@solvapay/auth 1.0.0-preview.17 → 1.0.0-preview.19

package/dist/index.d.ts

@@ -1,3 +1,70 @@
-export { A as AuthAdapter, R as RequestLike } from './adapter-4HTpALyc.js';
+import { A as AuthAdapter, R as RequestLike } from './adapter-Lx7F0MH7.js';
 export { MockAuthAdapter, MockAuthAdapter as MockAuthAdapterType } from './mock.js';
 export { getUserEmailFromRequest, getUserIdFromRequest, getUserNameFromRequest, requireUserId } from './next-utils.js';
+
+/**
+ * SolvaPay Auth Adapter
+ *
+ * Validates SolvaPay OAuth tokens by calling the userinfo endpoint.
+ * Suitable for validating opaque tokens issued by SolvaPay's hosted OAuth service.
+ */
+
+interface SolvapayAuthAdapterConfig {
+    /**
+     * SolvaPay API Base URL (e.g. https://api.solvapay.com)
+     */
+    apiBaseUrl: string;
+}
+/**
+ * SolvaPay authentication adapter
+ *
+ * Validates tokens by calling the SolvaPay userinfo endpoint.
+ * This is required for opaque tokens which cannot be verified offline.
+ */
+declare class SolvapayAuthAdapter implements AuthAdapter {
+    private apiBaseUrl;
+    constructor(config: SolvapayAuthAdapterConfig);
+    getUserIdFromRequest(req: Request | RequestLike): Promise<string | null>;
+}
+/**
+ * SolvaPay OAuth Client Helpers
+ */
+interface SolvapayOAuthConfig {
+    clientId: string;
+    clientSecret?: string;
+    authUrl: string;
+    tokenUrl: string;
+    redirectUri: string;
+}
+interface TokenResponse {
+    access_token: string;
+    token_type: string;
+    expires_in: number;
+    refresh_token?: string;
+    scope?: string;
+}
+declare class SolvapayOAuthClient {
+    private config;
+    constructor(config: SolvapayOAuthConfig);
+    /**
+     * Get the URL to redirect the user to for login
+     */
+    getAuthorizationUrl(options?: {
+        state?: string;
+        scope?: string;
+    }): string;
+    /**
+     * Exchange an authorization code for an access token
+     */
+    exchangeCodeForToken(code: string): Promise<TokenResponse>;
+    /**
+     * Revoke a token (Sign Out)
+     */
+    revokeToken(token: string): Promise<void>;
+    /**
+     * Get user info using access token
+     */
+    getUserInfo(accessToken: string, userInfoUrl?: string): Promise<Record<string, unknown>>;
+}
+
+export { AuthAdapter, RequestLike, SolvapayAuthAdapter, type SolvapayAuthAdapterConfig, SolvapayOAuthClient, type SolvapayOAuthConfig, type TokenResponse };

