig } from '@objectstack/spec/system';\n\n/**\n * Auth Plugin Options\n * Extends AuthConfig from spec with additional runtime options\n */\nexport interface AuthPluginOptions extends Partial<AuthConfig> {\n  /**\n   * Whether to automatically register auth routes\n   * @default true\n   */\n  registerRoutes?: boolean;\n  \n  /**\n   * Base path for auth routes\n   * @default '/api/v1/auth'\n   */\n  basePath?: string;\n}\n\n/**\n * Authentication Plugin\n * \n * Provides authentication and identity services for ObjectStack applications.\n * \n * Features:\n * - Session management\n * - User registration/login\n * - OAuth providers (Google, GitHub, etc.)\n * - Organization/team support\n * - 2FA, passkeys, magic links\n * \n * This plugin registers:\n * - `auth` service (auth manager instance)\n * - HTTP routes for authentication endpoints\n * \n * @planned This is a stub implementation. Full better-auth integration\n * will be added in a future version. For now, it provides the plugin\n * structure and basic route registration.\n */\nexport class AuthPlugin implements Plugin {\n  name = 'com.objectstack.auth';\n  type = 'standard';\n  version = '1.0.0';\n  dependencies = ['com.objectstack.server.hono']; // Requires HTTP server\n  \n  private options: AuthPluginOptions;\n  private authManager: AuthManager | null = null;\n\n  constructor(options: AuthPluginOptions = {}) {\n    this.options = {\n      registerRoutes: true,\n      basePath: '/api/v1/auth',\n      ...options\n    };\n  }\n\n  async init(ctx: PluginContext): Promise<void> {\n    ctx.logger.info('Initializing Auth Plugin...');\n\n    // Validate required configuration\n    if (!this.options.secret) {\n      throw new Error('AuthPlugin: secret is required');\n    }\n\n    // Initialize auth manager\n    this.authManager = new AuthManager(this.options);\n\n    // Register auth service\n    ctx.registerService('auth', this.authManager);\n    \n    ctx.logger.info('Auth Plugin initialized successfully');\n  }\n\n  async start(ctx: PluginContext): Promise<void> {\n    ctx.logger.info('Starting Auth Plugin...');\n\n    if (!this.authManager) {\n      throw new Error('Auth manager not initialized');\n    }\n\n    // Register HTTP routes if enabled\n    if (this.options.registerRoutes) {\n      try {\n        const httpServer = ctx.getService<IHttpServer>('http-server');\n        this.registerAuthRoutes(httpServer, ctx);\n        ctx.logger.info(`Auth routes registered at ${this.options.basePath}`);\n      } catch (error) {\n        const err = error instanceof Error ? error : new Error(String(error));\n        ctx.logger.error('Failed to register auth routes:', err);\n        throw err;\n      }\n    }\n\n    ctx.logger.info('Auth Plugin started successfully');\n  }\n\n  async destroy(): Promise<void> {\n    // Cleanup if needed\n    this.authManager = null;\n  }\n\n  /**\n   * Register authentication routes with HTTP server\n   */\n  private registerAuthRoutes(httpServer: IHttpServer, ctx: PluginContext): void {\n    if (!this.authManager) return;\n\n    const basePath = this.options.basePath || '/api/v1/auth';\n\n    // Login endpoint\n    httpServer.post(`${basePath}/login`, async (req, res) => {\n      try {\n        const body = req.body;\n        const result = await this.authManager!.login(body);\n        res.status(200).json(result);\n      } catch (error) {\n        const err = error instanceof Error ? error : new Error(String(error));\n        ctx.logger.error('Login error:', err);\n        res.status(401).json({\n          success: false,\n          error: err.message,\n        });\n      }\n    });\n\n    // Register endpoint\n    httpServer.post(`${basePath}/register`, async (req, res) => {\n      try {\n        const body = req.body;\n        const result = await this.authManager!.register(body);\n        res.status(201).json(result);\n      } catch (error) {\n        const err = error instanceof Error ? error : new Error(String(error));\n        ctx.logger.error('Registration error:', err);\n        res.status(400).json({\n          success: false,\n          error: err.message,\n        });\n      }\n    });\n\n    // Logout endpoint\n    httpServer.post(`${basePath}/logout`, async (req, res) => {\n      try {\n        const authHeader = req.headers['authorization'];\n        const token = typeof authHeader === 'string' ? authHeader.replace('Bearer ', '') : undefined;\n        await this.authManager!.logout(token);\n        res.status(200).json({ success: true });\n      } catch (error) {\n        const err = error instanceof Error ? error : new Error(String(error));\n        ctx.logger.error('Logout error:', err);\n        res.status(400).json({\n          success: false,\n          error: err.message,\n        });\n      }\n    });\n\n    // Session endpoint\n    httpServer.get(`${basePath}/session`, async (req, res) => {\n      try {\n        const authHeader = req.headers['authorization'];\n        const token = typeof authHeader === 'string' ? authHeader.replace('Bearer ', '') : undefined;\n        const session = await this.authManager!.getSession(token);\n        res.status(200).json({ success: true, data: session });\n      } catch (error) {\n        const err = error instanceof Error ? error : new Error(String(error));\n        res.status(401).json({\n          success: false,\n          error: err.message,\n        });\n      }\n    });\n\n    ctx.logger.debug('Auth routes registered:', {\n      basePath,\n      routes: [\n        `POST ${basePath}/login`,\n        `POST ${basePath}/register`,\n        `POST ${basePath}/logout`,\n        `GET ${basePath}/session`,\n      ],\n    });\n  }\n}\n\n/**\n * Auth Manager\n * \n * @planned This is a stub implementation. Real authentication logic\n * will be implemented using better-auth or similar library in future versions.