@thecodeorigin/auth 0.0.1

package/dist/runtime/server/utils/session.d.ts

@@ -0,0 +1,74 @@
+import type { H3Event } from 'h3';
+import type { AbilityRule, PublicSession } from '../../../contract/index.js';
+export interface SessionRecord {
+    sub: string;
+    user: {
+        sub: string;
+        email: string;
+        name: string | null;
+        picture: string | null;
+    };
+    abilities: AbilityRule[];
+    systemRole: string | null;
+    organizations: PublicSession['organizations'];
+    activeOrg: string | null;
+    entitlement: PublicSession['entitlement'];
+    accessToken: string;
+    refreshToken: string | null;
+    accessExpiresAt: number;
+    isImpersonation: boolean;
+    impersonator: {
+        sub: string;
+        email: string;
+        name: string | null;
+        picture: string | null;
+    } | null;
+    backupId: string | null;
+}
+export declare function newSessionId(): string;
+export declare function writeSessionRecord(id: string, rec: SessionRecord): Promise<void>;
+export declare function readSessionRecord(event: H3Event): Promise<{
+    id: string;
+    rec: SessionRecord;
+} | null>;
+export declare function setSessionCookie(event: H3Event, id: string): Promise<void>;
+export declare function destroySession(event: H3Event): Promise<SessionRecord | null>;
+export declare function readSessionRecordById(id: string): Promise<SessionRecord | null>;
+/** Server-safe session for domain routes — no tokens, no internal storage fields. */
+export declare function getServerAuthSession(event: H3Event): Promise<{
+    sub: string;
+    email: string;
+    name: string | null;
+    picture: string | null;
+    systemRole: string | null;
+    abilities: {
+        action: string;
+        subject: string;
+        conditions?: Record<string, string> | undefined;
+    }[];
+    organizations: {
+        id: string;
+        slug: string;
+        name: string;
+        role: string;
+        personal: boolean;
+    }[];
+    activeOrg: string | null;
+    entitlement: {
+        product: string;
+        plan: string;
+        status: string;
+        active: boolean;
+        currentPeriodEnd: number | null;
+    } | null;
+    isImpersonation: boolean;
+    impersonator: {
+        sub: string;
+        email: string;
+        name: string | null;
+        picture: string | null;
+    } | null;
+} | null>;
+export type ServerAuthSession = NonNullable<Awaited<ReturnType<typeof getServerAuthSession>>>;
+/** Browser-safe projection — tokens are excluded. */
+export declare function toPublicSession(rec: SessionRecord): PublicSession;

package/dist/runtime/server/utils/session.js

@@ -0,0 +1,79 @@
+import { deleteCookie, getCookie, setCookie } from "h3";
+import { useStorage } from "nitropack/runtime";
+import { resolveAuthConfig } from "./oidc.js";
+function store(base) {
+  return useStorage(base);
+}
+function key(id) {
+  return `session:${id}`;
+}
+export function newSessionId() {
+  const a = new Uint8Array(32);
+  crypto.getRandomValues(a);
+  return [...a].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+export async function writeSessionRecord(id, rec) {
+  const cfg = resolveAuthConfig();
+  await store(cfg.storageBase).setItem(key(id), rec);
+}
+export async function readSessionRecord(event) {
+  const cfg = resolveAuthConfig();
+  const id = getCookie(event, cfg.cookieName);
+  if (!id)
+    return null;
+  const rec = await store(cfg.storageBase).getItem(key(id));
+  return rec ? { id, rec } : null;
+}
+export async function setSessionCookie(event, id) {
+  const cfg = resolveAuthConfig();
+  setCookie(event, cfg.cookieName, id, {
+    httpOnly: true,
+    secure: !import.meta.dev,
+    sameSite: "lax",
+    path: "/",
+    maxAge: 60 * 60 * 24 * 7
+  });
+}
+export async function destroySession(event) {
+  const cfg = resolveAuthConfig();
+  const id = getCookie(event, cfg.cookieName);
+  if (!id)
+    return null;
+  const rec = await store(cfg.storageBase).getItem(key(id));
+  await store(cfg.storageBase).removeItem(key(id));
+  deleteCookie(event, cfg.cookieName, { path: "/" });
+  return rec;
+}
+export async function readSessionRecordById(id) {
+  const cfg = resolveAuthConfig();
+  return store(cfg.storageBase).getItem(key(id));
+}
+export async function getServerAuthSession(event) {
+  const s = await readSessionRecord(event);
+  if (!s)
+    return null;
+  return {
+    sub: s.rec.sub,
+    email: s.rec.user.email,
+    name: s.rec.user.name,
+    picture: s.rec.user.picture,
+    systemRole: s.rec.systemRole,
+    abilities: s.rec.abilities,
+    organizations: s.rec.organizations,
+    activeOrg: s.rec.activeOrg,
+    entitlement: s.rec.entitlement,
+    isImpersonation: s.rec.isImpersonation,
+    impersonator: s.rec.impersonator
+  };
+}
+export function toPublicSession(rec) {
+  return {
+    user: rec.user,
+    abilities: rec.abilities,
+    systemRole: rec.systemRole,
+    organizations: rec.organizations,
+    activeOrg: rec.activeOrg,
+    entitlement: rec.entitlement,
+    impersonator: rec.impersonator
+  };
+}

