@rudderjs/socialite 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Suleiman Shahbari
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,107 @@
+# @rudderjs/socialite
+
+OAuth authentication for RudderJS. Built-in providers: GitHub, Google, Facebook, Apple. Extensible with custom providers.
+
+## Installation
+
+```bash
+pnpm add @rudderjs/socialite
+```
+
+## Setup
+
+```ts
+// config/socialite.ts
+import { Env } from '@rudderjs/core'
+
+export default {
+  github: {
+    clientId:     Env.get('GITHUB_CLIENT_ID', ''),
+    clientSecret: Env.get('GITHUB_CLIENT_SECRET', ''),
+    redirectUrl:  Env.get('GITHUB_REDIRECT_URL', 'http://localhost:3000/auth/github/callback'),
+  },
+  google: {
+    clientId:     Env.get('GOOGLE_CLIENT_ID', ''),
+    clientSecret: Env.get('GOOGLE_CLIENT_SECRET', ''),
+    redirectUrl:  Env.get('GOOGLE_REDIRECT_URL', 'http://localhost:3000/auth/google/callback'),
+  },
+}
+
+// bootstrap/providers.ts
+import { socialite } from '@rudderjs/socialite'
+export default [..., socialite(configs.socialite)]
+```
+
+## Usage
+
+```ts
+import { Socialite } from '@rudderjs/socialite'
+import { Auth } from '@rudderjs/auth'
+
+// Redirect to provider
+Route.get('/auth/github', () => {
+  return Socialite.driver('github').redirect()
+})
+
+// Handle callback
+Route.get('/auth/github/callback', async (req) => {
+  const socialUser = await Socialite.driver('github').user(req)
+
+  socialUser.getId()       // "12345"
+  socialUser.getName()     // "John Doe"
+  socialUser.getEmail()    // "john@example.com"
+  socialUser.getAvatar()   // "https://..."
+  socialUser.getNickname() // "johnd"
+  socialUser.token         // "gho_abc123..."
+
+  // Find or create local user, then login
+  const user = await User.firstOrCreate(
+    { githubId: socialUser.getId() },
+    { name: socialUser.getName(), email: socialUser.getEmail() },
+  )
+  await Auth.login(user)
+  return Response.redirect('/')
+})
+```
+
+## Providers
+
+| Provider | Driver | Auth URL |
+|----------|--------|----------|
+| GitHub | `github` | `github.com/login/oauth/authorize` |
+| Google | `google` | `accounts.google.com/o/oauth2/v2/auth` |
+| Facebook | `facebook` | `facebook.com/v19.0/dialog/oauth` |
+| Apple | `apple` | `appleid.apple.com/auth/authorize` |
+
+## Custom Providers
+
+```ts
+import { SocialiteProvider, SocialUser, Socialite } from '@rudderjs/socialite'
+
+class GitLabProvider extends SocialiteProvider {
+  protected defaultScopes() { return ['read_user'] }
+  protected authUrl()  { return 'https://gitlab.com/oauth/authorize' }
+  protected tokenUrl() { return 'https://gitlab.com/oauth/token' }
+  protected userUrl()  { return 'https://gitlab.com/api/v4/user' }
+
+  protected mapToUser(data: Record<string, unknown>, token: string, refreshToken: string | null) {
+    return new SocialUser({
+      id: String(data['id']), name: data['name'] as string,
+      email: data['email'] as string, avatar: data['avatar_url'] as string,
+      nickname: data['username'] as string, token, refreshToken, raw: data,
+    })
+  }
+}
+
+Socialite.extend('gitlab', (config) => new GitLabProvider(config))
+```
+
+## Scopes
+
+```ts
+// Add scopes
+Socialite.driver('github').withScopes(['repo'])
+
+// Replace scopes entirely
+Socialite.driver('github').setScopes(['read:user'])
+```

package/dist/drivers/apple.d.ts

@@ -0,0 +1,17 @@
+import { SocialiteProvider } from '../provider.js';
+import { SocialUser } from '../social-user.js';
+export declare class AppleProvider extends SocialiteProvider {
+    protected defaultScopes(): string[];
+    protected authUrl(): string;
+    protected tokenUrl(): string;
+    protected userUrl(): string;
+    getRedirectUrl(state?: string): string;
+    protected mapToUser(data: Record<string, unknown>, token: string, refreshToken: string | null): SocialUser;
+    /** Apple sends user data as form POST on callback. Parse the id_token JWT for user info. */
+    user(codeOrRequest: string | {
+        query: Record<string, string>;
+        body?: unknown;
+    }): Promise<SocialUser>;
+    private getIdToken;
+}
+//# sourceMappingURL=apple.d.ts.map

package/dist/drivers/apple.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple.d.ts","sourceRoot":"","sources":["../../src/drivers/apple.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,qBAAa,aAAc,SAAQ,iBAAiB;IAClD,SAAS,CAAC,aAAa,IAAI,MAAM,EAAE;IACnC,SAAS,CAAC,OAAO,IAAK,MAAM;IAC5B,SAAS,CAAC,QAAQ,IAAI,MAAM;IAC5B,SAAS,CAAC,OAAO,IAAK,MAAM;IAE5B,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM;IAYtC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU;IAkB1G,4FAA4F;IACtF,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;YA0B5F,UAAU;CAwBzB"}

