@stjoseph/prumo 0.0.5 → 0.1.0

package/templates/web/src/routeTree.gen.ts

@@ -13,6 +13,7 @@ import { Route as AuthenticatedRouteImport } from './routes/_authenticated'
 import { Route as SignInRouteImport } from './routes/sign-in'
 import { Route as SignUpRouteImport } from './routes/sign-up'
 import { Route as AuthenticatedIndexRouteImport } from './routes/_authenticated/index'
+import { Route as AuthenticatedConsentRouteImport } from './routes/_authenticated/consent'
 
 const AuthenticatedRoute = AuthenticatedRouteImport.update({
   id: '/_authenticated',
@@ -33,15 +34,22 @@ const AuthenticatedIndexRoute = AuthenticatedIndexRouteImport.update({
   path: '/',
   getParentRoute: () => AuthenticatedRoute,
 } as any)
+const AuthenticatedConsentRoute = AuthenticatedConsentRouteImport.update({
+  id: '/consent',
+  path: '/consent',
+  getParentRoute: () => AuthenticatedRoute,
+} as any)
 
 export interface FileRoutesByFullPath {
   '/': typeof AuthenticatedIndexRoute
   '/sign-in': typeof SignInRoute
   '/sign-up': typeof SignUpRoute
+  '/consent': typeof AuthenticatedConsentRoute
 }
 export interface FileRoutesByTo {
   '/sign-in': typeof SignInRoute
   '/sign-up': typeof SignUpRoute
+  '/consent': typeof AuthenticatedConsentRoute
   '/': typeof AuthenticatedIndexRoute
 }
 export interface FileRoutesById {
@@ -49,18 +57,20 @@ export interface FileRoutesById {
   '/_authenticated': typeof AuthenticatedRouteWithChildren
   '/sign-in': typeof SignInRoute
   '/sign-up': typeof SignUpRoute
+  '/_authenticated/consent': typeof AuthenticatedConsentRoute
   '/_authenticated/': typeof AuthenticatedIndexRoute
 }
 export interface FileRouteTypes {
   fileRoutesByFullPath: FileRoutesByFullPath
-  fullPaths: '/' | '/sign-in' | '/sign-up'
+  fullPaths: '/' | '/sign-in' | '/sign-up' | '/consent'
   fileRoutesByTo: FileRoutesByTo
-  to: '/sign-in' | '/sign-up' | '/'
+  to: '/sign-in' | '/sign-up' | '/consent' | '/'
   id:
     | '__root__'
     | '/_authenticated'
     | '/sign-in'
     | '/sign-up'
+    | '/_authenticated/consent'
     | '/_authenticated/'
   fileRoutesById: FileRoutesById
 }
@@ -100,14 +110,23 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof AuthenticatedIndexRouteImport
       parentRoute: typeof AuthenticatedRoute
     }
+    '/_authenticated/consent': {
+      id: '/_authenticated/consent'
+      path: '/consent'
+      fullPath: '/consent'
+      preLoaderRoute: typeof AuthenticatedConsentRouteImport
+      parentRoute: typeof AuthenticatedRoute
+    }
   }
 }
 
 interface AuthenticatedRouteChildren {
+  AuthenticatedConsentRoute: typeof AuthenticatedConsentRoute
   AuthenticatedIndexRoute: typeof AuthenticatedIndexRoute
 }
 
 const AuthenticatedRouteChildren: AuthenticatedRouteChildren = {
+  AuthenticatedConsentRoute: AuthenticatedConsentRoute,
   AuthenticatedIndexRoute: AuthenticatedIndexRoute,
 }
 

package/templates/web/src/routes/_authenticated/consent.tsx

@@ -0,0 +1,21 @@
+import { createFileRoute } from '@tanstack/react-router'
+import { z } from 'zod'
+import { ConsentForm } from '@/features/oauth/consent-form'
+
+// Loose, because every parameter Better Auth signed has to stay in the URL for the consent request.
+export const Route = createFileRoute('/_authenticated/consent')({
+  validateSearch: z.looseObject({ client_id: z.string(), scope: z.string().default('') }),
+  component: ConsentPage,
+})
+
+function ConsentPage() {
+  const { auth } = Route.useRouteContext()
+  const { client_id, scope } = Route.useSearch()
+
+  return (
+    <>
+      <h1 className="text-2xl font-semibold">Allow access</h1>
+      <ConsentForm auth={auth} clientId={client_id} scopes={scope.split(' ').filter(Boolean)} />
+    </>
+  )
+}

package/templates/web/{src → test}/app.spec.tsx

@@ -1,9 +1,9 @@
+import { fakeTransport, json } from '@test/support/fake-transport'
+import { renderApp } from '@test/support/render-app'
 import { screen } from '@testing-library/react'
 import userEvent from '@testing-library/user-event'
 import { describe, expect, it } from 'vitest'
 import type { Profile } from '@/api-contract'
-import { fakeTransport, json } from '../test/fake-transport'
-import { renderApp } from '../test/render-app'
 
 const user = { id: 'user-1', email: 'ana@example.com', name: 'Ana' }
 

package/templates/web/{src → test}/features/auth/sign-in-form.spec.tsx

@@ -1,8 +1,8 @@
+import { fakeTransport, json } from '@test/support/fake-transport'
+import { renderApp } from '@test/support/render-app'
 import { screen, within } from '@testing-library/react'
 import userEvent from '@testing-library/user-event'
 import { describe, expect, it } from 'vitest'
-import { fakeTransport, json } from '../../../test/fake-transport'
-import { renderApp } from '../../../test/render-app'
 
