@objectstack/plugin-auth 6.5.0 → 6.6.0

package/dist/index.mjs

@@ -460,10 +460,56 @@ function buildDeviceAuthorizationPluginSchema() {
 }
 
 // src/auth-manager.ts
+function isWebContainerRuntime() {
+  if (typeof globalThis === "undefined") return false;
+  const proc = globalThis.process;
+  return Boolean(proc?.versions?.webcontainer) || Boolean(proc?.env?.SHELL?.includes?.("jsh")) || Boolean(proc?.env?.STACKBLITZ);
+}
+var WebContainerRequestStateAsyncLocalStorage = class {
+  constructor() {
+    this.current = void 0;
+  }
+  run(store, fn) {
+    const prev = this.current;
+    this.current = store;
+    try {
+      const result = fn();
+      if (result && typeof result.then === "function") {
+        return result.finally(() => {
+          this.current = prev;
+        });
+      }
+      this.current = prev;
+      return result;
+    } catch (err) {
+      this.current = prev;
+      throw err;
+    }
+  }
+  getStore() {
+    return this.current;
+  }
+};
+function installWebContainerRequestStatePolyfill() {
+  if (!isWebContainerRuntime()) return;
+  const sym = /* @__PURE__ */ Symbol.for("better-auth:global");
+  const g = globalThis;
+  if (!g[sym]) {
+    g[sym] = { version: "0.0.0-polyfill", epoch: 0, context: {} };
+  }
+  if (!g[sym].context) g[sym].context = {};
+  if (!g[sym].context.requestStateAsyncStorage) {
+    g[sym].context.requestStateAsyncStorage = new WebContainerRequestStateAsyncLocalStorage();
+    console.warn(
+      "[AuthManager] WebContainer detected: installed synchronous request-state polyfill (node:async_hooks AsyncLocalStorage does not propagate context across await in WebContainer)."
+    );
+  }
+}
 var AuthManager = class {
   constructor(config) {
     this.auth = null;
     this.config = config;
+    installWebContainerRequestStatePolyfill();
     if (config.authInstance) {
       this.auth = config.authInstance;
     }
@@ -680,8 +726,7 @@ var AuthManager = class {
    * the native (fast) hasher and never load `@noble/hashes`.
    */
   async resolvePasswordHasher() {
-    const isWebContainer = typeof globalThis !== "undefined" && (Boolean(globalThis.process?.versions?.webcontainer) || Boolean(globalThis.process?.env?.SHELL?.includes?.("jsh")) || Boolean(globalThis.process?.env?.STACKBLITZ));
-    if (!isWebContainer) return void 0;
+    if (!isWebContainerRuntime()) return void 0;
     try {
       const { scryptAsync } = await import("@noble/hashes/scrypt.js");
       const PARAMS = { N: 16384, r: 16, p: 1, dkLen: 64, maxmem: 128 * 16384 * 16 * 2 };
@@ -1485,6 +1530,61 @@ var AuthPlugin = class {
         return c.json({ success: false, error: { code: "internal", message: err.message } }, 500);
       }
     });
+    rawApp.post(`${basePath}/admin/oauth2/toggle-disabled`, async (c) => {
+      try {
+        let body = {};
+        try {
+          body = await c.req.json();
+        } catch {
+          body = {};
+        }
+        const clientId = body?.client_id;
+        const disabled = body?.disabled;
+        if (typeof clientId !== "string" || clientId.length === 0) {
+          return c.json({ success: false, error: { code: "invalid_request", message: "client_id is required" } }, 400);
+        }
+        if (typeof disabled !== "boolean") {
+          return c.json({ success: false, error: { code: "invalid_request", message: "disabled must be a boolean" } }, 400);
+        }
+        const authApi = await this.authManager.getApi();
+        const session = await authApi.getSession({ headers: c.req.raw.headers });
+        if (!session?.user?.id) {
+          return c.json({ success: false, error: { code: "unauthorized", message: "Sign in first" } }, 401);
+        }
+        if (session.user.role !== "admin") {
+          return c.json({ success: false, error: { code: "forbidden", message: "Admin role required" } }, 403);
+        }
+        const dataEngine = this.authManager.getDataEngine();
+        if (!dataEngine) {
+          return c.json({ success: false, error: { code: "unavailable", message: "Data engine unavailable" } }, 503);
+        }
+        const existing = await dataEngine.findOne("sys_oauth_application", {
+          where: { client_id: clientId }
+        });
+        if (!existing) {
+          return c.json({ success: false, error: { code: "not_found", message: "OAuth client not found" } }, 404);
+        }
+        const updated = await dataEngine.update("sys_oauth_application", {
+          id: existing.id,
+          disabled,
+          updated_at: new Date(Math.floor(Date.now() / 1e3) * 1e3)
+        });
+        if (!updated) {
+          return c.json({ success: false, error: { code: "internal", message: "Unable to update OAuth client" } }, 500);
+        }
+        return c.json({
+          success: true,
+          data: {
+            client_id: clientId,
+            disabled
+          }
+        });
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        ctx.logger.error("[AuthPlugin] toggle-disabled failed", err);
+        return c.json({ success: false, error: { code: "internal", message: err.message } }, 500);
+      }
+    });
     rawApp.all(`${basePath}/*`, async (c) => {
       try {
         const response = await this.authManager.handleRequest(c.req.raw);