@qwickapps/server 1.3.0 → 1.3.1

package/dist/plugins/auth/adapters/supertokens-adapter.js

@@ -0,0 +1,267 @@
+/**
+ * Supertokens Auth Adapter
+ *
+ * Provides Supertokens authentication using EmailPassword and ThirdParty recipes.
+ * Supports email/password and social logins (Google, Apple, GitHub).
+ *
+ * Note: Requires supertokens-node v20+
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+// Keys for storing data on the request object
+const REQUEST_USER_KEY = '_supertokensUser';
+const REQUEST_RES_KEY = '_supertokensRes';
+const REQUEST_SESSION_KEY = '_supertokensSession';
+/**
+ * Create a Supertokens authentication adapter
+ *
+ * Uses EmailPassword and ThirdParty recipes (Supertokens v20+)
+ */
+export function supertokensAdapter(config) {
+    // Track initialization state
+    let initialized = false;
+    let initializationError = null;
+    return {
+        name: 'supertokens',
+        initialize() {
+            // Return middleware that lazily initializes Supertokens
+            const initMiddleware = async (req, res, next) => {
+                // Store response on request for later use in getUser()
+                req[REQUEST_RES_KEY] = res;
+                // Skip if already initialized with error
+                if (initializationError) {
+                    return res.status(500).json({
+                        error: 'Auth Configuration Error',
+                        message: 'Supertokens is not properly configured. Install supertokens-node package: npm install supertokens-node',
+                        details: initializationError.message,
+                    });
+                }
+                // Lazy initialize Supertokens
+                if (!initialized) {
+                    try {
+                        const supertokens = await import('supertokens-node');
+                        const Session = await import('supertokens-node/recipe/session');
+                        const EmailPassword = await import('supertokens-node/recipe/emailpassword');
+                        const ThirdParty = await import('supertokens-node/recipe/thirdparty');
+                        // Build recipe list - using any[] for Supertokens internal types
+                        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                        const recipeList = [];
+                        // Add EmailPassword recipe if enabled (default: true)
+                        if (config.enableEmailPassword !== false) {
+                            recipeList.push(EmailPassword.default.init());
+                        }
+                        // Add ThirdParty recipe if any social providers configured
+                        if (config.socialProviders) {
+                            // Build provider configurations using Supertokens ProviderInput type
+                            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                            const providers = [];
+                            if (config.socialProviders.google) {
+                                providers.push({
+                                    config: {
+                                        thirdPartyId: 'google',
+                                        clients: [
+                                            {
+                                                clientId: config.socialProviders.google.clientId,
+                                                clientSecret: config.socialProviders.google.clientSecret,
+                                            },
+                                        ],
+                                    },
+                                });
+                            }
+                            if (config.socialProviders.apple) {
+                                // Apple requires keyId, teamId, and privateKey in additionalConfig
+                                providers.push({
+                                    config: {
+                                        thirdPartyId: 'apple',
+                                        clients: [
+                                            {
+                                                clientId: config.socialProviders.apple.clientId,
+                                                clientSecret: config.socialProviders.apple.clientSecret,
+                                                additionalConfig: {
+                                                    keyId: config.socialProviders.apple.keyId,
+                                                    teamId: config.socialProviders.apple.teamId,
+                                                },
+                                            },
+                                        ],
+                                    },
+                                });
+                            }
+                            if (config.socialProviders.github) {
+                                providers.push({
+                                    config: {
+                                        thirdPartyId: 'github',