 describe('SignInForm', () => {
   it('shows a rejected sign-in as a form-level error', async () => {

package/templates/web/test/features/oauth/consent-form.spec.tsx

@@ -0,0 +1,45 @@
+import { fakeTransport, json } from '@test/support/fake-transport'
+import { renderApp } from '@test/support/render-app'
+import { screen } from '@testing-library/react'
+import userEvent from '@testing-library/user-event'
+import { afterEach, describe, expect, it } from 'vitest'
+
+const user = { id: 'user-1', email: 'ana@example.com', name: 'Ana' }
+
+// The shape Better Auth signs: every signed name listed in ba_param, then the signature.
+const SIGNED =
+  'client_id=client-1&scope=openid+profile&ba_param=ba_param&ba_param=client_id&ba_param=scope&sig=signature'
+
+afterEach(() => {
+  window.history.replaceState(null, '', '/')
+})
+
+describe('ConsentForm', () => {
+  it('names the client, lists the scopes and sends the signed query with the answer', async () => {
+    const visitor = userEvent.setup()
+    let consent: Record<string, unknown> | undefined
+
+    // The OAuth client plugin reads the browser's own URL, not the router's memory history.
+    window.history.replaceState(null, '', `/consent?${SIGNED}&unrelated=1`)
+
+    renderApp(
+      `/consent?${SIGNED}`,
+      fakeTransport({
+        'GET /api/auth/get-session': () =>
+          json(200, { session: { id: 's-1', userId: user.id }, user }),
+        'GET /api/auth/oauth2/public-client': () => json(200, { client_name: 'Claude' }),
+        'POST /api/auth/oauth2/consent': async (request) => {
+          consent = await request.json()
+          return json(200, { redirect: false })
+        },
+      }),
+    )
+
+    expect(await screen.findByText('Claude')).toBeInTheDocument()
+    expect(screen.getByText('profile')).toBeInTheDocument()
+
+    await visitor.click(screen.getByRole('button', { name: 'Allow' }))
+
+    expect(consent).toMatchObject({ accept: true, oauth_query: SIGNED })
+  })
+})

package/templates/web/{src → test}/features/profile/profile-form.spec.tsx

@@ -1,10 +1,10 @@
 import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { API_URL, fakeTransport, json } from '@test/support/fake-transport'
 import { render, screen } from '@testing-library/react'
 import userEvent from '@testing-library/user-event'
 import { describe, expect, it } from 'vitest'
 import { createClient, type Profile } from '@/api-contract'
-import { API_URL, fakeTransport, json } from '../../../test/fake-transport'
-import { ProfileForm } from './profile-form'
+import { ProfileForm } from '@/features/profile/profile-form'
 
 const profile: Profile = {
   id: '01a09ffe-635c-77e5-9aeb-d3e9d1a7ee24',

package/templates/web/test/{render-app.tsx → support/render-app.tsx}

@@ -1,10 +1,10 @@
 import { QueryClient } from '@tanstack/react-query'
 import { createMemoryHistory } from '@tanstack/react-router'
+import { API_URL } from '@test/support/fake-transport'
 import { render } from '@testing-library/react'
 import { createClient, type Transport } from '@/api-contract'
 import { App } from '@/app'
 import { createAuth } from '@/features/auth/auth-client'
-import { API_URL } from './fake-transport'
 
 export function renderApp(path: string, transport: Transport) {
   const context = {

package/templates/web/tsconfig.json

@@ -13,7 +13,8 @@
     "isolatedModules": true,
     "noEmit": true,
     "paths": {
-      "@/*": ["./src/*"]
+      "@/*": ["./src/*"],
+      "@test/*": ["./test/*"]
     },
     "types": ["vite/client", "vitest/globals", "@testing-library/jest-dom/vitest"]
   },

package/templates/web/vite.config.ts

@@ -6,13 +6,13 @@ import { defineConfig } from 'vitest/config'
 export default defineConfig({
   plugins: [tanstackRouter({ target: 'react', autoCodeSplitting: true }), react(), tailwindcss()],
   resolve: {
-    alias: { '@': `${import.meta.dirname}/src` },
+    alias: { '@': `${import.meta.dirname}/src`, '@test': `${import.meta.dirname}/test` },
   },
   test: {
     environment: 'jsdom',
     globals: true,
-    include: ['src/**/*.spec.{ts,tsx}'],
-    setupFiles: ['./test/setup.ts'],
+    include: ['test/**/*.spec.{ts,tsx}'],
+    setupFiles: ['./test/support/setup.ts'],
     coverage: { provider: 'v8', include: ['src/**'] },
   },
 })

package/templates/workspace/README.md

@@ -22,9 +22,13 @@ Node 22.17 or later and pnpm. For the API, Docker Desktop running: its database
 
 ## Trying it
 
-Run `pnpm dev`. If the workspace holds `api` and its database is not set up yet, it offers to create one first. If the workspace holds `web`, open `http://localhost:5173`: you are sent to
-sign in, and **Sign up** creates an account and takes you to your profile. Each app's README says what it needs
-before it starts.
+Run `pnpm dev`. It first checks that every app's port is free, offering to stop whatever holds one or to move that
+app to another port. Ctrl+C stops every app it started, and the ports it used are free again.
+
+If the workspace holds `api` and its database is not set up yet, `pnpm dev` offers to create the database first.
+
+If the workspace holds `web`, open `http://localhost:5173`: you are sent to sign in, and **Sign up** creates an
+account and takes you to your profile. Each app's README says what it needs before it starts.
 
 ## Conventions