@phila/sso-vue 0.0.2 → 0.0.4

package/README.md

@@ -0,0 +1,167 @@
+# @phila/sso-vue
+
+Vue 3 adapter for `@phila/sso-core`. Provides a Vue plugin, Pinia store, and composables for Azure AD B2C authentication.
+
+## Installation
+
+```bash
+pnpm add @phila/sso-vue @phila/sso-core @azure/msal-browser pinia
+```
+
+## Quick Start (Vite + B2C)
+
+The `createB2CPlugin` factory reads `VITE_SSO_*` environment variables automatically:
+
+```env
+VITE_SSO_CLIENT_ID=your-client-id
+VITE_SSO_TENANT=YourTenant
+VITE_SSO_AUTHORITY_DOMAIN=YourTenant.b2clogin.com
+VITE_SSO_REDIRECT_URI=http://localhost:3000
+```
+
+```ts
+// main.ts
+import { createApp } from "vue";
+import { createPinia } from "pinia";
+import { createB2CPlugin } from "@phila/sso-vue";
+import App from "./App.vue";
+
+const app = createApp(App);
+app.use(createPinia());
+app.use(createB2CPlugin());
+app.mount("#app");
+```
+
+```vue
+<!-- App.vue -->
+<script setup lang="ts">
+import { useAuth } from "@phila/sso-vue";
+
+const { isAuthenticated, userName, authReady, signIn, signOut } = useAuth();
+</script>
+
+<template>
+  <div v-if="!authReady">Loading...</div>
+  <div v-else-if="isAuthenticated">
+    <p>Welcome, {{ userName }}</p>
+    <button @click="signOut()">Sign out</button>
+  </div>
+  <div v-else>
+    <button @click="signIn()">Sign in</button>
+  </div>
+</template>
+```
+
+## Advanced Setup
+
+For full control over the provider configuration:
+
+```ts
+import { createSSOPlugin } from "@phila/sso-vue";
+import { B2CProvider } from "@phila/sso-core";
+
+app.use(
+  createSSOPlugin({
+    clientConfig: {
+      provider: new B2CProvider({
+        clientId: "your-client-id",
+        b2cEnvironment: "YourTenant",
+        authorityDomain: "YourTenant.b2clogin.com",
+        redirectUri: "http://localhost:3000",
+        apiScopes: ["https://YourTenant.onmicrosoft.com/api/read"],
+        policies: {
+          signUpSignIn: "B2C_1A_SIGNUP_SIGNIN",
+          signInOnly: "B2C_1A_AD_SIGNIN_ONLY",
+          resetPassword: "B2C_1A_PASSWORDRESET",
+        },
+      }),
+      debug: true,
+    },
+  }),
+);
+```
+
+### Plugin Options
+
+```ts
+interface SSOPluginOptions {
+  clientConfig: SSOClientConfig;
+  autoInitialize?: boolean; // default: true
+}
+```
+
+## Composables
+
+### `useAuth()`
+
+Primary composable for authentication. Must be called after the plugin is installed.
+
+**Reactive state:**
+
+| Property          | Type                          | Description                    |
+| ----------------- | ----------------------------- | ------------------------------ |
+| `isAuthenticated` | `Ref<boolean>`                | User is signed in              |
+| `isLoading`       | `Ref<boolean>`                | Auth operation in progress     |
+| `user`            | `Ref<AccountInfo \| null>`    | MSAL account info              |
+| `token`           | `Ref<string \| null>`         | Current access token           |
+| `error`           | `Ref<Error \| null>`          | Last auth error                |
+| `activePolicy`    | `Ref<string \| null>`         | Active B2C policy              |
+| `authReady`       | `Ref<boolean>`                | Initialization complete        |
+| `userName`        | `ComputedRef<string \| null>` | Display name from token claims |
+
+**Actions:**
+
+| Method                         | Returns                   | Description                      |
+| ------------------------------ | ------------------------- | -------------------------------- |
+| `signIn(options?)`             | `Promise<void>`           | Start sign-in flow               |
+| `signInCityEmployee(options?)` | `Promise<void>`           | Sign in with sign-in-only policy |
+| `signOut(options?)`            | `Promise<void>`           | Sign out                         |
+| `forgotPassword()`             | `Promise<void>`           | Start password reset             |
+| `acquireToken(options?)`       | `Promise<string \| null>` | Get access token                 |
+
+**Utilities:**
+
+| Method          | Returns   | Description                                             |
+| --------------- | --------- | ------------------------------------------------------- |
+| `hasRole(role)` | `boolean` | Check user role from `roles` or `extension_Roles` claim |
+
+### `useSSOClient()`
+
+Returns the raw `SSOClient` instance for advanced use cases (direct event subscription, etc.).
+
+```ts
+const client = useSSOClient();
+client.events.on("auth:tokenAcquired", token => {
+  /* ... */
+});
+```
+
+### `useSSOStore()`
+
+Direct access to the Pinia store. Useful when you need store-level reactivity outside of components.
+
+```ts
+import { useSSOStore } from "@phila/sso-vue";
+
+const store = useSSOStore();
+watch(
+  () => store.isAuthenticated,
+  val => {
+    /* ... */
+  },
+);
+```
+
+## `createB2CPlugin` Options
+
+```ts
+interface B2CPluginOptions {
+  signInPolicy?: string; // default: "B2C_1A_AD_SIGNIN_ONLY"
+  resetPasswordPolicy?: string; // default: "B2C_1A_PASSWORDRESET"
+  debug?: boolean; // default: import.meta.env.DEV
+}
+```
+
+## License
+
+MIT

package/dist/index.js

@@ -1,2 +1,133 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const r=require("vue"),y=require("pinia"),v=require("@phila/sso-core"),S=Symbol("sso-client"),g=y.defineStore("sso",()=>{const n=r.ref(!1),i=r.ref(!1),o=r.ref(null),t=r.ref(null),u=r.ref(null),l=r.ref(null),f=r.ref(!1);function d(s){n.value=s.isAuthenticated,i.value=s.isLoading,o.value=s.user,t.value=s.token,u.value=s.error,l.value=s.activePolicy,f.value=s.authReady}return{isAuthenticated:n,isLoading:i,user:o,token:t,error:u,activePolicy:l,authReady:f,syncState:d}});function C(n){return{install(i){const o=new v.SSOClient(n.clientConfig);i.provide(S,o),o.events.on("auth:stateChanged",t=>{g().syncState(t)}),n.autoInitialize!==!1&&o.initialize().then(t=>{t&&n.clientConfig.debug&&console.log("[sso-vue] Auto-initialized with response:",t)})}}}function m(){const n=r.inject(S);if(!n)throw new Error("SSOClient not found. Did you install createSSOPlugin?");return n}function E(){const n=g(),i=m(),{isAuthenticated:o,isLoading:t,user:u,token:l,error:f,activePolicy:d,authReady:s}=y.storeToRefs(n),O=r.computed(()=>{const e=u.value?.idTokenClaims;if(!e)return null;const c=e.given_name??e.name??"",a=e.family_name??"";return a?`${c} ${a}`.trim():c});async function P(e){await i.signIn(e)}async function h(e){await i.signInCityEmployee(e)}async function w(e){await i.signOut(e)}async function I(){await i.forgotPassword()}async function _(e){return i.acquireToken(e)}function A(e){const c=u.value?.idTokenClaims;if(!c)return!1;const a=c.roles??c.extension_Roles??[];return Array.isArray(a)&&a.includes(e)}return{isAuthenticated:o,isLoading:t,user:u,token:l,error:f,activePolicy:d,authReady:s,userName:O,signIn:P,signInCityEmployee:h,signOut:w,forgotPassword:I,acquireToken:_,hasRole:A}}function T(n={}){const{signInPolicy:i="B2C_1A_AD_SIGNIN_ONLY",resetPasswordPolicy:o="B2C_1A_PASSWORDRESET",debug:t=!1}=n;return C({clientConfig:{provider:new v.B2CProvider({clientId:void 0,b2cEnvironment:void 0,authorityDomain:void 0,redirectUri:void 0,policies:{signUpSignIn:i,signInOnly:i,resetPassword:o}}),debug:t}})}exports.SSO_CLIENT_KEY=S;exports.createB2CPlugin=T;exports.createSSOPlugin=C;exports.useAuth=E;exports.useSSOClient=m;exports.useSSOStore=g;
