@swr-login/plugin-oauth-google 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 swr-login contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,48 @@
+# @swr-login/plugin-oauth-google
+
+> Google OAuth 2.0 login plugin for swr-login (supports Popup & Redirect with PKCE).
+
+[![npm](https://img.shields.io/npm/v/@swr-login/plugin-oauth-google?color=blue)](https://www.npmjs.com/package/@swr-login/plugin-oauth-google)
+[![license](https://img.shields.io/github/license/swr-login/swr-login)](https://github.com/swr-login/swr-login/blob/main/LICENSE)
+
+## Install
+
+```bash
+npm install @swr-login/plugin-oauth-google
+```
+
+## Usage
+
+```ts
+import { GoogleOAuthPlugin } from '@swr-login/plugin-oauth-google';
+
+const plugin = GoogleOAuthPlugin({
+  clientId: 'your-google-client-id',
+  redirectUri: 'https://yourapp.com/callback/google',
+  // 'popup' (default) | 'redirect'
+  mode: 'popup',
+});
+```
+
+Then use the `useLogin` hook:
+
+```tsx
+const { login, isLoading } = useLogin('google');
+
+<button onClick={() => login()}>Sign in with Google</button>
+```
+
+## Features
+
+- 🔒 PKCE (Proof Key for Code Exchange) enforced
+- 🔒 CSRF state parameter validation
+- 🪟 Popup and redirect modes
+- ⚡ Zero page refresh on login
+
+## Part of swr-login
+
+See the full project at [github.com/swr-login/swr-login](https://github.com/swr-login/swr-login).
+
+## License
+
+[MIT](https://github.com/swr-login/swr-login/blob/main/LICENSE)

package/dist/index.cjs

@@ -0,0 +1,164 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  GoogleOAuthPlugin: () => GoogleOAuthPlugin,
+  handleGoogleCallback: () => handleGoogleCallback
+});
+module.exports = __toCommonJS(index_exports);
+var import_core = require("@swr-login/core");
+var DEFAULT_AUTHORIZE_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+var DEFAULT_SCOPES = ["openid", "profile", "email"];
+function GoogleOAuthPlugin(options) {
+  const {
+    clientId,
+    redirectUri,
+    tokenEndpoint = "/api/auth/google/callback",
+    authorizeUrl = DEFAULT_AUTHORIZE_URL,
+    popupWidth = 500,
+    popupHeight = 600
+  } = options;
+  const getRedirectUri = () => redirectUri ?? (typeof window !== "undefined" ? `${window.location.origin}/auth/callback` : "");
+  return {
+    name: "oauth-google",
+    type: "oauth",
+    async login(credentials, ctx) {
+      const mode = credentials.mode ?? "popup";
+      const scopes = credentials.scopes ?? DEFAULT_SCOPES;
+      const pkce = await (0, import_core.generatePKCE)();
+      (0, import_core.storePKCEVerifier)(pkce.codeVerifier);
+      const state = (0, import_core.generateCSRFState)("google");
+      const params = new URLSearchParams({
+        client_id: clientId,
+        redirect_uri: getRedirectUri(),
+        response_type: "code",
+        scope: scopes.join(" "),
+        state,
+        code_challenge: pkce.codeChallenge,
+        code_challenge_method: pkce.codeChallengeMethod,
+        access_type: "offline",
+        prompt: "consent"
+      });
+      if (credentials.loginHint) {
+        params.set("login_hint", credentials.loginHint);
+      }
+      const authUrl = `${authorizeUrl}?${params.toString()}`;
+      if (mode === "redirect") {
+        window.location.href = authUrl;
+        return new Promise(() => {
+        });
+      }
+      return new Promise((resolve, reject) => {
+        const left = Math.round(window.screenX + (window.outerWidth - popupWidth) / 2);
+        const top = Math.round(window.screenY + (window.outerHeight - popupHeight) / 2);
+        const popup = window.open(
+          authUrl,
+          "swr-login-google",
+          `width=${popupWidth},height=${popupHeight},left=${left},top=${top},toolbar=no,menubar=no`
+        );
+        if (!popup) {
+          reject(new import_core.OAuthPopupError("Popup was blocked by the browser"));
+          return;
+        }
+        const pollTimer = setInterval(() => {
+          if (popup.closed) {
+            clearInterval(pollTimer);
+            reject(new import_core.OAuthPopupError("Popup was closed by user"));
+          }
+        }, 500);
+        const handleMessage = async (event) => {
+          if (event.origin !== ctx.origin) return;
+          const { type, code, state: returnedState, error } = event.data ?? {};
+          if (type !== "SWR_LOGIN_OAUTH_CALLBACK") return;
+          clearInterval(pollTimer);
+          window.removeEventListener("message", handleMessage);
+          popup.close();
+          if (error) {
