@octane-xplat/auth 0.8.0 → 0.9.0

package/README.md

@@ -0,0 +1,38 @@
+# `@octane-xplat/auth`
+
+Sign in with Apple and Google Sign-In for Octane xplat apps — the native
+SDKs (`@nativescript/apple-sign-in`, `@nativescript/google-signin`) on
+iOS/Android, the providers' web SDKs (Apple JS / Google Identity Services)
+in the browser, and AuthenticationServices through the ObjC bridge plus a
+Google flow on the macOS AppKit host. One `AuthUser`/`AuthCredential`
+contract everywhere.
+
+```sh
+pnpm add @octane-xplat/auth
+```
+
+```tsx
+import { appleAuth, googleAuth, AppleSignInButton } from '@octane-xplat/auth'
+
+appleAuth.configure({ clientId: 'com.example.app.web' }) // web-only fields
+
+const result = await appleAuth.signIn({ scopes: ['email', 'name'] })
+if (result.status === 'success') {
+	const { idToken, user } = result.credential // hand idToken to your backend
+}
+```
+
+Each provider object reports `supported` — Apple is `false` on Android —
+and exposes `configure`, `signIn`, and provider extras
+(`appleAuth.getCredentialState`, `googleAuth.signOut`). `SignInResult`
+distinguishes `success` / `cancelled` / `error`; a dismissed sheet is
+`cancelled`, not a throw. The sign-in buttons are platform-authentic
+components, so render them from platform-suffixed files or accept each
+target's native styling.
+
+Web needs registered client IDs; iOS needs the `applesignin` entitlement
+and Google's `GoogleService-Info.plist`/reversed-client-id URL scheme;
+Android needs `google-services.json` and a `serverClientId` for
+`serverAuthCode`. Guide: [Using device
+features](../../docs/platform-services.md). Exercised by
+[`AuthDemo`](../demos/src/AuthDemo.tsrx).

package/dist/native/octane-client-build.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "buildId": "b22aa5b8-e210-4f27-babd-a9c30bb0a8dd",
+  "buildId": "2924c745-ebe0-4012-9aea-c8c26eeb7458",
   "mode": "production",
   "capabilities": {
     "independentHydration": false

package/dist/web/octane-client-build.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "buildId": "321142a6-1005-48c0-850a-256122cdddf2",
+  "buildId": "dc0dd9f6-f1fb-4b15-a5c3-95ddbe1709aa",
   "mode": "production",
   "capabilities": {
     "independentHydration": false

package/package.json

@@ -1,26 +1,26 @@
 {
   "name": "@octane-xplat/auth",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Sign in with Apple + Google Sign-In for Octane xplat — native SDKs on iOS/Android, platform web SDKs in the browser",
   "keywords": [
-    "octane",
-    "xplat",
-    "cross-platform",
-    "auth",
-    "sign-in",
+    "android",
     "apple",
+    "auth",
+    "cross-platform",
     "google",
-    "oauth",
-    "nativescript",
     "ios",
-    "android",
-    "web"
+    "nativescript",
+    "oauth",
+    "octane",
+    "sign-in",
+    "web",
+    "xplat"
   ],
-  "license": "MIT",
   "homepage": "https://github.com/octane-xplat/octane-xplat/tree/main/packages/auth",
+  "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/octane-xplat/octane-xplat.git",
+    "url": "https://github.com/octane-xplat/octane-xplat",
     "directory": "packages/auth"
   },
   "files": [
@@ -60,7 +60,7 @@
     "@octanejs/vite-plugin": "0.1.61",
     "@tsrx/typescript-plugin": "0.4.11",
     "octane": "0.6.3",
-    "tsrx-typegen": "0.2.0",
+    "tsrx-typegen": "0.2.1",
     "typescript": "5.9.3",
     "vite": "8.3.0"
   },

package/src/apple.macos.ts

@@ -40,7 +40,10 @@ const SCOPE_MAP: Record<string, () => any> = {
 
 function isCancel(error: unknown): boolean {
 	// ASAuthorizationError.canceled = 1001 (NSError.code).
-	return (error as any)?.code === 1001 || /cancel/i.test(String((error as any)?.localizedDescription ?? error))
+	return (
+		(error as any)?.code === 1001 ||
+		/cancel/i.test(String((error as any)?.localizedDescription ?? error))
+	)
 }
 
 function utf8Bytes(input: string): Uint8Array {
@@ -63,7 +66,10 @@ function sha256Hex(input: string): string {
 		0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
 	])
 