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const vue = require("vue");
+const pinia = require("pinia");
+const ssoCore = require("@phila/sso-core");
+const SSO_CLIENT_KEY = /* @__PURE__ */ Symbol("sso-client");
+const useSSOStore = pinia.defineStore("sso", () => {
+  const isAuthenticated = vue.ref(false);
+  const isLoading = vue.ref(false);
+  const user = vue.ref(null);
+  const token = vue.ref(null);
+  const error = vue.ref(null);
+  const activePolicy = vue.ref(null);
+  const authReady = vue.ref(false);
+  function syncState(state) {
+    isAuthenticated.value = state.isAuthenticated;
+    isLoading.value = state.isLoading;
+    user.value = state.user;
+    token.value = state.token;
+    error.value = state.error;
+    activePolicy.value = state.activePolicy;
+    authReady.value = state.authReady;
+  }
+  return { isAuthenticated, isLoading, user, token, error, activePolicy, authReady, syncState };
+});
+function createSSOPlugin(options) {
+  return {
+    install(app) {
+      const client = new ssoCore.SSOClient(options.clientConfig);
+      app.provide(SSO_CLIENT_KEY, client);
+      client.events.on("auth:stateChanged", (state) => {
+        const store = useSSOStore();
+        store.syncState(state);
+      });
+      if (options.autoInitialize !== false) {
+        client.initialize().then((response) => {
+          if (response && options.clientConfig.debug) {
+            console.log("[sso-vue] Auto-initialized with response:", response);
+          }
+        });
+      }
+    }
+  };
+}
+function useSSOClient() {
+  const client = vue.inject(SSO_CLIENT_KEY);
+  if (!client) {
+    throw new Error("SSOClient not found. Did you install createSSOPlugin?");
+  }
+  return client;
+}
+function useAuth() {
+  const store = useSSOStore();
+  const client = useSSOClient();
+  const { isAuthenticated, isLoading, user, token, error, activePolicy, authReady } = pinia.storeToRefs(store);
+  const userName = vue.computed(() => {
+    const claims = user.value?.idTokenClaims;
+    if (!claims) return null;
+    const given = claims.given_name ?? claims.name ?? "";
+    const family = claims.family_name ?? "";
+    return family ? `${given} ${family}`.trim() : given;
+  });
+  async function signIn(options) {
+    await client.signIn(options);
+  }
+  async function signInCityEmployee(options) {
+    await client.signInCityEmployee(options);
+  }
+  async function signOut(options) {
+    await client.signOut(options);
+  }
+  async function forgotPassword() {
+    await client.forgotPassword();
+  }
+  async function acquireToken(options) {
+    return client.acquireToken(options);
+  }
+  function hasRole(role) {
+    const claims = user.value?.idTokenClaims;
+    if (!claims) return false;
+    const roles = claims.roles ?? claims.extension_Roles ?? [];
+    return Array.isArray(roles) && roles.includes(role);
+  }
+  return {
+    // State (readonly refs)
+    isAuthenticated,
+    isLoading,
+    user,
+    token,
+    error,
+    activePolicy,
+    authReady,
+    userName,
+    // Actions
+    signIn,
+    signInCityEmployee,
+    signOut,
+    forgotPassword,
+    acquireToken,
+    // Utilities
+    hasRole
+  };
+}
+function createB2CPlugin(options = {}) {
+  const {
+    signInPolicy = "B2C_1A_AD_SIGNIN_ONLY",
+    resetPasswordPolicy = "B2C_1A_PASSWORDRESET",
+    debug = false
+  } = options;
+  return createSSOPlugin({
+    clientConfig: {
+      provider: new ssoCore.B2CProvider({
+        clientId: void 0,
+        b2cEnvironment: void 0,
+        authorityDomain: void 0,
+        redirectUri: void 0,
+        policies: {
+          signUpSignIn: signInPolicy,
+          signInOnly: signInPolicy,
+          resetPassword: resetPasswordPolicy
+        }
+      }),
+      debug
+    }
+  });
+}
+exports.SSO_CLIENT_KEY = SSO_CLIENT_KEY;
+exports.createB2CPlugin = createB2CPlugin;
+exports.createSSOPlugin = createSSOPlugin;
+exports.useAuth = useAuth;
+exports.useSSOClient = useSSOClient;
+exports.useSSOStore = useSSOStore;
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../src/plugin.ts","../src/composables/useSSOClient.ts","../src/composables/useAuth.ts","../src/createB2CPlugin.ts"],"sourcesContent":["import { ref } from \"vue\";\nimport { defineStore } from \"pinia\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport type { App } from \"vue\";\nimport type { SSOClientConfig, SSOClientState, AuthResponse } from \"@phila/sso-core\";\n\nexport const SSO_CLIENT_KEY = Symbol(\"sso-client\");\n\nexport interface SSOPluginOptions {\n  clientConfig: SSOClientConfig;\n  autoInitialize?: boolean;\n}\n\nexport const useSSOStore = defineStore(\"sso\", () => {\n  const isAuthenticated = ref(false);\n  const isLoading = ref(false);\n  const user = ref<SSOClientState[\"user\"]>(null);\n  const token = ref<string | null>(null);\n  const error = ref<Error | null>(null);\n  const activePolicy = ref<string | null>(null);\n  const authReady = ref(false);\n\n  function syncState(state: SSOClientState) {\n    isAuthenticated.value = state.isAuthenticated;\n    isLoading.value = state.isLoading;\n    user.value = state.user;\n    token.value = state.token;\n    error.value = state.error;\n    activePolicy.value = state.activePolicy;\n    authReady.value = state.authReady;\n  }\n\n  return { isAuthenticated, isLoading, user, token, error, activePolicy, authReady, syncState };\n});\n\nexport function createSSOPlugin(options: SSOPluginOptions) {\n  return {\n    install(app: App) {\n      const client = new SSOClient(options.clientConfig);\n\n      // Provide the client for useSSOClient()\n      app.provide(SSO_CLIENT_KEY, client);\n\n      // Subscribe to state changes and sync to Pinia store\n      client.events.on(\"auth:stateChanged\", (state: SSOClientState) => {\n        const store = useSSOStore();\n        store.syncState(state);\n      });\n\n      // Auto-initialize unless explicitly disabled\n      if (options.autoInitialize !== false) {\n        client.initialize().then((response: AuthResponse | null) => {\n          if (response && options.clientConfig.debug) {\n            console.log(\"[sso-vue] Auto-initialized with response:\", response);\n          }\n        });\n      }\n    },\n  };\n}\n","import { inject } from \"vue\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport { SSO_CLIENT_KEY } from \"../plugin\";\n\n/**\n * Access the raw SSOClient instance.