@owox/idp-better-auth 0.5.0

package/README.md

@@ -0,0 +1,183 @@
+# @owox/idp-better-auth
+
+Better Auth IDP provider for OWOX Data Marts authentication.
+
+## Setup
+
+### 1. Environment Configuration
+
+Create or update your `.env` file with the required settings:
+
+```env
+# Required
+IDP_PROVIDER=better-auth
+IDP_BETTER_AUTH_SECRET=your-super-secret-key-at-least-32-characters-long
+
+# Database (SQLite - recommended for getting started)
+IDP_BETTER_AUTH_DATABASE_TYPE=sqlite
+IDP_BETTER_AUTH_SQLITE_DB_PATH=./data/auth.db
+
+# Optional
+IDP_BETTER_AUTH_BASE_URL=http://localhost:3000
+IDP_BETTER_AUTH_MAGIC_LINK_TTL=3600
+IDP_BETTER_AUTH_SESSION_MAX_AGE=86400
+IDP_BETTER_AUTH_TRUSTED_ORIGINS=http://localhost:3000,http://localhost:3001
+```
+
+#### Tip
+
+To generate a random secret key, you can use the following command:
+
+```bash
+openssl rand -base64 32
+```
+
+### 2. MySQL Configuration (Alternative)
+
+If you prefer MySQL instead of SQLite:
+
+```env
+IDP_PROVIDER=better-auth
+IDP_BETTER_AUTH_SECRET=your-super-secret-key-at-least-32-characters-long
+
+IDP_BETTER_AUTH_DATABASE_TYPE=mysql
+IDP_BETTER_AUTH_MYSQL_HOST=localhost
+IDP_BETTER_AUTH_MYSQL_USER=root
+IDP_BETTER_AUTH_MYSQL_PASSWORD=your-password
+IDP_BETTER_AUTH_MYSQL_DATABASE=owox_auth
+IDP_BETTER_AUTH_MYSQL_PORT=3306
+```
+
+### 3. Start the Application
+
+```bash
+owox serve
+```
+
+or if .env file doesn't exported:
+
+**Linux/macOS:**
+
+```bash
+export $(grep -v '^#' .env | grep -v '^$' | xargs) && owox serve
+```
+
+**Windows (PowerShell):**
+
+```powershell
+Get-Content .env | Where-Object {$_ -notmatch '^#' -and $_ -notmatch '^$'} | ForEach-Object {$name, $value = $_.split('=', 2); Set-Variable -Name $name -Value $value}; owox serve
+```
+
+**Windows (Command Prompt):**
+
+```cmd
+for /f "usebackq tokens=1,2 delims==" %i in (.env) do set %i=%j
+owox serve
+```
+
+The authentication system will be available at:
+
+- Sign in page: `http://localhost:3000/auth/sign-in`
+- Admin dashboard: `http://localhost:3000/auth/dashboard`
+
+### 4. Add Your First Admin User
+
+```bash
+# Add an admin user and get a magic link
+export $(grep -v '^#' .env | grep -v '^$' | xargs) && owox idp add-user admin@yourdomain.com
+```
+
+Copy the magic link from the output and open it in your browser to set up your admin account.
+
+## Authentication Flow
+
+### For End Users
+
+1. **Sign In**: Navigate to `/auth/sign-in`
+2. **Enter credentials**: Email and password
+3. **Dashboard access**: After login, access admin features at `/auth/dashboard`
+
+### For New Users (Admin Invitation)
+
+1. **Admin invites**: Admin uses the dashboard to invite new users via magic link
+2. **Magic link**: New user receives a magic link from user who invited them
+3. **Password setup**: User goes to magic link and sets their password
+4. **Access granted**: User can now sign in normally
+
+## Admin Panel Features
+
+The admin dashboard (`/auth/dashboard`) provides:
+
+- **User management**: View all users, their roles, and activity
+- **Add users**: Invite new users with specific roles (admin/editor/viewer)
+- **Role management**: Assign different permission levels
+- **Magic links**: Generate new magic links for existing users
+
+### User Roles
+
+- **Admin**: Full access, can manage all users and invite any role
+- **Editor**: Can invite editors and viewers
+- **Viewer**: Can only invite other viewers
+
+## Database Management
+
+The database schema is automatically created on first startup. For SQLite, the file will be created at the path specified in `IDP_BETTER_AUTH_SQLITE_DB_PATH` or default path in system application temp directory.
+
+### SQLite (Default)
+
+- File-based database
+- No additional setup required
+- Good for development and small deployments
+
+### MySQL
+
+- Requires MySQL server
+- Create database manually: `CREATE DATABASE owox_auth;`
+- Create user if needed: `CREATE USER 'owox_auth_user'@'localhost' IDENTIFIED BY 'your_password';`
+- Grant privileges: `GRANT ALL PRIVILEGES ON owox_auth.* TO 'owox_auth_user'@'localhost';`
+- Flush privileges: `FLUSH PRIVILEGES;`
+- Tables are created automatically
+
+## Command Line Tools
+
+### Add User
+
+```bash
+owox idp add-user user@example.com
+```
+
+## Configuration Reference
+
+| Variable                          | Required |          Default          | Description                                 |
+| --------------------------------- | :------: | :-----------------------: | ------------------------------------------- |
+| `IDP_PROVIDER`                    | **Yes**  |             –             | Set to `better-auth`                        |
+| `IDP_BETTER_AUTH_SECRET`          | **Yes**  |             –             | Secret key for signing (min. 32 characters) |
+| `IDP_BETTER_AUTH_DATABASE_TYPE`   |    No    |         `sqlite`          | Database type: `sqlite` or `mysql`          |
+| `IDP_BETTER_AUTH_SQLITE_DB_PATH`  |    No    | `<system temp directory>` | SQLite database file path                   |
+| `IDP_BETTER_AUTH_BASE_URL`        |    No    |  `http://localhost:3000`  | Base URL for magic links                    |
+| `IDP_BETTER_AUTH_MAGIC_LINK_TTL`  |    No    |      `3600` (1 hour)      | Magic link expiration (seconds)             |
+| `IDP_BETTER_AUTH_SESSION_MAX_AGE` |    No    |     `604800` (7 days)     | Session duration (seconds)                  |
+| `IDP_BETTER_AUTH_MYSQL_HOST`      |    No    |        `localhost`        | MySQL host                                  |
+| `IDP_BETTER_AUTH_MYSQL_USER`      |    No    |          `root`           | MySQL user                                  |
+| `IDP_BETTER_AUTH_MYSQL_PASSWORD`  |    No    |      `your-password`      | MySQL password                              |
+| `IDP_BETTER_AUTH_MYSQL_DATABASE`  |    No    |        `owox_auth`        | MySQL database                              |
+| `IDP_BETTER_AUTH_MYSQL_PORT`      |    No    |          `3306`           | MySQL port                                  |
+| `IDP_BETTER_AUTH_TRUSTED_ORIGINS` |    No    |  `http://localhost:3000`  | Trusted origins for auth service            |
+
+## Troubleshooting
+
+### "IDP_BETTER_AUTH_SECRET is not set" Error
+
+Make sure your `.env` file contains a valid `IDP_BETTER_AUTH_SECRET` with at least 32 characters.
+
+### Database Connection Issues
+
+For MySQL, verify your connection settings and ensure the database exists.
+
+### Magic Links Not Working
+
+Check that `IDP_BETTER_AUTH_BASE_URL` matches your application URL and that the magic link hasn't expired.
+
+### Permission Denied
+
+Ensure the user has the correct role permissions for the action they're trying to perform.

