@rebasepro/auth 0.3.0 → 0.5.0

package/README.md

@@ -0,0 +1,76 @@
+# @rebasepro/auth
+
+Custom JWT authentication adapter for the Rebase backend — React hooks and API utilities for email/password, OAuth, and session management.
+
+## Installation
+
+```bash
+pnpm add @rebasepro/auth
+```
+
+**Peer dependencies:** `react >= 19`, `react-dom >= 19`
+
+## What This Package Does
+
+`@rebasepro/auth` connects the Rebase CMS frontend to the backend's JWT authentication system. It provides a React hook (`useRebaseAuthController`) that manages login, registration, token refresh, session persistence, and user profile updates, plus a lower-level API module for direct HTTP calls to auth endpoints. For the generic `LoginView` and `RebaseAuth` UI components, see `@rebasepro/core`.
+
+## Key Exports
+
+### Hooks
+
+| Export | Description |
+|---|---|
+| `useRebaseAuthController` | Main auth hook — returns a `RebaseAuthController` with login, register, logout, token refresh, session management, and profile methods. Accepts `RebaseAuthControllerProps`. |
+| `useBackendUserManagement` | Hook for admin-level user CRUD (list, create, update, delete users). Returns a `UserManagement` interface. Accepts `BackendUserManagementConfig`. |
+
+### Types
+
+| Export | Description |
+|---|---|
+| `RebaseAuthController` | Extends the base `AuthController` with email/password login, Google login, generic OAuth, registration, password reset/change, session management, and profile updates. |
+| `RebaseAuthControllerProps` | Config for `useRebaseAuthController` — `client`, `apiUrl`, `googleClientId`, `onSignOut`, `defineRolesFor`. |
+| `AuthTokens` | `{ accessToken, refreshToken, accessTokenExpiresAt }` |
+| `UserInfo` | `{ uid, email, displayName, photoURL, emailVerified, roles, metadata }` |
+| `AuthResponse` | `{ user: UserInfo, tokens: AuthTokens }` |
+| `RefreshResponse` | `{ tokens: AuthTokens }` |
+| `BackendUserManagementConfig` | Config for `useBackendUserManagement`. |
+| `UserManagement` | Interface returned by `useBackendUserManagement`. |
+
+### API Utilities
+
+| Export | Description |
+|---|---|
+| `setApiUrl(url)` | Set the base API URL for all auth requests |
+| `getApiUrl()` | Get the current base API URL |
+| `fetchAuthConfig()` | Fetch auth config from `/api/auth/config` (cached, deduplicated) |
+| `AuthApiError` | Error class with `message` and `code` fields |
+| `AuthConfigResponse` | Type — `{ needsSetup, registrationEnabled, emailServiceEnabled, passwordReset, emailVerification, enabledProviders }` |
+
+## Quick Start
+
+```tsx
+import { useRebaseAuthController } from "@rebasepro/auth";
+import { createRebaseClient } from "@rebasepro/client";
+
+const client = createRebaseClient({ baseUrl: "http://localhost:3001" });
+
+function App() {
+    const authController = useRebaseAuthController({
+        client,
+        apiUrl: "http://localhost:3001",
+    });
+
+    // authController.emailPasswordLogin(email, password)
+    // authController.googleLogin({ idToken })
+    // authController.register(email, password, displayName)
+    // authController.signOut()
+    // authController.user — current logged-in user or null
+}
+```
+
+## Related Packages
+
+- [`@rebasepro/core`](../core) — `LoginView`, `RebaseAuth` UI components, `AuthController` base type
+- [`@rebasepro/client`](../client) — HTTP client with its own `auth` module for direct API calls
+- [`@rebasepro/types`](../types) — Base `AuthController` and `User` types
+- [`@rebasepro/ui`](../ui) — UI components used by auth views