\n * Must be called within a component that is a descendant of createSSOPlugin.\n */\nexport function useSSOClient(): SSOClient {\n  const client = inject<SSOClient>(SSO_CLIENT_KEY);\n  if (!client) {\n    throw new Error(\"SSOClient not found. Did you install createSSOPlugin?\");\n  }\n  return client;\n}\n","import { computed } from \"vue\";\nimport { storeToRefs } from \"pinia\";\nimport { useSSOStore } from \"../plugin\";\nimport { useSSOClient } from \"./useSSOClient\";\nimport type { SignInOptions, SignOutOptions, TokenOptions } from \"@phila/sso-core\";\n\n/**\n * Primary composable for SSO authentication in Vue 3 apps.\n * API shape is intentionally similar to service-cat's existing useAuth()\n * to minimize migration friction.\n */\nexport function useAuth() {\n  const store = useSSOStore();\n  const client = useSSOClient();\n  const { isAuthenticated, isLoading, user, token, error, activePolicy, authReady } = storeToRefs(store);\n\n  // Computed helpers\n  const userName = computed(() => {\n    const claims = user.value?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return null;\n    const given = (claims.given_name ?? claims.name ?? \"\") as string;\n    const family = (claims.family_name ?? \"\") as string;\n    return family ? `${given} ${family}`.trim() : given;\n  });\n\n  // Actions\n  async function signIn(options?: SignInOptions): Promise<void> {\n    await client.signIn(options);\n  }\n\n  async function signInCityEmployee(options?: SignInOptions): Promise<void> {\n    await client.signInCityEmployee(options);\n  }\n\n  async function signOut(options?: SignOutOptions): Promise<void> {\n    await client.signOut(options);\n  }\n\n  async function forgotPassword(): Promise<void> {\n    await client.forgotPassword();\n  }\n\n  async function acquireToken(options?: TokenOptions): Promise<string | null> {\n    return client.acquireToken(options);\n  }\n\n  // Utilities\n  function hasRole(role: string): boolean {\n    const claims = user.value?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return false;\n\n    const roles = (claims.roles ?? claims.extension_Roles ?? []) as string[];\n    return Array.isArray(roles) && roles.includes(role);\n  }\n\n  return {\n    // State (readonly refs)\n    isAuthenticated,\n    isLoading,\n    user,\n    token,\n    error,\n    activePolicy,\n    authReady,\n    userName,\n\n    // Actions\n    signIn,\n    signInCityEmployee,\n    signOut,\n    forgotPassword,\n    acquireToken,\n\n    // Utilities\n    hasRole,\n  };\n}\n","// ABOUTME: Convenience factory for vanilla Vue/Vite apps using Azure AD B2C\n// ABOUTME: Reads VITE_SSO_* env vars by convention so apps need zero B2CProvider boilerplate\nimport { B2CProvider } from \"@phila/sso-core\";\nimport { createSSOPlugin } from \"./plugin\";\n\nexport interface B2CPluginOptions {\n  signInPolicy?: string;\n  resetPasswordPolicy?: string;\n  debug?: boolean;\n}\n\n/**\n * Creates a ready-to-use Vue plugin for Azure AD B2C authentication.\n * Reads connection details from VITE_SSO_* environment variables:\n *   VITE_SSO_CLIENT_ID, VITE_SSO_TENANT, VITE_SSO_AUTHORITY_DOMAIN, VITE_SSO_REDIRECT_URI\n */\nexport function createB2CPlugin(options: B2CPluginOptions = {}) {\n  const {\n    signInPolicy = \"B2C_1A_AD_SIGNIN_ONLY\",\n    resetPasswordPolicy = \"B2C_1A_PASSWORDRESET\",\n    debug = import.meta.env.DEV,\n  } = options;\n\n  return createSSOPlugin({\n    clientConfig: {\n      provider: new B2CProvider({\n        clientId: import.meta.env.VITE_SSO_CLIENT_ID,\n        b2cEnvironment: import.meta.env.VITE_SSO_TENANT,\n        authorityDomain: import.meta.env.VITE_SSO_AUTHORITY_DOMAIN,\n        redirectUri: import.meta.env.VITE_SSO_REDIRECT_URI,\n        policies: {\n          signUpSignIn: signInPolicy,\n          signInOnly: signInPolicy,\n          resetPassword: resetPasswordPolicy,\n        },\n      }),\n      debug,\n    },\n  });\n}\n"],"names":["SSO_CLIENT_KEY","useSSOStore","defineStore","isAuthenticated","ref","isLoading","user","token","error","activePolicy","authReady","syncState","state","createSSOPlugin","options","app","client","SSOClient","response","useSSOClient","inject","useAuth","store","storeToRefs","userName","computed","claims","given","family","signIn","signInCityEmployee","signOut","forgotPassword","acquireToken","hasRole","role","roles","createB2CPlugin","signInPolicy","resetPasswordPolicy","debug","B2CProvider"],"mappings":"uJAMaA,SAAwB,YAAY,EAOpCC,EAAcC,EAAAA,YAAY,MAAO,IAAM,CAClD,MAAMC,EAAkBC,EAAAA,IAAI,EAAK,EAC3BC,EAAYD,EAAAA,IAAI,EAAK,EACrBE,EAAOF,EAAAA,IAA4B,IAAI,EACvCG,EAAQH,EAAAA,IAAmB,IAAI,EAC/BI,EAAQJ,EAAAA,IAAkB,IAAI,EAC9BK,EAAeL,EAAAA,IAAmB,IAAI,EACtCM,EAAYN,EAAAA,IAAI,EAAK,EAE3B,SAASO,EAAUC,EAAuB,CACxCT,EAAgB,MAAQS,EAAM,gBAC9BP,EAAU,MAAQO,EAAM,UACxBN,EAAK,MAAQM,EAAM,KACnBL,EAAM,MAAQK,EAAM,MACpBJ,EAAM,MAAQI,EAAM,MACpBH,EAAa,MAAQG,EAAM,aAC3BF,EAAU,MAAQE,EAAM,SAC1B,CAEA,MAAO,CAAE,gBAAAT,EAAiB,UAAAE,EAAW,KAAAC,EAAM,MAAAC,EAAO,MAAAC,EAAO,aAAAC,EAAc,UAAAC,EAAW,UAAAC,CAAA,CACpF,CAAC,EAEM,SAASE,EAAgBC,EAA2B,CACzD,MAAO,CACL,QAAQC,EAAU,CAChB,MAAMC,EAAS,IAAIC,YAAUH,EAAQ,YAAY,EAGjDC,EAAI,QAAQf,EAAgBgB,CAAM,EAGlCA,EAAO,OAAO,GAAG,oBAAsBJ,GAA0B,CACjDX,EAAA,EACR,UAAUW,CAAK,CACvB,CAAC,EAGGE,EAAQ,iBAAmB,IAC7BE,EAAO,WAAA,EAAa,KAAME,GAAkC,CACtDA,GAAYJ,EAAQ,aAAa,OACnC,QAAQ,IAAI,4CAA6CI,CAAQ,CAErE,CAAC,CAEL,CAAA,CAEJ,CCnDO,SAASC,GAA0B,CACxC,MAAMH,EAASI,EAAAA,OAAkBpB,CAAc,EAC/C,GAAI,CAACgB,EACH,MAAM,IAAI,MAAM,uDAAuD,EAEzE,OAAOA,CACT,CCHO,SAASK,GAAU,CACxB,MAAMC,EAAQrB,EAAA,EACRe,EAASG,EAAA,EACT,CAAE,gBAAAhB,EAAiB,UAAAE,EAAW,KAAAC,EAAM,MAAAC,EAAO,MAAAC,EAAO,aAAAC,EAAc,UAAAC,CAAA,EAAca,EAAAA,YAAYD,CAAK,EAG/FE,EAAWC,EAAAA,SAAS,IAAM,CAC9B,MAAMC,EAASpB,EAAK,OAAO,cAC3B,GAAI,CAACoB,EAAQ,OAAO,KACpB,MAAMC,EAASD,EAAO,YAAcA,EAAO,MAAQ,GAC7CE,EAAUF,EAAO,aAAe,GACtC,OAAOE,EAAS,GAAGD,CAAK,IAAIC,CAAM,GAAG,OAASD,CAChD,CAAC,EAGD,eAAeE,EAAOf,EAAwC,CAC5D,MAAME,EAAO,OAAOF,CAAO,CAC7B,CAEA,eAAegB,EAAmBhB,EAAwC,CACxE,MAAME,EAAO,mBAAmBF,CAAO,CACzC,CAEA,eAAeiB,EAAQjB,EAAyC,CAC9D,MAAME,EAAO,QAAQF,CAAO,CAC9B,CAEA,eAAekB,GAAgC,CAC7C,MAAMhB,EAAO,eAAA,CACf,CAEA,eAAeiB,EAAanB,EAAgD,CAC1E,OAAOE,EAAO,aAAaF,CAAO,CACpC,CAGA,SAASoB,EAAQC,EAAuB,CACtC,MAAMT,EAASpB,EAAK,OAAO,cAC3B,GAAI,CAACoB,EAAQ,MAAO,GAEpB,MAAMU,EAASV,EAAO,OAASA,EAAO,iBAAmB,CAAA,EACzD,OAAO,MAAM,QAAQU,CAAK,GAAKA,EAAM,SAASD,CAAI,CACpD,CAEA,MAAO,CAEL,gBAAAhC,EACA,UAAAE,EACA,KAAAC,EACA,MAAAC,EACA,MAAAC,EACA,aAAAC,EACA,UAAAC,EACA,SAAAc,EAGA,OAAAK,EACA,mBAAAC,EACA,QAAAC,EACA,eAAAC,EACA,aAAAC,EAGA,QAAAC,CAAA,CAEJ,CC5DO,SAASG,EAAgBvB,EAA4B,GAAI,CAC9D,KAAM,CACJ,aAAAwB,EAAe,wBACf,oBAAAC,EAAsB,uBACtB,MAAAC,EAAQ,EAAA,EACN1B,EAEJ,OAAOD,EAAgB,CACrB,aAAc,CACZ,SAAU,IAAI4B,EAAAA,YAAY,CACxB,SAAU,OACV,eAAgB,OAChB,gBAAiB,OACjB,YAAa,OACb,SAAU,CACR,aAAcH,EACd,WAAYA,EACZ,cAAeC,CAAA,CACjB,CACD,EACD,MAAAC,CAAA,CACF,CACD,CACH"}