package/dist/adapters/database.d.ts

@@ -0,0 +1,29 @@
+import type { DatabaseConfig, SqliteConfig, MySqlConfig } from '../types/index.js';
+/**
+ * Determines the SQLite database file path for IDP based on configuration.
+ *
+ * If `IDP_BETTER_AUTH_SQLITE_DB_PATH` environment variable is set, uses that path directly.
+ * Otherwise, uses cross-platform application data directory with 'owox/idp/auth.db' structure.
+ * Automatically creates the database directory if it doesn't exist.
+ *
+ * @returns The absolute path to the SQLite database file for IDP
+ * @throws {Error} When database directory cannot be created due to permissions or other filesystem errors
+ */
+declare function getIdpSqliteDatabasePath(): string;
+/**
+ * Create SQLite database adapter for Better Auth
+ */
+export declare function createSqliteAdapter(config: SqliteConfig): Promise<unknown>;
+/**
+ * Create MySQL database adapter for Better Auth
+ */
+export declare function createMysqlAdapter(config: MySqlConfig): Promise<unknown>;
+/**
+ * Create database adapter based on configuration
+ */
+export declare function createDatabaseAdapter(config: DatabaseConfig): Promise<unknown>;
+/**
+ * Export the IDP SQLite database path function for external use
+ */
+export { getIdpSqliteDatabasePath };
+//# sourceMappingURL=database.d.ts.map

package/dist/adapters/database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/adapters/database.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKnF;;;;;;;;;GASG;AACH,iBAAS,wBAAwB,IAAI,MAAM,CA6B1C;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAQhF;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAiB9E;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CASpF;AAED;;GAEG;AACH,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/dist/adapters/database.js