package/dist/index.js

@@ -6,9 +6,130 @@ import {
   getUserIdFromRequest,
   getUserNameFromRequest,
   requireUserId
-} from "./chunk-2P77RLPB.js";
+} from "./chunk-IOLE5BMD.js";
+
+// src/solvapay.ts
+var SolvapayAuthAdapter = class {
+  apiBaseUrl;
+  constructor(config) {
+    this.apiBaseUrl = config.apiBaseUrl.replace(/\/$/, "");
+  }
+  async getUserIdFromRequest(req) {
+    try {
+      const headers = "headers" in req ? req.headers : req;
+      const authHeader = headers.get("authorization");
+      if (!authHeader || !authHeader.startsWith("Bearer ")) {
+        return null;
+      }
+      const token = authHeader.slice(7);
+      if (!token) {
+        return null;
+      }
+      const response = await fetch(`${this.apiBaseUrl}/v1/oauth/userinfo`, {
+        method: "GET",
+        headers: {
+          Authorization: `Bearer ${token}`,
+          "Content-Type": "application/json"
+        }
+      });
+      if (!response.ok) {
+        return null;
+      }
+      const userInfo = await response.json();
+      return userInfo.sub || userInfo.id || userInfo.customerRef || null;
+    } catch {
+      return null;
+    }
+  }
+};
+var SolvapayOAuthClient = class {
+  constructor(config) {
+    this.config = config;
+  }
+  /**
+   * Get the URL to redirect the user to for login
+   */
+  getAuthorizationUrl(options = {}) {
+    const params = new URLSearchParams({
+      response_type: "code",
+      client_id: this.config.clientId,
+      redirect_uri: this.config.redirectUri
+    });
+    if (options.state) params.append("state", options.state);
+    if (options.scope) params.append("scope", options.scope);
+    return `${this.config.authUrl}?${params.toString()}`;
+  }
+  /**
+   * Exchange an authorization code for an access token
+   */
+  async exchangeCodeForToken(code) {
+    const body = new URLSearchParams({
+      grant_type: "authorization_code",
+      code,
+      client_id: this.config.clientId,
+      redirect_uri: this.config.redirectUri
+    });
+    if (this.config.clientSecret) {
+      body.append("client_secret", this.config.clientSecret);
+    }
+    const response = await fetch(this.config.tokenUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded",
+        Accept: "application/json"
+      },
+      body: body.toString()
+    });
+    if (!response.ok) {
+      const text = await response.text();
+      throw new Error(`Failed to exchange code: ${response.status} ${text}`);
+    }
+    return response.json();
+  }
+  /**
+   * Revoke a token (Sign Out)
+   */
+  async revokeToken(token) {
+    const revokeUrl = this.config.tokenUrl.replace("/token", "/revoke");
+    const body = new URLSearchParams({
+      token,
+      client_id: this.config.clientId
+    });
+    if (this.config.clientSecret) {
+      body.append("client_secret", this.config.clientSecret);
+    }
+    await fetch(revokeUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded"
+      },
+      body: body.toString()
+    });
+  }
+  /**
+   * Get user info using access token
+   */
+  async getUserInfo(accessToken, userInfoUrl) {
+    if (!userInfoUrl) {
+      throw new Error("userInfoUrl is required");
+    }
+    const response = await fetch(userInfoUrl, {
+      method: "GET",
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+        Accept: "application/json"
+      }
+    });
+    if (!response.ok) {
+      throw new Error(`Failed to fetch user info: ${response.status}`);
+    }
+    return response.json();
+  }
+};
 export {
   MockAuthAdapter,
+  SolvapayAuthAdapter,
+  SolvapayOAuthClient,
   getUserEmailFromRequest,
   getUserIdFromRequest,
   getUserNameFromRequest,

package/dist/mock.d.cts

@@ -1,4 +1,4 @@
-import { A as AuthAdapter, R as RequestLike } from './adapter-4HTpALyc.cjs';
+import { A as AuthAdapter, R as RequestLike } from './adapter-Lx7F0MH7.cjs';
 
 /**
  * Mock Auth Adapter

package/dist/mock.d.ts

@@ -1,4 +1,4 @@
-import { A as AuthAdapter, R as RequestLike } from './adapter-4HTpALyc.js';
+import { A as AuthAdapter, R as RequestLike } from './adapter-Lx7F0MH7.js';
 
 /**
  * Mock Auth Adapter

package/dist/next-utils.cjs

@@ -83,7 +83,8 @@ async function getUserNameFromRequest(request, options) {
     const { payload } = await jwtVerify(token, secret, {
       algorithms: ["HS256"]
     });
-    const name = payload.user_metadata?.full_name || payload.user_metadata?.name || payload.name || null;
+    const payloadWithMetadata = payload;
+    const name = payloadWithMetadata.user_metadata?.full_name || payloadWithMetadata.user_metadata?.name || payloadWithMetadata.name || null;
     return name ? String(name) : null;
   } catch {
     return null;
@@ -95,13 +96,10 @@ function requireUserId(request, options) {
   const errorDetails = options?.errorDetails || "User ID not found. Ensure middleware is configured.";
   const userId = request.headers.get(headerName);
   if (!userId) {
-    return new Response(
-      JSON.stringify({ error: errorMessage, details: errorDetails }),
-      {
-        status: 401,
-        headers: { "Content-Type": "application/json" }
-      }
-    );
+    return new Response(JSON.stringify({ error: errorMessage, details: errorDetails }), {
+      status: 401,
+      headers: { "Content-Type": "application/json" }
+    });
   }
   return userId;
 }