+{"version":3,"file":"index.js","sources":["../src/plugin.ts","../src/composables/useSSOClient.ts","../src/composables/useAuth.ts","../src/createB2CPlugin.ts"],"sourcesContent":["import { ref } from \"vue\";\nimport { defineStore } from \"pinia\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport type { App } from \"vue\";\nimport type { SSOClientConfig, SSOClientState, AuthResponse } from \"@phila/sso-core\";\n\nexport const SSO_CLIENT_KEY = Symbol(\"sso-client\");\n\nexport interface SSOPluginOptions {\n  clientConfig: SSOClientConfig;\n  autoInitialize?: boolean;\n}\n\nexport const useSSOStore = defineStore(\"sso\", () => {\n  const isAuthenticated = ref(false);\n  const isLoading = ref(false);\n  const user = ref<SSOClientState[\"user\"]>(null);\n  const token = ref<string | null>(null);\n  const error = ref<Error | null>(null);\n  const activePolicy = ref<string | null>(null);\n  const authReady = ref(false);\n\n  function syncState(state: SSOClientState) {\n    isAuthenticated.value = state.isAuthenticated;\n    isLoading.value = state.isLoading;\n    user.value = state.user;\n    token.value = state.token;\n    error.value = state.error;\n    activePolicy.value = state.activePolicy;\n    authReady.value = state.authReady;\n  }\n\n  return { isAuthenticated, isLoading, user, token, error, activePolicy, authReady, syncState };\n});\n\nexport function createSSOPlugin(options: SSOPluginOptions) {\n  return {\n    install(app: App) {\n      const client = new SSOClient(options.clientConfig);\n\n      // Provide the client for useSSOClient()\n      app.provide(SSO_CLIENT_KEY, client);\n\n      // Subscribe to state changes and sync to Pinia store\n      client.events.on(\"auth:stateChanged\", (state: SSOClientState) => {\n        const store = useSSOStore();\n        store.syncState(state);\n      });\n\n      // Auto-initialize unless explicitly disabled\n      if (options.autoInitialize !== false) {\n        client.initialize().then((response: AuthResponse | null) => {\n          if (response && options.clientConfig.debug) {\n            console.log(\"[sso-vue] Auto-initialized with response:\", response);\n          }\n        });\n      }\n    },\n  };\n}\n","import { inject } from \"vue\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport { SSO_CLIENT_KEY } from \"../plugin\";\n\n/**\n * Access the raw SSOClient instance.\n * Must be called within a component that is a descendant of createSSOPlugin.\n */\nexport function useSSOClient(): SSOClient {\n  const client = inject<SSOClient>(SSO_CLIENT_KEY);\n  if (!client) {\n    throw new Error(\"SSOClient not found. Did you install createSSOPlugin?\");\n  }\n  return client;\n}\n","import { computed } from \"vue\";\nimport { storeToRefs } from \"pinia\";\nimport { useSSOStore } from \"../plugin\";\nimport { useSSOClient } from \"./useSSOClient\";\nimport type { SignInOptions, SignOutOptions, TokenOptions } from \"@phila/sso-core\";\n\n/**\n * Primary composable for SSO authentication in Vue 3 apps.\n * API shape is intentionally similar to service-cat's existing useAuth()\n * to minimize migration friction.\n */\nexport function useAuth() {\n  const store = useSSOStore();\n  const client = useSSOClient();\n  const { isAuthenticated, isLoading, user, token, error, activePolicy, authReady } = storeToRefs(store);\n\n  // Computed helpers\n  const userName = computed(() => {\n    const claims = user.value?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return null;\n    const given = (claims.given_name ?? claims.name ?? \"\") as string;\n    const family = (claims.family_name ?? \"\") as string;\n    return family ? `${given} ${family}`.trim() : given;\n  });\n\n  // Actions\n  async function signIn(options?: SignInOptions): Promise<void> {\n    await client.signIn(options);\n  }\n\n  async function signInCityEmployee(options?: SignInOptions): Promise<void> {\n    await client.signInCityEmployee(options);\n  }\n\n  async function signOut(options?: SignOutOptions): Promise<void> {\n    await client.signOut(options);\n  }\n\n  async function forgotPassword(): Promise<void> {\n    await client.forgotPassword();\n  }\n\n  async function acquireToken(options?: TokenOptions): Promise<string | null> {\n    return client.acquireToken(options);\n  }\n\n  // Utilities\n  function hasRole(role: string): boolean {\n    const claims = user.value?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return false;\n\n    const roles = (claims.roles ?? claims.extension_Roles ?? []) as string[];\n    return Array.isArray(roles) && roles.includes(role);\n  }\n\n  return {\n    // State (readonly refs)\n    isAuthenticated,\n    isLoading,\n    user,\n    token,\n    error,\n    activePolicy,\n    authReady,\n    userName,\n\n    // Actions\n    signIn,\n    signInCityEmployee,\n    signOut,\n    forgotPassword,\n    acquireToken,\n\n    // Utilities\n    hasRole,\n  };\n}\n","// ABOUTME: Convenience factory for vanilla Vue/Vite apps using Azure AD B2C\n// ABOUTME: Reads VITE_SSO_* env vars by convention so apps need zero B2CProvider boilerplate\nimport { B2CProvider } from \"@phila/sso-core\";\nimport { createSSOPlugin } from \"./plugin\";\n\nexport interface B2CPluginOptions {\n  signInPolicy?: string;\n  resetPasswordPolicy?: string;\n  debug?: boolean;\n}\n\n/**\n * Creates a ready-to-use Vue plugin for Azure AD B2C authentication.\n * Reads connection details from VITE_SSO_* environment variables:\n *   VITE_SSO_CLIENT_ID, VITE_SSO_TENANT, VITE_SSO_AUTHORITY_DOMAIN, VITE_SSO_REDIRECT_URI\n */\nexport function createB2CPlugin(options: B2CPluginOptions = {}) {\n  const {\n    signInPolicy = \"B2C_1A_AD_SIGNIN_ONLY\",\n    resetPasswordPolicy = \"B2C_1A_PASSWORDRESET\",\n    debug = import.meta.env.DEV,\n  } = options;\n\n  return createSSOPlugin({\n    clientConfig: {\n      provider: new B2CProvider({\n        clientId: import.meta.env.VITE_SSO_CLIENT_ID,\n        b2cEnvironment: import.meta.env.VITE_SSO_TENANT,\n        authorityDomain: import.meta.env.VITE_SSO_AUTHORITY_DOMAIN,\n        redirectUri: import.meta.env.VITE_SSO_REDIRECT_URI,\n        policies: {\n          signUpSignIn: signInPolicy,\n          signInOnly: signInPolicy,\n          resetPassword: resetPasswordPolicy,\n        },\n      }),\n      debug,\n    },\n  });\n}\n"],"names":["defineStore","ref","SSOClient","inject","storeToRefs","computed","B2CProvider"],"mappings":";;;;;AAMO,MAAM,wCAAwB,YAAY;AAO1C,MAAM,cAAcA,MAAAA,YAAY,OAAO,MAAM;AAClD,QAAM,kBAAkBC,IAAAA,IAAI,KAAK;AACjC,QAAM,YAAYA,IAAAA,IAAI,KAAK;AAC3B,QAAM,OAAOA,IAAAA,IAA4B,IAAI;AAC7C,QAAM,QAAQA,IAAAA,IAAmB,IAAI;AACrC,QAAM,QAAQA,IAAAA,IAAkB,IAAI;AACpC,QAAM,eAAeA,IAAAA,IAAmB,IAAI;AAC5C,QAAM,YAAYA,IAAAA,IAAI,KAAK;AAE3B,WAAS,UAAU,OAAuB;AACxC,oBAAgB,QAAQ,MAAM;AAC9B,cAAU,QAAQ,MAAM;AACxB,SAAK,QAAQ,MAAM;AACnB,UAAM,QAAQ,MAAM;AACpB,UAAM,QAAQ,MAAM;AACpB,iBAAa,QAAQ,MAAM;AAC3B,cAAU,QAAQ,MAAM;AAAA,EAC1B;AAEA,SAAO,EAAE,iBAAiB,WAAW,MAAM,OAAO,OAAO,cAAc,WAAW,UAAA;AACpF,CAAC;AAEM,SAAS,gBAAgB,SAA2B;AACzD,SAAO;AAAA,IACL,QAAQ,KAAU;AAChB,YAAM,SAAS,IAAIC,kBAAU,QAAQ,YAAY;AAGjD,UAAI,QAAQ,gBAAgB,MAAM;AAGlC,aAAO,OAAO,GAAG,qBAAqB,CAAC,UAA0B;AAC/D,cAAM,QAAQ,YAAA;AACd,cAAM,UAAU,KAAK;AAAA,MACvB,CAAC;AAGD,UAAI,QAAQ,mBAAmB,OAAO;AACpC,eAAO,WAAA,EAAa,KAAK,CAAC,aAAkC;AAC1D,cAAI,YAAY,QAAQ,aAAa,OAAO;AAC1C,oBAAQ,IAAI,6CAA6C,QAAQ;AAAA,UACnE;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EAAA;AAEJ;ACnDO,SAAS,eAA0B;AACxC,QAAM,SAASC,IAAAA,OAAkB,cAAc;AAC/C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,SAAO;AACT;ACHO,SAAS,UAAU;AACxB,QAAM,QAAQ,YAAA;AACd,QAAM,SAAS,aAAA;AACf,QAAM,EAAE,iBAAiB,WAAW,MAAM,OAAO,OAAO,cAAc,UAAA,IAAcC,MAAAA,YAAY,KAAK;AAGrG,QAAM,WAAWC,IAAAA,SAAS,MAAM;AAC9B,UAAM,SAAS,KAAK,OAAO;AAC3B,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,QAAS,OAAO,cAAc,OAAO,QAAQ;AACnD,UAAM,SAAU,OAAO,eAAe;AACtC,WAAO,SAAS,GAAG,KAAK,IAAI,MAAM,GAAG,SAAS;AAAA,EAChD,CAAC;AAGD,iBAAe,OAAO,SAAwC;AAC5D,UAAM,OAAO,OAAO,OAAO;AAAA,EAC7B;AAEA,iBAAe,mBAAmB,SAAwC;AACxE,UAAM,OAAO,mBAAmB,OAAO;AAAA,EACzC;AAEA,iBAAe,QAAQ,SAAyC;AAC9D,UAAM,OAAO,QAAQ,OAAO;AAAA,EAC9B;AAEA,iBAAe,iBAAgC;AAC7C,UAAM,OAAO,eAAA;AAAA,EACf;AAEA,iBAAe,aAAa,SAAgD;AAC1E,WAAO,OAAO,aAAa,OAAO;AAAA,EACpC;AAGA,WAAS,QAAQ,MAAuB;AACtC,UAAM,SAAS,KAAK,OAAO;AAC3B,QAAI,CAAC,OAAQ,QAAO;AAEpB,UAAM,QAAS,OAAO,SAAS,OAAO,mBAAmB,CAAA;AACzD,WAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,IAAI;AAAA,EACpD;AAEA,SAAO;AAAA;AAAA,IAEL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAGA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAGA;AAAA,EAAA;AAEJ;AC5DO,SAAS,gBAAgB,UAA4B,IAAI;AAC9D,QAAM;AAAA,IACJ,eAAe;AAAA,IACf,sBAAsB;AAAA,IACtB,QAAQ;AAAA,EAAA,IACN;AAEJ,SAAO,gBAAgB;AAAA,IACrB,cAAc;AAAA,MACZ,UAAU,IAAIC,QAAAA,YAAY;AAAA,QACxB,UAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,aAAa;AAAA,QACb,UAAU;AAAA,UACR,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,eAAe;AAAA,QAAA;AAAA,MACjB,CACD;AAAA,MACD;AAAA,IAAA;AAAA,EACF,CACD;AACH;;;;;;;"}

package/dist/index.mjs

@@ -1,108 +1,133 @@
-import { ref as c, inject as I, computed as O } from "vue";
-import { defineStore as A, storeToRefs as _ } from "pinia";
-import { SSOClient as p, B2CProvider as E } from "@phila/sso-core";
-const g = /* @__PURE__ */ Symbol("sso-client"), y = A("sso", () => {
-  const e = c(!1), i = c(!1), o = c(null), t = c(null), r = c(null), l = c(null), f = c(!1);
-  function d(s) {
-    e.value = s.isAuthenticated, i.value = s.isLoading, o.value = s.user, t.value = s.token, r.value = s.error, l.value = s.activePolicy, f.value = s.authReady;
+import { ref, inject, computed } from "vue";
+import { defineStore, storeToRefs } from "pinia";
+import { SSOClient, B2CProvider } from "@phila/sso-core";
+const SSO_CLIENT_KEY = /* @__PURE__ */ Symbol("sso-client");
+const useSSOStore = defineStore("sso", () => {
+  const isAuthenticated = ref(false);
+  const isLoading = ref(false);
+  const user = ref(null);
+  const token = ref(null);
+  const error = ref(null);
+  const activePolicy = ref(null);
+  const authReady = ref(false);
+  function syncState(state) {
+    isAuthenticated.value = state.isAuthenticated;
+    isLoading.value = state.isLoading;
+    user.value = state.user;
+    token.value = state.token;
+    error.value = state.error;
+    activePolicy.value = state.activePolicy;
+    authReady.value = state.authReady;
   }
-  return { isAuthenticated: e, isLoading: i, user: o, token: t, error: r, activePolicy: l, authReady: f, syncState: d };
+  return { isAuthenticated, isLoading, user, token, error, activePolicy, authReady, syncState };
 });
-function R(e) {
+function createSSOPlugin(options) {
   return {
-    install(i) {
-      const o = new p(e.clientConfig);
-      i.provide(g, o), o.events.on("auth:stateChanged", (t) => {
-        y().syncState(t);
-      }), e.autoInitialize !== !1 && o.initialize().then((t) => {
-        t && e.clientConfig.debug && console.log("[sso-vue] Auto-initialized with response:", t);
+    install(app) {
+      const client = new SSOClient(options.clientConfig);
+      app.provide(SSO_CLIENT_KEY, client);
+      client.events.on("auth:stateChanged", (state) => {
+        const store = useSSOStore();
+        store.syncState(state);
       });
+      if (options.autoInitialize !== false) {
+        client.initialize().then((response) => {
+          if (response && options.clientConfig.debug) {
+            console.log("[sso-vue] Auto-initialized with response:", response);
+          }
+        });
+      }
     }
   };
 }
-function k() {
-  const e = I(g);
-  if (!e)
+function useSSOClient() {
+  const client = inject(SSO_CLIENT_KEY);
+  if (!client) {
     throw new Error("SSOClient not found. Did you install createSSOPlugin?");
-  return e;
+  }
+  return client;
 }
-function b() {
-  const e = y(), i = k(), { isAuthenticated: o, isLoading: t, user: r, token: l, error: f, activePolicy: d, authReady: s } = _(e), S = O(() => {
-    const n = r.value?.idTokenClaims;
-    if (!n) return null;
-    const a = n.given_name ?? n.name ?? "", u = n.family_name ?? "";
-    return u ? `${a} ${u}`.trim() : a;
+function useAuth() {
+  const store = useSSOStore();
+  const client = useSSOClient();
+  const { isAuthenticated, isLoading, user, token, error, activePolicy, authReady } = storeToRefs(store);
+  const userName = computed(() => {
+    const claims = user.value?.idTokenClaims;
+    if (!claims) return null;
+    const given = claims.given_name ?? claims.name ?? "";
+    const family = claims.family_name ?? "";
+    return family ? `${given} ${family}`.trim() : given;
   });
-  async function m(n) {
-    await i.signIn(n);
+  async function signIn(options) {
+    await client.signIn(options);
   }
-  async function v(n) {
-    await i.signInCityEmployee(n);
+  async function signInCityEmployee(options) {
+    await client.signInCityEmployee(options);
   }
-  async function C(n) {
-    await i.signOut(n);
+  async function signOut(options) {
+    await client.signOut(options);
   }
-  async function h() {
-    await i.forgotPassword();
+  async function forgotPassword() {
+    await client.forgotPassword();
   }
-  async function P(n) {
-    return i.acquireToken(n);
+  async function acquireToken(options) {
+    return client.acquireToken(options);
   }
-  function w(n) {
-    const a = r.value?.idTokenClaims;
-    if (!a) return !1;
-    const u = a.roles ?? a.extension_Roles ?? [];
-    return Array.isArray(u) && u.includes(n);
+  function hasRole(role) {
+    const claims = user.value?.idTokenClaims;
+    if (!claims) return false;