@@ -0,0 +1,85 @@
+import envPaths from 'env-paths';
+import { existsSync, mkdirSync } from 'fs';
+import { dirname, join } from 'path';
+/**
+ * Determines the SQLite database file path for IDP based on configuration.
+ *
+ * If `IDP_BETTER_AUTH_SQLITE_DB_PATH` environment variable is set, uses that path directly.
+ * Otherwise, uses cross-platform application data directory with 'owox/idp/auth.db' structure.
+ * Automatically creates the database directory if it doesn't exist.
+ *
+ * @returns The absolute path to the SQLite database file for IDP
+ * @throws {Error} When database directory cannot be created due to permissions or other filesystem errors
+ */
+function getIdpSqliteDatabasePath() {
+    const envDbPath = process.env.IDP_BETTER_AUTH_SQLITE_DB_PATH;
+    let dbPath;
+    if (envDbPath) {
+        console.log(`Using IDP SQLite database path from \`IDP_BETTER_AUTH_SQLITE_DB_PATH\` env: ${envDbPath}`);
+        dbPath = envDbPath;
+    }
+    else {
+        const paths = envPaths('owox', { suffix: '' });
+        dbPath = join(paths.data, 'idp', 'auth.db');
+        console.log(`Using system app data directory for IDP SQLite: ${dbPath}`);
+    }
+    const dbDir = dirname(dbPath);
+    if (!existsSync(dbDir)) {
+        try {
+            mkdirSync(dbDir, { recursive: true });
+            console.log(`Created IDP SQLite database directory: ${dbDir}`);
+        }
+        catch (error) {
+            throw new Error(`Failed to create IDP SQLite database directory: ${dbDir}. ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    return dbPath;
+}
+/**
+ * Create SQLite database adapter for Better Auth
+ */
+export async function createSqliteAdapter(config) {
+    // Dynamic import to handle optional dependency
+    const { default: Database } = await import('better-sqlite3');
+    // Use configured path or default to smart path resolution
+    const dbPath = config.filename || getIdpSqliteDatabasePath();
+    return new Database(dbPath);
+}
+/**
+ * Create MySQL database adapter for Better Auth
+ */
+export async function createMysqlAdapter(config) {
+    try {
+        const mysql = await import('mysql2/promise');
+        return mysql.default.createPool({
+            host: config.host,
+            user: config.user,
+            password: config.password,
+            database: config.database,
+            port: config.port || 3306,
+            waitForConnections: true,
+            connectionLimit: 10,
+            queueLimit: 0,
+        });
+    }
+    catch {
+        throw new Error('mysql2 is required for MySQL support. Install it with: npm install mysql2');
+    }
+}
+/**
+ * Create database adapter based on configuration
+ */
+export async function createDatabaseAdapter(config) {
+    switch (config.type) {
+        case 'sqlite':
+            return await createSqliteAdapter(config);
+        case 'mysql':
+            return await createMysqlAdapter(config);
+        default:
+            throw new Error(`Unsupported database type: ${config.type}`);
+    }
+}
+/**
+ * Export the IDP SQLite database path function for external use
+ */
+export { getIdpSqliteDatabasePath };

package/dist/auth/auth-config.d.ts

@@ -0,0 +1,4 @@
+import { betterAuth } from 'better-auth';
+import { BetterAuthConfig } from '../types/index.js';
+export declare function createBetterAuthConfig(config: BetterAuthConfig): Promise<ReturnType<typeof betterAuth>>;
+//# sourceMappingURL=auth-config.d.ts.map

package/dist/auth/auth-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-config.d.ts","sourceRoot":"","sources":["../../src/auth/auth-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAIrD,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAmGxC"}