package/dist/drivers/apple.js

@@ -0,0 +1,86 @@
+import { SocialiteProvider } from '../provider.js';
+import { SocialUser } from '../social-user.js';
+export class AppleProvider extends SocialiteProvider {
+    defaultScopes() { return ['name', 'email']; }
+    authUrl() { return 'https://appleid.apple.com/auth/authorize'; }
+    tokenUrl() { return 'https://appleid.apple.com/auth/token'; }
+    userUrl() { return ''; } // Apple sends user data in the callback, not a separate endpoint
+    getRedirectUrl(state) {
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            redirect_uri: this.config.redirectUrl,
+            response_type: 'code',
+            response_mode: 'form_post',
+            scope: this.scopes.join(' '),
+            ...(state ? { state } : {}),
+        });
+        return `${this.authUrl()}?${params.toString()}`;
+    }
+    mapToUser(data, token, refreshToken) {
+        // Apple's id_token contains the user info as a JWT
+        const sub = data['sub'] ?? '';
+        const email = data['email'] ?? null;
+        const name = data['name'];
+        return new SocialUser({
+            id: sub,
+            name: name ? [name.firstName, name.lastName].filter(Boolean).join(' ') || null : null,
+            email,
+            avatar: null, // Apple doesn't provide avatars
+            nickname: null,
+            token,
+            refreshToken,
+            raw: data,
+        });
+    }
+    /** Apple sends user data as form POST on callback. Parse the id_token JWT for user info. */
+    async user(codeOrRequest) {
+        const code = typeof codeOrRequest === 'string'
+            ? codeOrRequest
+            : (codeOrRequest.query['code'] ?? codeOrRequest.body?.['code']);
+        if (!code)
+            throw new Error('[RudderJS Socialite] Missing authorization code.');
+        const { accessToken, refreshToken } = await this.getAccessToken(code);
+        // Decode id_token (JWT) for user info — no verification needed here,
+        // Apple's token endpoint is trusted.
+        const idToken = (await this.getIdToken(code)) ?? {};
+        const userData = { ...idToken };
+        // Apple sends user name only on first authorization (as form POST body)
+        if (typeof codeOrRequest !== 'string' && codeOrRequest.body) {
+            const body = codeOrRequest.body;
+            if (body['user']) {
+                const user = typeof body['user'] === 'string' ? JSON.parse(body['user']) : body['user'];
+                userData['name'] = user;
+            }
+        }
+        return this.mapToUser(userData, accessToken, refreshToken);
+    }
+    async getIdToken(code) {
+        try {
+            const res = await fetch(this.tokenUrl(), {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: new URLSearchParams({
+                    client_id: this.config.clientId,
+                    client_secret: this.config.clientSecret,
+                    code,
+                    redirect_uri: this.config.redirectUrl,
+                    grant_type: 'authorization_code',
+                }),
+            });
+            if (!res.ok)
+                return null;
+            const data = await res.json();
+            if (!data.id_token)
+                return null;
+            // Decode JWT payload (base64url)
+            const payload = data.id_token.split('.')[1];
+            if (!payload)
+                return null;
+            return JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=apple.js.map

package/dist/drivers/apple.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple.js","sourceRoot":"","sources":["../../src/drivers/apple.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,MAAM,OAAO,aAAc,SAAQ,iBAAiB;IACxC,aAAa,KAAe,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA,CAAC,CAAC;IACtD,OAAO,KAAc,OAAO,0CAA0C,CAAA,CAAC,CAAC;IACxE,QAAQ,KAAa,OAAO,sCAAsC,CAAA,CAAC,CAAC;IACpE,OAAO,KAAc,OAAO,EAAE,CAAA,CAAC,CAAC,CAAC,iEAAiE;IAE5G,cAAc,CAAC,KAAc;QAC3B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;YACnC,YAAY,EAAG,IAAI,CAAC,MAAM,CAAC,WAAW;YACtC,aAAa,EAAE,MAAM;YACrB,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAU,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACpC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAC,CAAA;QACF,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IACjD,CAAC;IAES,SAAS,CAAC,IAA6B,EAAE,KAAa,EAAE,YAA2B;QAC3F,mDAAmD;QACnD,MAAM,GAAG,GAAM,IAAI,CAAC,KAAK,CAAwB,IAAI,EAAE,CAAA;QACvD,MAAM,KAAK,GAAI,IAAI,CAAC,OAAO,CAAwB,IAAI,IAAI,CAAA;QAC3D,MAAM,IAAI,GAAK,IAAI,CAAC,MAAM,CAA2D,CAAA;QAErF,OAAO,IAAI,UAAU,CAAC;YACpB,EAAE,EAAQ,GAAG;YACb,IAAI,EAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;YACzF,KAAK;YACL,MAAM,EAAI,IAAI,EAAE,gCAAgC;YAChD,QAAQ,EAAE,IAAI;YACd,KAAK;YACL,YAAY;YACZ,GAAG,EAAE,IAAI;SACV,CAAC,CAAA;IACJ,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,IAAI,CAAC,aAAyE;QAClF,MAAM,IAAI,GAAG,OAAO,aAAa,KAAK,QAAQ;YAC5C,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAK,aAAa,CAAC,IAA2C,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAEzG,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;QAE9E,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QAErE,qEAAqE;QACrE,qCAAqC;QACrC,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACnD,MAAM,QAAQ,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAA;QAExD,wEAAwE;QACxE,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,IAA+B,CAAA;YAC1D,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACvF,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;YACzB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;IAC5D,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAY;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,SAAS,EAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;oBACnC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;oBACvC,IAAI;oBACJ,YAAY,EAAG,IAAI,CAAC,MAAM,CAAC,WAAW;oBACtC,UAAU,EAAK,oBAAoB;iBACpC,CAAC;aACH,CAAC,CAAA;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAA;YACxB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA2B,CAAA;YACtD,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAC/B,iCAAiC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3C,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAA;QAClG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF"}