package/dist/hooks/useBackendUserManagement.d.ts

@@ -1,4 +1,4 @@
-import { Role, User } from "@rebasepro/types";
+import type { User } from "@rebasepro/types";
 /**
  * UserManagement interface - compatible with @rebasepro/user_management
  * Defined inline to avoid dependency on that package
@@ -19,12 +19,9 @@ export interface UserManagement<USER extends User = User> {
         temporaryPassword?: string;
     }>;
     deleteUser: (user: USER) => Promise<void>;
-    roles: Role[];
-    saveRole: (role: Role) => Promise<void>;
-    deleteRole: (role: Role) => Promise<void>;
     isAdmin?: boolean;
     allowDefaultRolesCreation?: boolean;
-    defineRolesFor: (user: User) => Promise<Role[] | undefined> | Role[] | undefined;
+    defineRolesFor: (user: User) => Promise<string[] | undefined> | string[] | undefined;
     getUser: (uid: string) => User | null;
     /**
      * Search users with server-side pagination.
@@ -43,7 +40,6 @@ export interface UserManagement<USER extends User = User> {
         total: number;
     }>;
     usersError?: Error;
-    rolesError?: Error;
     bootstrapAdmin?: () => Promise<void>;
 }
 export interface BackendUserManagementConfig {

package/dist/index.es.js

@@ -425,7 +425,7 @@ function useRebaseAuthController(props = {}) {
     if (defineRolesFor) {
       const customRoles = await defineRolesFor(convertedUser);
       if (customRoles) {
-        convertedUser = { ...convertedUser, roles: customRoles.map((r) => r.id) };
+        convertedUser = { ...convertedUser, roles: customRoles };
       }
     }
     saveAuthToStorage(tokens, userInfo);
@@ -556,7 +556,7 @@ function useRebaseAuthController(props = {}) {
         if (customRoles) {
           convertedUser = {
             ...convertedUser,
-            roles: customRoles.map((r) => r.id)
+            roles: customRoles
           };
         }
       }
@@ -630,7 +630,7 @@ function useRebaseAuthController(props = {}) {
           if (customRoles) {
             userToSet = {
               ...userToSet,
-              roles: customRoles.map((r) => r.id)
+              roles: customRoles
             };
           }
         }
@@ -662,7 +662,7 @@ function useRebaseAuthController(props = {}) {
             if (customRoles) {
               userToSet = {
                 ...userToSet,
-                roles: customRoles.map((r) => r.id)
+                roles: customRoles
               };
             }
           }
@@ -791,18 +791,10 @@ function convertUser(apiUser) {
     createdAt: apiUser.createdAt ? new Date(apiUser.createdAt) : null
   };
 }
-function convertRole(apiRole) {
-  return {
-    id: apiRole.id,
-    name: apiRole.name,
-    isAdmin: apiRole.isAdmin ?? false
-  };
-}
 function useBackendUserManagement(config) {
   const { client, apiUrl, getAuthToken, currentUser } = config;
   const [userCache, setUserCache] = useState(/* @__PURE__ */ new Map());
   const [hasAdminUsers, setHasAdminUsers] = useState(false);
-  const [roles, setRoles] = useState([]);
   const userRoles = currentUser?.roles ?? [];
   const isUserAdmin = userRoles.some((r) => r === "admin" || r === "schema-admin");
   const [loading, setLoading] = useState(() => {
@@ -811,7 +803,6 @@ function useBackendUserManagement(config) {
     return true;
   });
   const [usersError, setUsersError] = useState();
-  const [rolesError, setRolesError] = useState();
   const lastLoadedUidRef = useRef(null);
   const effectiveLoading = loading || !!(currentUser && isUserAdmin && lastLoadedUidRef.current !== currentUser.uid);
   const mergeIntoCache = useCallback((incoming) => {
@@ -892,17 +883,6 @@ function useBackendUserManagement(config) {
     throw lastError;
   }, [apiUrl, getAuthToken]);
   apiRequestRef.current = apiRequest;
-  useCallback(async (signal) => {