+                                        clients: [
+                                            {
+                                                clientId: config.socialProviders.github.clientId,
+                                                clientSecret: config.socialProviders.github.clientSecret,
+                                            },
+                                        ],
+                                    },
+                                });
+                            }
+                            if (providers.length > 0) {
+                                recipeList.push(ThirdParty.default.init({
+                                    signInAndUpFeature: {
+                                        providers,
+                                    },
+                                }));
+                            }
+                        }
+                        // Always add Session recipe
+                        recipeList.push(Session.default.init());
+                        // Initialize Supertokens
+                        supertokens.default.init({
+                            framework: 'express',
+                            supertokens: {
+                                connectionURI: config.connectionUri,
+                                apiKey: config.apiKey,
+                            },
+                            appInfo: {
+                                appName: config.appName,
+                                apiDomain: config.apiDomain,
+                                websiteDomain: config.websiteDomain,
+                                apiBasePath: config.apiBasePath ?? '/auth',
+                                websiteBasePath: config.websiteBasePath ?? '/auth',
+                            },
+                            recipeList,
+                        });
+                        initialized = true;
+                    }
+                    catch (error) {
+                        initializationError =
+                            error instanceof Error ? error : new Error('Failed to initialize Supertokens');
+                        console.error('[SupertokensAdapter] Initialization error:', error);
+                        return res.status(500).json({
+                            error: 'Auth Configuration Error',
+                            message: 'Supertokens is not properly configured. Install supertokens-node package: npm install supertokens-node',
+                            details: initializationError.message,
+                        });
+                    }
+                }
+                next();
+            };
+            // Supertokens middleware for handling auth routes
+            const supertokensMiddleware = async (req, res, next) => {
+                if (!initialized) {
+                    return next();
+                }
+                try {
+                    const { middleware } = await import('supertokens-node/framework/express');
+                    middleware()(req, res, next);
+                }
+                catch {
+                    next();
+                }
+            };
+            return [initMiddleware, supertokensMiddleware];
+        },
+        isAuthenticated(req) {
+            const extReq = req;
+            // Check if we already validated this request
+            if (extReq[REQUEST_USER_KEY]) {
+                return true;
+            }
+            // Check if session was already retrieved
+            if (extReq[REQUEST_SESSION_KEY]) {
+                return true;
+            }
+            // For synchronous check, we can only check if session cookies exist
+            // Full validation happens in getUser()
+            // Supertokens uses cookies, so we check for session tokens
+            const cookies = req.cookies || {};
+            const accessToken = cookies.sAccessToken;
+            const refreshToken = cookies.sRefreshToken;
+            // Also check for Authorization header (for API clients)
+            const authHeader = req.headers.authorization;
+            const hasBearerToken = authHeader?.startsWith('Bearer ');
+            return !!(accessToken || refreshToken || hasBearerToken);
+        },
+        async getUser(req) {
+            const extReq = req;
+            // Return cached user if available
+            const cachedUser = extReq[REQUEST_USER_KEY];
+            if (cachedUser) {
+                return cachedUser;
+            }
+            if (!initialized) {
+                return null;
+            }
+            // Get response object stored during middleware
+            const res = extReq[REQUEST_RES_KEY];
+            if (!res) {
+                console.error('[SupertokensAdapter] Response object not found on request');
+                return null;
+            }
+            try {
+                const Session = await import('supertokens-node/recipe/session');
+                const supertokens = await import('supertokens-node');
+                // Get session - sessionRequired: false means it won't throw if no session