+    const roles = claims.roles ?? claims.extension_Roles ?? [];
+    return Array.isArray(roles) && roles.includes(role);
   }
   return {
     // State (readonly refs)
-    isAuthenticated: o,
-    isLoading: t,
-    user: r,
-    token: l,
-    error: f,
-    activePolicy: d,
-    authReady: s,
-    userName: S,
+    isAuthenticated,
+    isLoading,
+    user,
+    token,
+    error,
+    activePolicy,
+    authReady,
+    userName,
     // Actions
-    signIn: m,
-    signInCityEmployee: v,
-    signOut: C,
-    forgotPassword: h,
-    acquireToken: P,
+    signIn,
+    signInCityEmployee,
+    signOut,
+    forgotPassword,
+    acquireToken,
     // Utilities
-    hasRole: w
+    hasRole
   };
 }
-function B(e = {}) {
+function createB2CPlugin(options = {}) {
   const {
-    signInPolicy: i = "B2C_1A_AD_SIGNIN_ONLY",
-    resetPasswordPolicy: o = "B2C_1A_PASSWORDRESET",
-    debug: t = !1
-  } = e;
-  return R({
+    signInPolicy = "B2C_1A_AD_SIGNIN_ONLY",
+    resetPasswordPolicy = "B2C_1A_PASSWORDRESET",
+    debug = false
+  } = options;
+  return createSSOPlugin({
     clientConfig: {
-      provider: new E({
+      provider: new B2CProvider({
         clientId: void 0,
         b2cEnvironment: void 0,
         authorityDomain: void 0,
         redirectUri: void 0,
         policies: {
-          signUpSignIn: i,
-          signInOnly: i,
-          resetPassword: o
+          signUpSignIn: signInPolicy,
+          signInOnly: signInPolicy,
+          resetPassword: resetPasswordPolicy
         }
       }),
-      debug: t
+      debug
     }
   });
 }
 export {
-  g as SSO_CLIENT_KEY,
-  B as createB2CPlugin,
-  R as createSSOPlugin,
-  b as useAuth,
-  k as useSSOClient,
-  y as useSSOStore
+  SSO_CLIENT_KEY,
+  createB2CPlugin,
+  createSSOPlugin,
+  useAuth,
+  useSSOClient,
+  useSSOStore
 };
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../src/plugin.ts","../src/composables/useSSOClient.ts","../src/composables/useAuth.ts","../src/createB2CPlugin.ts"],"sourcesContent":["import { ref } from \"vue\";\nimport { defineStore } from \"pinia\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport type { App } from \"vue\";\nimport type { SSOClientConfig, SSOClientState, AuthResponse } from \"@phila/sso-core\";\n\nexport const SSO_CLIENT_KEY = Symbol(\"sso-client\");\n\nexport interface SSOPluginOptions {\n  clientConfig: SSOClientConfig;\n  autoInitialize?: boolean;\n}\n\nexport const useSSOStore = defineStore(\"sso\", () => {\n  const isAuthenticated = ref(false);\n  const isLoading = ref(false);\n  const user = ref<SSOClientState[\"user\"]>(null);\n  const token = ref<string | null>(null);\n  const error = ref<Error | null>(null);\n  const activePolicy = ref<string | null>(null);\n  const authReady = ref(false);\n\n  function syncState(state: SSOClientState) {\n    isAuthenticated.value = state.isAuthenticated;\n    isLoading.value = state.isLoading;\n    user.value = state.user;\n    token.value = state.token;\n    error.value = state.error;\n    activePolicy.value = state.activePolicy;\n    authReady.value = state.authReady;\n  }\n\n  return { isAuthenticated, isLoading, user, token, error, activePolicy, authReady, syncState };\n});\n\nexport function createSSOPlugin(options: SSOPluginOptions) {\n  return {\n    install(app: App) {\n      const client = new SSOClient(options.clientConfig);\n\n      // Provide the client for useSSOClient()\n      app.provide(SSO_CLIENT_KEY, client);\n\n      // Subscribe to state changes and sync to Pinia store\n      client.events.on(\"auth:stateChanged\", (state: SSOClientState) => {\n        const store = useSSOStore();\n        store.syncState(state);\n      });\n\n      // Auto-initialize unless explicitly disabled\n      if (options.autoInitialize !== false) {\n        client.initialize().then((response: AuthResponse | null) => {\n          if (response && options.clientConfig.debug) {\n            console.log(\"[sso-vue] Auto-initialized with response:\", response);\n          }\n        });\n      }\n    },\n  };\n}\n","import { inject } from \"vue\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport { SSO_CLIENT_KEY } from \"../plugin\";\n\n/**\n * Access the raw SSOClient instance.\n * Must be called within a component that is a descendant of createSSOPlugin.\n */\nexport function useSSOClient(): SSOClient {\n  const client = inject<SSOClient>(SSO_CLIENT_KEY);\n  if (!client) {\n    throw new Error(\"SSOClient not found. Did you install createSSOPlugin?\");\n  }\n  return client;\n}\n","import { computed } from \"vue\";\nimport { storeToRefs } from \"pinia\";\nimport { useSSOStore } from \"../plugin\";\nimport { useSSOClient } from \"./useSSOClient\";\nimport type { SignInOptions, SignOutOptions, TokenOptions } from \"@phila/sso-core\";\n\n/**\n * Primary composable for SSO authentication in Vue 3 apps.\n * API shape is intentionally similar to service-cat's existing useAuth()\n * to minimize migration friction.\n */\nexport function useAuth() {\n  const store = useSSOStore();\n  const client = useSSOClient();\n  const { isAuthenticated, isLoading, user, token, error, activePolicy, authReady } = storeToRefs(store);\n\n  // Computed helpers\n  const userName = computed(() => {\n    const claims = user.value?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return null;\n    const given = (claims.given_name ?? claims.name ?? \"\") as string;\n    const family = (claims.family_name ?? \"\") as string;\n    return family ? `${given} ${family}`.trim() : given;\n  });\n\n  // Actions\n  async function signIn(options?: SignInOptions): Promise<void> {\n    await client.signIn(options);\n  }\n\n  async function signInCityEmployee(options?: SignInOptions): Promise<void> {\n    await client.signInCityEmployee(options);\n  }\n\n  async function signOut(options?: SignOutOptions): Promise<void> {\n    await client.signOut(options);\n  }\n\n  async function forgotPassword(): Promise<void> {\n    await client.forgotPassword();\n  }\n\n  async function acquireToken(options?: TokenOptions): Promise<string | null> {\n    return client.acquireToken(options);\n  }\n\n  // Utilities\n  function hasRole(role: string): boolean {\n    const claims = user.value?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return false;\n\n    const roles = (claims.roles ?? claims.extension_Roles ?? []) as string[];\n    return Array.isArray(roles) && roles.includes(role);\n  }\n\n  return {\n    // State (readonly refs)\n    isAuthenticated,\n    isLoading,\n    user,\n    token,\n    error,\n    activePolicy,\n    authReady,\n    userName,\n\n    // Actions\n    signIn,\n    signInCityEmployee,\n    signOut,\n    forgotPassword,\n    acquireToken,\n\n    // Utilities\n    hasRole,\n  };\n}\n","// ABOUTME: Convenience factory for vanilla Vue/Vite apps using Azure AD B2C\n// ABOUTME: Reads VITE_SSO_* env vars by convention so apps need zero B2CProvider boilerplate\nimport { B2CProvider } from \"@phila/sso-core\";\nimport { createSSOPlugin } from \"./plugin\";\n\nexport interface B2CPluginOptions {\n  signInPolicy?: string;\n  resetPasswordPolicy?: string;\n  debug?: boolean;\n}\n\n/**\n * Creates a ready-to-use Vue plugin for Azure AD B2C authentication.