\n */\nclass AuthManager {\n  constructor(_config: AuthPluginOptions) {\n    // Store config for future use\n  }\n\n  async login(_credentials: any): Promise<any> {\n    // @planned Implement actual login logic with better-auth\n    throw new Error('Login not yet implemented');\n  }\n\n  async register(_userData: any): Promise<any> {\n    // @planned Implement actual registration logic with better-auth\n    throw new Error('Registration not yet implemented');\n  }\n\n  async logout(_token?: string): Promise<void> {\n    // @planned Implement actual logout logic\n    throw new Error('Logout not yet implemented');\n  }\n\n  async getSession(_token?: string): Promise<any> {\n    // @planned Implement actual session retrieval\n    throw new Error('Session retrieval not yet implemented');\n  }\n}\n\n"],"mappings":";AA2CO,IAAM,aAAN,MAAmC;AAAA,EASxC,YAAY,UAA6B,CAAC,GAAG;AAR7C,gBAAO;AACP,gBAAO;AACP,mBAAU;AACV,wBAAe,CAAC,6BAA6B;AAG7C,SAAQ,cAAkC;AAGxC,SAAK,UAAU;AAAA,MACb,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,GAAG;AAAA,IACL;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,KAAmC;AAC5C,QAAI,OAAO,KAAK,6BAA6B;AAG7C,QAAI,CAAC,KAAK,QAAQ,QAAQ;AACxB,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAGA,SAAK,cAAc,IAAI,YAAY,KAAK,OAAO;AAG/C,QAAI,gBAAgB,QAAQ,KAAK,WAAW;AAE5C,QAAI,OAAO,KAAK,sCAAsC;AAAA,EACxD;AAAA,EAEA,MAAM,MAAM,KAAmC;AAC7C,QAAI,OAAO,KAAK,yBAAyB;AAEzC,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AAGA,QAAI,KAAK,QAAQ,gBAAgB;AAC/B,UAAI;AACF,cAAM,aAAa,IAAI,WAAwB,aAAa;AAC5D,aAAK,mBAAmB,YAAY,GAAG;AACvC,YAAI,OAAO,KAAK,6BAA6B,KAAK,QAAQ,QAAQ,EAAE;AAAA,MACtE,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,YAAI,OAAO,MAAM,mCAAmC,GAAG;AACvD,cAAM;AAAA,MACR;AAAA,IACF;AAEA,QAAI,OAAO,KAAK,kCAAkC;AAAA,EACpD;AAAA,EAEA,MAAM,UAAyB;AAE7B,SAAK,cAAc;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,YAAyB,KAA0B;AAC5E,QAAI,CAAC,KAAK,YAAa;AAEvB,UAAM,WAAW,KAAK,QAAQ,YAAY;AAG1C,eAAW,KAAK,GAAG,QAAQ,UAAU,OAAO,KAAK,QAAQ;AACvD,UAAI;AACF,cAAM,OAAO,IAAI;AACjB,cAAM,SAAS,MAAM,KAAK,YAAa,MAAM,IAAI;AACjD,YAAI,OAAO,GAAG,EAAE,KAAK,MAAM;AAAA,MAC7B,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,YAAI,OAAO,MAAM,gBAAgB,GAAG;AACpC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,SAAS;AAAA,UACT,OAAO,IAAI;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAGD,eAAW,KAAK,GAAG,QAAQ,aAAa,OAAO,KAAK,QAAQ;AAC1D,UAAI;AACF,cAAM,OAAO,IAAI;AACjB,cAAM,SAAS,MAAM,KAAK,YAAa,SAAS,IAAI;AACpD,YAAI,OAAO,GAAG,EAAE,KAAK,MAAM;AAAA,MAC7B,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,YAAI,OAAO,MAAM,uBAAuB,GAAG;AAC3C,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,SAAS;AAAA,UACT,OAAO,IAAI;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAGD,eAAW,KAAK,GAAG,QAAQ,WAAW,OAAO,KAAK,QAAQ;AACxD,UAAI;AACF,cAAM,aAAa,IAAI,QAAQ,eAAe;AAC9C,cAAM,QAAQ,OAAO,eAAe,WAAW,WAAW,QAAQ,WAAW,EAAE,IAAI;AACnF,cAAM,KAAK,YAAa,OAAO,KAAK;AACpC,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,MACxC,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,YAAI,OAAO,MAAM,iBAAiB,GAAG;AACrC,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,SAAS;AAAA,UACT,OAAO,IAAI;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAGD,eAAW,IAAI,GAAG,QAAQ,YAAY,OAAO,KAAK,QAAQ;AACxD,UAAI;AACF,cAAM,aAAa,IAAI,QAAQ,eAAe;AAC9C,cAAM,QAAQ,OAAO,eAAe,WAAW,WAAW,QAAQ,WAAW,EAAE,IAAI;AACnF,cAAM,UAAU,MAAM,KAAK,YAAa,WAAW,KAAK;AACxD,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,QAAQ,CAAC;AAAA,MACvD,SAAS,OAAO;AACd,cAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,SAAS;AAAA,UACT,OAAO,IAAI;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,QAAI,OAAO,MAAM,2BAA2B;AAAA,MAC1C;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,QAChB,OAAO,QAAQ;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAQA,IAAM,cAAN,MAAkB;AAAA,EAChB,YAAY,SAA4B;AAAA,EAExC;AAAA,EAEA,MAAM,MAAM,cAAiC;AAE3C,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC7C;AAAA,EAEA,MAAM,SAAS,WAA8B;AAE3C,UAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD;AAAA,EAEA,MAAM,OAAO,QAAgC;AAE3C,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAAA,EAEA,MAAM,WAAW,QAA+B;AAE9C,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AACF;","names":[]}

package/examples/basic-usage.ts

@@ -0,0 +1,95 @@
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+
+/**
+ * Auth Plugin Usage Example
+ * 
+ * This example demonstrates how to use the AuthPlugin
+ * in an ObjectStack application.