-	const H = new Uint32Array([0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19])
+	const H = new Uint32Array([
+		0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+	])
+
 	const bytes = utf8Bytes(input)
 	const bitLen = bytes.length * 8
 	const padded = new Uint8Array((bytes.length + 9 + 63) & ~63)
@@ -74,25 +80,48 @@ function sha256Hex(input: string): string {
 	dv.setUint32(padded.length - 4, bitLen >>> 0)
 	const w = new Uint32Array(64)
 	for (let block = 0; block < padded.length; block += 64) {
-		for (let t = 0; t < 16; t++) {w[t] = dv.getUint32(block + t * 4)}
+		for (let t = 0; t < 16; t++) {
+			w[t] = dv.getUint32(block + t * 4)
+		}
+
 		for (let t = 16; t < 64; t++) {
-			const s0 = (w[t - 15] >>> 7 | w[t - 15] << 25) ^ (w[t - 15] >>> 18 | w[t - 15] << 14) ^ (w[t - 15] >>> 3)
-			const s1 = (w[t - 2] >>> 17 | w[t - 2] << 15) ^ (w[t - 2] >>> 19 | w[t - 2] << 13) ^ (w[t - 2] >>> 10)
+			const s0 =
+				((w[t - 15] >>> 7) | (w[t - 15] << 25)) ^
+				((w[t - 15] >>> 18) | (w[t - 15] << 14)) ^
+				(w[t - 15] >>> 3)
+
+			const s1 =
+				((w[t - 2] >>> 17) | (w[t - 2] << 15)) ^
+				((w[t - 2] >>> 19) | (w[t - 2] << 13)) ^
+				(w[t - 2] >>> 10)
+
 			w[t] = (w[t - 16] + s0 + w[t - 7] + s1) >>> 0
 		}
 
 		let [a, b, c, d, e, f, g, h] = H
 		for (let t = 0; t < 64; t++) {
-			const S1 = (e >>> 6 | e << 26) ^ (e >>> 11 | e << 21) ^ (e >>> 25 | e << 7)
+			const S1 = ((e >>> 6) | (e << 26)) ^ ((e >>> 11) | (e << 21)) ^ ((e >>> 25) | (e << 7))
 			const t1 = (h + S1 + ((e & f) ^ (~e & g)) + K[t] + w[t]) >>> 0
-			const S0 = (a >>> 2 | a << 30) ^ (a >>> 13 | a << 19) ^ (a >>> 22 | a << 10)
+			const S0 = ((a >>> 2) | (a << 30)) ^ ((a >>> 13) | (a << 19)) ^ ((a >>> 22) | (a << 10))
 			const t2 = (S0 + ((a & b) ^ (a & c) ^ (b & c))) >>> 0
-			h = g; g = f; f = e; e = (d + t1) >>> 0
-			d = c; c = b; b = a; a = (t1 + t2) >>> 0
+			h = g
+			g = f
+			f = e
+			e = (d + t1) >>> 0
+			d = c
+			c = b
+			b = a
+			a = (t1 + t2) >>> 0
 		}
 
-		H[0] = (H[0] + a) >>> 0; H[1] = (H[1] + b) >>> 0; H[2] = (H[2] + c) >>> 0; H[3] = (H[3] + d) >>> 0
-		H[4] = (H[4] + e) >>> 0; H[5] = (H[5] + f) >>> 0; H[6] = (H[6] + g) >>> 0; H[7] = (H[7] + h) >>> 0
+		H[0] = (H[0] + a) >>> 0
+		H[1] = (H[1] + b) >>> 0
+		H[2] = (H[2] + c) >>> 0
+		H[3] = (H[3] + d) >>> 0
+		H[4] = (H[4] + e) >>> 0
+		H[5] = (H[5] + f) >>> 0
+		H[6] = (H[6] + g) >>> 0
+		H[7] = (H[7] + h) >>> 0
 	}
 
 	return [...H].map((x) => x.toString(16).padStart(8, '0')).join('')
@@ -102,15 +131,21 @@ function toCredential(credential: any): AuthCredential {
 	const tokenData = credential.valueForKey('identityToken')
 	const codeData = credential.valueForKey('authorizationCode')
 	const fullName = credential.fullName
-	const name =
-		[fullName?.givenName, fullName?.familyName].filter(Boolean).join(' ') || undefined
+	const name = [fullName?.givenName, fullName?.familyName].filter(Boolean).join(' ') || undefined
 
 	return {
 		provider: 'apple',
 		idToken: tokenData ? String(NSString.alloc().initWithDataEncoding(tokenData, 4)) : undefined,
-		authorizationCode: codeData ? String(NSString.alloc().initWithDataEncoding(codeData, 4)) : undefined,
-		scopes: (credential.authorizedScopes ? Array.from(credential.authorizedScopes as any) : []).map((s: any) =>
-			s === ASAuthorizationScopeEmail ? 'email' : s === ASAuthorizationScopeFullName ? 'name' : String(s),
+		authorizationCode: codeData
+			? String(NSString.alloc().initWithDataEncoding(codeData, 4))
+			: undefined,
+		scopes: (credential.authorizedScopes ? Array.from(credential.authorizedScopes as any) : []).map(
+			(s: any) =>
+				s === ASAuthorizationScopeEmail
+					? 'email'
+					: s === ASAuthorizationScopeFullName
+						? 'name'
+						: String(s),
 		),
 		user: {
 			id: String(credential.user ?? ''),
@@ -269,7 +304,15 @@ export const appleAuth: AppleAuth = {
 						return
 					}
 