package/dist/auth/auth-config.js

@@ -0,0 +1,72 @@
+import { betterAuth } from 'better-auth';
+import { magicLink, organization } from 'better-auth/plugins';
+import { createDatabaseAdapter } from '../adapters/database.js';
+import { createAccessControl } from 'better-auth/plugins/access';
+export async function createBetterAuthConfig(config) {
+    const database = await createDatabaseAdapter(config.database);
+    const plugins = [];
+    plugins.push(magicLink({
+        sendMagicLink: async ({ email, token, url }) => {
+            global.lastMagicLink = url;
+            global.lastEmail = email;
+            global.lastToken = token;
+        },
+        expiresIn: 3600, // 1 hour
+        disableSignUp: false,
+    }));
+    const ac = createAccessControl({
+        project: ['create', 'update', 'delete', 'view'],
+    });
+    const adminRole = ac.newRole({
+        project: ['create', 'update', 'delete', 'view'],
+    });
+    const editorRole = ac.newRole({
+        project: ['create', 'update', 'delete', 'view'],
+    });
+    const viewerRole = ac.newRole({
+        project: ['view'],
+    });
+    plugins.push(organization({
+        ac,
+        roles: {
+            admin: adminRole,
+            editor: editorRole,
+            viewer: viewerRole,
+        },
+        allowUserToCreateOrganization: false,
+        organizationLimit: 1,
+        async sendInvitationEmail(_data) {
+            return;
+        },
+    }));
+    const authConfig = {
+        database,
+        plugins,
+        session: {
+            expiresIn: config.session?.maxAge || 60 * 60 * 24 * 7,
+            updateAge: 60 * 60 * 24,
+        },
+        trustedOrigins: config.baseURL ? [config.baseURL] : ['http://localhost:3000'],
+        baseURL: config.baseURL || 'http://localhost:3000',
+        secret: config.secret,
+        emailAndPassword: {
+            enabled: true,
+            requireEmailVerification: false,
+        },
+        advanced: {
+            cookies: {
+                session_token: {
+                    name: 'refreshToken',
+                    attributes: {
+                        httpOnly: true,
+                        secure: config.baseURL?.includes('localhost') || config.baseURL?.includes('127.0.0.1')
+                            ? false
+                            : true,
+                    },
+                },
+            },
+        },
+        basePath: '/auth/better-auth',
+    };
+    return betterAuth(authConfig);
+}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+export { BetterAuthProvider } from './providers/better-auth-provider.js';
+export { createBetterAuthConfig } from './auth/auth-config.js';
+export { createDatabaseAdapter, createSqliteAdapter, createMysqlAdapter, getIdpSqliteDatabasePath, } from './adapters/database.js';
+export { TemplateService } from './services/template-service.js';
+export { MagicLinkService } from './services/magic-link-service.js';
+export { PageService } from './services/page-service.js';
+export { AuthenticationService } from './services/authentication-service.js';
+export { TokenService } from './services/token-service.js';
+export { UserManagementService } from './services/user-management-service.js';
+export { DatabaseService } from './services/database-service.js';
+export { RequestHandlerService } from './services/request-handler-service.js';
+export { MiddlewareService } from './services/middleware-service.js';
+export { CryptoService } from './services/crypto-service.js';
+export type { BetterAuthConfig, DatabaseConfig, SqliteConfig, MySqlConfig, CustomDatabaseConfig, } from './types/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAG/D,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAG7D,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,WAAW,EACX,oBAAoB,GACrB,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,16 @@
+// Main Better Auth exports
+export { BetterAuthProvider } from './providers/better-auth-provider.js';
+export { createBetterAuthConfig } from './auth/auth-config.js';
+// Database adapters
+export { createDatabaseAdapter, createSqliteAdapter, createMysqlAdapter, getIdpSqliteDatabasePath, } from './adapters/database.js';
+// Services
+export { TemplateService } from './services/template-service.js';
+export { MagicLinkService } from './services/magic-link-service.js';
+export { PageService } from './services/page-service.js';
+export { AuthenticationService } from './services/authentication-service.js';
+export { TokenService } from './services/token-service.js';
+export { UserManagementService } from './services/user-management-service.js';
+export { DatabaseService } from './services/database-service.js';
+export { RequestHandlerService } from './services/request-handler-service.js';
+export { MiddlewareService } from './services/middleware-service.js';
+export { CryptoService } from './services/crypto-service.js';

