@robelest/convex-auth 0.0.4-preview.24 → 0.0.4-preview.25

package/dist/bin.js

@@ -5682,7 +5682,7 @@ function convexCmd(...subArgs) {
 	};
 }
 const program = new Command().name("@robelest/convex-auth").version(version).description("Add code and set environment variables for @robelest/convex-auth.\n\nFull docs: https://deepwiki.com/robelest/convex-auth");
-program.option("--site-url <url>", "Your frontend app URL (e.g. 'http://localhost:5173' for dev, 'https://myapp.com' for prod)").option("--variables <json>", "Configure additional variables for interactive configuration.").option("--skip-git-check", "Don't warn when running outside a Git checkout.").option("--allow-dirty-git-state", "Don't warn when Git state is not clean.").addDeploymentSelectionOptions(actionDescription("Set environment variables on")).action(async (options) => {
+program.option("--site-url <url>", "Your frontend app URL (e.g. 'http://localhost:5173' for dev, 'https://myapp.com' for prod)").option("--secondary-url <urls>", "Comma-separated additional frontend URLs allowed to share the same auth instance").option("--variables <json>", "Configure additional variables for interactive configuration.").option("--skip-git-check", "Don't warn when running outside a Git checkout.").option("--allow-dirty-git-state", "Don't warn when Git state is not clean.").addDeploymentSelectionOptions(actionDescription("Set environment variables on")).action(async (options) => {
 	Wt("@robelest/convex-auth");
 	await checkSourceControl(options);
 	const packageJson = readPackageJson();
@@ -5700,7 +5700,7 @@ program.option("--site-url <url>", "Your frontend app URL (e.g. 'http://localhos
 		deployment,
 		step: 1
 	};
-	await configureSiteUrl(config, options.siteUrl);
+	await configureSiteUrl(config, options.siteUrl, options.secondaryUrl);
 	await configureKeys(config);
 	await modifyTsConfig(config);
 	await configureConvexConfig(config);
@@ -5710,7 +5710,7 @@ program.option("--site-url <url>", "Your frontend app URL (e.g. 'http://localhos
 	else printFinalSuccessMessage(config);
 	Gt("Done!");
 });
-async function configureSiteUrl(config, forcedValue) {
+async function configureSiteUrl(config, forcedValue, forcedSecondaryValue) {
 	logStep(config, "Configure SITE_URL");
 	if (config.isExpo) {
 		R.info("React Native projects don't require a SITE_URL.");
@@ -5730,9 +5730,27 @@ async function configureSiteUrl(config, forcedValue) {
 		},
 		forcedValue
 	});
+	await configureEnvVar(config, {
+		name: "SECONDARY_URL",
+		description: "additional frontend URLs as a comma-separated list (optional)",
+		validate: (input) => {
+			if (input.trim() === "") return true;
+			for (const candidate of input.split(",").map((url) => url.trim())) {
+				if (candidate === "") continue;
+				try {
+					new URL(candidate);
+				} catch {
+					return "Each URL must start with http:// or https://";
+				}
+			}
+			return true;
+		},
+		forcedValue: forcedSecondaryValue
+	});
 }
 async function configureEnvVar(config, variable) {
 	if (variable.forcedValue && (variable.validate ? variable.validate(variable.forcedValue) : true)) {
+		if (variable.forcedValue.trim() === "") return;
 		await setEnvVar(config, variable.name, variable.forcedValue);
 		return;
 	}
@@ -5744,6 +5762,7 @@ async function configureEnvVar(config, variable) {
 		default: variable.default,
 		validate: variable.validate
 	});
+	if (chosenValue.trim() === "") return;
 	await setEnvVar(config, variable.name, chosenValue);
 }
 async function configureKeys(config) {

package/dist/component/convex.config.d.ts

@@ -1,7 +1,7 @@
-import * as convex_server0 from "convex/server";
+import * as convex_server24 from "convex/server";
 