package/dist/drivers/facebook.d.ts

@@ -0,0 +1,10 @@
+import { SocialiteProvider } from '../provider.js';
+import { SocialUser } from '../social-user.js';
+export declare class FacebookProvider extends SocialiteProvider {
+    protected defaultScopes(): string[];
+    protected authUrl(): string;
+    protected tokenUrl(): string;
+    protected userUrl(): string;
+    protected mapToUser(data: Record<string, unknown>, token: string, refreshToken: string | null): SocialUser;
+}
+//# sourceMappingURL=facebook.d.ts.map

package/dist/drivers/facebook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.d.ts","sourceRoot":"","sources":["../../src/drivers/facebook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,qBAAa,gBAAiB,SAAQ,iBAAiB;IACrD,SAAS,CAAC,aAAa,IAAI,MAAM,EAAE;IACnC,SAAS,CAAC,OAAO,IAAK,MAAM;IAC5B,SAAS,CAAC,QAAQ,IAAI,MAAM;IAC5B,SAAS,CAAC,OAAO,IAAK,MAAM;IAE5B,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU;CAa3G"}

package/dist/drivers/facebook.js

@@ -0,0 +1,22 @@
+import { SocialiteProvider } from '../provider.js';
+import { SocialUser } from '../social-user.js';
+export class FacebookProvider extends SocialiteProvider {
+    defaultScopes() { return ['email', 'public_profile']; }
+    authUrl() { return 'https://www.facebook.com/v19.0/dialog/oauth'; }
+    tokenUrl() { return 'https://graph.facebook.com/v19.0/oauth/access_token'; }
+    userUrl() { return 'https://graph.facebook.com/v19.0/me?fields=id,name,email,picture.type(large)'; }
+    mapToUser(data, token, refreshToken) {
+        const picture = data['picture'];
+        return new SocialUser({
+            id: String(data['id'] ?? ''),
+            name: data['name'] ?? null,
+            email: data['email'] ?? null,
+            avatar: picture?.data?.url ?? null,
+            nickname: null,
+            token,
+            refreshToken,
+            raw: data,
+        });
+    }
+}
+//# sourceMappingURL=facebook.js.map

package/dist/drivers/facebook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.js","sourceRoot":"","sources":["../../src/drivers/facebook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,MAAM,OAAO,gBAAiB,SAAQ,iBAAiB;IAC3C,aAAa,KAAe,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA,CAAC,CAAC;IAChE,OAAO,KAAc,OAAO,6CAA6C,CAAA,CAAC,CAAC;IAC3E,QAAQ,KAAa,OAAO,qDAAqD,CAAA,CAAC,CAAC;IACnF,OAAO,KAAc,OAAO,8EAA8E,CAAA,CAAC,CAAC;IAE5G,SAAS,CAAC,IAA6B,EAAE,KAAa,EAAE,YAA2B;QAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAA4C,CAAA;QAC1E,OAAO,IAAI,UAAU,CAAC;YACpB,EAAE,EAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,EAAO,IAAI,CAAC,MAAM,CAAmB,IAAI,IAAI;YACjD,KAAK,EAAM,IAAI,CAAC,OAAO,CAAmB,IAAI,IAAI;YAClD,MAAM,EAAI,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI;YACpC,QAAQ,EAAE,IAAI;YACd,KAAK;YACL,YAAY;YACZ,GAAG,EAAE,IAAI;SACV,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/drivers/github.d.ts

@@ -0,0 +1,15 @@
+import { SocialiteProvider } from '../provider.js';
+import { SocialUser } from '../social-user.js';
+export declare class GitHubProvider extends SocialiteProvider {
+    protected defaultScopes(): string[];
+    protected authUrl(): string;
+    protected tokenUrl(): string;
+    protected userUrl(): string;
+    protected mapToUser(data: Record<string, unknown>, token: string, refreshToken: string | null): SocialUser;
+    /** GitHub may not return email in the user endpoint if it's private. Fetch from /user/emails. */
+    user(codeOrRequest: string | {
+        query: Record<string, string>;
+    }): Promise<SocialUser>;
+    private fetchPrimaryEmail;
+}
+//# sourceMappingURL=github.d.ts.map

package/dist/drivers/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/drivers/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,qBAAa,cAAe,SAAQ,iBAAiB;IACnD,SAAS,CAAC,aAAa,IAAI,MAAM,EAAE;IACnC,SAAS,CAAC,OAAO,IAAK,MAAM;IAC5B,SAAS,CAAC,QAAQ,IAAI,MAAM;IAC5B,SAAS,CAAC,OAAO,IAAK,MAAM;IAE5B,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU;IAa1G,iGAAiG;IAC3F,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;YAoB5E,iBAAiB;CAahC"}