\n * Reads connection details from VITE_SSO_* environment variables:\n *   VITE_SSO_CLIENT_ID, VITE_SSO_TENANT, VITE_SSO_AUTHORITY_DOMAIN, VITE_SSO_REDIRECT_URI\n */\nexport function createB2CPlugin(options: B2CPluginOptions = {}) {\n  const {\n    signInPolicy = \"B2C_1A_AD_SIGNIN_ONLY\",\n    resetPasswordPolicy = \"B2C_1A_PASSWORDRESET\",\n    debug = import.meta.env.DEV,\n  } = options;\n\n  return createSSOPlugin({\n    clientConfig: {\n      provider: new B2CProvider({\n        clientId: import.meta.env.VITE_SSO_CLIENT_ID,\n        b2cEnvironment: import.meta.env.VITE_SSO_TENANT,\n        authorityDomain: import.meta.env.VITE_SSO_AUTHORITY_DOMAIN,\n        redirectUri: import.meta.env.VITE_SSO_REDIRECT_URI,\n        policies: {\n          signUpSignIn: signInPolicy,\n          signInOnly: signInPolicy,\n          resetPassword: resetPasswordPolicy,\n        },\n      }),\n      debug,\n    },\n  });\n}\n"],"names":["SSO_CLIENT_KEY","useSSOStore","defineStore","isAuthenticated","ref","isLoading","user","token","error","activePolicy","authReady","syncState","state","createSSOPlugin","options","app","client","SSOClient","response","useSSOClient","inject","useAuth","store","storeToRefs","userName","computed","claims","given","family","signIn","signInCityEmployee","signOut","forgotPassword","acquireToken","hasRole","role","roles","createB2CPlugin","signInPolicy","resetPasswordPolicy","debug","B2CProvider"],"mappings":";;;AAMO,MAAMA,2BAAwB,YAAY,GAOpCC,IAAcC,EAAY,OAAO,MAAM;AAClD,QAAMC,IAAkBC,EAAI,EAAK,GAC3BC,IAAYD,EAAI,EAAK,GACrBE,IAAOF,EAA4B,IAAI,GACvCG,IAAQH,EAAmB,IAAI,GAC/BI,IAAQJ,EAAkB,IAAI,GAC9BK,IAAeL,EAAmB,IAAI,GACtCM,IAAYN,EAAI,EAAK;AAE3B,WAASO,EAAUC,GAAuB;AACxC,IAAAT,EAAgB,QAAQS,EAAM,iBAC9BP,EAAU,QAAQO,EAAM,WACxBN,EAAK,QAAQM,EAAM,MACnBL,EAAM,QAAQK,EAAM,OACpBJ,EAAM,QAAQI,EAAM,OACpBH,EAAa,QAAQG,EAAM,cAC3BF,EAAU,QAAQE,EAAM;AAAA,EAC1B;AAEA,SAAO,EAAE,iBAAAT,GAAiB,WAAAE,GAAW,MAAAC,GAAM,OAAAC,GAAO,OAAAC,GAAO,cAAAC,GAAc,WAAAC,GAAW,WAAAC,EAAA;AACpF,CAAC;AAEM,SAASE,EAAgBC,GAA2B;AACzD,SAAO;AAAA,IACL,QAAQC,GAAU;AAChB,YAAMC,IAAS,IAAIC,EAAUH,EAAQ,YAAY;AAGjD,MAAAC,EAAI,QAAQf,GAAgBgB,CAAM,GAGlCA,EAAO,OAAO,GAAG,qBAAqB,CAACJ,MAA0B;AAE/D,QADcX,EAAA,EACR,UAAUW,CAAK;AAAA,MACvB,CAAC,GAGGE,EAAQ,mBAAmB,MAC7BE,EAAO,WAAA,EAAa,KAAK,CAACE,MAAkC;AAC1D,QAAIA,KAAYJ,EAAQ,aAAa,SACnC,QAAQ,IAAI,6CAA6CI,CAAQ;AAAA,MAErE,CAAC;AAAA,IAEL;AAAA,EAAA;AAEJ;ACnDO,SAASC,IAA0B;AACxC,QAAMH,IAASI,EAAkBpB,CAAc;AAC/C,MAAI,CAACgB;AACH,UAAM,IAAI,MAAM,uDAAuD;AAEzE,SAAOA;AACT;ACHO,SAASK,IAAU;AACxB,QAAMC,IAAQrB,EAAA,GACRe,IAASG,EAAA,GACT,EAAE,iBAAAhB,GAAiB,WAAAE,GAAW,MAAAC,GAAM,OAAAC,GAAO,OAAAC,GAAO,cAAAC,GAAc,WAAAC,EAAA,IAAca,EAAYD,CAAK,GAG/FE,IAAWC,EAAS,MAAM;AAC9B,UAAMC,IAASpB,EAAK,OAAO;AAC3B,QAAI,CAACoB,EAAQ,QAAO;AACpB,UAAMC,IAASD,EAAO,cAAcA,EAAO,QAAQ,IAC7CE,IAAUF,EAAO,eAAe;AACtC,WAAOE,IAAS,GAAGD,CAAK,IAAIC,CAAM,GAAG,SAASD;AAAA,EAChD,CAAC;AAGD,iBAAeE,EAAOf,GAAwC;AAC5D,UAAME,EAAO,OAAOF,CAAO;AAAA,EAC7B;AAEA,iBAAegB,EAAmBhB,GAAwC;AACxE,UAAME,EAAO,mBAAmBF,CAAO;AAAA,EACzC;AAEA,iBAAeiB,EAAQjB,GAAyC;AAC9D,UAAME,EAAO,QAAQF,CAAO;AAAA,EAC9B;AAEA,iBAAekB,IAAgC;AAC7C,UAAMhB,EAAO,eAAA;AAAA,EACf;AAEA,iBAAeiB,EAAanB,GAAgD;AAC1E,WAAOE,EAAO,aAAaF,CAAO;AAAA,EACpC;AAGA,WAASoB,EAAQC,GAAuB;AACtC,UAAMT,IAASpB,EAAK,OAAO;AAC3B,QAAI,CAACoB,EAAQ,QAAO;AAEpB,UAAMU,IAASV,EAAO,SAASA,EAAO,mBAAmB,CAAA;AACzD,WAAO,MAAM,QAAQU,CAAK,KAAKA,EAAM,SAASD,CAAI;AAAA,EACpD;AAEA,SAAO;AAAA;AAAA,IAEL,iBAAAhC;AAAA,IACA,WAAAE;AAAA,IACA,MAAAC;AAAA,IACA,OAAAC;AAAA,IACA,OAAAC;AAAA,IACA,cAAAC;AAAA,IACA,WAAAC;AAAA,IACA,UAAAc;AAAA;AAAA,IAGA,QAAAK;AAAA,IACA,oBAAAC;AAAA,IACA,SAAAC;AAAA,IACA,gBAAAC;AAAA,IACA,cAAAC;AAAA;AAAA,IAGA,SAAAC;AAAA,EAAA;AAEJ;AC5DO,SAASG,EAAgBvB,IAA4B,IAAI;AAC9D,QAAM;AAAA,IACJ,cAAAwB,IAAe;AAAA,IACf,qBAAAC,IAAsB;AAAA,IACtB,OAAAC,IAAQ;AAAA,EAAA,IACN1B;AAEJ,SAAOD,EAAgB;AAAA,IACrB,cAAc;AAAA,MACZ,UAAU,IAAI4B,EAAY;AAAA,QACxB,UAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,aAAa;AAAA,QACb,UAAU;AAAA,UACR,cAAcH;AAAA,UACd,YAAYA;AAAA,UACZ,eAAeC;AAAA,QAAA;AAAA,MACjB,CACD;AAAA,MACD,OAAAC;AAAA,IAAA;AAAA,EACF,CACD;AACH;"}
+{"version":3,"file":"index.mjs","sources":["../src/plugin.ts","../src/composables/useSSOClient.ts","../src/composables/useAuth.ts","../src/createB2CPlugin.ts"],"sourcesContent":["import { ref } from \"vue\";\nimport { defineStore } from \"pinia\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport type { App } from \"vue\";\nimport type { SSOClientConfig, SSOClientState, AuthResponse } from \"@phila/sso-core\";\n\nexport const SSO_CLIENT_KEY = Symbol(\"sso-client\");\n\nexport interface SSOPluginOptions {\n  clientConfig: SSOClientConfig;\n  autoInitialize?: boolean;\n}\n\nexport const useSSOStore = defineStore(\"sso\", () => {\n  const isAuthenticated = ref(false);\n  const isLoading = ref(false);\n  const user = ref<SSOClientState[\"user\"]>(null);\n  const token = ref<string | null>(null);\n  const error = ref<Error | null>(null);\n  const activePolicy = ref<string | null>(null);\n  const authReady = ref(false);\n\n  function syncState(state: SSOClientState) {\n    isAuthenticated.value = state.isAuthenticated;\n    isLoading.value = state.isLoading;\n    user.value = state.user;\n    token.value = state.token;\n    error.value = state.error;\n    activePolicy.value = state.activePolicy;\n    authReady.value = state.authReady;\n  }\n\n  return { isAuthenticated, isLoading, user, token, error, activePolicy, authReady, syncState };\n});\n\nexport function createSSOPlugin(options: SSOPluginOptions) {\n  return {\n    install(app: App) {\n      const client = new SSOClient(options.clientConfig);\n\n      // Provide the client for useSSOClient()\n      app.provide(SSO_CLIENT_KEY, client);\n\n      // Subscribe to state changes and sync to Pinia store\n      client.events.on(\"auth:stateChanged\", (state: SSOClientState) => {\n        const store = useSSOStore();\n        store.syncState(state);\n      });\n\n      // Auto-initialize unless explicitly disabled\n      if (options.autoInitialize !== false) {\n        client.initialize().then((response: AuthResponse | null) => {\n          if (response && options.clientConfig.debug) {\n            console.log(\"[sso-vue] Auto-initialized with response:\", response);\n          }\n        });\n      }\n    },\n  };\n}\n","import { inject } from \"vue\";\nimport { SSOClient } from \"@phila/sso-core\";\nimport { SSO_CLIENT_KEY } from \"../plugin\";\n\n/**\n * Access the raw SSOClient instance.