@rblez/authly 0.3.0 → 0.4.0

package/bin/authly.js

@@ -11,7 +11,7 @@ const COMMANDS = {
   init: { description: "Initialize authly in your project", handler: cmdInit },
   ext: { description: "Manage extensions (add, remove)", handler: cmdExt },
   audit: { description: "Check auth configuration for issues", handler: cmdAudit },
-  version: { description: "Show version", handler: () => console.log("0.3.0") },
+  version: { description: "Show version", handler: () => console.log("0.4.0") },
 };
 
 async function main() {

package/dist/dashboard/app.js

@@ -7,11 +7,14 @@ document.addEventListener("DOMContentLoaded", () => {
   const statusText = document.getElementById("statusText");
   const statusDot = document.querySelector(".header__dot");
 
+  // All API calls go to the hosted authly instance
+  const API_URL = "https://authly.rblez.com/api";
+
   checkHealth();
 
   // ── Helpers ─────────────────────────────────────────
   async function api(endpoint, opts = {}) {
-    const res = await fetch(`/api${endpoint}`, {
+    const res = await fetch(`${API_URL}${endpoint}`, {
       headers: { "Content-Type": "application/json" },
       ...opts,
     });
@@ -40,7 +43,7 @@ document.addEventListener("DOMContentLoaded", () => {
   // ── Health ──────────────────────────────────────────
   async function checkHealth() {
     try {
-      const res = await fetch("/api/health");
+      const res = await fetch(`${API_URL}/health`);
       if (res.ok) {
         statusText.textContent = "Connected";
         statusDot.style.background = "#22c55e";

package/dist/dashboard/authorize.html

@@ -54,7 +54,7 @@
 
       <!-- Platform: Connect Supabase (OAuth to Supabase API) -->
       <div class="section-label">Platform connection</div>
-      <a href="/api/auth/supabase/authorize" id="supabasePlatformBtn" class="platform-connect">
+      <a href="https://authly.rblez.com/api/auth/supabase/authorize" id="supabasePlatformBtn" class="platform-connect">
         <img src="https://cdn.simpleicons.org/supabase/fff" width="20" height="20" alt="Supabase" />
         <span class="label">Connect Supabase</span>
         <span class="status" id="sbStatus">Not connected</span>
@@ -68,10 +68,12 @@
   </div>
 
   <script>
+    const API_URL = "https://authly.rblez.com/api";
+
     async function loadProviders() {
       const container = document.getElementById("providerList");
       try {
-        const res = await fetch("/api/providers");
+        const res = await fetch(`${API_URL}/providers`);
         const data = await res.json();
         if (!data.providers) { container.innerHTML = "<p style='color:#555'>&mdash;</p>"; return; }
 
@@ -86,11 +88,10 @@
           </div>`;
         }).join("");
 
-        // Attach click handlers
         container.querySelectorAll(".provider-btn[data-enabled='true']").forEach(el => {
           el.addEventListener("click", () => {
             const provider = el.dataset.provider;
-            window.location.href = `/api/auth/${provider}/authorize`;
+            window.location.href = `${API_URL}/auth/${provider}/authorize`;
           });
         });
       } catch {
@@ -98,14 +99,12 @@
       }
     }
 
-    // Check if Supabase is already connected
     async function checkSupabaseConnected() {
       try {
-        const res = await fetch("/api/health");
+        const res = await fetch(`${API_URL}/health`);
         if (res.ok) {
           document.getElementById("sbStatus").textContent = "Connected";
-          const btn = document.getElementById("supabasePlatformBtn");
-          btn.classList.add("connected");
+          document.getElementById("supabasePlatformBtn").classList.add("connected");
         }
       } catch {}
     }

package/dist/dashboard/index.html

@@ -187,7 +187,7 @@
             <div id="integrationDetail" class="hidden" style="margin-top:12px"></div>
             <div style="margin-top:16px;display:flex;gap:8px;flex-wrap:wrap">
               <button class="btn btn--primary btn--sm" id="reconnectBtn"><i class="ri-refresh-line"></i> Re-scan &amp; reconnect</button>
-              <a href="/api/auth/supabase/authorize" class="btn btn--sm" style="background:#0d1b3e;border:1px solid #1d355e;color:#58a6ff;text-decoration:none" id="connectSbPlatformBtn"><i class="ri-plug-line"></i> Connect via OAuth</a>
+              <a href="https://authly.rblez.com/api/auth/supabase/authorize" target="_blank" class="btn btn--sm" style="background:#0d1b3e;border:1px solid #1d355e;color:#58a6ff;text-decoration:none" id="connectSbPlatformBtn"><i class="ri-plug-line"></i> Connect via OAuth</a>
             </div>
           </div>
         </section>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rblez/authly",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Local auth dashboard for Next.js + Supabase",
   "type": "module",
   "bin": {

package/src/commands/serve.js

@@ -41,6 +41,17 @@ export async function cmdServe() {
 
   const app = new Hono();
 
+  // ── CORS — allow localhost to call the hosted API ──
+  app.use("/api/*", (c) => {
+    c.header("Access-Control-Allow-Origin", "*");
+    c.header("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
+    c.header("Access-Control-Allow-Headers", "Content-Type, Authorization");
+    if (c.req.method === "OPTIONS") {
+      return new Response(null, { status: 204 });
+    }
+    return c.next();
+  });
+
   // ── Static file serving ────────────────────────────
   const dashboardPath = path.join(__dirname, "../../dist/dashboard");
   const hasDashboard = fs.existsSync(dashboardPath);