package/dist/drivers/github.js

@@ -0,0 +1,56 @@
+import { SocialiteProvider } from '../provider.js';
+import { SocialUser } from '../social-user.js';
+export class GitHubProvider extends SocialiteProvider {
+    defaultScopes() { return ['read:user', 'user:email']; }
+    authUrl() { return 'https://github.com/login/oauth/authorize'; }
+    tokenUrl() { return 'https://github.com/login/oauth/access_token'; }
+    userUrl() { return 'https://api.github.com/user'; }
+    mapToUser(data, token, refreshToken) {
+        return new SocialUser({
+            id: String(data['id'] ?? ''),
+            name: data['name'] ?? null,
+            email: data['email'] ?? null,
+            avatar: data['avatar_url'] ?? null,
+            nickname: data['login'] ?? null,
+            token,
+            refreshToken,
+            raw: data,
+        });
+    }
+    /** GitHub may not return email in the user endpoint if it's private. Fetch from /user/emails. */
+    async user(codeOrRequest) {
+        const socialUser = await super.user(codeOrRequest);
+        if (!socialUser.getEmail()) {
+            const email = await this.fetchPrimaryEmail(socialUser.token);
+            if (email) {
+                return new SocialUser({
+                    id: socialUser.getId(),
+                    name: socialUser.getName(),
+                    email,
+                    avatar: socialUser.getAvatar(),
+                    nickname: socialUser.getNickname(),
+                    token: socialUser.token,
+                    refreshToken: socialUser.refreshToken,
+                    raw: { ...socialUser.getRaw(), email },
+                });
+            }
+        }
+        return socialUser;
+    }
+    async fetchPrimaryEmail(token) {
+        try {
+            const res = await fetch('https://api.github.com/user/emails', {
+                headers: { 'Authorization': `Bearer ${token}`, 'Accept': 'application/json' },
+            });
+            if (!res.ok)
+                return null;
+            const emails = await res.json();
+            const primary = emails.find(e => e.primary && e.verified);
+            return primary?.email ?? emails[0]?.email ?? null;
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=github.js.map

package/dist/drivers/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/drivers/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,MAAM,OAAO,cAAe,SAAQ,iBAAiB;IACzC,aAAa,KAAe,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA,CAAC,CAAC;IAChE,OAAO,KAAc,OAAO,0CAA0C,CAAA,CAAC,CAAC;IACxE,QAAQ,KAAa,OAAO,6CAA6C,CAAA,CAAC,CAAC;IAC3E,OAAO,KAAc,OAAO,6BAA6B,CAAA,CAAC,CAAC;IAE3D,SAAS,CAAC,IAA6B,EAAE,KAAa,EAAE,YAA2B;QAC3F,OAAO,IAAI,UAAU,CAAC;YACpB,EAAE,EAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,EAAO,IAAI,CAAC,MAAM,CAAmB,IAAI,IAAI;YACjD,KAAK,EAAM,IAAI,CAAC,OAAO,CAAmB,IAAI,IAAI;YAClD,MAAM,EAAK,IAAI,CAAC,YAAY,CAAmB,IAAI,IAAI;YACvD,QAAQ,EAAG,IAAI,CAAC,OAAO,CAAmB,IAAI,IAAI;YAClD,KAAK;YACL,YAAY;YACZ,GAAG,EAAE,IAAI;SACV,CAAC,CAAA;IACJ,CAAC;IAED,iGAAiG;IACjG,KAAK,CAAC,IAAI,CAAC,aAAyD;QAClE,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAClD,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YAC5D,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,IAAI,UAAU,CAAC;oBACpB,EAAE,EAAQ,UAAU,CAAC,KAAK,EAAE;oBAC5B,IAAI,EAAM,UAAU,CAAC,OAAO,EAAE;oBAC9B,KAAK;oBACL,MAAM,EAAI,UAAU,CAAC,SAAS,EAAE;oBAChC,QAAQ,EAAE,UAAU,CAAC,WAAW,EAAE;oBAClC,KAAK,EAAK,UAAU,CAAC,KAAK;oBAC1B,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,GAAG,EAAE,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE;iBACvC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAA;IACnB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,KAAa;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oCAAoC,EAAE;gBAC5D,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,KAAK,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE;aAC9E,CAAC,CAAA;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAA;YACxB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAA8D,CAAA;YAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAA;YACzD,OAAO,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAA;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF"}

package/dist/drivers/google.d.ts

@@ -0,0 +1,10 @@
+import { SocialiteProvider } from '../provider.js';
+import { SocialUser } from '../social-user.js';
+export declare class GoogleProvider extends SocialiteProvider {
+    protected defaultScopes(): string[];
+    protected authUrl(): string;
+    protected tokenUrl(): string;
+    protected userUrl(): string;
+    protected mapToUser(data: Record<string, unknown>, token: string, refreshToken: string | null): SocialUser;
+}
+//# sourceMappingURL=google.d.ts.map

package/dist/drivers/google.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../src/drivers/google.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,qBAAa,cAAe,SAAQ,iBAAiB;IACnD,SAAS,CAAC,aAAa,IAAI,MAAM,EAAE;IACnC,SAAS,CAAC,OAAO,IAAK,MAAM;IAC5B,SAAS,CAAC,QAAQ,IAAI,MAAM;IAC5B,SAAS,CAAC,OAAO,IAAK,MAAM;IAE5B,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU;CAY3G"}