package/dist/next-utils.d.cts

@@ -10,10 +10,14 @@
  */
 /**
  * Extract user ID from request headers.
- * Checks for 'x-user-id' header (commonly set by middleware after authentication).
+ *
+ * Checks for the 'x-user-id' header which is commonly set by authentication
+ * middleware after successful authentication. This header is typically set
+ * by Next.js middleware that validates JWT tokens or session cookies.
  *
  * @param request - Request object (works with NextRequest from next/server)
  * @param options - Configuration options
+ * @param options.headerName - Custom header name (default: 'x-user-id')
  * @returns User ID string or null if not found
  *
  * @example
@@ -21,60 +25,131 @@
  * import { NextRequest, NextResponse } from 'next/server';
  * import { getUserIdFromRequest } from '@solvapay/auth';
  *
- * const userId = getUserIdFromRequest(request);
- * if (!userId) {
- *   return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+ * export async function GET(request: NextRequest) {
+ *   const userId = getUserIdFromRequest(request);
+ *
+ *   if (!userId) {
+ *     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+ *   }
+ *
+ *   // Use userId...
+ *   return NextResponse.json({ userId });
  * }
  * ```
+ *
+ * @see {@link requireUserId} for a version that returns an error response
+ * @since 1.0.0
  */
 declare function getUserIdFromRequest(request: Request, options?: {
     headerName?: string;
 }): string | null;
 /**
  * Extract user email from Supabase JWT token in Authorization header.
- * Returns null if token is missing or invalid.
+ *
+ * Parses and validates a Supabase JWT token from the Authorization header
+ * and extracts the email claim. Returns null if the token is missing, invalid,
+ * or expired.
+ *
+ * Uses dynamic imports for Edge runtime compatibility.
  *
  * @param request - Request object (works with NextRequest from next/server)
  * @param options - Configuration options
+ * @param options.jwtSecret - Supabase JWT secret (defaults to SUPABASE_JWT_SECRET env var)
  * @returns User email string or null if not found
+ *
+ * @example
+ * ```typescript
+ * import { NextRequest, NextResponse } from 'next/server';
+ * import { getUserEmailFromRequest } from '@solvapay/auth';
+ *
+ * export async function GET(request: NextRequest) {
+ *   const email = await getUserEmailFromRequest(request);
+ *
+ *   if (!email) {
+ *     return NextResponse.json({ error: 'Email not found' }, { status: 401 });
+ *   }
+ *
+ *   return NextResponse.json({ email });
+ * }
+ * ```
+ *
+ * @see {@link getUserNameFromRequest} for extracting user name
+ * @since 1.0.0
  */
 declare function getUserEmailFromRequest(request: Request, options?: {
     jwtSecret?: string;
 }): Promise<string | null>;
 /**
  * Extract user name from Supabase JWT token in Authorization header.
- * Returns null if token is missing or invalid.
+ *
+ * Parses and validates a Supabase JWT token from the Authorization header
+ * and extracts the name from user metadata. Checks multiple possible locations:
+ * - `user_metadata.full_name`
+ * - `user_metadata.name`
+ * - `name` claim
+ *
+ * Returns null if the token is missing, invalid, or name is not found.
  *
  * @param request - Request object (works with NextRequest from next/server)
  * @param options - Configuration options
+ * @param options.jwtSecret - Supabase JWT secret (defaults to SUPABASE_JWT_SECRET env var)
  * @returns User name string or null if not found
+ *
+ * @example
+ * ```typescript
+ * import { NextRequest, NextResponse } from 'next/server';
+ * import { getUserNameFromRequest } from '@solvapay/auth';
+ *
+ * export async function GET(request: NextRequest) {
+ *   const name = await getUserNameFromRequest(request);
+ *
+ *   return NextResponse.json({ name: name || 'Guest' });
+ * }
+ * ```
+ *
+ * @see {@link getUserEmailFromRequest} for extracting user email
+ * @since 1.0.0
  */
 declare function getUserNameFromRequest(request: Request, options?: {
     jwtSecret?: string;
 }): Promise<string | null>;
 /**
- * Require user ID from request headers.
- * Returns an error response if user ID is not found.