package/dist/providers/better-auth-provider.d.ts

@@ -0,0 +1,34 @@
+import { AuthResult, AddUserCommandResponse, IdpProviderAddUserCommand, IdpProviderListUsersCommand, IdpProviderRemoveUserCommand, IdpProvider, Payload } from '@owox/idp-protocol';
+import { betterAuth } from 'better-auth';
+import { Express, type Request, Response, NextFunction } from 'express';
+import { BetterAuthConfig } from '../types/index.js';
+export declare class BetterAuthProvider implements IdpProvider, IdpProviderAddUserCommand, IdpProviderListUsersCommand, IdpProviderRemoveUserCommand {
+    private readonly auth;
+    private readonly authenticationService;
+    private readonly tokenService;
+    private readonly userManagementService;
+    private readonly databaseService;
+    private readonly requestHandlerService;
+    private readonly middlewareService;
+    private readonly pageService;
+    private constructor();
+    getAuth(): Awaited<ReturnType<typeof betterAuth>>;
+    static create(config: BetterAuthConfig): Promise<BetterAuthProvider>;
+    getBetterAuth(): Awaited<ReturnType<typeof betterAuth>>;
+    registerRoutes(app: Express): void;
+    signInMiddleware(req: Request, res: Response, next: NextFunction): Promise<void | Response>;
+    signOutMiddleware(req: Request, res: Response, next: NextFunction): Promise<void | Response>;
+    accessTokenMiddleware(req: Request, res: Response, next: NextFunction): Promise<void | Response>;
+    userApiMiddleware(req: Request, res: Response, next: NextFunction): Promise<Response<Payload>>;
+    initialize(): Promise<void>;
+    introspectToken(token: string): Promise<Payload | null>;
+    parseToken(token: string): Promise<Payload | null>;
+    verifyToken(token: string): Promise<Payload | null>;
+    refreshToken(refreshToken: string): Promise<AuthResult>;
+    revokeToken(token: string): Promise<void>;
+    shutdown(): Promise<void>;
+    addUser(username: string, _password?: string): Promise<AddUserCommandResponse>;
+    listUsers(): Promise<Payload[]>;
+    removeUser(userId: string): Promise<void>;
+}
+//# sourceMappingURL=better-auth-provider.d.ts.map

package/dist/providers/better-auth-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-provider.d.ts","sourceRoot":"","sources":["../../src/providers/better-auth-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,sBAAsB,EACtB,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAC5B,WAAW,EACX,OAAO,EACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAYrD,qBAAa,kBACX,YACE,WAAW,EACX,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B;IAWV,OAAO,CAAC,QAAQ,CAAC,IAAI;IARzC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAwB;IAC9D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAwB;IAC9D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAwB;IAC9D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAE1C,OAAO;IA0BP,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;WAIpC,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAK1E,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IAIvD,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;IAe5B,gBAAgB,CACpB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IAIrB,iBAAiB,CACrB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IAIrB,qBAAqB,CACzB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IAIrB,iBAAiB,CACrB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAIvB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIvD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIlD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAInD,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIvD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAI9E,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAI/B,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGhD"}