-    try {
-      const data = await apiRequest("/roles", "GET", void 0, 6, signal);
-      setRoles(data.roles.map(convertRole));
-      setRolesError(void 0);
-    } catch (error) {
-      if (error instanceof Error && error.name === "AbortError") return;
-      console.error("Failed to load roles:", error);
-      setRolesError(error instanceof Error ? error : new Error(String(error)));
-    }
-  }, [apiRequest]);
   const checkAdminExists = useCallback(async (signal) => {
     try {
       const data = await apiRequest("/users?role=admin&limit=1", "GET", void 0, 6, signal);
@@ -937,21 +917,6 @@ function useBackendUserManagement(config) {
     const load = async () => {
       setLoading(true);
       const request = apiRequestRef.current;
-      try {
-        const data = await request("/roles", "GET", void 0, 6, abortController.signal);
-        setRoles(data.roles.map(convertRole));
-        setRolesError(void 0);
-      } catch (error) {
-        if (error instanceof Error && error.name === "AbortError") return;
-        console.error("Failed to load roles:", error);
-        setRolesError(error instanceof Error ? error : new Error(String(error)));
-        const status = error.status;
-        if (status === 403 || status === 401) {
-          setUsersError(error instanceof Error ? error : new Error(String(error)));
-          setLoading(false);
-          return;
-        }
-      }
       if (!abortController.signal.aborted) {
         try {
           const data = await request("/users?role=admin&limit=1", "GET", void 0, 6, abortController.signal);
@@ -1038,29 +1003,6 @@ function useBackendUserManagement(config) {
       return next;
     });
   }, [apiRequest]);
-  const saveRole = useCallback(async (role) => {
-    const existingRole = roles.find((r) => r.id === role.id);
-    if (existingRole) {
-      const data = await apiRequest(`/roles/${role.id}`, "PUT", {
-        name: role.name,
-        isAdmin: role.isAdmin
-      });
-      const updated = convertRole(data.role);
-      setRoles((prev) => prev.map((r) => r.id === updated.id ? updated : r));
-    } else {
-      const data = await apiRequest("/roles", "POST", {
-        id: role.id,
-        name: role.name,
-        isAdmin: role.isAdmin ?? false
-      });
-      const created = convertRole(data.role);
-      setRoles((prev) => [...prev, created]);
-    }
-  }, [apiRequest, roles]);
-  const deleteRole = useCallback(async (role) => {
-    await apiRequest(`/roles/${role.id}`, "DELETE");
-    setRoles((prev) => prev.filter((r) => r.id !== role.id));
-  }, [apiRequest]);
   const getUser = useCallback((uid) => {
     return userCache.get(uid) ?? null;
   }, [userCache]);
@@ -1076,15 +1018,12 @@ function useBackendUserManagement(config) {
       }
     }
     const userRoleIds = existingUser.roles ?? [];
-    return roles.filter((r) => userRoleIds.includes(r.id));
-  }, [userCache, roles, apiRequest, mergeIntoCache]);
+    return userRoleIds;
+  }, [userCache, apiRequest, mergeIntoCache]);
   const isAdmin = currentUser?.roles?.includes("admin") ?? false;
   const bootstrapAdmin = useCallback(async () => {
     try {
       await apiRequest("/bootstrap", "POST");
-      const data = await apiRequest("/roles");
-      const loadedRoles = data.roles.map(convertRole);
-      setRoles(loadedRoles);
       await checkAdminExists();
     } catch (error) {
       console.error("Failed to bootstrap admin:", error);
@@ -1100,16 +1039,12 @@ function useBackendUserManagement(config) {
     createUser,
     resetPassword: resetPassword2,
     deleteUser,
-    roles,
-    saveRole,
-    deleteRole,
     isAdmin,
     allowDefaultRolesCreation: isAdmin,
     defineRolesFor,
     getUser,
     searchUsers,
     usersError,
-    rolesError,
     bootstrapAdmin
   };
 }