+                const session = await Session.default.getSession(req, res, {
+                    sessionRequired: false,
+                });
+                if (!session) {
+                    return null;
+                }
+                // Cache session for isAuthenticated check
+                extReq[REQUEST_SESSION_KEY] = session;
+                const userId = session.getUserId();
+                // Get user info from Supertokens
+                const userInfo = await supertokens.default.getUser(userId);
+                if (!userInfo) {
+                    return null;
+                }
+                // Get roles from session access token payload if available
+                const accessTokenPayload = session.getAccessTokenPayload();
+                const roles = accessTokenPayload?.roles || [];
+                // Map Supertokens user to AuthenticatedUser
+                const user = {
+                    id: userId,
+                    email: userInfo.emails?.[0] ?? '',
+                    name: accessTokenPayload?.name ||
+                        userInfo.thirdParty?.[0]?.userId ||
+                        userInfo.emails?.[0]?.split('@')[0],
+                    picture: accessTokenPayload?.picture,
+                    emailVerified: userInfo.emails?.[0] ? true : false,
+                    roles,
+                    raw: {
+                        ...userInfo,
+                        sessionHandle: session.getHandle(),
+                        accessTokenPayload,
+                    },
+                };
+                // Cache on request object
+                extReq[REQUEST_USER_KEY] = user;
+                return user;
+            }
+            catch (error) {
+                console.error('[SupertokensAdapter] Error getting user:', error);
+                return null;
+            }
+        },
+        hasRoles(req, roles) {
+            const extReq = req;
+            const user = extReq[REQUEST_USER_KEY];
+            if (!user?.roles)
+                return false;
+            return roles.every((role) => user.roles?.includes(role));
+        },
+        getAccessToken(_req) {
+            // Supertokens uses session cookies, not access tokens
+            // Return null as per the design decision
+            return null;
+        },
+        onUnauthorized(_req, res) {
+            res.status(401).json({
+                error: 'Unauthorized',
+                message: 'Authentication required. Please sign in.',
+                hint: 'Use the /auth endpoints to authenticate',
+            });
+        },
+        async shutdown() {
+            // Supertokens doesn't require explicit cleanup
+            initialized = false;
+            initializationError = null;
+        },
+    };
+}
+//# sourceMappingURL=supertokens-adapter.js.map

package/dist/plugins/auth/adapters/supertokens-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supertokens-adapter.js","sourceRoot":"","sources":["../../../../src/plugins/auth/adapters/supertokens-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,8CAA8C;AAC9C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AASlD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAgC;IACjE,6BAA6B;IAC7B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,mBAAmB,GAAiB,IAAI,CAAC;IAE7C,OAAO;QACL,IAAI,EAAE,aAAa;QAEnB,UAAU;YACR,wDAAwD;YACxD,MAAM,cAAc,GAAmB,KAAK,EAC1C,GAAY,EACZ,GAAa,EACb,IAA6B,EAC7B,EAAE;gBACF,uDAAuD;gBACtD,GAAkC,CAAC,eAAe,CAAC,GAAG,GAAG,CAAC;gBAE3D,yCAAyC;gBACzC,IAAI,mBAAmB,EAAE,CAAC;oBACxB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBAC1B,KAAK,EAAE,0BAA0B;wBACjC,OAAO,EACL,wGAAwG;wBAC1G,OAAO,EAAE,mBAAmB,CAAC,OAAO;qBACrC,CAAC,CAAC;gBACL,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,IAAI,CAAC;wBACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;wBACrD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;wBAChE,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;wBAC5E,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;wBAEtE,iEAAiE;wBACjE,8DAA8D;wBAC9D,MAAM,UAAU,GAAU,EAAE,CAAC;wBAE7B,sDAAsD;wBACtD,IAAI,MAAM,CAAC,mBAAmB,KAAK,KAAK,EAAE,CAAC;4BACzC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;wBAChD,CAAC;wBAED,2DAA2D;wBAC3D,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;4BAC3B,qEAAqE;4BACrE,8DAA8D;4BAC9D,MAAM,SAAS,GAAU,EAAE,CAAC;4BAE5B,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;gCAClC,SAAS,CAAC,IAAI,CAAC;oCACb,MAAM,EAAE;wCACN,YAAY,EAAE,QAAQ;wCACtB,OAAO,EAAE;4CACP;gDACE,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ;gDAChD,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY;6CACzD;yCACF;qCACF;iCACF,CAAC,CAAC;4BACL,CAAC;4BAED,IAAI,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;gCACjC,mEAAmE;gCACnE,SAAS,CAAC,IAAI,CAAC;oCACb,MAAM,EAAE;wCACN,YAAY,EAAE,OAAO;wCACrB,OAAO,EAAE;4CACP;gDACE,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ;gDAC/C,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY;gDACvD,gBAAgB,EAAE;oDAChB,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK;oDACzC