+ * Require user ID from request headers or return an error response.
+ *
+ * This is a convenience function that combines `getUserIdFromRequest()` with
+ * error handling. If the user ID is not found, it returns a Response object
+ * with a 401 status that can be directly returned from Next.js route handlers.
  *
- * This function returns a standard Response object that works with Next.js.
- * In Next.js, NextResponse extends Response, so this is compatible.
+ * Returns a standard Response object that works with Next.js (NextResponse
+ * extends Response, so this is fully compatible).
  *
  * @param request - Request object (works with NextRequest from next/server)
  * @param options - Configuration options
- * @returns Either the user ID string or a Response error object
+ * @param options.headerName - Custom header name (default: 'x-user-id')
+ * @param options.errorMessage - Custom error message (default: 'Unauthorized')
+ * @param options.errorDetails - Custom error details (default: 'User ID not found. Ensure middleware is configured.')
+ * @returns Either the user ID string or a Response error object with 401 status
  *
  * @example
  * ```typescript
  * import { NextRequest, NextResponse } from 'next/server';
  * import { requireUserId } from '@solvapay/auth';
  *
- * const userIdOrError = requireUserId(request);
- * if (userIdOrError instanceof Response) {
- *   return userIdOrError; // Returns 401 error
+ * export async function GET(request: NextRequest) {
+ *   const userIdOrError = requireUserId(request);
+ *
+ *   if (userIdOrError instanceof Response) {
+ *     return userIdOrError; // Returns 401 error
+ *   }
+ *
+ *   // userIdOrError is now a string
+ *   const userId = userIdOrError;
+ *   // Use userId...
  * }
- * // userIdOrError is now a string
- * const userId = userIdOrError;
  * ```
+ *
+ * @see {@link getUserIdFromRequest} for a version that returns null instead of error
+ * @since 1.0.0
  */
 declare function requireUserId(request: Request, options?: {
     headerName?: string;

package/dist/next-utils.d.ts

@@ -10,10 +10,14 @@
  */
 /**
  * Extract user ID from request headers.
- * Checks for 'x-user-id' header (commonly set by middleware after authentication).
+ *
+ * Checks for the 'x-user-id' header which is commonly set by authentication
+ * middleware after successful authentication. This header is typically set
+ * by Next.js middleware that validates JWT tokens or session cookies.
  *
  * @param request - Request object (works with NextRequest from next/server)
  * @param options - Configuration options
+ * @param options.headerName - Custom header name (default: 'x-user-id')
  * @returns User ID string or null if not found
  *
  * @example
@@ -21,60 +25,131 @@
  * import { NextRequest, NextResponse } from 'next/server';
  * import { getUserIdFromRequest } from '@solvapay/auth';
  *
- * const userId = getUserIdFromRequest(request);
- * if (!userId) {
- *   return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+ * export async function GET(request: NextRequest) {
+ *   const userId = getUserIdFromRequest(request);
+ *
+ *   if (!userId) {
+ *     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+ *   }
+ *
+ *   // Use userId...
+ *   return NextResponse.json({ userId });
  * }
  * ```
+ *
+ * @see {@link requireUserId} for a version that returns an error response
+ * @since 1.0.0
  */
 declare function getUserIdFromRequest(request: Request, options?: {
     headerName?: string;
 }): string | null;
 /**
  * Extract user email from Supabase JWT token in Authorization header.
- * Returns null if token is missing or invalid.
+ *
+ * Parses and validates a Supabase JWT token from the Authorization header
+ * and extracts the email claim. Returns null if the token is missing, invalid,
+ * or expired.
+ *
+ * Uses dynamic imports for Edge runtime compatibility.
  *
  * @param request - Request object (works with NextRequest from next/server)
  * @param options - Configuration options
+ * @param options.jwtSecret - Supabase JWT secret (defaults to SUPABASE_JWT_SECRET env var)