\n * Must be called within a component that is a descendant of createSSOPlugin.\n */\nexport function useSSOClient(): SSOClient {\n  const client = inject<SSOClient>(SSO_CLIENT_KEY);\n  if (!client) {\n    throw new Error(\"SSOClient not found. Did you install createSSOPlugin?\");\n  }\n  return client;\n}\n","import { computed } from \"vue\";\nimport { storeToRefs } from \"pinia\";\nimport { useSSOStore } from \"../plugin\";\nimport { useSSOClient } from \"./useSSOClient\";\nimport type { SignInOptions, SignOutOptions, TokenOptions } from \"@phila/sso-core\";\n\n/**\n * Primary composable for SSO authentication in Vue 3 apps.\n * API shape is intentionally similar to service-cat's existing useAuth()\n * to minimize migration friction.\n */\nexport function useAuth() {\n  const store = useSSOStore();\n  const client = useSSOClient();\n  const { isAuthenticated, isLoading, user, token, error, activePolicy, authReady } = storeToRefs(store);\n\n  // Computed helpers\n  const userName = computed(() => {\n    const claims = user.value?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return null;\n    const given = (claims.given_name ?? claims.name ?? \"\") as string;\n    const family = (claims.family_name ?? \"\") as string;\n    return family ? `${given} ${family}`.trim() : given;\n  });\n\n  // Actions\n  async function signIn(options?: SignInOptions): Promise<void> {\n    await client.signIn(options);\n  }\n\n  async function signInCityEmployee(options?: SignInOptions): Promise<void> {\n    await client.signInCityEmployee(options);\n  }\n\n  async function signOut(options?: SignOutOptions): Promise<void> {\n    await client.signOut(options);\n  }\n\n  async function forgotPassword(): Promise<void> {\n    await client.forgotPassword();\n  }\n\n  async function acquireToken(options?: TokenOptions): Promise<string | null> {\n    return client.acquireToken(options);\n  }\n\n  // Utilities\n  function hasRole(role: string): boolean {\n    const claims = user.value?.idTokenClaims as Record<string, unknown> | undefined;\n    if (!claims) return false;\n\n    const roles = (claims.roles ?? claims.extension_Roles ?? []) as string[];\n    return Array.isArray(roles) && roles.includes(role);\n  }\n\n  return {\n    // State (readonly refs)\n    isAuthenticated,\n    isLoading,\n    user,\n    token,\n    error,\n    activePolicy,\n    authReady,\n    userName,\n\n    // Actions\n    signIn,\n    signInCityEmployee,\n    signOut,\n    forgotPassword,\n    acquireToken,\n\n    // Utilities\n    hasRole,\n  };\n}\n","// ABOUTME: Convenience factory for vanilla Vue/Vite apps using Azure AD B2C\n// ABOUTME: Reads VITE_SSO_* env vars by convention so apps need zero B2CProvider boilerplate\nimport { B2CProvider } from \"@phila/sso-core\";\nimport { createSSOPlugin } from \"./plugin\";\n\nexport interface B2CPluginOptions {\n  signInPolicy?: string;\n  resetPasswordPolicy?: string;\n  debug?: boolean;\n}\n\n/**\n * Creates a ready-to-use Vue plugin for Azure AD B2C authentication.\n * Reads connection details from VITE_SSO_* environment variables:\n *   VITE_SSO_CLIENT_ID, VITE_SSO_TENANT, VITE_SSO_AUTHORITY_DOMAIN, VITE_SSO_REDIRECT_URI\n */\nexport function createB2CPlugin(options: B2CPluginOptions = {}) {\n  const {\n    signInPolicy = \"B2C_1A_AD_SIGNIN_ONLY\",\n    resetPasswordPolicy = \"B2C_1A_PASSWORDRESET\",\n    debug = import.meta.env.DEV,\n  } = options;\n\n  return createSSOPlugin({\n    clientConfig: {\n      provider: new B2CProvider({\n        clientId: import.meta.env.VITE_SSO_CLIENT_ID,\n        b2cEnvironment: import.meta.env.VITE_SSO_TENANT,\n        authorityDomain: import.meta.env.VITE_SSO_AUTHORITY_DOMAIN,\n        redirectUri: import.meta.env.VITE_SSO_REDIRECT_URI,\n        policies: {\n          signUpSignIn: signInPolicy,\n          signInOnly: signInPolicy,\n          resetPassword: resetPasswordPolicy,\n        },\n      }),\n      debug,\n    },\n  });\n}\n"],"names":[],"mappings":";;;AAMO,MAAM,wCAAwB,YAAY;AAO1C,MAAM,cAAc,YAAY,OAAO,MAAM;AAClD,QAAM,kBAAkB,IAAI,KAAK;AACjC,QAAM,YAAY,IAAI,KAAK;AAC3B,QAAM,OAAO,IAA4B,IAAI;AAC7C,QAAM,QAAQ,IAAmB,IAAI;AACrC,QAAM,QAAQ,IAAkB,IAAI;AACpC,QAAM,eAAe,IAAmB,IAAI;AAC5C,QAAM,YAAY,IAAI,KAAK;AAE3B,WAAS,UAAU,OAAuB;AACxC,oBAAgB,QAAQ,MAAM;AAC9B,cAAU,QAAQ,MAAM;AACxB,SAAK,QAAQ,MAAM;AACnB,UAAM,QAAQ,MAAM;AACpB,UAAM,QAAQ,MAAM;AACpB,iBAAa,QAAQ,MAAM;AAC3B,cAAU,QAAQ,MAAM;AAAA,EAC1B;AAEA,SAAO,EAAE,iBAAiB,WAAW,MAAM,OAAO,OAAO,cAAc,WAAW,UAAA;AACpF,CAAC;AAEM,SAAS,gBAAgB,SAA2B;AACzD,SAAO;AAAA,IACL,QAAQ,KAAU;AAChB,YAAM,SAAS,IAAI,UAAU,QAAQ,YAAY;AAGjD,UAAI,QAAQ,gBAAgB,MAAM;AAGlC,aAAO,OAAO,GAAG,qBAAqB,CAAC,UAA0B;AAC/D,cAAM,QAAQ,YAAA;AACd,cAAM,UAAU,KAAK;AAAA,MACvB,CAAC;AAGD,UAAI,QAAQ,mBAAmB,OAAO;AACpC,eAAO,WAAA,EAAa,KAAK,CAAC,aAAkC;AAC1D,cAAI,YAAY,QAAQ,aAAa,OAAO;AAC1C,oBAAQ,IAAI,6CAA6C,QAAQ;AAAA,UACnE;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EAAA;AAEJ;ACnDO,SAAS,eAA0B;AACxC,QAAM,SAAS,OAAkB,cAAc;AAC/C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,SAAO;AACT;ACHO,SAAS,UAAU;AACxB,QAAM,QAAQ,YAAA;AACd,QAAM,SAAS,aAAA;AACf,QAAM,EAAE,iBAAiB,WAAW,MAAM,OAAO,OAAO,cAAc,UAAA,IAAc,YAAY,KAAK;AAGrG,QAAM,WAAW,SAAS,MAAM;AAC9B,UAAM,SAAS,KAAK,OAAO;AAC3B,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,QAAS,OAAO,cAAc,OAAO,QAAQ;AACnD,UAAM,SAAU,OAAO,eAAe;AACtC,WAAO,SAAS,GAAG,KAAK,IAAI,MAAM,GAAG,SAAS;AAAA,EAChD,CAAC;AAGD,iBAAe,OAAO,SAAwC;AAC5D,UAAM,OAAO,OAAO,OAAO;AAAA,EAC7B;AAEA,iBAAe,mBAAmB,SAAwC;AACxE,UAAM,OAAO,mBAAmB,OAAO;AAAA,EACzC;AAEA,iBAAe,QAAQ,SAAyC;AAC9D,UAAM,OAAO,QAAQ,OAAO;AAAA,EAC9B;AAEA,iBAAe,iBAAgC;AAC7C,UAAM,OAAO,eAAA;AAAA,EACf;AAEA,iBAAe,aAAa,SAAgD;AAC1E,WAAO,OAAO,aAAa,OAAO;AAAA,EACpC;AAGA,WAAS,QAAQ,MAAuB;AACtC,UAAM,SAAS,KAAK,OAAO;AAC3B,QAAI,CAAC,OAAQ,QAAO;AAEpB,UAAM,QAAS,OAAO,SAAS,OAAO,mBAAmB,CAAA;AACzD,WAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,IAAI;AAAA,EACpD;AAEA,SAAO;AAAA;AAAA,IAEL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAGA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAGA;AAAA,EAAA;AAEJ;AC5DO,SAAS,gBAAgB,UAA4B,IAAI;AAC9D,QAAM;AAAA,IACJ,eAAe;AAAA,IACf,sBAAsB;AAAA,IACtB,QAAQ;AAAA,EAAA,IACN;AAEJ,SAAO,gBAAgB;AAAA,IACrB,cAAc;AAAA,MACZ,UAAU,IAAI,YAAY;AAAA,QACxB,UAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,aAAa;AAAA,QACb,UAAU;AAAA,UACR,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,eAAe;AAAA,QAAA;AAAA,MACjB,CACD;AAAA,MACD;AAAA,IAAA;AAAA,EACF,CACD;AACH;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phila/sso-vue",
-  "version": "0.0.2",
+  "version": "0.0.4",
   "type": "module",
   "description": "Vue 3 adapter for @phila/sso-core",
   "main": "./dist/index.js",
@@ -26,7 +26,7 @@
   "author": "City of Philadelphia",
   "license": "MIT",
   "dependencies": {
-    "@phila/sso-core": "0.0.2"
+    "@phila/sso-core": "0.0.4"
   },
   "peerDependencies": {
     "vue": "^3.0.0",