package/dist/drivers/google.js

@@ -0,0 +1,21 @@
+import { SocialiteProvider } from '../provider.js';
+import { SocialUser } from '../social-user.js';
+export class GoogleProvider extends SocialiteProvider {
+    defaultScopes() { return ['openid', 'profile', 'email']; }
+    authUrl() { return 'https://accounts.google.com/o/oauth2/v2/auth'; }
+    tokenUrl() { return 'https://oauth2.googleapis.com/token'; }
+    userUrl() { return 'https://www.googleapis.com/oauth2/v3/userinfo'; }
+    mapToUser(data, token, refreshToken) {
+        return new SocialUser({
+            id: String(data['sub'] ?? ''),
+            name: data['name'] ?? null,
+            email: data['email'] ?? null,
+            avatar: data['picture'] ?? null,
+            nickname: null,
+            token,
+            refreshToken,
+            raw: data,
+        });
+    }
+}
+//# sourceMappingURL=google.js.map

package/dist/drivers/google.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.js","sourceRoot":"","sources":["../../src/drivers/google.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,MAAM,OAAO,cAAe,SAAQ,iBAAiB;IACzC,aAAa,KAAe,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA,CAAC,CAAC;IACnE,OAAO,KAAc,OAAO,8CAA8C,CAAA,CAAC,CAAC;IAC5E,QAAQ,KAAa,OAAO,qCAAqC,CAAA,CAAC,CAAC;IACnE,OAAO,KAAc,OAAO,+CAA+C,CAAA,CAAC,CAAC;IAE7E,SAAS,CAAC,IAA6B,EAAE,KAAa,EAAE,YAA2B;QAC3F,OAAO,IAAI,UAAU,CAAC;YACpB,EAAE,EAAQ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,EAAO,IAAI,CAAC,MAAM,CAAmB,IAAI,IAAI;YACjD,KAAK,EAAM,IAAI,CAAC,OAAO,CAAmB,IAAI,IAAI;YAClD,MAAM,EAAK,IAAI,CAAC,SAAS,CAAmB,IAAI,IAAI;YACpD,QAAQ,EAAE,IAAI;YACd,KAAK;YACL,YAAY;YACZ,GAAG,EAAE,IAAI;SACV,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,35 @@
+import { ServiceProvider, type Application } from '@rudderjs/core';
+import { SocialiteProvider, type SocialiteProviderConfig } from './provider.js';
+export { SocialUser } from './social-user.js';
+export { SocialiteProvider } from './provider.js';
+export { GitHubProvider } from './drivers/github.js';
+export { GoogleProvider } from './drivers/google.js';
+export { FacebookProvider } from './drivers/facebook.js';
+export { AppleProvider } from './drivers/apple.js';
+export type { SocialiteProviderConfig } from './provider.js';
+type ProviderFactory = (config: SocialiteProviderConfig) => SocialiteProvider;
+export declare class Socialite {
+    private static _config;
+    private static _custom;
+    private static _instances;
+    /** Get or create a provider instance by name. */
+    static driver(name: string): SocialiteProvider;
+    /** Register a custom provider driver. */
+    static extend(name: string, factory: ProviderFactory): void;
+    /** @internal — set config from the service provider. */
+    static configure(config: SocialiteConfig): void;
+    /** @internal — reset for testing. */
+    static reset(): void;
+}
+export type SocialiteConfig = Record<string, SocialiteProviderConfig>;
+/**
+ * Returns a SocialiteServiceProvider configured for OAuth.
+ *
+ * Built-in providers: github, google, facebook, apple
+ *
+ * Usage in bootstrap/providers.ts:
+ *   import { socialite } from '@rudderjs/socialite'
+ *   export default [..., socialite(configs.socialite), ...]
+ */
+export declare function socialite(config: SocialiteConfig): new (app: Application) => ServiceProvider;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAQ/E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,YAAY,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAI5D,KAAK,eAAe,GAAG,CAAC,MAAM,EAAE,uBAAuB,KAAK,iBAAiB,CAAA;AAW7E,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAsB;IAC5C,OAAO,CAAC,MAAM,CAAC,OAAO,CAAqC;IAC3D,OAAO,CAAC,MAAM,CAAC,UAAU,CAAuC;IAEhE,iDAAiD;IACjD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB;IAe9C,yCAAyC;IACzC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI;IAI3D,wDAAwD;IACxD,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAK/C,qCAAqC;IACrC,MAAM,CAAC,KAAK,IAAI,IAAI;CAKrB;AAID,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;AAIrE;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,KAAK,GAAG,EAAE,WAAW,KAAK,eAAe,CAW5F"}