+ */
+
+import { ObjectKernel } from '@objectstack/core';
+import { HonoServerPlugin } from '@objectstack/plugin-hono-server';
+import { AuthPlugin } from '@objectstack/plugin-auth';
+
+// Create kernel with auth plugin
+const kernel = new ObjectKernel({
+  plugins: [
+    // HTTP server is required for auth routes
+    new HonoServerPlugin({
+      port: 3000,
+    }),
+    
+    // Auth plugin configuration
+    new AuthPlugin({
+      secret: process.env.AUTH_SECRET || 'your-secret-key-at-least-32-chars',
+      baseUrl: process.env.BASE_URL || 'http://localhost:3000',
+      databaseUrl: process.env.DATABASE_URL,
+      
+      // OAuth providers (optional)
+      providers: [
+        {
+          id: 'google',
+          clientId: process.env.GOOGLE_CLIENT_ID || '',
+          clientSecret: process.env.GOOGLE_CLIENT_SECRET || '',
+          scope: ['email', 'profile'],
+        },
+        {
+          id: 'github',
+          clientId: process.env.GITHUB_CLIENT_ID || '',
+          clientSecret: process.env.GITHUB_CLIENT_SECRET || '',
+        },
+      ],
+      
+      // Additional auth features (optional)
+      plugins: {
+        organization: true,  // Multi-tenant support
+        twoFactor: true,     // 2FA support
+        passkeys: false,     // Passkey support
+        magicLink: true,     // Magic link login
+      },
+      
+      // Session configuration (optional)
+      session: {
+        expiresIn: 60 * 60 * 24 * 7, // 7 days
+        updateAge: 60 * 60 * 24,     // Update every 24 hours
+      },
+      
+      // Route configuration
+      registerRoutes: true,
+      basePath: '/api/v1/auth',
+    }),
+  ],
+});
+
+// Initialize the kernel
+async function main() {
+  try {
+    await kernel.init();
+    await kernel.start();
+    
+    console.log('🚀 Server started with auth plugin');
+    console.log('📍 Auth endpoints available at:');
+    console.log('   - POST http://localhost:3000/api/v1/auth/login');
+    console.log('   - POST http://localhost:3000/api/v1/auth/register');
+    console.log('   - POST http://localhost:3000/api/v1/auth/logout');
+    console.log('   - GET  http://localhost:3000/api/v1/auth/session');
+    
+    // Access the auth service from the kernel
+    const authService = kernel.getService('auth');
+    console.log('✅ Auth service registered:', !!authService);
+    
+  } catch (error) {
+    console.error('❌ Failed to start server:', error);
+    process.exit(1);
+  }
+}
+
+// Handle graceful shutdown
+process.on('SIGINT', async () => {
+  console.log('\n🛑 Shutting down...');
+  await kernel.destroy();
+  process.exit(0);
+});
+
+// Start the application
+main();

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@objectstack/plugin-auth",
+  "version": "2.0.2",
+  "license": "Apache-2.0",
+  "description": "Authentication & Identity Plugin for ObjectStack",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "dependencies": {
+    "@objectstack/core": "2.0.3",
+    "@objectstack/spec": "2.0.3"
+  },
+  "devDependencies": {
+    "@types/node": "^25.2.2",
+    "typescript": "^5.0.0",
+    "vitest": "^4.0.18"
+  },
+  "peerDependencies": {
+    "better-auth": "^1.0.0"
+  },
+  "peerDependenciesMeta": {
+    "better-auth": {
+      "optional": true
+    }
+  },
+  "scripts": {
+    "build": "tsup --config ../../../tsup.config.ts",
+    "test": "vitest run"
+  }
+}