@server/next 0.47.0 → 0.47.2

package/index.d.ts

@@ -212,7 +212,7 @@ type AuthConfig<U = AuthProfile> = {
     onLogout?: (id: string, ctx: Context) => Awaitable<void>;
 };
 type AuthVerify<U = AuthClaims> = {
-    verify: string;
+    issuer: string;
     audience: string | readonly string[];
     cookie?: string;
     audienceClaim?: string | readonly string[];
@@ -228,7 +228,7 @@ type AuthOption = string | AuthFunction | AuthConfig<any> | AuthVerify<any> | Au
 type UserOf<A> = A extends readonly (infer M)[] ? UserOf<M> : A extends (...args: any[]) => infer R ? NonNullable<Awaited<R>> : A extends {
     getUser: (...args: any[]) => infer R;
 } ? NonNullable<Awaited<R>> : A extends {
-    verify: any;
+    issuer: any;
 } ? AuthClaims : A extends {
     providers: any;
 } ? AuthProfile : A extends string ? AuthProfile : never;

package/index.js

@@ -1251,12 +1251,12 @@ var CLASSES = {
   yahoo: Yahoo,
   yandex: Yandex,
   zoom: Zoom,
-  42: FortyTwo
+  fortytwo: FortyTwo
 };
 var ALIASES = {
-  microsoft: "microsoftentraid",
   cognito: "amazoncognito",
-  entra: "microsoftentraid"
+  entra: "microsoftentraid",
+  microsoft: "microsoftentraid"
 };
 var providers = Object.fromEntries(
   Object.entries(CLASSES).map(([name, Client]) => [
@@ -1265,7 +1265,7 @@ var providers = Object.fromEntries(
   ])
 );
 for (const [alias, target2] of Object.entries(ALIASES)) {
-  providers[alias] = providers[target2];
+  providers[alias] = antarcticProvider(alias, CLASSES[target2]);
 }
 var ISSUERS = {
   paypal: "https://www.paypal.com"
@@ -1421,6 +1421,12 @@ function entry(config2) {
       );
     }
   }
+  const publicProfile = ({ id, email, name, avatar }) => ({
+    id,
+    email,
+    name,
+    avatar
+  });
   const redirects = typeof config2.redirect === "object" ? config2.redirect : {};
   const loginTo = typeof config2.redirect === "object" ? redirects.login : config2.redirect;
   const finish = async (ctx, profile) => {
@@ -1432,7 +1438,7 @@ function entry(config2) {
       if (!isSigned(strategies[0])) return { sub: String(id) };
       const user2 = await getUser(String(id), ctx);
       return { user: await toPublicUser(user2) };
-    })() : { user: profile };
+    })() : { user: publicProfile(profile) };
     const signed = { ...payload, provider: profile.provider };
     const token = await issue(ctx, signed, expires);
     const user = signed.user ?? await getUser(signed.sub, ctx);
@@ -1566,11 +1572,11 @@ var bearer2 = (ctx) => {
   return token;
 };
 function entry2(options) {
-  const { verify: issuer, audience } = options;
+  const { issuer, audience } = options;
   const claimNames = options.audienceClaim ? Array.isArray(options.audienceClaim) ? options.audienceClaim : [options.audienceClaim] : ["aud"];
   if (!audience) {
     throw new Error(
-      "`verify` needs an `audience`: one issuer serves many applications, and without it a token minted for another one is accepted here."
+      "`issuer` needs an `audience`: one issuer serves many applications, and without it a token minted for another one is accepted here."
     );
   }
   const allowed = Array.isArray(audience) ? audience : [audience];
@@ -1639,6 +1645,19 @@ var VENDORS = {
     claim: "azp",
     docs: "https://clerk.com/docs/backend-requests/resources/session-tokens"
   },
+  firebase: {
+    // The client SDK holds the token and sends it as a header, so no cookie.
+    // Both halves are the project id: the issuer is per-project, and it is
+    // what Firebase puts in `aud`.
+    audience: "your Firebase project id",
+    docs: "https://firebase.google.com/docs/auth/admin/verify-id-tokens"
+  },
+  // Google Cloud Identity Platform is the same service, and the same tokens,
+  // under its enterprise name
+  gcip: {
+    audience: "your Google Cloud project id",
+    docs: "https://cloud.google.com/identity-platform/docs/how-to-verify-tokens"
+  },
   supabase: {
     audience: '"authenticated"',
     docs: "https://supabase.com/docs/guides/auth/jwts"
@@ -1678,7 +1697,7 @@ function vendorEntry(strategy, name) {
     );
   }
   return entry2({
-    verify: issuer,
+    issuer,
     audience,
     ...vendor.claim ? { audienceClaim: vendor.claim } : {},
     ...strategy === "cookie" ? { cookie: vendor.cookie } : {}
@@ -1699,7 +1718,7 @@ function toEntry(auth2) {
     return [{ name: "function", user: async (ctx) => auth2(ctx) }];
   }
   if (auth2 && typeof auth2 === "object") {
-    if ("verify" in auth2) return [entry2(auth2)];
+    if ("issuer" in auth2) return [entry2(auth2)];
     if ("providers" in auth2) return [entry(auth2)];
     if ("handler" in auth2) {
       const instance = auth2;
@@ -1731,7 +1750,7 @@ function toEntry(auth2) {
     }
   }
   throw new Error(
-    "Invalid `auth`: it takes a string, a function, `{ providers }`, `{ verify, audience }`, a library instance, or an array of those."
+    "Invalid `auth`: it takes a string, a function, `{ providers }`, `{ issuer, audience }`, a library instance, or an array of those."
   );
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@server/next",
-  "version": "0.47.0",
+  "version": "0.47.2",
   "description": "A fully-fledged web server with routing, file uploads, sessions, static files, schema validation, websockets, testing, etc.",
   "homepage": "https://server-js.com/",
   "repository": "github:franciscop/server-next",