@tktchurch/auth 0.9.1

package/dist/nuxt/module.cjs

@@ -0,0 +1,52 @@
+"use strict";var o=Object.defineProperty;var c=Object.getOwnPropertyDescriptor;var s=Object.getOwnPropertyNames;var a=Object.prototype.hasOwnProperty;var h=(e,t)=>{for(var u in t)o(e,u,{get:t[u],enumerable:!0})},l=(e,t,u,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of s(t))!a.call(e,i)&&i!==u&&o(e,i,{get:()=>t[i],enumerable:!(n=c(t,i))||n.enumerable});return e};var f=e=>l(o({},"__esModule",{value:!0}),e);var k={};h(k,{default:()=>p});module.exports=f(k);var r=require("@nuxt/kit"),p=(0,r.defineNuxtModule)({meta:{name:"@tktchurch/auth/nuxt",configKey:"tktAuth",compatibility:{nuxt:">=3.10.0"}},defaults:{baseUrl:"https://prod-auth.tktchurch.com",clientId:"",clientSecret:"",autoRefresh:!0,refreshCookieName:"tkt_refresh_token"},setup(e,t){let u=t.options.runtimeConfig.tktAuth??{};t.options.runtimeConfig.tktAuth={...u,clientSecret:e.clientSecret??u.clientSecret??""};let n=t.options.runtimeConfig.public.tktAuth??{};t.options.runtimeConfig.public.tktAuth={...n,baseUrl:e.baseUrl??n.baseUrl??"https://prod-auth.tktchurch.com",clientId:e.clientId??n.clientId??"",autoRefresh:e.autoRefresh??n.autoRefresh??!0,refreshCookieName:e.refreshCookieName??n.refreshCookieName??"tkt_refresh_token"},(0,r.addPluginTemplate)({filename:"tkt-auth.plugin.mjs",getContents:()=>`
+import { createAuthClient } from "@tktchurch/auth";
+
+export default defineNuxtPlugin(() => {
+  const config = useRuntimeConfig();
+
+  const auth = createAuthClient({
+    baseUrl: config.public.tktAuth.baseUrl,
+    clientId: config.public.tktAuth.clientId,
+    clientSecret: process.server ? config.tktAuth.clientSecret : undefined,
+    autoRefresh: config.public.tktAuth.autoRefresh,
+  });
+
+  return {
+    provide: {
+      tktAuth: auth,
+    },
+  };
+});
+`});let i=(0,r.addTemplate)({filename:"composables/tkt-auth.ts",getContents:()=>`
+import { createAuthClient } from "@tktchurch/auth";
+
+export const useTktAuth = () => useNuxtApp().$tktAuth;
+
+export const createTktServerAuthClient = () => {
+  const config = useRuntimeConfig();
+  return createAuthClient({
+    baseUrl: config.public.tktAuth.baseUrl,
+    clientId: config.public.tktAuth.clientId,
+    clientSecret: config.tktAuth.clientSecret,
+    autoRefresh: config.public.tktAuth.autoRefresh,
+  });
+};
+
+export const useTktRefreshCookieName = () => useRuntimeConfig().public.tktAuth.refreshCookieName;
+`});(0,r.addImports)([{name:"useTktAuth",from:i.dst},{name:"createTktServerAuthClient",from:i.dst},{name:"useTktRefreshCookieName",from:i.dst}]),(0,r.addTypeTemplate)({filename:"types/tkt-auth.d.ts",getContents:()=>`
+import type { AuthClient } from "@tktchurch/auth";
+
+declare module "#app" {
+  interface NuxtApp {
+    $tktAuth: AuthClient;
+  }
+}
+
+declare module "vue" {
+  interface ComponentCustomProperties {
+    $tktAuth: AuthClient;
+  }
+}
+
+export {};
+`})}});

