@strav/social 0.4.28 → 0.4.29

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strav/social",
-  "version": "0.4.28",
+  "version": "0.4.29",
   "type": "module",
   "description": "OAuth social authentication for the Strav framework",
   "license": "MIT",
@@ -16,9 +16,9 @@
     "CHANGELOG.md"
   ],
   "peerDependencies": {
-    "@strav/kernel": "0.4.28",
-    "@strav/http": "0.4.28",
-    "@strav/database": "0.4.28"
+    "@strav/kernel": "0.4.29",
+    "@strav/http": "0.4.29",
+    "@strav/database": "0.4.29"
   },
   "scripts": {
     "test": "bun test tests/",

package/src/index.ts

@@ -10,5 +10,6 @@ export { GitHubProvider } from './providers/github_provider.ts'
 export { DiscordProvider } from './providers/discord_provider.ts'
 export { FacebookProvider } from './providers/facebook_provider.ts'
 export { LinkedInProvider } from './providers/linkedin_provider.ts'
+export { LineProvider } from './providers/line_provider.ts'
 export type { SocialUser, SocialConfig, ProviderConfig, TokenResponse } from './types.ts'
 export type { SocialAccountData } from './social_account.ts'

package/src/providers/line_provider.ts

@@ -0,0 +1,73 @@
+import { ExternalServiceError, scrubProviderError } from '@strav/kernel'
+import { AbstractProvider } from '../abstract_provider.ts'
+import type { SocialUser } from '../types.ts'
+
+/**
+ * LINE Login OAuth 2.1 provider.
+ *
+ * Distinct from the LINE Messaging API (handled by @strav/line) — this is
+ * the user-facing OAuth flow that lets a website log a user in with their
+ * LINE account.
+ *
+ * Scope notes:
+ *   - `profile` (default) returns userId, displayName, pictureUrl.
+ *   - `openid` (default) returns an ID token alongside the access token.
+ *   - `email` is optional and requires the "Email permission" to be
+ *     approved on the LINE Login channel — uncommon for new apps. The
+ *     SocialUser.email will be null when this scope is not granted.
+ *
+ * @see https://developers.line.biz/en/docs/line-login/integrate-line-login/
+ */
+export class LineProvider extends AbstractProvider {
+  readonly name = 'LINE'
+
+  protected getDefaultScopes(): string[] {
+    return ['profile', 'openid']
+  }
+
+  /** LINE expects client_secret in the body, not as HTTP Basic. */
+  protected override defaultTokenEndpointAuthMethod(): 'basic' | 'post' {
+    return 'post'
+  }
+
+  protected getAuthUrl(): string {
+    return 'https://access.line.me/oauth2/v2.1/authorize'
+  }
+
+  protected getTokenUrl(): string {
+    return 'https://api.line.me/oauth2/v2.1/token'
+  }
+
+  protected async getUserByToken(token: string): Promise<Record<string, unknown>> {
+    const response = await fetch('https://api.line.me/v2/profile', {
+      headers: { Authorization: `Bearer ${token}` },
+    })
+
+    if (!response.ok) {
+      throw new ExternalServiceError(
+        'LINE',
+        response.status,
+        scrubProviderError(await response.text())
+      )
+    }
+
+    return (await response.json()) as Record<string, unknown>
+  }
+
+  protected mapUserToObject(data: Record<string, unknown>): SocialUser {
+    return {
+      id: data.userId as string,
+      name: (data.displayName as string) ?? null,
+      email: (data.email as string) ?? null,
+      // LINE does not surface a "verified" flag on email; treat presence as verified.
+      emailVerified: typeof data.email === 'string',
+      avatar: (data.pictureUrl as string) ?? null,
+      nickname: null,
+      token: '',
+      refreshToken: null,
+      expiresIn: null,
+      approvedScopes: [],
+      raw: data,
+    }
+  }
+}

package/src/social_manager.ts

@@ -7,6 +7,7 @@ import { GitHubProvider } from './providers/github_provider.ts'
 import { DiscordProvider } from './providers/discord_provider.ts'
 import { FacebookProvider } from './providers/facebook_provider.ts'
 import { LinkedInProvider } from './providers/linkedin_provider.ts'
+import { LineProvider } from './providers/line_provider.ts'
 
 @inject
 export default class SocialManager {
@@ -76,6 +77,8 @@ export default class SocialManager {
         return new FacebookProvider(providerConfig)
       case 'linkedin':
         return new LinkedInProvider(providerConfig)
+      case 'line':
+        return new LineProvider(providerConfig)
       default:
         throw new ConfigurationError(
           `Unknown social driver "${driverName}". Register it with SocialManager.extend().`