+            reject(new import_core.OAuthPopupError(error));
+            return;
+          }
+          if (!(0, import_core.validateCSRFState)(returnedState, "google")) {
+            reject(new import_core.OAuthPopupError("CSRF state validation failed"));
+            return;
+          }
+          try {
+            const response = await fetch(tokenEndpoint, {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              credentials: "include",
+              body: JSON.stringify({
+                code,
+                code_verifier: pkce.codeVerifier,
+                redirect_uri: getRedirectUri()
+              })
+            });
+            if (!response.ok) {
+              throw new Error(`Token exchange failed: ${response.statusText}`);
+            }
+            const data = await response.json();
+            const authResponse = {
+              user: data.user,
+              accessToken: data.accessToken ?? data.access_token,
+              refreshToken: data.refreshToken ?? data.refresh_token,
+              expiresAt: data.expiresAt ?? data.expires_at ?? Date.now() + 3600 * 1e3
+            };
+            ctx.setTokens({
+              accessToken: authResponse.accessToken,
+              refreshToken: authResponse.refreshToken,
+              expiresAt: authResponse.expiresAt
+            });
+            resolve(authResponse);
+          } catch (err) {
+            reject(err);
+          }
+        };
+        window.addEventListener("message", handleMessage);
+      });
+    },
+    async logout(ctx) {
+      ctx.clearTokens();
+    }
+  };
+}
+function handleGoogleCallback() {
+  if (typeof window === "undefined") return;
+  const params = new URLSearchParams(window.location.search);
+  const code = params.get("code");
+  const state = params.get("state");
+  const error = params.get("error");
+  if (window.opener) {
+    window.opener.postMessage(
+      {
+        type: "SWR_LOGIN_OAUTH_CALLBACK",
+        code,
+        state,
+        error
+      },
+      window.location.origin
+    );
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  GoogleOAuthPlugin,
+  handleGoogleCallback
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {\n  type AuthResponse,\n  OAuthPopupError,\n  type SWRLoginPlugin,\n  generateCSRFState,\n  generatePKCE,\n  storePKCEVerifier,\n  validateCSRFState,\n} from '@swr-login/core';\n\nexport interface GoogleOAuthCredentials {\n  /** Login mode: popup (no refresh) or redirect */\n  mode?: 'popup' | 'redirect';\n  /** Custom scopes (default: ['openid', 'profile', 'email']) */\n  scopes?: string[];\n  /** Login hint (email address) */\n  loginHint?: string;\n}\n\nexport interface GoogleOAuthPluginOptions {\n  /** Google OAuth Client ID */\n  clientId: string;\n  /** Redirect URI for OAuth callback */\n  redirectUri?: string;\n  /** Backend token exchange endpoint */\n  tokenEndpoint?: string;\n  /** Authorization endpoint (default: Google's) */\n  authorizeUrl?: string;\n  /** Popup window dimensions */\n  popupWidth?: number;\n  popupHeight?: number;\n}\n\nconst DEFAULT_AUTHORIZE_URL = 'https://accounts.google.com/o/oauth2/v2/auth';\nconst DEFAULT_SCOPES = ['openid', 'profile', 'email'];\n\n/**\n * Google OAuth 2.0 login plugin with PKCE support.\n *\n * Supports two modes:\n * - **Popup** (default): Opens OAuth flow in a popup window. Main page stays intact.\n * - **Redirect**: Full-page redirect to Google, then back to your app.\n *\n * @example\n * ```ts\n * import { GoogleOAuthPlugin } from '@swr-login/plugin-oauth-google';\n *\n * const plugin = GoogleOAuthPlugin({\n *   clientId: 'your-google-client-id.apps.googleusercontent.com',\n *   tokenEndpoint: '/api/auth/google/callback',\n * });\n * ```\n */\nexport function GoogleOAuthPlugin(\n  options: GoogleOAuthPluginOptions,\n): SWRLoginPlugin<GoogleOAuthCredentials> {\n  const {\n    clientId,\n    redirectUri,\n    tokenEndpoint = '/api/auth/google/callback',\n    authorizeUrl = DEFAULT_AUTHORIZE_URL,\n    popupWidth = 500,\n    popupHeight = 600,\n  } = options;\n\n  const getRedirectUri = () =>\n    redirectUri ?? (typeof window !== 'undefined' ? `${window.location.origin}/auth/callback` : '');\n\n  return {\n    name: 'oauth-google',\n    type: 'oauth',\n\n    async login(credentials, ctx) {\n      const mode = credentials.mode ?? 