@thecodeorigin/auth 0.0.4 → 0.0.6

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@thecodeorigin/auth",
   "configKey": "auth",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -29,6 +29,7 @@ const module$1 = defineNuxtModule({
     addServerHandler({ route: routes.signOut, handler: resolver.resolve("./runtime/server/routes/sign-out.get") });
     for (const [route, file] of [
       ["/api/_auth/session", "session.get"],
+      ["/api/_auth/sign-out", "sign-out.post"],
       ["/api/_auth/organizations", "organizations.get"],
       ["/api/_auth/organizations/switch", "organizations/switch.post"],
       ["/api/_auth/impersonatable-users", "impersonatable-users.get"],

package/dist/runtime/app/composables/useAuth.d.ts

@@ -1,4 +1,5 @@
 import type { ImpersonationCandidate, RpOrganization } from '../../../contract/index.js';
+export type SignInPrompt = 'login' | 'select_account' | 'consent' | 'none';
 export declare function useAuth(): {
     session: import("vue").Ref<{
         user: {
@@ -100,7 +101,9 @@ export declare function useAuth(): {
     }>;
     impersonate: (userId: string) => Promise<void>;
     stopImpersonating: () => Promise<void>;
-    signIn: (redirect?: string) => string | false | void | import("vue-router").RouteLocationAsRelativeGeneric | import("vue-router").RouteLocationAsPathGeneric | Promise<false | void | import("vue-router").NavigationFailure>;
-    signOut: () => string | false | void | import("vue-router").RouteLocationAsRelativeGeneric | import("vue-router").RouteLocationAsPathGeneric | Promise<false | void | import("vue-router").NavigationFailure>;
+    signIn: (redirect?: string, options?: {
+        prompt?: SignInPrompt;
+    }) => string | false | void | import("vue-router").RouteLocationAsRelativeGeneric | import("vue-router").RouteLocationAsPathGeneric | Promise<false | void | import("vue-router").NavigationFailure>;
+    signOut: () => Promise<void>;
     refresh: () => Promise<void>;
 };

package/dist/runtime/app/composables/useAuth.js

@@ -32,14 +32,19 @@ export function useAuth() {
   async function stopImpersonating() {
     session.value = await $fetch("/api/_auth/stop-impersonating", { method: "POST" });
   }
-  function signIn(redirect) {
-    return navigateTo(
-      redirect ? `${routes.signIn}?redirect=${encodeURIComponent(redirect)}` : routes.signIn,
-      { external: true }
-    );
-  }
-  function signOut() {
-    return navigateTo(routes.signOut, { external: true });
+  function signIn(redirect, options) {
+    const params = new URLSearchParams();
+    if (redirect)
+      params.set("redirect", redirect);
+    if (options?.prompt)
+      params.set("prompt", options.prompt);
+    const qs = params.toString();
+    return navigateTo(qs ? `${routes.signIn}?${qs}` : routes.signIn, { external: true });
+  }
+  async function signOut() {
+    await $fetch("/api/_auth/sign-out", { method: "POST" }).catch(() => {
+    });
+    session.value = null;
   }
   return {
     session,

package/dist/runtime/server/api/_auth/sign-out.post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
+    ok: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/api/_auth/sign-out.post.js

@@ -0,0 +1,6 @@
+import { defineEventHandler } from "h3";
+import { destroySession } from "../../utils/session.js";
+export default defineEventHandler(async (event) => {
+  await destroySession(event);
+  return { ok: true };
+});

package/dist/runtime/server/routes/sign-in.get.js

@@ -2,13 +2,16 @@ import { createError, defineEventHandler, getQuery, sendRedirect, setCookie } fr
 import { useRuntimeConfig } from "nitropack/runtime";
 import { withQuery } from "ufo";
 import { callbackRedirectUri, pkceChallenge, randomString, safePath } from "../utils/oidc.js";
+const ALLOWED_PROMPTS = /* @__PURE__ */ new Set(["login", "select_account", "consent", "none"]);
 export default defineEventHandler(async (event) => {
   const { auth: runtimeConfig, public: { auth: publicRuntimeConfig } } = useRuntimeConfig();
   if (!publicRuntimeConfig.domain || !publicRuntimeConfig.clientId || !runtimeConfig.clientSecret)
     throw createError({ statusCode: 503, statusMessage: "Auth not configured" });
+  const query = getQuery(event);
   const state = randomString(32);
   const verifier = randomString(64);
-  const redirectTo = safePath(getQuery(event).redirect, publicRuntimeConfig.routes.home);
+  const redirectTo = safePath(query.redirect, publicRuntimeConfig.routes.home);
+  const prompt = typeof query.prompt === "string" && ALLOWED_PROMPTS.has(query.prompt) ? query.prompt : void 0;
   const opts = { httpOnly: true, secure: !import.meta.dev, sameSite: "lax", maxAge: 600, path: publicRuntimeConfig.routes.callback };
   setCookie(event, "tco_state", state, opts);
   setCookie(event, "tco_verifier", verifier, opts);
@@ -20,6 +23,7 @@ export default defineEventHandler(async (event) => {
     scope: publicRuntimeConfig.scopes.join(" "),
     state,
     code_challenge: await pkceChallenge(verifier),
-    code_challenge_method: "S256"
+    code_challenge_method: "S256",
+    ...prompt ? { prompt } : {}
   }));
 });

package/dist/runtime/server/routes/sign-out.get.js

@@ -1,31 +1,8 @@
-import { defineEventHandler, getRequestHost, getRequestProtocol, sendRedirect } from "h3";
+import { defineEventHandler, sendRedirect } from "h3";
 import { useRuntimeConfig } from "nitropack/runtime";
-import { $fetch } from "ofetch";
-import { withQuery } from "ufo";
 import { destroySession } from "../utils/session.js";
 export default defineEventHandler(async (event) => {
-  const { auth: runtimeConfig, public: { auth: publicRuntimeConfig } } = useRuntimeConfig();
-  const rec = await destroySession(event);
-  if (rec?.accessToken) {
-    await $fetch(`https://${publicRuntimeConfig.domain}/api/auth/oauth2/revoke`, {
-      method: "POST",
-      body: new URLSearchParams({
-        token: rec.refreshToken ?? rec.accessToken,
-        token_type_hint: rec.refreshToken ? "refresh_token" : "access_token",
-        client_id: publicRuntimeConfig.clientId,
-        client_secret: runtimeConfig.clientSecret
-      }).toString(),
-      headers: { "Content-Type": "application/x-www-form-urlencoded" }
-    }).catch(() => {
-    });
-  }
-  const postLogoutRedirectUri = `${getRequestProtocol(event)}://${getRequestHost(event)}${publicRuntimeConfig.routes.home}`;
-  if (rec?.idToken) {
-    return sendRedirect(event, withQuery(`https://${publicRuntimeConfig.domain}/api/auth/oauth2/end-session`, {
-      id_token_hint: rec.idToken,
-      client_id: publicRuntimeConfig.clientId,
-      post_logout_redirect_uri: postLogoutRedirectUri
-    }));
-  }
+  const { public: { auth: publicRuntimeConfig } } = useRuntimeConfig();
+  await destroySession(event);
   return sendRedirect(event, publicRuntimeConfig.routes.home);
 });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@thecodeorigin/auth",
   "type": "module",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "private": false,
   "description": "THECODEORIGIN Authentication Portal client module",
   "repository": "https://github.com/thecodeorigin/auth",