 //#region src/component/convex.config.d.ts
-declare const component: convex_server0.ComponentDefinition<any>;
+declare const component: convex_server24.ComponentDefinition<any>;
 //#endregion
 export { component as default };
 //# sourceMappingURL=convex.config.d.ts.map

package/dist/component/convex.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"convex.config.d.ts","names":[],"sources":["../../src/component/convex.config.ts"],"mappings":";;;cAEM,SAAA,EAAmC,cAAA,CAA1B,mBAAA"}
+{"version":3,"file":"convex.config.d.ts","names":[],"sources":["../../src/component/convex.config.ts"],"mappings":";;;cAEM,SAAA,EAAmC,eAAA,CAA1B,mBAAA"}

package/dist/component/model.d.ts

@@ -1,73 +1,72 @@
-import * as convex_values474 from "convex/values";
+import * as convex_values121 from "convex/values";
 
 //#region src/component/model.d.ts
-declare const vAuthVerifierDoc: convex_values474.VObject<{
-  sessionId?: convex_values474.GenericId<"Session"> | undefined;
+declare const vAuthVerifierDoc: convex_values121.VObject<{
+  sessionId?: convex_values121.GenericId<"Session"> | undefined;
   signature?: string | undefined;
   _creationTime: number;
-  _id: convex_values474.GenericId<"AuthVerifier">;
+  _id: convex_values121.GenericId<"AuthVerifier">;
 }, {
-  sessionId: convex_values474.VId<convex_values474.GenericId<"Session"> | undefined, "optional">;
-  signature: convex_values474.VString<string | undefined, "optional">;
-  _id: convex_values474.VId<convex_values474.GenericId<"AuthVerifier">, "required">;
-  _creationTime: convex_values474.VFloat64<number, "required">;
-}, "required", "sessionId" | "signature" | "_creationTime" | "_id">;
-declare const vPasskeyDoc: convex_values474.VObject<{
+  sessionId: convex_values121.VId<convex_values121.GenericId<"Session"> | undefined, "optional">;
+  signature: convex_values121.VString<string | undefined, "optional">;
+  _id: convex_values121.VId<convex_values121.GenericId<"AuthVerifier">, "required">;
+  _creationTime: convex_values121.VFloat64<number, "required">;
+}, "required", "_creationTime" | "_id" | "sessionId" | "signature">;
+declare const vPasskeyDoc: convex_values121.VObject<{
   name?: string | undefined;
-  transports?: string[] | undefined;
   lastUsedAt?: number | undefined;
-  userId: convex_values474.GenericId<"User">;
+  transports?: string[] | undefined;
   _creationTime: number;
+  userId: convex_values121.GenericId<"User">;
+  createdAt: number;
+  _id: convex_values121.GenericId<"Passkey">;
   credentialId: string;
   publicKey: ArrayBuffer;
   algorithm: number;
   counter: number;
   deviceType: string;
   backedUp: boolean;
-  createdAt: number;
-  _id: convex_values474.GenericId<"Passkey">;
 }, {
-  userId: convex_values474.VId<convex_values474.GenericId<"User">, "required">;
-  credentialId: convex_values474.VString<string, "required">;
-  publicKey: convex_values474.VBytes<ArrayBuffer, "required">;
-  algorithm: convex_values474.VFloat64<number, "required">;
-  counter: convex_values474.VFloat64<number, "required">;
-  transports: convex_values474.VArray<string[] | undefined, convex_values474.VString<string, "required">, "optional">;
-  deviceType: convex_values474.VString<string, "required">;
-  backedUp: convex_values474.VBoolean<boolean, "required">;
-  name: convex_values474.VString<string | undefined, "optional">;
-  createdAt: convex_values474.VFloat64<number, "required">;
-  lastUsedAt: convex_values474.VFloat64<number | undefined, "optional">;
-  _id: convex_values474.VId<convex_values474.GenericId<"Passkey">, "required">;
-  _creationTime: convex_values474.VFloat64<number, "required">;
-}, "required", "name" | "userId" | "_creationTime" | "credentialId" | "publicKey" | "algorithm" | "counter" | "transports" | "deviceType" | "backedUp" | "createdAt" | "lastUsedAt" | "_id">;