  * @returns User email string or null if not found
+ *
+ * @example
+ * ```typescript
+ * import { NextRequest, NextResponse } from 'next/server';
+ * import { getUserEmailFromRequest } from '@solvapay/auth';
+ *
+ * export async function GET(request: NextRequest) {
+ *   const email = await getUserEmailFromRequest(request);
+ *
+ *   if (!email) {
+ *     return NextResponse.json({ error: 'Email not found' }, { status: 401 });
+ *   }
+ *
+ *   return NextResponse.json({ email });
+ * }
+ * ```
+ *
+ * @see {@link getUserNameFromRequest} for extracting user name
+ * @since 1.0.0
  */
 declare function getUserEmailFromRequest(request: Request, options?: {
     jwtSecret?: string;
 }): Promise<string | null>;
 /**
  * Extract user name from Supabase JWT token in Authorization header.
- * Returns null if token is missing or invalid.
+ *
+ * Parses and validates a Supabase JWT token from the Authorization header
+ * and extracts the name from user metadata. Checks multiple possible locations:
+ * - `user_metadata.full_name`
+ * - `user_metadata.name`
+ * - `name` claim
+ *
+ * Returns null if the token is missing, invalid, or name is not found.
  *
  * @param request - Request object (works with NextRequest from next/server)
  * @param options - Configuration options
+ * @param options.jwtSecret - Supabase JWT secret (defaults to SUPABASE_JWT_SECRET env var)
  * @returns User name string or null if not found
+ *
+ * @example
+ * ```typescript
+ * import { NextRequest, NextResponse } from 'next/server';
+ * import { getUserNameFromRequest } from '@solvapay/auth';
+ *
+ * export async function GET(request: NextRequest) {
+ *   const name = await getUserNameFromRequest(request);
+ *
+ *   return NextResponse.json({ name: name || 'Guest' });
+ * }
+ * ```
+ *
+ * @see {@link getUserEmailFromRequest} for extracting user email
+ * @since 1.0.0
  */
 declare function getUserNameFromRequest(request: Request, options?: {
     jwtSecret?: string;
 }): Promise<string | null>;
 /**
- * Require user ID from request headers.
- * Returns an error response if user ID is not found.
+ * Require user ID from request headers or return an error response.
+ *
+ * This is a convenience function that combines `getUserIdFromRequest()` with
+ * error handling. If the user ID is not found, it returns a Response object
+ * with a 401 status that can be directly returned from Next.js route handlers.
  *
- * This function returns a standard Response object that works with Next.js.
- * In Next.js, NextResponse extends Response, so this is compatible.
+ * Returns a standard Response object that works with Next.js (NextResponse
+ * extends Response, so this is fully compatible).
  *
  * @param request - Request object (works with NextRequest from next/server)
  * @param options - Configuration options
- * @returns Either the user ID string or a Response error object
+ * @param options.headerName - Custom header name (default: 'x-user-id')
+ * @param options.errorMessage - Custom error message (default: 'Unauthorized')
+ * @param options.errorDetails - Custom error details (default: 'User ID not found. Ensure middleware is configured.')
+ * @returns Either the user ID string or a Response error object with 401 status
  *
  * @example
  * ```typescript
  * import { NextRequest, NextResponse } from 'next/server';
  * import { requireUserId } from '@solvapay/auth';
  *
- * const userIdOrError = requireUserId(request);
- * if (userIdOrError instanceof Response) {
- *   return userIdOrError; // Returns 401 error
+ * export async function GET(request: NextRequest) {
+ *   const userIdOrError = requireUserId(request);
+ *
+ *   if (userIdOrError instanceof Response) {
+ *     return userIdOrError; // Returns 401 error
+ *   }
+ *
+ *   // userIdOrError is now a string
+ *   const userId = userIdOrError;
+ *   // Use userId...
  * }
- * // userIdOrError is now a string
- * const userId = userIdOrError;
  * ```
+ *
+ * @see {@link getUserIdFromRequest} for a version that returns null instead of error
+ * @since 1.0.0
  */
 declare function requireUserId(request: Request, options?: {
     headerName?: string;