package/dist/index.js

@@ -0,0 +1,75 @@
+import { ServiceProvider } from '@rudderjs/core';
+import { GitHubProvider } from './drivers/github.js';
+import { GoogleProvider } from './drivers/google.js';
+import { FacebookProvider } from './drivers/facebook.js';
+import { AppleProvider } from './drivers/apple.js';
+// ─── Re-exports ───────────────────────────────────────────
+export { SocialUser } from './social-user.js';
+export { SocialiteProvider } from './provider.js';
+export { GitHubProvider } from './drivers/github.js';
+export { GoogleProvider } from './drivers/google.js';
+export { FacebookProvider } from './drivers/facebook.js';
+export { AppleProvider } from './drivers/apple.js';
+const builtInDrivers = {
+    github: (c) => new GitHubProvider(c),
+    google: (c) => new GoogleProvider(c),
+    facebook: (c) => new FacebookProvider(c),
+    apple: (c) => new AppleProvider(c),
+};
+// ─── Socialite Facade ─────────────────────────────────────
+export class Socialite {
+    static _config = {};
+    static _custom = new Map();
+    static _instances = new Map();
+    /** Get or create a provider instance by name. */
+    static driver(name) {
+        const existing = this._instances.get(name);
+        if (existing)
+            return existing;
+        const config = this._config[name];
+        if (!config)
+            throw new Error(`[RudderJS Socialite] Provider "${name}" is not configured.`);
+        const factory = this._custom.get(name) ?? builtInDrivers[name];
+        if (!factory)
+            throw new Error(`[RudderJS Socialite] Unknown provider "${name}". Use Socialite.extend() to register custom providers.`);
+        const instance = factory(config);
+        this._instances.set(name, instance);
+        return instance;
+    }
+    /** Register a custom provider driver. */
+    static extend(name, factory) {
+        this._custom.set(name, factory);
+    }
+    /** @internal — set config from the service provider. */
+    static configure(config) {
+        this._config = config;
+        this._instances.clear();
+    }
+    /** @internal — reset for testing. */
+    static reset() {
+        this._config = {};
+        this._custom.clear();
+        this._instances.clear();
+    }
+}
+// ─── Service Provider Factory ─────────────────────────────
+/**
+ * Returns a SocialiteServiceProvider configured for OAuth.
+ *
+ * Built-in providers: github, google, facebook, apple
+ *
+ * Usage in bootstrap/providers.ts:
+ *   import { socialite } from '@rudderjs/socialite'
+ *   export default [..., socialite(configs.socialite), ...]
+ */
+export function socialite(config) {
+    class SocialiteServiceProvider extends ServiceProvider {
+        register() { }
+        async boot() {
+            Socialite.configure(config);
+            this.app.instance('socialite', Socialite);
+        }
+    }
+    return SocialiteServiceProvider;
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAoB,MAAM,gBAAgB,CAAA;AAElE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,6DAA6D;AAE7D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAQlD,MAAM,cAAc,GAAoC;IACtD,MAAM,EAAI,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC;IACtC,MAAM,EAAI,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC;IACxC,KAAK,EAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC;CACtC,CAAA;AAED,6DAA6D;AAE7D,MAAM,OAAO,SAAS;IACZ,MAAM,CAAC,OAAO,GAAoB,EAAE,CAAA;IACpC,MAAM,CAAC,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAA;IACnD,MAAM,CAAC,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAA;IAEhE,iDAAiD;IACjD,MAAM,CAAC,MAAM,CAAC,IAAY;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC1C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAE7B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,sBAAsB,CAAC,CAAA;QAE1F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAA;QAC9D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,yDAAyD,CAAC,CAAA;QAEtI,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACnC,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,yCAAyC;IACzC,MAAM,CAAC,MAAM,CAAC,IAAY,EAAE,OAAwB;QAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACjC,CAAC;IAED,wDAAwD;IACxD,MAAM,CAAC,SAAS,CAAC,MAAuB;QACtC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,qCAAqC;IACrC,MAAM,CAAC,KAAK;QACV,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;QACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;IACzB,CAAC;;AAOH,6DAA6D;AAE7D;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,MAAuB;IAC/C,MAAM,wBAAyB,SAAQ,eAAe;QACpD,QAAQ,KAAU,CAAC;QAEnB,KAAK,CAAC,IAAI;YACR,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YAC3B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC3C,CAAC;KACF;IAED,OAAO,wBAAwB,CAAA;AACjC,CAAC"}

package/dist/provider.d.ts

@@ -0,0 +1,43 @@
+import { SocialUser } from './social-user.js';
+export interface SocialiteProviderConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUrl: string;
+    scopes?: string[];
+}
+export declare abstract class SocialiteProvider {
+    protected readonly config: SocialiteProviderConfig;
+    protected scopes: string[];
+    constructor(config: SocialiteProviderConfig);
+    /** Default scopes for this provider. */
+    protected abstract defaultScopes(): string[];
+    /** OAuth authorize URL (e.g. https://github.com/login/oauth/authorize). */
+    protected abstract authUrl(): string;
+    /** OAuth token URL (e.g. https://github.com/login/oauth/access_token). */
+    protected abstract tokenUrl(): string;
+    /** User info URL (e.g. https://api.github.com/user). */
+    protected abstract userUrl(): string;
+    /** Parse the provider's user API response into a SocialUser. */
+    protected abstract mapToUser(data: Record<string, unknown>, token: string, refreshToken: string | null): SocialUser;
+    /** Add extra scopes. */
+    withScopes(scopes: string[]): this;
+    /** Set scopes (replacing defaults). */
+    setScopes(scopes: string[]): this;
+    /** Get the redirect URL to the OAuth provider. */
+    getRedirectUrl(state?: string): string;
+    /** Redirect the response to the OAuth provider. */
+    redirect(state?: string): Response;
+    /** Exchange the authorization code for an access token. */
+    getAccessToken(code: string): Promise<{
+        accessToken: string;
+        refreshToken: string | null;
+        expiresIn: number | null;
+    }>;
+    /** Get the authenticated user from the OAuth callback. */
+    user(codeOrRequest: string | {
+        query: Record<string, string>;
+    }): Promise<SocialUser>;
+    /** Get the user directly from an access token (e.g. for mobile apps). */
+    getUserByToken(token: string, refreshToken?: string | null): Promise<SocialUser>;
+}
+//# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAI7C,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAM,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAG,MAAM,CAAA;IACpB,MAAM,CAAC,EAAO,MAAM,EAAE,CAAA;CACvB;AAED,8BAAsB,iBAAiB;IAGzB,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB;IAF9D,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;gBAEK,MAAM,EAAE,uBAAuB;IAI9D,wCAAwC;IACxC,SAAS,CAAC,QAAQ,CAAC,aAAa,IAAI,MAAM,EAAE;IAE5C,2EAA2E;IAC3E,SAAS,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM;IAEpC,0EAA0E;IAC1E,SAAS,CAAC,QAAQ,CAAC,QAAQ,IAAI,MAAM;IAErC,wDAAwD;IACxD,SAAS,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM;IAEpC,gEAAgE;IAChE,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU;IAEnH,wBAAwB;IACxB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;IAKlC,uCAAuC;IACvC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;IAKjC,kDAAkD;IAClD,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM;IAWtC,mDAAmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ;IAIlC,2DAA2D;IACrD,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAmC3H,0DAA0D;IACpD,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAW1F,yEAAyE;IACnE,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;CAgBvF"}