'popup';\n      const scopes = credentials.scopes ?? DEFAULT_SCOPES;\n\n      const pkce = await generatePKCE();\n      storePKCEVerifier(pkce.codeVerifier);\n\n      const state = generateCSRFState('google');\n\n      const params = new URLSearchParams({\n        client_id: clientId,\n        redirect_uri: getRedirectUri(),\n        response_type: 'code',\n        scope: scopes.join(' '),\n        state,\n        code_challenge: pkce.codeChallenge,\n        code_challenge_method: pkce.codeChallengeMethod,\n        access_type: 'offline',\n        prompt: 'consent',\n      });\n\n      if (credentials.loginHint) {\n        params.set('login_hint', credentials.loginHint);\n      }\n\n      const authUrl = `${authorizeUrl}?${params.toString()}`;\n\n      if (mode === 'redirect') {\n        window.location.href = authUrl;\n        // Will never resolve - page navigates away\n        return new Promise<AuthResponse>(() => {});\n      }\n\n      // Popup mode\n      return new Promise<AuthResponse>((resolve, reject) => {\n        const left = Math.round(window.screenX + (window.outerWidth - popupWidth) / 2);\n        const top = Math.round(window.screenY + (window.outerHeight - popupHeight) / 2);\n\n        const popup = window.open(\n          authUrl,\n          'swr-login-google',\n          `width=${popupWidth},height=${popupHeight},left=${left},top=${top},toolbar=no,menubar=no`,\n        );\n\n        if (!popup) {\n          reject(new OAuthPopupError('Popup was blocked by the browser'));\n          return;\n        }\n\n        // Poll for popup close and listen for postMessage\n        const pollTimer = setInterval(() => {\n          if (popup.closed) {\n            clearInterval(pollTimer);\n            reject(new OAuthPopupError('Popup was closed by user'));\n          }\n        }, 500);\n\n        const handleMessage = async (event: MessageEvent) => {\n          if (event.origin !== ctx.origin) return;\n\n          const { type, code, state: returnedState, error } = event.data ?? {};\n\n          if (type !== 'SWR_LOGIN_OAUTH_CALLBACK') return;\n\n          clearInterval(pollTimer);\n          window.removeEventListener('message', handleMessage);\n          popup.close();\n\n          if (error) {\n            reject(new OAuthPopupError(error));\n            return;\n          }\n\n          if (!validateCSRFState(returnedState, 'google')) {\n            reject(new OAuthPopupError('CSRF state validation failed'));\n            return;\n          }\n\n          try {\n            // Exchange code for tokens via backend\n            const response = await fetch(tokenEndpoint, {\n              method: 'POST',\n              headers: { 'Content-Type': 'application/json' },\n              credentials: 'include',\n              body: JSON.stringify({\n                code,\n                code_verifier: pkce.codeVerifier,\n                redirect_uri: getRedirectUri(),\n              }),\n            });\n\n            if (!response.ok) {\n              throw new Error(`Token exchange failed: ${response.statusText}`);\n            }\n\n            const data = await response.json();\n            const authResponse: AuthResponse = {\n              user: data.user,\n              accessToken: data.accessToken ?? data.access_token,\n              refreshToken: data.refreshToken ?? data.refresh_token,\n              expiresAt: data.expiresAt ?? data.expires_at ?? Date.now() + 3600 * 1000,\n            };\n\n            ctx.setTokens({\n              accessToken: authResponse.accessToken,\n              refreshToken: authResponse.refreshToken,\n              expiresAt: authResponse.expiresAt,\n            });\n\n            resolve(authResponse);\n          } catch (err) {\n            reject(err);\n          }\n        };\n\n        window.addEventListener('message', handleMessage);\n      });\n    },\n\n    async logout(ctx) {\n      ctx.clearTokens();\n    },\n  };\n}\n\n/**\n * Helper: Call this from your OAuth callback page to send the code back to the opener.