-declare const vTotpFactorDoc: convex_values474.VObject<{
+  userId: convex_values121.VId<convex_values121.GenericId<"User">, "required">;
+  credentialId: convex_values121.VString<string, "required">;
+  publicKey: convex_values121.VBytes<ArrayBuffer, "required">;
+  algorithm: convex_values121.VFloat64<number, "required">;
+  counter: convex_values121.VFloat64<number, "required">;
+  transports: convex_values121.VArray<string[] | undefined, convex_values121.VString<string, "required">, "optional">;
+  deviceType: convex_values121.VString<string, "required">;
+  backedUp: convex_values121.VBoolean<boolean, "required">;
+  name: convex_values121.VString<string | undefined, "optional">;
+  createdAt: convex_values121.VFloat64<number, "required">;
+  lastUsedAt: convex_values121.VFloat64<number | undefined, "optional">;
+  _id: convex_values121.VId<convex_values121.GenericId<"Passkey">, "required">;
+  _creationTime: convex_values121.VFloat64<number, "required">;
+}, "required", "_creationTime" | "name" | "lastUsedAt" | "userId" | "createdAt" | "_id" | "credentialId" | "publicKey" | "algorithm" | "counter" | "transports" | "deviceType" | "backedUp">;
+declare const vTotpFactorDoc: convex_values121.VObject<{
   name?: string | undefined;
   lastUsedAt?: number | undefined;
-  userId: convex_values474.GenericId<"User">;
-  secret: ArrayBuffer;
   _creationTime: number;
+  userId: convex_values121.GenericId<"User">;
   createdAt: number;
+  _id: convex_values121.GenericId<"TotpFactor">;
+  secret: ArrayBuffer;
   digits: number;
   period: number;
   verified: boolean;
-  _id: convex_values474.GenericId<"TotpFactor">;
 }, {
-  userId: convex_values474.VId<convex_values474.GenericId<"User">, "required">;
-  secret: convex_values474.VBytes<ArrayBuffer, "required">;
-  digits: convex_values474.VFloat64<number, "required">;
-  period: convex_values474.VFloat64<number, "required">;
-  verified: convex_values474.VBoolean<boolean, "required">;
-  name: convex_values474.VString<string | undefined, "optional">;
-  createdAt: convex_values474.VFloat64<number, "required">;
-  lastUsedAt: convex_values474.VFloat64<number | undefined, "optional">;
-  _id: convex_values474.VId<convex_values474.GenericId<"TotpFactor">, "required">;
-  _creationTime: convex_values474.VFloat64<number, "required">;
-}, "required", "name" | "userId" | "secret" | "_creationTime" | "createdAt" | "lastUsedAt" | "digits" | "period" | "verified" | "_id">;
-declare const vApiKeyDoc: convex_values474.VObject<{
+  userId: convex_values121.VId<convex_values121.GenericId<"User">, "required">;
+  secret: convex_values121.VBytes<ArrayBuffer, "required">;
+  digits: convex_values121.VFloat64<number, "required">;
+  period: convex_values121.VFloat64<number, "required">;
+  verified: convex_values121.VBoolean<boolean, "required">;
+  name: convex_values121.VString<string | undefined, "optional">;
+  createdAt: convex_values121.VFloat64<number, "required">;
+  lastUsedAt: convex_values121.VFloat64<number | undefined, "optional">;
+  _id: convex_values121.VId<convex_values121.GenericId<"TotpFactor">, "required">;
+  _creationTime: convex_values121.VFloat64<number, "required">;
+}, "required", "_creationTime" | "name" | "lastUsedAt" | "userId" | "createdAt" | "_id" | "secret" | "digits" | "period" | "verified">;
+declare const vApiKeyDoc: convex_values121.VObject<{
   lastUsedAt?: number | undefined;
   expiresAt?: number | undefined;
-  metadata?: any;
   rateLimit?: {
     maxRequests: number;
     windowMs: number;
@@ -76,78 +75,79 @@ declare const vApiKeyDoc: convex_values474.VObject<{
     attemptsLeft: number;
     lastAttemptTime: number;