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM;iDAC5C;6CACF;yCACF;qCACF;iCACF,CAAC,CAAC;4BACL,CAAC;4BAED,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;gCAClC,SAAS,CAAC,IAAI,CAAC;oCACb,MAAM,EAAE;wCACN,YAAY,EAAE,QAAQ;wCACtB,OAAO,EAAE;4CACP;gDACE,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ;gDAChD,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY;6CACzD;yCACF;qCACF;iCACF,CAAC,CAAC;4BACL,CAAC;4BAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCACzB,UAAU,CAAC,IAAI,CACb,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;oCACtB,kBAAkB,EAAE;wCAClB,SAAS;qCACV;iCACF,CAAC,CACH,CAAC;4BACJ,CAAC;wBACH,CAAC;wBAED,4BAA4B;wBAC5B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;wBAExC,yBAAyB;wBACzB,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;4BACvB,SAAS,EAAE,SAAS;4BACpB,WAAW,EAAE;gCACX,aAAa,EAAE,MAAM,CAAC,aAAa;gCACnC,MAAM,EAAE,MAAM,CAAC,MAAM;6BACtB;4BACD,OAAO,EAAE;gCACP,OAAO,EAAE,MAAM,CAAC,OAAO;gCACvB,SAAS,EAAE,MAAM,CAAC,SAAS;gCAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;gCACnC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,OAAO;gCAC1C,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,OAAO;6BACnD;4BACD,UAAU;yBACX,CAAC,CAAC;wBAEH,WAAW,GAAG,IAAI,CAAC;oBACrB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,mBAAmB;4BACjB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;wBACjF,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;wBACnE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;4BAC1B,KAAK,EAAE,0BAA0B;4BACjC,OAAO,EACL,wGAAwG;4BAC1G,OAAO,EAAE,mBAAmB,CAAC,OAAO;yBACrC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,IAAI,EAAE,CAAC;YACT,CAAC,CAAC;YAEF,kDAAkD;YAClD,MAAM,qBAAqB,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBACrE,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;oBAC1E,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,EAAE,CAAC;gBACT,CAAC;YACH,CAAC,CAAC;YAEF,OAAO,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;QACjD,CAAC;QAED,eAAe,CAAC,GAAY;YAC1B,MAAM,MAAM,GAAG,GAAiC,CAAC;YAEjD,6CAA6C;YAC7C,IAAI,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,yCAAyC;YACzC,IAAI,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,oEAAoE;YACpE,uCAAuC;YACvC,2DAA2D;YAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;YACzC,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;YAE3C,wDAAwD;YACxD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,MAAM,cAAc,GAAG,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;YAEzD,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,YAAY,IAAI,cAAc,CAAC,CAAC;QAC3D,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,GAAY;YACxB,MAAM,MAAM,GAAG,GAAiC,CAAC;YAEjD,kCAAkC;YAClC,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC5C,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,UAAU,CAAC;YACpB,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,+CAA+C;YAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;gBAC3E,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;gBAChE,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAErD,0EAA0E;gBAC1E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE;oBACzD,eAAe,EAAE,KAAK;iBACvB,CAAC,CAAC;gBAEH,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,0CAA0C;gBAC1C,MAAM,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC;gBAEtC,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;gBAEnC,iCAAiC;gBACjC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAE3D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,2DAA2D;gBAC3D,MAAM,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAa,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC;gBAExD,4CAA4C;gBAC5C,MAAM,IAAI,GAAsB;oBAC9B,EAAE,EAAE,MAAM;oBACV,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;oBACjC,IAAI,EACF,kBAAkB,EAAE,IAAI;wBACxB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM;wBAChC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACrC,OAAO,EAAE,kBAAkB,EAAE,OAAO;oBACpC,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;oBAClD,KAAK;oBACL,GAAG,EAAE;wBACH,GAAG,QAAQ;wBACX,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE;wBAClC,kBAAkB;qBACQ;iBAC7B,CAAC;gBAEF,0BAA0B;gBAC1B,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;gBAEhC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBACjE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,GAAY,EAAE,KAAe;YACpC,MAAM,MAAM,GAAG,GAAiC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI,EAAE,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC/B,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,cAAc,CAAC,IAAa;YAC1B,sDAAsD;YACtD,yCAAyC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,cAAc,CAAC,IAAa,EAAE,GAAa;YACzC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,0CAA0C;gBACnD,IAAI,EAAE,yCAAyC;aAChD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,QAAQ;YACZ,+CAA+C;YAC/C,WAAW,GAAG,KAAK,CAAC;YACpB,mBAAmB,GAAG,IAAI,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/auth/env-config.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Auth Plugin Environment Configuration
+ *
+ * Factory function and utilities for configuring auth adapters via environment variables.