-					resolve(state === 1 ? 'authorized' : state === 0 ? 'revoked' : state === 3 ? 'transferred' : 'notFound')
+					resolve(
+						state === 1
+							? 'authorized'
+							: state === 0
+								? 'revoked'
+								: state === 3
+									? 'transferred'
+									: 'notFound',
+					)
 				},
 			)
 		})

package/src/apple.web.ts

@@ -47,9 +47,9 @@ function decodeJwt(token: string): Record<string, any> {
 function toCredential(response: any): AuthCredential {
 	const auth = response?.authorization ?? {}
 	const claims = auth.id_token ? decodeJwt(auth.id_token) : {}
-	const name = [response?.user?.name?.firstName, response?.user?.name?.lastName]
-		.filter(Boolean)
-		.join(' ') || undefined
+	const name =
+		[response?.user?.name?.firstName, response?.user?.name?.lastName].filter(Boolean).join(' ') ||
+		undefined
 
 	return {
 		provider: 'apple',
@@ -101,7 +101,10 @@ export const appleAuth: AppleAuth = {
 		} catch (error) {
 			return isCancel(error)
 				? { status: 'cancelled' }
-				: { status: 'error', message: String((error as any)?.message ?? (error as any)?.error ?? error) }
+				: {
+						status: 'error',
+						message: String((error as any)?.message ?? (error as any)?.error ?? error),
+					}
 		}
 	},
 	async getCredentialState(): Promise<AppleCredentialState> {

package/src/google.web.ts

@@ -78,7 +78,11 @@ function initialize(google: any) {
 /** Internal — the button leaf renders the official GIS button into `host`. */
 export async function renderGoogleButton(
 	host: HTMLElement,
-	options: { theme?: 'dark' | 'light' | 'auto'; variant?: 'standard' | 'wide' | 'icon'; width?: number },
+	options: {
+		theme?: 'dark' | 'light' | 'auto'
+		variant?: 'standard' | 'wide' | 'icon'
+		width?: number
+	},
 	onResult: (result: SignInResult) => void,
 ): Promise<void> {
 	if (!config.clientId) {

package/src/index.ts

@@ -1,9 +1,9 @@
 // Platform barrels — explicit .tsrx leaf imports (moduleSuffixes don't
 // reach .tsrx; same convention as @octane-xplat/ui index.*.ts).
-export { appleAuth } from './apple';
-export { googleAuth } from './google';
-export { AppleSignInButton } from './AppleSignInButton.tsrx';
-export { GoogleSignInButton } from './GoogleSignInButton.tsrx';
+export { appleAuth } from './apple'
+export { googleAuth } from './google'
+export { AppleSignInButton } from './AppleSignInButton.tsrx'
+export { GoogleSignInButton } from './GoogleSignInButton.tsrx'
 export type {
 	AppleAuth,
 	AppleAuthConfig,
@@ -18,4 +18,4 @@ export type {
 	GoogleSignInButtonProps,
 	GoogleSignInOptions,
 	SignInResult,
-} from './types';
+} from './types'

package/src/index.web.ts

@@ -1,9 +1,9 @@
 // Platform barrels — explicit .tsrx leaf imports (moduleSuffixes don't
 // reach .tsrx; same convention as @octane-xplat/ui index.*.ts).
-export { appleAuth } from './apple.web';
-export { googleAuth } from './google.web';
-export { AppleSignInButton } from './AppleSignInButton.web.tsrx';
-export { GoogleSignInButton } from './GoogleSignInButton.web.tsrx';
+export { appleAuth } from './apple.web'
+export { googleAuth } from './google.web'
+export { AppleSignInButton } from './AppleSignInButton.web.tsrx'
+export { GoogleSignInButton } from './GoogleSignInButton.web.tsrx'
 export type {
 	AppleAuth,
 	AppleAuthConfig,
@@ -18,4 +18,4 @@ export type {
 	GoogleSignInButtonProps,
 	GoogleSignInOptions,
 	SignInResult,
-} from './types';
+} from './types'