   } | undefined;
-  name: string;
-  userId: convex_values474.GenericId<"User">;
+  metadata?: any;
   _creationTime: number;
-  createdAt: number;
+  name: string;
   revoked: boolean;
+  userId: convex_values121.GenericId<"User">;
   prefix: string;
   hashedKey: string;
   scopes: {
     resource: string;
     actions: string[];
   }[];
-  _id: convex_values474.GenericId<"ApiKey">;
+  createdAt: number;
+  _id: convex_values121.GenericId<"ApiKey">;
 }, {
-  userId: convex_values474.VId<convex_values474.GenericId<"User">, "required">;
-  prefix: convex_values474.VString<string, "required">;
-  hashedKey: convex_values474.VString<string, "required">;
-  name: convex_values474.VString<string, "required">;
-  scopes: convex_values474.VArray<{
+  userId: convex_values121.VId<convex_values121.GenericId<"User">, "required">;
+  prefix: convex_values121.VString<string, "required">;
+  hashedKey: convex_values121.VString<string, "required">;
+  name: convex_values121.VString<string, "required">;
+  scopes: convex_values121.VArray<{
     resource: string;
     actions: string[];
-  }[], convex_values474.VObject<{
+  }[], convex_values121.VObject<{
     resource: string;
     actions: string[];
   }, {
-    resource: convex_values474.VString<string, "required">;
-    actions: convex_values474.VArray<string[], convex_values474.VString<string, "required">, "required">;
+    resource: convex_values121.VString<string, "required">;
+    actions: convex_values121.VArray<string[], convex_values121.VString<string, "required">, "required">;
   }, "required", "resource" | "actions">, "required">;
-  rateLimit: convex_values474.VObject<{
+  rateLimit: convex_values121.VObject<{
     maxRequests: number;
     windowMs: number;
   } | undefined, {
-    maxRequests: convex_values474.VFloat64<number, "required">;
-    windowMs: convex_values474.VFloat64<number, "required">;
+    maxRequests: convex_values121.VFloat64<number, "required">;
+    windowMs: convex_values121.VFloat64<number, "required">;
   }, "optional", "maxRequests" | "windowMs">;
-  rateLimitState: convex_values474.VObject<{
+  rateLimitState: convex_values121.VObject<{
     attemptsLeft: number;
     lastAttemptTime: number;
   } | undefined, {
-    attemptsLeft: convex_values474.VFloat64<number, "required">;
-    lastAttemptTime: convex_values474.VFloat64<number, "required">;
+    attemptsLeft: convex_values121.VFloat64<number, "required">;
+    lastAttemptTime: convex_values121.VFloat64<number, "required">;
   }, "optional", "attemptsLeft" | "lastAttemptTime">;
-  expiresAt: convex_values474.VFloat64<number | undefined, "optional">;
-  lastUsedAt: convex_values474.VFloat64<number | undefined, "optional">;
-  createdAt: convex_values474.VFloat64<number, "required">;
-  revoked: convex_values474.VBoolean<boolean, "required">;
-  metadata: convex_values474.VAny<any, "optional", string>;
-  _id: convex_values474.VId<convex_values474.GenericId<"ApiKey">, "required">;
-  _creationTime: convex_values474.VFloat64<number, "required">;
-}, "required", "name" | "userId" | "_creationTime" | "createdAt" | "lastUsedAt" | "expiresAt" | "revoked" | "metadata" | `metadata.${string}` | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | "_id">;
-declare const vDeviceCodeDoc: convex_values474.VObject<{
-  userId?: convex_values474.GenericId<"User"> | undefined;
-  sessionId?: convex_values474.GenericId<"Session"> | undefined;
+  expiresAt: convex_values121.VFloat64<number | undefined, "optional">;
+  lastUsedAt: convex_values121.VFloat64<number | undefined, "optional">;
+  createdAt: convex_values121.VFloat64<number, "required">;
+  revoked: convex_values121.VBoolean<boolean, "required">;
+  metadata: convex_values121.VAny<any, "optional", string>;