+ * Supports all adapters: Auth0, Supabase, Supertokens, Basic.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import type { Plugin } from '../../core/plugin-registry.js';
+import type { Auth0AdapterConfig, SupabaseAdapterConfig, SupertokensAdapterConfig, BasicAdapterConfig, AuthEnvPluginOptions, AuthConfigStatus } from './types.js';
+/**
+ * Get an environment variable, treating empty strings as undefined
+ */
+declare function getEnv(key: string): string | undefined;
+/**
+ * Parse a boolean environment variable
+ * Supports: true/false, 1/0, yes/no (case-insensitive)
+ */
+declare function getEnvBool(key: string, defaultValue: boolean): boolean;
+/**
+ * Parse a comma-separated list environment variable
+ */
+declare function getEnvList(key: string): string[] | undefined;
+/**
+ * Mask a sensitive value for display
+ */
+declare function maskValue(value: string): string;
+interface EnvParseResult<T> {
+    config: T | null;
+    errors: string[];
+}
+/**
+ * Parse Supertokens configuration from environment variables
+ */
+declare function parseSupertokensEnv(): EnvParseResult<SupertokensAdapterConfig>;
+/**
+ * Parse Auth0 configuration from environment variables
+ */
+declare function parseAuth0Env(): EnvParseResult<Auth0AdapterConfig>;
+/**
+ * Parse Supabase configuration from environment variables
+ */
+declare function parseSupabaseEnv(): EnvParseResult<SupabaseAdapterConfig>;
+/**
+ * Parse Basic Auth configuration from environment variables
+ */
+declare function parseBasicAuthEnv(): EnvParseResult<BasicAdapterConfig>;
+/**
+ * Create an auth plugin configured from environment variables.
+ *
+ * The plugin state depends on environment configuration:
+ * - **disabled**: AUTH_ADAPTER not set - no authentication middleware is applied
+ * - **enabled**: Valid configuration - adapter is active and working
+ * - **error**: Invalid configuration - plugin is disabled with error details
+ *
+ * @example
+ * ```typescript
+ * // Zero-config setup - reads everything from env vars
+ * const authPlugin = createAuthPluginFromEnv();
+ *
+ * // With overrides
+ * const authPlugin = createAuthPluginFromEnv({
+ *   excludePaths: ['/health', '/metrics'],
+ *   authRequired: true,
+ * });
+ * ```
+ *
+ * @param options - Optional overrides (env vars take precedence for adapter config)
+ * @returns A Plugin instance
+ */
+export declare function createAuthPluginFromEnv(options?: AuthEnvPluginOptions): Plugin;
+/**
+ * Get current auth plugin status
+ */
+export declare function getAuthStatus(): AuthConfigStatus;
+export declare const __testing: {
+    parseSupertokensEnv: typeof parseSupertokensEnv;
+    parseAuth0Env: typeof parseAuth0Env;
+    parseSupabaseEnv: typeof parseSupabaseEnv;
+    parseBasicAuthEnv: typeof parseBasicAuthEnv;
+    getEnv: typeof getEnv;
+    getEnvBool: typeof getEnvBool;
+    getEnvList: typeof getEnvList;
+    maskValue: typeof maskValue;
+    VALID_ADAPTERS: readonly ["supertokens", "auth0", "supabase", "basic"];
+};
+export {};
+//# sourceMappingURL=env-config.d.ts.map

package/dist/plugins/auth/env-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-config.d.ts","sourceRoot":"","sources":["../../../src/plugins/auth/env-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,+BAA+B,CAAC;AAC1F,OAAO,KAAK,EAEV,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAoBpB;;GAEG;AACH,iBAAS,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM/C;AAED;;;GAGG;AACH,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAa/D;AAED;;GAEG;AACH,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CASrD;AAED;;GAEG;AACH,iBAAS,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxC;AAMD,UAAU,cAAc,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,iBAAS,mBAAmB,IAAI,cAAc,CAAC,wBAAwB,CAAC,CAoEvE;AAED;;GAEG;AACH,iBAAS,aAAa,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAwC3D;AAED;;GAEG;AACH,iBAAS,gBAAgB,IAAI,cAAc,CAAC,qBAAqB,CAAC,CAoBjE;AAED;;GAEG;AACH,iBAAS,iBAAiB,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAqB/D;AAYD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CA0G9E;AAMD;;GAEG;AACH,wBAAgB,aAAa,IAAI,gBAAgB,CAEhD;AA2ID,eAAO,MAAM,SAAS;;;;;;;;;;CAUrB,CAAC"}