\n *\n * @example\n * ```ts\n * // pages/auth/callback.tsx\n * import { handleGoogleCallback } from '@swr-login/plugin-oauth-google';\n *\n * useEffect(() => {\n *   handleGoogleCallback();\n * }, []);\n * ```\n */\nexport function handleGoogleCallback(): void {\n  if (typeof window === 'undefined') return;\n\n  const params = new URLSearchParams(window.location.search);\n  const code = params.get('code');\n  const state = params.get('state');\n  const error = params.get('error');\n\n  if (window.opener) {\n    window.opener.postMessage(\n      {\n        type: 'SWR_LOGIN_OAUTH_CALLBACK',\n        code,\n        state,\n        error,\n      },\n      window.location.origin,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAQO;AAyBP,IAAM,wBAAwB;AAC9B,IAAM,iBAAiB,CAAC,UAAU,WAAW,OAAO;AAmB7C,SAAS,kBACd,SACwC;AACxC,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,aAAa;AAAA,IACb,cAAc;AAAA,EAChB,IAAI;AAEJ,QAAM,iBAAiB,MACrB,gBAAgB,OAAO,WAAW,cAAc,GAAG,OAAO,SAAS,MAAM,mBAAmB;AAE9F,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IAEN,MAAM,MAAM,aAAa,KAAK;AAC5B,YAAM,OAAO,YAAY,QAAQ;AACjC,YAAM,SAAS,YAAY,UAAU;AAErC,YAAM,OAAO,UAAM,0BAAa;AAChC,yCAAkB,KAAK,YAAY;AAEnC,YAAM,YAAQ,+BAAkB,QAAQ;AAExC,YAAM,SAAS,IAAI,gBAAgB;AAAA,QACjC,WAAW;AAAA,QACX,cAAc,eAAe;AAAA,QAC7B,eAAe;AAAA,QACf,OAAO,OAAO,KAAK,GAAG;AAAA,QACtB;AAAA,QACA,gBAAgB,KAAK;AAAA,QACrB,uBAAuB,KAAK;AAAA,QAC5B,aAAa;AAAA,QACb,QAAQ;AAAA,MACV,CAAC;AAED,UAAI,YAAY,WAAW;AACzB,eAAO,IAAI,cAAc,YAAY,SAAS;AAAA,MAChD;AAEA,YAAM,UAAU,GAAG,YAAY,IAAI,OAAO,SAAS,CAAC;AAEpD,UAAI,SAAS,YAAY;AACvB,eAAO,SAAS,OAAO;AAEvB,eAAO,IAAI,QAAsB,MAAM;AAAA,QAAC,CAAC;AAAA,MAC3C;AAGA,aAAO,IAAI,QAAsB,CAAC,SAAS,WAAW;AACpD,cAAM,OAAO,KAAK,MAAM,OAAO,WAAW,OAAO,aAAa,cAAc,CAAC;AAC7E,cAAM,MAAM,KAAK,MAAM,OAAO,WAAW,OAAO,cAAc,eAAe,CAAC;AAE9E,cAAM,QAAQ,OAAO;AAAA,UACnB;AAAA,UACA;AAAA,UACA,SAAS,UAAU,WAAW,WAAW,SAAS,IAAI,QAAQ,GAAG;AAAA,QACnE;AAEA,YAAI,CAAC,OAAO;AACV,iBAAO,IAAI,4BAAgB,kCAAkC,CAAC;AAC9D;AAAA,QACF;AAGA,cAAM,YAAY,YAAY,MAAM;AAClC,cAAI,MAAM,QAAQ;AAChB,0BAAc,SAAS;AACvB,mBAAO,IAAI,4BAAgB,0BAA0B,CAAC;AAAA,UACxD;AAAA,QACF,GAAG,GAAG;AAEN,cAAM,gBAAgB,OAAO,UAAwB;AACnD,cAAI,MAAM,WAAW,IAAI,OAAQ;AAEjC,gBAAM,EAAE,MAAM,MAAM,OAAO,eAAe,MAAM,IAAI,MAAM,QAAQ,CAAC;AAEnE,cAAI,SAAS,2BAA4B;AAEzC,wBAAc,SAAS;AACvB,iBAAO,oBAAoB,WAAW,aAAa;AACnD,gBAAM,MAAM;AAEZ,cAAI,OAAO;AACT,mBAAO,IAAI,4BAAgB,KAAK,CAAC;AACjC;AAAA,UACF;AAEA,cAAI,KAAC,+BAAkB,eAAe,QAAQ,GAAG;AAC/C,mBAAO,IAAI,4BAAgB,8BAA8B,CAAC;AAC1D;AAAA,UACF;AAEA,cAAI;AAEF,kBAAM,WAAW,MAAM,MAAM,eAAe;AAAA,cAC1C,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,aAAa;AAAA,cACb,MAAM,KAAK,UAAU;AAAA,gBACnB;AAAA,gBACA,eAAe,KAAK;AAAA,gBACpB,cAAc,eAAe;AAAA,cAC/B,CAAC;AAAA,YACH,CAAC;AAED,gBAAI,CAAC,SAAS,IAAI;AAChB,oBAAM,IAAI,MAAM,0BAA0B,SAAS,UAAU,EAAE;AAAA,YACjE;AAEA,kBAAM,OAAO,MAAM,SAAS,KAAK;AACjC,kBAAM,eAA6B;AAAA,cACjC,MAAM,KAAK;AAAA,cACX,aAAa,KAAK,eAAe,KAAK;AAAA,cACtC,cAAc,KAAK,gBAAgB,KAAK;AAAA,cACxC,WAAW,KAAK,aAAa,KAAK,cAAc,KAAK,IAAI,IAAI,OAAO;AAAA,YACtE;AAEA,gBAAI,UAAU;AAAA,cACZ,aAAa,aAAa;AAAA,cAC1B,cAAc,aAAa;AAAA,cAC3B,WAAW,aAAa;AAAA,YAC1B,CAAC;AAED,oBAAQ,YAAY;AAAA,UACtB,SAAS,KAAK;AACZ,mBAAO,GAAG;AAAA,UACZ;AAAA,QACF;AAEA,eAAO,iBAAiB,WAAW,aAAa;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,OAAO,KAAK;AAChB,UAAI,YAAY;AAAA,IAClB;AAAA,EACF;AACF;AAeO,SAAS,uBAA6B;AAC3C,MAAI,OAAO,WAAW,YAAa;AAEnC,QAAM,SAAS,IAAI,gBAAgB,OAAO,SAAS,MAAM;AACzD,QAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,QAAM,QAAQ,OAAO,IAAI,OAAO;AAChC,QAAM,QAAQ,OAAO,IAAI,OAAO;AAEhC,MAAI,OAAO,QAAQ;AACjB,WAAO,OAAO;AAAA,MACZ;AAAA,QACE,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,OAAO,SAAS;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,57 @@
+import { SWRLoginPlugin } from '@swr-login/core';
+
+interface GoogleOAuthCredentials {
+    /** Login mode: popup (no refresh) or redirect */
+    mode?: 'popup' | 'redirect';
+    /** Custom scopes (default: ['openid', 'profile', 'email']) */
+    scopes?: string[];
+    /** Login hint (email address) */
+    loginHint?: string;
+}
+interface GoogleOAuthPluginOptions {
+    /** Google OAuth Client ID */
+    clientId: string;
+    /** Redirect URI for OAuth callback */
+    redirectUri?: string;
+    /** Backend token exchange endpoint */
+    tokenEndpoint?: string;
+    /** Authorization endpoint (default: Google's) */
+    authorizeUrl?: string;
+    /** Popup window dimensions */
+    popupWidth?: number;
+    popupHeight?: number;
+}
+/**
+ * Google OAuth 2.0 login plugin with PKCE support.
+ *
+ * Supports two modes:
+ * - **Popup** (default): Opens OAuth flow in a popup window. Main page stays intact.
+ * - **Redirect**: Full-page redirect to Google, then back to your app.
+ *
+ * @example
+ * ```ts
+ * import { GoogleOAuthPlugin } from '@swr-login/plugin-oauth-google';
+ *
+ * const plugin = GoogleOAuthPlugin({
+ *   clientId: 'your-google-client-id.apps.googleusercontent.com',
+ *   tokenEndpoint: '/api/auth/google/callback',
+ * });
+ * ```
+ */
+declare function GoogleOAuthPlugin(options: GoogleOAuthPluginOptions): SWRLoginPlugin<GoogleOAuthCredentials>;
+/**
+ * Helper: Call this from your OAuth callback page to send the code back to the opener.
