@shubh90/app-runtime 0.1.0 → 0.2.0

package/dist/auth/index.d.ts

@@ -30,6 +30,21 @@ export type MiiAuth = {
     getAuthMode: typeof getAuthMode;
     loginRoute(request: Request): Promise<Response>;
     logoutRoute(): Promise<Response>;
+    /**
+     * The proxy's building blocks. An app's middleware is its own (#715 un-owned
+     * it: matchers, logos, public paths are per-app), but the pane's silent
+     * sign-in — spend a ?mii_code= for an identity, upsert the member, start a
+     * session — is platform contract, so the pieces come from here. Returns the
+     * cookie to set, or null when the code is spent/stale (send them to /login).
+     */
+    redeemPaneCode(code: string): Promise<{
+        token: string;
+        expiresAt: Date;
+    } | null>;
+    issueSession(userId: string): Promise<{
+        token: string;
+        expiresAt: Date;
+    }>;
     readonly SESSION_COOKIE: string;
     readonly LOGIN_ACTION: string;
     readonly SIGN_IN_PROBLEMS: typeof SIGN_IN_PROBLEMS;

package/dist/auth/index.js

@@ -4,8 +4,9 @@ import { safeNext } from "./next-path.js";
 import { SIGN_IN_PROBLEMS } from "./problems.js";
 import { loginRoute, logoutRoute, LOGIN_ACTION } from "./routes.js";
 import { createSession, destroySession, getUser, requireUser } from "./session.js";
-import { resolveSession, SESSION_COOKIE } from "./lookup.js";
-import { deactivateUser } from "./users.js";
+import { issueSession, resolveSession, SESSION_COOKIE } from "./lookup.js";
+import { redeemWithPlaza } from "./plaza.js";
+import { deactivateUser, upsertMemberFromIdentity } from "./users.js";
 import { resolveUsers } from "./users-config.js";
 export { SIGN_IN_PROBLEMS } from "./problems.js";
 export { safeNext } from "./next-path.js";
@@ -28,6 +29,16 @@ export function createMiiAuth(options = {}) {
         getAuthMode,
         loginRoute: (request) => loginRoute(ctx, request),
         logoutRoute: () => logoutRoute(ctx),
+        redeemPaneCode: async (code) => {
+            const identity = await redeemWithPlaza(code);
+            if (identity === null)
+                return null;
+            const user = await upsertMemberFromIdentity(ctx, identity);
+            if (user.status !== "active")
+                return null;
+            return issueSession(ctx, user.id);
+        },
+        issueSession: (userId) => issueSession(ctx, userId),
         SESSION_COOKIE,
         LOGIN_ACTION,
         SIGN_IN_PROBLEMS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shubh90/app-runtime",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "The platform contract every mii org app depends on \u2014 sign-in, and the Next.js config an app must not diverge from. A versioned package, not files copied into each repo.",
   "license": "UNLICENSED",
   "type": "module",