package/dist/runtime/types.d.ts

@@ -0,0 +1,17 @@
+declare module '#app' {
+  interface PageMeta {
+    public?: boolean
+    unauthenticatedOnly?: boolean
+    can?: string[]
+  }
+}
+
+declare module 'vue-router' {
+  interface RouteMeta {
+    public?: boolean
+    unauthenticatedOnly?: boolean
+    can?: string[]
+  }
+}
+
+export {}

package/dist/types.d.mts

@@ -0,0 +1,3 @@
+export { default } from './module.mjs'
+
+export { type AuthRoutes, type ModuleOptions } from './module.mjs'

package/package.json

@@ -0,0 +1,77 @@
+{
+  "name": "@thecodeorigin/auth",
+  "type": "module",
+  "version": "0.0.1",
+  "private": false,
+  "description": "THECODEORIGIN Authentication Portal client module",
+  "repository": "https://github.com/thecodeorigin/auth",
+  "exports": {
+    ".": {
+      "types": "./dist/types.d.mts",
+      "import": "./dist/module.mjs"
+    },
+    "./contract": {
+      "types": "./dist/contract/index.d.mts",
+      "import": "./dist/contract/index.mjs"
+    },
+    "./server": {
+      "types": "./dist/runtime/server/index.d.ts",
+      "import": "./dist/runtime/server/index.js"
+    }
+  },
+  "main": "./dist/module.mjs",
+  "typesVersions": {
+    "*": {
+      ".": [
+        "./dist/types.d.mts"
+      ],
+      "contract": [
+        "./dist/contract/index.d.mts"
+      ],
+      "server": [
+        "./dist/runtime/server/index.d.ts"
+      ]
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "workspaces": [
+    "playground"
+  ],
+  "dependencies": {
+    "@casl/ability": "^6.8.1",
+    "@casl/vue": "^2.2.6",
+    "@nuxt/kit": "^4.4.8",
+    "defu": "^6.1.4",
+    "h3": "^1.14.0",
+    "ofetch": "^1.4.1",
+    "ufo": "^1.5.4",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@nuxt/devtools": "^3.2.4",
+    "@nuxt/eslint-config": "^1.15.2",
+    "@nuxt/module-builder": "^1.0.2",
+    "@nuxt/schema": "^4.4.8",
+    "@nuxt/test-utils": "^4.0.3",
+    "@types/node": "latest",
+    "changelogen": "^0.6.2",
+    "eslint": "^10.4.1",
+    "nuxt": "^4.4.8",
+    "typescript": "~6.0.3",
+    "unbuild": "^3.6.1",
+    "vitest": "^4.1.8",
+    "vue-tsc": "^3.3.3"
+  },
+  "scripts": {
+    "dev": "npm run dev:prepare && nuxt dev playground",
+    "dev:build": "nuxt build playground",
+    "dev:prepare": "nuxt-module-build build --stub && nuxt-module-build prepare && nuxt prepare playground",
+    "release": "npm run lint && npm run test && npm run prepack && changelogen --release && npm publish && git push --follow-tags",
+    "lint": "eslint .",
+    "test": "vitest run",
+    "test:watch": "vitest watch",
+    "test:types": "vue-tsc --noEmit && cd playground && vue-tsc --noEmit"
+  }
+}