+ *
+ * @example
+ * ```ts
+ * // pages/auth/callback.tsx
+ * import { handleGoogleCallback } from '@swr-login/plugin-oauth-google';
+ *
+ * useEffect(() => {
+ *   handleGoogleCallback();
+ * }, []);
+ * ```
+ */
+declare function handleGoogleCallback(): void;
+
+export { type GoogleOAuthCredentials, GoogleOAuthPlugin, type GoogleOAuthPluginOptions, handleGoogleCallback };

package/dist/index.d.ts

@@ -0,0 +1,57 @@
+import { SWRLoginPlugin } from '@swr-login/core';
+
+interface GoogleOAuthCredentials {
+    /** Login mode: popup (no refresh) or redirect */
+    mode?: 'popup' | 'redirect';
+    /** Custom scopes (default: ['openid', 'profile', 'email']) */
+    scopes?: string[];
+    /** Login hint (email address) */
+    loginHint?: string;
+}
+interface GoogleOAuthPluginOptions {
+    /** Google OAuth Client ID */
+    clientId: string;
+    /** Redirect URI for OAuth callback */
+    redirectUri?: string;
+    /** Backend token exchange endpoint */
+    tokenEndpoint?: string;
+    /** Authorization endpoint (default: Google's) */
+    authorizeUrl?: string;
+    /** Popup window dimensions */
+    popupWidth?: number;
+    popupHeight?: number;
+}
+/**
+ * Google OAuth 2.0 login plugin with PKCE support.
+ *
+ * Supports two modes:
+ * - **Popup** (default): Opens OAuth flow in a popup window. Main page stays intact.
+ * - **Redirect**: Full-page redirect to Google, then back to your app.
+ *
+ * @example
+ * ```ts
+ * import { GoogleOAuthPlugin } from '@swr-login/plugin-oauth-google';
+ *
+ * const plugin = GoogleOAuthPlugin({
+ *   clientId: 'your-google-client-id.apps.googleusercontent.com',
+ *   tokenEndpoint: '/api/auth/google/callback',
+ * });
+ * ```
+ */
+declare function GoogleOAuthPlugin(options: GoogleOAuthPluginOptions): SWRLoginPlugin<GoogleOAuthCredentials>;
+/**
+ * Helper: Call this from your OAuth callback page to send the code back to the opener.
+ *
+ * @example
+ * ```ts
+ * // pages/auth/callback.tsx
+ * import { handleGoogleCallback } from '@swr-login/plugin-oauth-google';
+ *
+ * useEffect(() => {
+ *   handleGoogleCallback();
+ * }, []);
+ * ```
+ */
+declare function handleGoogleCallback(): void;
+
+export { type GoogleOAuthCredentials, GoogleOAuthPlugin, type GoogleOAuthPluginOptions, handleGoogleCallback };

package/dist/index.js

@@ -0,0 +1,144 @@
+// src/index.ts
+import {
+  OAuthPopupError,
+  generateCSRFState,
+  generatePKCE,
+  storePKCEVerifier,
+  validateCSRFState
+} from "@swr-login/core";
+var DEFAULT_AUTHORIZE_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+var DEFAULT_SCOPES = ["openid", "profile", "email"];
+function GoogleOAuthPlugin(options) {
+  const {
+    clientId,
+    redirectUri,
+    tokenEndpoint = "/api/auth/google/callback",
+    authorizeUrl = DEFAULT_AUTHORIZE_URL,
+    popupWidth = 500,
+    popupHeight = 600
+  } = options;
+  const getRedirectUri = () => redirectUri ?? (typeof window !== "undefined" ? `${window.location.origin}/auth/callback` : "");
+  return {
+    name: "oauth-google",
+    type: "oauth",
+    async login(credentials, ctx) {
+      const mode = credentials.mode ?? "popup";
+      const scopes = credentials.scopes ?? DEFAULT_SCOPES;
+      const pkce = await generatePKCE();
+      storePKCEVerifier(pkce.codeVerifier);
+      const state = generateCSRFState("google");
+      const params = new URLSearchParams({
+        client_id: clientId,
+        redirect_uri: getRedirectUri(),
+        response_type: "code",
+        scope: scopes.join(" "),
+        state,
+        code_challenge: pkce.codeChallenge,
+        code_challenge_method: pkce.codeChallengeMethod,
+        access_type: "offline",
+        prompt: "consent"
+      });
+      if (credentials.loginHint) {
+        params.set("login_hint", credentials.loginHint);
+      }
+      const authUrl = `${authorizeUrl}?${params.toString()}`;
+      if (mode === "redirect") {
+        window.location.href = authUrl;
+        return new Promise(() => {
+        });
+      }
+      return new Promise((resolve, reject) => {
+        const left = Math.round(window.screenX + (window.outerWidth - popupWidth) / 2);
+        const top = Math.round(window.screenY + (window.outerHeight - popupHeight) / 2);
+        const popup = window.open(
+          authUrl,
+          "swr-login-google",
+          `width=${popupWidth},height=${popupHeight},left=${left},top=${top},toolbar=no,menubar=no`
+        );
+        if (!popup) {