package/dist/next-utils.js

@@ -3,7 +3,7 @@ import {
   getUserIdFromRequest,
   getUserNameFromRequest,
   requireUserId
-} from "./chunk-2P77RLPB.js";
+} from "./chunk-IOLE5BMD.js";
 export {
   getUserEmailFromRequest,
   getUserIdFromRequest,

package/dist/supabase.d.cts

@@ -1,4 +1,4 @@
-import { A as AuthAdapter, R as RequestLike } from './adapter-4HTpALyc.cjs';
+import { A as AuthAdapter, R as RequestLike } from './adapter-Lx7F0MH7.cjs';
 
 /**
  * Supabase Auth Adapter

package/dist/supabase.d.ts

@@ -1,4 +1,4 @@
-import { A as AuthAdapter, R as RequestLike } from './adapter-4HTpALyc.js';
+import { A as AuthAdapter, R as RequestLike } from './adapter-Lx7F0MH7.js';
 
 /**
  * Supabase Auth Adapter

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solvapay/auth",
-  "version": "1.0.0-preview.17",
+  "version": "1.0.0-preview.19",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -50,6 +50,7 @@
     "build": "tsup src/index.ts src/supabase.ts src/mock.ts src/next-utils.ts --format esm,cjs --dts --tsconfig tsconfig.build.json",
     "test": "vitest run || exit 0",
     "test:watch": "vitest",
-    "lint": "echo 'no lint yet'"
+    "lint": "eslint src",
+    "lint:fix": "eslint src --fix"
   }
 }

package/dist/adapter-4HTpALyc.d.cts

@@ -1,32 +0,0 @@
-/**
- * Auth Adapter Interface
- *
- * Defines the contract for authentication adapters that extract user IDs from requests.
- * Implementations should never throw - return null if authentication fails or is missing.
- */
-/**
- * Request-like object that has headers
- */
-interface RequestLike {
-    headers: Headers | {
-        get(name: string): string | null;
-    };
-}
-/**
- * Auth adapter interface for extracting user IDs from requests
- */
-interface AuthAdapter {
-    /**
-     * Extract the authenticated user ID from a request
-     *
-     * @param req - Request object or object with headers
-     * @returns The user ID string if authenticated, null otherwise
-     *
-     * @remarks
-     * This method should never throw. If authentication fails or is missing,
-     * return null and let the caller decide how to handle unauthenticated requests.
-     */
-    getUserIdFromRequest(req: Request | RequestLike): Promise<string | null>;
-}
-
-export type { AuthAdapter as A, RequestLike as R };

package/dist/adapter-4HTpALyc.d.ts

@@ -1,32 +0,0 @@
-/**
- * Auth Adapter Interface
- *
- * Defines the contract for authentication adapters that extract user IDs from requests.
- * Implementations should never throw - return null if authentication fails or is missing.
- */
-/**
- * Request-like object that has headers
- */
-interface RequestLike {
-    headers: Headers | {
-        get(name: string): string | null;
-    };
-}
-/**
- * Auth adapter interface for extracting user IDs from requests
- */
-interface AuthAdapter {
-    /**
-     * Extract the authenticated user ID from a request
-     *
-     * @param req - Request object or object with headers
-     * @returns The user ID string if authenticated, null otherwise
-     *
-     * @remarks
-     * This method should never throw. If authentication fails or is missing,
-     * return null and let the caller decide how to handle unauthenticated requests.
-     */
-    getUserIdFromRequest(req: Request | RequestLike): Promise<string | null>;
-}
-
-export type { AuthAdapter as A, RequestLike as R };