+  _id: convex_values121.VId<convex_values121.GenericId<"ApiKey">, "required">;
+  _creationTime: convex_values121.VFloat64<number, "required">;
+}, "required", "_creationTime" | "name" | "revoked" | "lastUsedAt" | "expiresAt" | "userId" | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "createdAt" | "metadata" | "_id" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | `metadata.${string}`>;
+declare const vDeviceCodeDoc: convex_values121.VObject<{
+  userId?: convex_values121.GenericId<"User"> | undefined;
+  sessionId?: convex_values121.GenericId<"Session"> | undefined;
   lastPolledAt?: number | undefined;
-  status: "pending" | "authorized" | "denied";
   _creationTime: number;
+  status: "pending" | "authorized" | "denied";
+  expiresAt: number;
+  _id: convex_values121.GenericId<"DeviceCode">;
   deviceCodeHash: string;
   userCode: string;
-  expiresAt: number;
   interval: number;
-  _id: convex_values474.GenericId<"DeviceCode">;
 }, {
-  deviceCodeHash: convex_values474.VString<string, "required">;
-  userCode: convex_values474.VString<string, "required">;
-  expiresAt: convex_values474.VFloat64<number, "required">;
-  interval: convex_values474.VFloat64<number, "required">;
-  status: convex_values474.VUnion<"pending" | "authorized" | "denied", [convex_values474.VLiteral<"pending", "required">, convex_values474.VLiteral<"authorized", "required">, convex_values474.VLiteral<"denied", "required">], "required", never>;
-  userId: convex_values474.VId<convex_values474.GenericId<"User"> | undefined, "optional">;
-  sessionId: convex_values474.VId<convex_values474.GenericId<"Session"> | undefined, "optional">;
-  lastPolledAt: convex_values474.VFloat64<number | undefined, "optional">;
-  _id: convex_values474.VId<convex_values474.GenericId<"DeviceCode">, "required">;
-  _creationTime: convex_values474.VFloat64<number, "required">;
-}, "required", "status" | "userId" | "sessionId" | "_creationTime" | "deviceCodeHash" | "userCode" | "expiresAt" | "interval" | "lastPolledAt" | "_id">;
+  deviceCodeHash: convex_values121.VString<string, "required">;
+  userCode: convex_values121.VString<string, "required">;
+  expiresAt: convex_values121.VFloat64<number, "required">;
+  interval: convex_values121.VFloat64<number, "required">;
+  status: convex_values121.VUnion<"pending" | "authorized" | "denied", [convex_values121.VLiteral<"pending", "required">, convex_values121.VLiteral<"authorized", "required">, convex_values121.VLiteral<"denied", "required">], "required", never>;
+  userId: convex_values121.VId<convex_values121.GenericId<"User"> | undefined, "optional">;
+  sessionId: convex_values121.VId<convex_values121.GenericId<"Session"> | undefined, "optional">;
+  lastPolledAt: convex_values121.VFloat64<number | undefined, "optional">;
+  _id: convex_values121.VId<convex_values121.GenericId<"DeviceCode">, "required">;
+  _creationTime: convex_values121.VFloat64<number, "required">;
+}, "required", "_creationTime" | "status" | "expiresAt" | "userId" | "_id" | "sessionId" | "deviceCodeHash" | "userCode" | "interval" | "lastPolledAt">;
 //#endregion
 export { vApiKeyDoc, vAuthVerifierDoc, vDeviceCodeDoc, vPasskeyDoc, vTotpFactorDoc };
 //# sourceMappingURL=model.d.ts.map

package/dist/component/providers/passkey.d.ts

@@ -18,7 +18,7 @@ interface PasskeyConfig {
   rpName?: string;
   /** Relying Party ID (hostname). Defaults to SITE_URL hostname. */
   rpId?: string;
-  /** Allowed origins for credential verification. Defaults to SITE_URL. */
+  /** Allowed origins for credential verification. Defaults to SITE_URL plus SECONDARY_URL. */
   origin?: string | string[];
   /** Attestation conveyance preference. Defaults to "none". */
   attestation?: "none" | "direct";