+          reject(new OAuthPopupError("Popup was blocked by the browser"));
+          return;
+        }
+        const pollTimer = setInterval(() => {
+          if (popup.closed) {
+            clearInterval(pollTimer);
+            reject(new OAuthPopupError("Popup was closed by user"));
+          }
+        }, 500);
+        const handleMessage = async (event) => {
+          if (event.origin !== ctx.origin) return;
+          const { type, code, state: returnedState, error } = event.data ?? {};
+          if (type !== "SWR_LOGIN_OAUTH_CALLBACK") return;
+          clearInterval(pollTimer);
+          window.removeEventListener("message", handleMessage);
+          popup.close();
+          if (error) {
+            reject(new OAuthPopupError(error));
+            return;
+          }
+          if (!validateCSRFState(returnedState, "google")) {
+            reject(new OAuthPopupError("CSRF state validation failed"));
+            return;
+          }
+          try {
+            const response = await fetch(tokenEndpoint, {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              credentials: "include",
+              body: JSON.stringify({
+                code,
+                code_verifier: pkce.codeVerifier,
+                redirect_uri: getRedirectUri()
+              })
+            });
+            if (!response.ok) {
+              throw new Error(`Token exchange failed: ${response.statusText}`);
+            }
+            const data = await response.json();
+            const authResponse = {
+              user: data.user,
+              accessToken: data.accessToken ?? data.access_token,
+              refreshToken: data.refreshToken ?? data.refresh_token,
+              expiresAt: data.expiresAt ?? data.expires_at ?? Date.now() + 3600 * 1e3
+            };
+            ctx.setTokens({
+              accessToken: authResponse.accessToken,
+              refreshToken: authResponse.refreshToken,
+              expiresAt: authResponse.expiresAt
+            });
+            resolve(authResponse);
+          } catch (err) {
+            reject(err);
+          }
+        };
+        window.addEventListener("message", handleMessage);
+      });
+    },
+    async logout(ctx) {
+      ctx.clearTokens();
+    }
+  };
+}
+function handleGoogleCallback() {
+  if (typeof window === "undefined") return;
+  const params = new URLSearchParams(window.location.search);
+  const code = params.get("code");
+  const state = params.get("state");
+  const error = params.get("error");
+  if (window.opener) {
+    window.opener.postMessage(
+      {
+        type: "SWR_LOGIN_OAUTH_CALLBACK",
+        code,
+        state,
+        error
+      },
+      window.location.origin
+    );
+  }
+}
+export {
+  GoogleOAuthPlugin,
+  handleGoogleCallback
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {\n  type AuthResponse,\n  OAuthPopupError,\n  type SWRLoginPlugin,\n  generateCSRFState,\n  generatePKCE,\n  storePKCEVerifier,\n  validateCSRFState,\n} from '@swr-login/core';\n\nexport interface GoogleOAuthCredentials {\n  /** Login mode: popup (no refresh) or redirect */\n  mode?: 'popup' | 'redirect';\n  /** Custom scopes (default: ['openid', 'profile', 'email']) */\n  scopes?: string[];\n  /** Login hint (email address) */\n  loginHint?: string;\n}\n\nexport interface GoogleOAuthPluginOptions {\n  /** Google OAuth Client ID */\n  clientId: string;\n  /** Redirect URI for OAuth callback */\n  redirectUri?: string;\n  /** Backend token exchange endpoint */\n  tokenEndpoint?: string;\n  /** Authorization endpoint (default: Google's) */\n  authorizeUrl?: string;\n  /** Popup window dimensions */\n  popupWidth?: number;\n  popupHeight?: number;\n}\n\nconst DEFAULT_AUTHORIZE_URL = 'https://accounts.google.com/o/oauth2/v2/auth';\nconst DEFAULT_SCOPES = ['openid', 'profile', 'email'];\n\n/**\n * Google OAuth 2.0 login plugin with PKCE support.\n *\n * Supports two modes:\n * - **Popup** (default): Opens OAuth flow in a popup window. Main page stays intact.\n * - **Redirect**: Full-page redirect to Google, then back to your app.\n *\n * @example\n * ```ts\n * import { GoogleOAuthPlugin } from '@swr-login/plugin-oauth-google';\n *\n * const plugin = GoogleOAuthPlugin({\n *   clientId: 'your-google-client-id.apps.googleusercontent.com',\n *   tokenEndpoint: '/api/auth/google/callback',\n * });\n * ```\n */\nexport function GoogleOAuthPlugin(\n  options: GoogleOAuthPluginOptions,\n): SWRLoginPlugin<GoogleOAuthCredentials> {\n  const {\n    clientId,\n    redirectUri,\n    tokenEndpoint = '/api/auth/google/callback',\n    authorizeUrl = DEFAULT_AUTHORIZE_URL,\n    popupWidth = 500,\n    popupHeight = 600,\n  } = options;\n\n  const getRedirectUri = () =>\n    redirectUri ?? (typeof window !