package/dist/provider.js

@@ -0,0 +1,89 @@
+export class SocialiteProvider {
+    config;
+    scopes;
+    constructor(config) {
+        this.config = config;
+        this.scopes = config.scopes ?? this.defaultScopes();
+    }
+    /** Add extra scopes. */
+    withScopes(scopes) {
+        this.scopes = [...new Set([...this.scopes, ...scopes])];
+        return this;
+    }
+    /** Set scopes (replacing defaults). */
+    setScopes(scopes) {
+        this.scopes = scopes;
+        return this;
+    }
+    /** Get the redirect URL to the OAuth provider. */
+    getRedirectUrl(state) {
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            redirect_uri: this.config.redirectUrl,
+            response_type: 'code',
+            scope: this.scopes.join(' '),
+            ...(state ? { state } : {}),
+        });
+        return `${this.authUrl()}?${params.toString()}`;
+    }
+    /** Redirect the response to the OAuth provider. */
+    redirect(state) {
+        return Response.redirect(this.getRedirectUrl(state), 302);
+    }
+    /** Exchange the authorization code for an access token. */
+    async getAccessToken(code) {
+        const res = await fetch(this.tokenUrl(), {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Accept': 'application/json',
+            },
+            body: JSON.stringify({
+                client_id: this.config.clientId,
+                client_secret: this.config.clientSecret,
+                code,
+                redirect_uri: this.config.redirectUrl,
+                grant_type: 'authorization_code',
+            }),
+        });
+        if (!res.ok) {
+            const text = await res.text();
+            throw new Error(`[RudderJS Socialite] Token exchange failed: ${res.status} ${text}`);
+        }
+        const data = await res.json();
+        // Some providers return access_token, others return it in different shapes
+        const accessToken = (data['access_token'] ?? data['accessToken']);
+        const refreshToken = (data['refresh_token'] ?? data['refreshToken']);
+        const expiresIn = (data['expires_in'] ?? data['expiresIn']);
+        if (!accessToken) {
+            throw new Error(`[RudderJS Socialite] No access_token in response: ${JSON.stringify(data)}`);
+        }
+        return { accessToken, refreshToken: refreshToken ?? null, expiresIn: expiresIn ?? null };
+    }
+    /** Get the authenticated user from the OAuth callback. */
+    async user(codeOrRequest) {
+        const code = typeof codeOrRequest === 'string'
+            ? codeOrRequest
+            : codeOrRequest.query['code'];
+        if (!code)
+            throw new Error('[RudderJS Socialite] Missing authorization code.');
+        const { accessToken, refreshToken } = await this.getAccessToken(code);
+        return this.getUserByToken(accessToken, refreshToken);
+    }
+    /** Get the user directly from an access token (e.g. for mobile apps). */
+    async getUserByToken(token, refreshToken) {
+        const res = await fetch(this.userUrl(), {
+            headers: {
+                'Authorization': `Bearer ${token}`,
+                'Accept': 'application/json',
+            },
+        });
+        if (!res.ok) {
+            const text = await res.text();
+            throw new Error(`[RudderJS Socialite] User info request failed: ${res.status} ${text}`);
+        }
+        const data = await res.json();
+        return this.mapToUser(data, token, refreshToken ?? null);
+    }
+}
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAWA,MAAM,OAAgB,iBAAiB;IAGN;IAFrB,MAAM,CAAU;IAE1B,YAA+B,MAA+B;QAA/B,WAAM,GAAN,MAAM,CAAyB;QAC5D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAA;IACrD,CAAC;IAiBD,wBAAwB;IACxB,UAAU,CAAC,MAAgB;QACzB,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACvD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,uCAAuC;IACvC,SAAS,CAAC,MAAgB;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,kDAAkD;IAClD,cAAc,CAAC,KAAc;QAC3B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;YACnC,YAAY,EAAG,IAAI,CAAC,MAAM,CAAC,WAAW;YACtC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAU,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACpC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAC,CAAA;QACF,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IACjD,CAAC;IAED,mDAAmD;IACnD,QAAQ,CAAC,KAAc;QACrB,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;IAC3D,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,QAAQ,EAAQ,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;gBACnC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACvC,IAAI;gBACJ,YAAY,EAAG,IAAI,CAAC,MAAM,CAAC,WAAW;gBACtC,UAAU,EAAK,oBAAoB;aACpC,CAAC;SACH,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;YAC7B,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAA;QACtF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAA;QAExD,2EAA2E;QAC3E,MAAM,WAAW,GAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAK,IAAI,CAAC,aAAa,CAAC,CAAuB,CAAA;QACzF,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,CAAuB,CAAA;QAC1F,MAAM,SAAS,GAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAO,IAAI,CAAC,WAAW,CAAC,CAAuB,CAAA;QAEvF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC9F,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,IAAI,IAAI,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,EAAE,CAAA;IAC1F,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,IAAI,CAAC,aAAyD;QAClE,MAAM,IAAI,GAAG,OAAO,aAAa,KAAK,QAAQ;YAC5C,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAE/B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;QAE9E,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACrE,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IACvD,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,YAA4B;QAC9D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE;YACtC,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,KAAK,EAAE;gBAClC,QAAQ,EAAS,kBAAkB;aACpC;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;YAC7B,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAA;QACzF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAA;QACxD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC,CAAA;IAC1D,CAAC;CACF"}