package/dist/providers/better-auth-provider.js

@@ -0,0 +1,99 @@
+import express from 'express';
+import { createBetterAuthConfig } from '../auth/auth-config.js';
+import { MagicLinkService } from '../services/magic-link-service.js';
+import { CryptoService } from '../services/crypto-service.js';
+import { AuthenticationService } from '../services/authentication-service.js';
+import { TokenService } from '../services/token-service.js';
+import { UserManagementService } from '../services/user-management-service.js';
+import { DatabaseService } from '../services/database-service.js';
+import { RequestHandlerService } from '../services/request-handler-service.js';
+import { MiddlewareService } from '../services/middleware-service.js';
+import { PageService } from '../services/page-service.js';
+export class BetterAuthProvider {
+    auth;
+    // Services
+    authenticationService;
+    tokenService;
+    userManagementService;
+    databaseService;
+    requestHandlerService;
+    middlewareService;
+    pageService;
+    constructor(auth) {
+        this.auth = auth;
+        // Initialize core services
+        const cryptoService = new CryptoService(this.auth);
+        const magicLinkService = new MagicLinkService(this.auth, cryptoService);
+        // Initialize all business logic services
+        this.authenticationService = new AuthenticationService(this.auth, cryptoService);
+        this.tokenService = new TokenService(this.auth, cryptoService);
+        this.userManagementService = new UserManagementService(this.auth, magicLinkService, cryptoService);
+        this.databaseService = new DatabaseService(this.auth);
+        this.requestHandlerService = new RequestHandlerService(this.auth);
+        this.pageService = new PageService(this.authenticationService, this.userManagementService, cryptoService);
+        this.middlewareService = new MiddlewareService(this.authenticationService, this.pageService);
+        // Set circular dependency
+        this.authenticationService.setUserManagementService(this.userManagementService);
+    }
+    getAuth() {
+        return this.auth;
+    }
+    static async create(config) {
+        const auth = await createBetterAuthConfig(config);
+        return new BetterAuthProvider(auth);
+    }
+    getBetterAuth() {
+        return this.auth;
+    }
+    registerRoutes(app) {
+        // Setup middleware
+        app.use(express.json()); // Add JSON parsing middleware
+        app.use(express.urlencoded({ extended: true }));
+        // Setup Better Auth handler
+        this.requestHandlerService.setupBetterAuthHandler(app);
+        this.pageService.registerRoutes(app);
+        app.post('/auth/api/sign-in', this.authenticationService.signInMiddleware.bind(this.authenticationService));
+    }
+    async signInMiddleware(req, res, next) {
+        return this.middlewareService.signInMiddleware(req, res, next);
+    }
+    async signOutMiddleware(req, res, next) {
+        return this.middlewareService.signOutMiddleware(req, res, next);
+    }
+    async accessTokenMiddleware(req, res, next) {
+        return this.middlewareService.accessTokenMiddleware(req, res, next);
+    }
+    async userApiMiddleware(req, res, next) {
+        return this.middlewareService.userApiMiddleware(req, res, next);
+    }
+    async initialize() {
+        await this.databaseService.runMigrations();
+    }
+    async introspectToken(token) {
+        return this.tokenService.introspectToken(token);
+    }
+    async parseToken(token) {
+        return this.tokenService.parseToken(token);
+    }
+    async verifyToken(token) {
+        return this.tokenService.verifyToken(token);
+    }
+    async refreshToken(refreshToken) {
+        return this.tokenService.refreshToken(refreshToken);
+    }
+    async revokeToken(token) {
+        return this.tokenService.revokeToken(token);
+    }
+    async shutdown() {
+        return Promise.resolve();
+    }
+    async addUser(username, _password) {
+        return this.userManagementService.addUserViaMagicLink(username);
+    }
+    async listUsers() {
+        return this.userManagementService.listUsers();
+    }
+    async removeUser(userId) {
+        return this.userManagementService.removeUser(userId);
+    }
+}

package/dist/services/authentication-service.d.ts

@@ -0,0 +1,23 @@
+import { createBetterAuthConfig } from '../auth/auth-config.js';
+import { CryptoService } from './crypto-service.js';
+import { AuthSession, SessionValidationResult } from '../types/auth-session.js';
+import { type Request, type Response, type NextFunction } from 'express';
+import type { UserManagementService } from './user-management-service.js';
+export declare class AuthenticationService {
+    private readonly auth;
+    private readonly cryptoService;
+    private userManagementService?;
+    constructor(auth: Awaited<ReturnType<typeof createBetterAuthConfig>>, cryptoService: CryptoService);
+    setUserManagementService(userManagementService: UserManagementService): void;
+    getSession(req: Request): Promise<AuthSession | null>;
+    signIn(email: string, password: string, protocol: string, host: string): Promise<globalThis.Response>;
+    signOut(req: Request): Promise<void>;
+    generateAccessToken(req: Request): Promise<string>;
+    validateSession(req: Request): Promise<SessionValidationResult>;
+    signInMiddleware(req: Request, res: Response, _next: NextFunction): Promise<void | Response>;
+    signOutMiddleware(req: Request, res: Response, _next: NextFunction): Promise<void | Response>;
+    accessTokenMiddleware(req: Request, res: Response, _next: NextFunction): Promise<void | Response>;
+    setPassword(password: string, req: Request): Promise<unknown>;
+    requireAuthMiddleware(req: Request, res: Response, next: NextFunction): Promise<void | Response>;
+}
+//# sourceMappingURL=authentication-service.d.ts.map

package/dist/services/authentication-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-service.d.ts","sourceRoot":"","sources":["../../src/services/authentication-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAE1E,qBAAa,qBAAqB;IAI9B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAJhC,OAAO,CAAC,qBAAqB,CAAC,CAAwB;gBAGnC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,EACxD,aAAa,EAAE,aAAa;IAG/C,wBAAwB,CAAC,qBAAqB,EAAE,qBAAqB,GAAG,IAAI;IAItE,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA6BrD,MAAM,CACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;IAoBzB,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAWpC,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAyBlD,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAuB/D,gBAAgB,CACpB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IAmCrB,iBAAiB,CACrB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IAgBrB,qBAAqB,CACzB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IAiBrB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB7D,qBAAqB,CACzB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;CAe5B"}