== 'undefined' ? `${window.location.origin}/auth/callback` : '');\n\n  return {\n    name: 'oauth-google',\n    type: 'oauth',\n\n    async login(credentials, ctx) {\n      const mode = credentials.mode ?? 'popup';\n      const scopes = credentials.scopes ?? DEFAULT_SCOPES;\n\n      const pkce = await generatePKCE();\n      storePKCEVerifier(pkce.codeVerifier);\n\n      const state = generateCSRFState('google');\n\n      const params = new URLSearchParams({\n        client_id: clientId,\n        redirect_uri: getRedirectUri(),\n        response_type: 'code',\n        scope: scopes.join(' '),\n        state,\n        code_challenge: pkce.codeChallenge,\n        code_challenge_method: pkce.codeChallengeMethod,\n        access_type: 'offline',\n        prompt: 'consent',\n      });\n\n      if (credentials.loginHint) {\n        params.set('login_hint', credentials.loginHint);\n      }\n\n      const authUrl = `${authorizeUrl}?${params.toString()}`;\n\n      if (mode === 'redirect') {\n        window.location.href = authUrl;\n        // Will never resolve - page navigates away\n        return new Promise<AuthResponse>(() => {});\n      }\n\n      // Popup mode\n      return new Promise<AuthResponse>((resolve, reject) => {\n        const left = Math.round(window.screenX + (window.outerWidth - popupWidth) / 2);\n        const top = Math.round(window.screenY + (window.outerHeight - popupHeight) / 2);\n\n        const popup = window.open(\n          authUrl,\n          'swr-login-google',\n          `width=${popupWidth},height=${popupHeight},left=${left},top=${top},toolbar=no,menubar=no`,\n        );\n\n        if (!popup) {\n          reject(new OAuthPopupError('Popup was blocked by the browser'));\n          return;\n        }\n\n        // Poll for popup close and listen for postMessage\n        const pollTimer = setInterval(() => {\n          if (popup.closed) {\n            clearInterval(pollTimer);\n            reject(new OAuthPopupError('Popup was closed by user'));\n          }\n        }, 500);\n\n        const handleMessage = async (event: MessageEvent) => {\n          if (event.origin !== ctx.origin) return;\n\n          const { type, code, state: returnedState, error } = event.data ?? {};\n\n          if (type !== 'SWR_LOGIN_OAUTH_CALLBACK') return;\n\n          clearInterval(pollTimer);\n          window.removeEventListener('message', handleMessage);\n          popup.close();\n\n          if (error) {\n            reject(new OAuthPopupError(error));\n            return;\n          }\n\n          if (!validateCSRFState(returnedState, 'google')) {\n            reject(new OAuthPopupError('CSRF state validation failed'));\n            return;\n          }\n\n          try {\n            // Exchange code for tokens via backend\n            const response = await fetch(tokenEndpoint, {\n              method: 'POST',\n              headers: { 'Content-Type': 'application/json' },\n              credentials: 'include',\n              body: JSON.stringify({\n                code,\n                code_verifier: pkce.codeVerifier,\n                redirect_uri: getRedirectUri(),\n              }),\n            });\n\n            if (!response.ok) {\n              throw new Error(`Token exchange failed: ${response.statusText}`);\n            }\n\n            const data = await response.json();\n            const authResponse: AuthResponse = {\n              user: data.user,\n              accessToken: data.accessToken ?? data.access_token,\n              refreshToken: data.refreshToken ?? data.refresh_token,\n              expiresAt: data.expiresAt ?? data.expires_at ?? Date.now() + 3600 * 1000,\n            };\n\n            ctx.setTokens({\n              accessToken: authResponse.accessToken,\n              refreshToken: authResponse.refreshToken,\n              expiresAt: authResponse.expiresAt,\n            });\n\n            resolve(authResponse);\n          } catch (err) {\n            reject(err);\n          }\n        };\n\n        window.addEventListener('message', handleMessage);\n      });\n    },\n\n    async logout(ctx) {\n      ctx.clearTokens();\n    },\n  };\n}\n\n/**\n * Helper: Call this from your OAuth callback page to send the code back to the opener.