package/dist/social-user.d.ts

@@ -0,0 +1,26 @@
+export declare class SocialUser {
+    private readonly data;
+    constructor(data: {
+        id: string;
+        name: string | null;
+        email: string | null;
+        avatar: string | null;
+        nickname: string | null;
+        token: string;
+        refreshToken?: string | null;
+        expiresIn?: number | null;
+        raw: Record<string, unknown>;
+    });
+    getId(): string;
+    getName(): string | null;
+    getEmail(): string | null;
+    getAvatar(): string | null;
+    getNickname(): string | null;
+    /** The access token from the OAuth provider. */
+    get token(): string;
+    get refreshToken(): string | null;
+    get expiresIn(): number | null;
+    /** Raw user data from the provider's API. */
+    getRaw(): Record<string, unknown>;
+}
+//# sourceMappingURL=social-user.d.ts.map

package/dist/social-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-user.d.ts","sourceRoot":"","sources":["../src/social-user.ts"],"names":[],"mappings":"AAGA,qBAAa,UAAU;IAEnB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE;QACrB,EAAE,EAAQ,MAAM,CAAA;QAChB,IAAI,EAAM,MAAM,GAAG,IAAI,CAAA;QACvB,KAAK,EAAK,MAAM,GAAG,IAAI,CAAA;QACvB,MAAM,EAAI,MAAM,GAAG,IAAI,CAAA;QACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;QACvB,KAAK,EAAK,MAAM,CAAA;QAChB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACzB,GAAG,EAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAClC;IAGH,KAAK,IAAU,MAAM;IACrB,OAAO,IAAQ,MAAM,GAAG,IAAI;IAC5B,QAAQ,IAAO,MAAM,GAAG,IAAI;IAC5B,SAAS,IAAM,MAAM,GAAG,IAAI;IAC5B,WAAW,IAAI,MAAM,GAAG,IAAI;IAE5B,gDAAgD;IAChD,IAAI,KAAK,IAAW,MAAM,CAAuC;IACjE,IAAI,YAAY,IAAI,MAAM,GAAG,IAAI,CAA+C;IAChF,IAAI,SAAS,IAAO,MAAM,GAAG,IAAI,CAA4C;IAE7E,6CAA6C;IAC7C,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAClC"}

package/dist/social-user.js

@@ -0,0 +1,20 @@
+// ─── Social User ──────────────────────────────────────────
+// Normalized user returned by all OAuth providers.
+export class SocialUser {
+    data;
+    constructor(data) {
+        this.data = data;
+    }
+    getId() { return this.data.id; }
+    getName() { return this.data.name; }
+    getEmail() { return this.data.email; }
+    getAvatar() { return this.data.avatar; }
+    getNickname() { return this.data.nickname; }
+    /** The access token from the OAuth provider. */
+    get token() { return this.data.token; }
+    get refreshToken() { return this.data.refreshToken ?? null; }
+    get expiresIn() { return this.data.expiresIn ?? null; }
+    /** Raw user data from the provider's API. */
+    getRaw() { return this.data.raw; }
+}
+//# sourceMappingURL=social-user.js.map

package/dist/social-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-user.js","sourceRoot":"","sources":["../src/social-user.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,mDAAmD;AAEnD,MAAM,OAAO,UAAU;IAEF;IADnB,YACmB,IAUhB;QAVgB,SAAI,GAAJ,IAAI,CAUpB;IACA,CAAC;IAEJ,KAAK,KAAyB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA,CAAC,CAAC;IACnD,OAAO,KAAwB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA,CAAC,CAAC;IACtD,QAAQ,KAAuB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA,CAAC,CAAC;IACvD,SAAS,KAAsB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAA,CAAC,CAAC;IACxD,WAAW,KAAoB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAA,CAAC,CAAC;IAE1D,gDAAgD;IAChD,IAAI,KAAK,KAAgC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA,CAAC,CAAC;IACjE,IAAI,YAAY,KAAyB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAA,CAAC,CAAC;IAChF,IAAI,SAAS,KAA4B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAA,CAAC,CAAC;IAE7E,6CAA6C;IAC7C,MAAM,KAA8B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA,CAAC,CAAC;CAC3D"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@rudderjs/socialite",
+  "version": "0.0.1",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/rudderjs/rudder",
+    "directory": "packages/socialite"
+  },
+  "type": "module",
+  "files": [
+    "dist"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "dependencies": {
+    "@rudderjs/core": "0.0.8"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.4.0"
+  },
+  "author": "Suleiman Shahbari",
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsc -p tsconfig.build.json --watch",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src",
+    "clean": "rm -rf dist",
+    "test": "tsc -p tsconfig.test.json && node --test dist-test/index.test.js; EXIT=$?; rm -rf dist-test; exit $EXIT"
+  }
+}