\n *\n * @example\n * ```ts\n * // pages/auth/callback.tsx\n * import { handleGoogleCallback } from '@swr-login/plugin-oauth-google';\n *\n * useEffect(() => {\n *   handleGoogleCallback();\n * }, []);\n * ```\n */\nexport function handleGoogleCallback(): void {\n  if (typeof window === 'undefined') return;\n\n  const params = new URLSearchParams(window.location.search);\n  const code = params.get('code');\n  const state = params.get('state');\n  const error = params.get('error');\n\n  if (window.opener) {\n    window.opener.postMessage(\n      {\n        type: 'SWR_LOGIN_OAUTH_CALLBACK',\n        code,\n        state,\n        error,\n      },\n      window.location.origin,\n    );\n  }\n}\n"],"mappings":";AAAA;AAAA,EAEE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAyBP,IAAM,wBAAwB;AAC9B,IAAM,iBAAiB,CAAC,UAAU,WAAW,OAAO;AAmB7C,SAAS,kBACd,SACwC;AACxC,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,aAAa;AAAA,IACb,cAAc;AAAA,EAChB,IAAI;AAEJ,QAAM,iBAAiB,MACrB,gBAAgB,OAAO,WAAW,cAAc,GAAG,OAAO,SAAS,MAAM,mBAAmB;AAE9F,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IAEN,MAAM,MAAM,aAAa,KAAK;AAC5B,YAAM,OAAO,YAAY,QAAQ;AACjC,YAAM,SAAS,YAAY,UAAU;AAErC,YAAM,OAAO,MAAM,aAAa;AAChC,wBAAkB,KAAK,YAAY;AAEnC,YAAM,QAAQ,kBAAkB,QAAQ;AAExC,YAAM,SAAS,IAAI,gBAAgB;AAAA,QACjC,WAAW;AAAA,QACX,cAAc,eAAe;AAAA,QAC7B,eAAe;AAAA,QACf,OAAO,OAAO,KAAK,GAAG;AAAA,QACtB;AAAA,QACA,gBAAgB,KAAK;AAAA,QACrB,uBAAuB,KAAK;AAAA,QAC5B,aAAa;AAAA,QACb,QAAQ;AAAA,MACV,CAAC;AAED,UAAI,YAAY,WAAW;AACzB,eAAO,IAAI,cAAc,YAAY,SAAS;AAAA,MAChD;AAEA,YAAM,UAAU,GAAG,YAAY,IAAI,OAAO,SAAS,CAAC;AAEpD,UAAI,SAAS,YAAY;AACvB,eAAO,SAAS,OAAO;AAEvB,eAAO,IAAI,QAAsB,MAAM;AAAA,QAAC,CAAC;AAAA,MAC3C;AAGA,aAAO,IAAI,QAAsB,CAAC,SAAS,WAAW;AACpD,cAAM,OAAO,KAAK,MAAM,OAAO,WAAW,OAAO,aAAa,cAAc,CAAC;AAC7E,cAAM,MAAM,KAAK,MAAM,OAAO,WAAW,OAAO,cAAc,eAAe,CAAC;AAE9E,cAAM,QAAQ,OAAO;AAAA,UACnB;AAAA,UACA;AAAA,UACA,SAAS,UAAU,WAAW,WAAW,SAAS,IAAI,QAAQ,GAAG;AAAA,QACnE;AAEA,YAAI,CAAC,OAAO;AACV,iBAAO,IAAI,gBAAgB,kCAAkC,CAAC;AAC9D;AAAA,QACF;AAGA,cAAM,YAAY,YAAY,MAAM;AAClC,cAAI,MAAM,QAAQ;AAChB,0BAAc,SAAS;AACvB,mBAAO,IAAI,gBAAgB,0BAA0B,CAAC;AAAA,UACxD;AAAA,QACF,GAAG,GAAG;AAEN,cAAM,gBAAgB,OAAO,UAAwB;AACnD,cAAI,MAAM,WAAW,IAAI,OAAQ;AAEjC,gBAAM,EAAE,MAAM,MAAM,OAAO,eAAe,MAAM,IAAI,MAAM,QAAQ,CAAC;AAEnE,cAAI,SAAS,2BAA4B;AAEzC,wBAAc,SAAS;AACvB,iBAAO,oBAAoB,WAAW,aAAa;AACnD,gBAAM,MAAM;AAEZ,cAAI,OAAO;AACT,mBAAO,IAAI,gBAAgB,KAAK,CAAC;AACjC;AAAA,UACF;AAEA,cAAI,CAAC,kBAAkB,eAAe,QAAQ,GAAG;AAC/C,mBAAO,IAAI,gBAAgB,8BAA8B,CAAC;AAC1D;AAAA,UACF;AAEA,cAAI;AAEF,kBAAM,WAAW,MAAM,MAAM,eAAe;AAAA,cAC1C,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAC9C,aAAa;AAAA,cACb,MAAM,KAAK,UAAU;AAAA,gBACnB;AAAA,gBACA,eAAe,KAAK;AAAA,gBACpB,cAAc,eAAe;AAAA,cAC/B,CAAC;AAAA,YACH,CAAC;AAED,gBAAI,CAAC,SAAS,IAAI;AAChB,oBAAM,IAAI,MAAM,0BAA0B,SAAS,UAAU,EAAE;AAAA,YACjE;AAEA,kBAAM,OAAO,MAAM,SAAS,KAAK;AACjC,kBAAM,eAA6B;AAAA,cACjC,MAAM,KAAK;AAAA,cACX,aAAa,KAAK,eAAe,KAAK;AAAA,cACtC,cAAc,KAAK,gBAAgB,KAAK;AAAA,cACxC,WAAW,KAAK,aAAa,KAAK,cAAc,KAAK,IAAI,IAAI,OAAO;AAAA,YACtE;AAEA,gBAAI,UAAU;AAAA,cACZ,aAAa,aAAa;AAAA,cAC1B,cAAc,aAAa;AAAA,cAC3B,WAAW,aAAa;AAAA,YAC1B,CAAC;AAED,oBAAQ,YAAY;AAAA,UACtB,SAAS,KAAK;AACZ,mBAAO,GAAG;AAAA,UACZ;AAAA,QACF;AAEA,eAAO,iBAAiB,WAAW,aAAa;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,OAAO,KAAK;AAChB,UAAI,YAAY;AAAA,IAClB;AAAA,EACF;AACF;AAeO,SAAS,uBAA6B;AAC3C,MAAI,OAAO,WAAW,YAAa;AAEnC,QAAM,SAAS,IAAI,gBAAgB,OAAO,SAAS,MAAM;AACzD,QAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,QAAM,QAAQ,OAAO,IAAI,OAAO;AAChC,QAAM,QAAQ,OAAO,IAAI,OAAO;AAEhC,MAAI,OAAO,QAAQ;AACjB,WAAO,OAAO;AAAA,MACZ;AAAA,QACE,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,OAAO,SAAS;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@swr-login/plugin-oauth-google",
+  "version": "0.1.0",
+  "description": "Google OAuth 2.0 login plugin for swr-login (supports Popup & Redirect with PKCE)",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "dependencies": {
+    "@swr-login/core": "0.1.0"
+  },
+  "keywords": [
+    "swr-login",
+    "plugin",
+    "google",
+    "oauth",
+    "login"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/swr-login/swr-login",
+    "directory": "packages/plugin-oauth-google"
+  },
+  "homepage": "https://github.com/swr-login/swr-login#readme",
+  "bugs": "https://github.com/swr-login/swr-login/issues",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "clean": "rm -rf dist"
+  }
+}