package/dist/nuxt/module.d.cts

@@ -0,0 +1,12 @@
+/** Nuxt module options for `@tktchurch/auth/nuxt`. */
+interface TktAuthNuxtModuleOptions {
+    baseUrl?: string;
+    clientId?: string;
+    clientSecret?: string;
+    autoRefresh?: boolean;
+    refreshCookieName?: string;
+}
+/** Nuxt module entry point that injects `$tktAuth` and auto-import helpers. */
+declare const _default: NuxtModule<TOptions, TOptions, false>;
+
+export { type TktAuthNuxtModuleOptions, _default as default };

package/dist/nuxt/module.d.ts

@@ -0,0 +1,12 @@
+/** Nuxt module options for `@tktchurch/auth/nuxt`. */
+interface TktAuthNuxtModuleOptions {
+    baseUrl?: string;
+    clientId?: string;
+    clientSecret?: string;
+    autoRefresh?: boolean;
+    refreshCookieName?: string;
+}
+/** Nuxt module entry point that injects `$tktAuth` and auto-import helpers. */
+declare const _default: NuxtModule<TOptions, TOptions, false>;
+
+export { type TktAuthNuxtModuleOptions, _default as default };

package/dist/nuxt/module.js

@@ -0,0 +1,52 @@
+import{addImports as u,addPluginTemplate as o,addTemplate as c,addTypeTemplate as s,defineNuxtModule as a}from"@nuxt/kit";var l=a({meta:{name:"@tktchurch/auth/nuxt",configKey:"tktAuth",compatibility:{nuxt:">=3.10.0"}},defaults:{baseUrl:"https://prod-auth.tktchurch.com",clientId:"",clientSecret:"",autoRefresh:!0,refreshCookieName:"tkt_refresh_token"},setup(t,r){let n=r.options.runtimeConfig.tktAuth??{};r.options.runtimeConfig.tktAuth={...n,clientSecret:t.clientSecret??n.clientSecret??""};let e=r.options.runtimeConfig.public.tktAuth??{};r.options.runtimeConfig.public.tktAuth={...e,baseUrl:t.baseUrl??e.baseUrl??"https://prod-auth.tktchurch.com",clientId:t.clientId??e.clientId??"",autoRefresh:t.autoRefresh??e.autoRefresh??!0,refreshCookieName:t.refreshCookieName??e.refreshCookieName??"tkt_refresh_token"},o({filename:"tkt-auth.plugin.mjs",getContents:()=>`
+import { createAuthClient } from "@tktchurch/auth";
+
+export default defineNuxtPlugin(() => {
+  const config = useRuntimeConfig();
+
+  const auth = createAuthClient({
+    baseUrl: config.public.tktAuth.baseUrl,
+    clientId: config.public.tktAuth.clientId,
+    clientSecret: process.server ? config.tktAuth.clientSecret : undefined,
+    autoRefresh: config.public.tktAuth.autoRefresh,
+  });
+
+  return {
+    provide: {
+      tktAuth: auth,
+    },
+  };
+});
+`});let i=c({filename:"composables/tkt-auth.ts",getContents:()=>`
+import { createAuthClient } from "@tktchurch/auth";
+
+export const useTktAuth = () => useNuxtApp().$tktAuth;
+
+export const createTktServerAuthClient = () => {
+  const config = useRuntimeConfig();
+  return createAuthClient({
+    baseUrl: config.public.tktAuth.baseUrl,
+    clientId: config.public.tktAuth.clientId,
+    clientSecret: config.tktAuth.clientSecret,
+    autoRefresh: config.public.tktAuth.autoRefresh,
+  });
+};
+
+export const useTktRefreshCookieName = () => useRuntimeConfig().public.tktAuth.refreshCookieName;
+`});u([{name:"useTktAuth",from:i.dst},{name:"createTktServerAuthClient",from:i.dst},{name:"useTktRefreshCookieName",from:i.dst}]),s({filename:"types/tkt-auth.d.ts",getContents:()=>`
+import type { AuthClient } from "@tktchurch/auth";
+
+declare module "#app" {
+  interface NuxtApp {
+    $tktAuth: AuthClient;
+  }
+}
+
+declare module "vue" {
+  interface ComponentCustomProperties {
+    $tktAuth: AuthClient;
+  }
+}
+
+export {};
+`})}});export{l as default};

package/dist/storage/memory.cjs

@@ -0,0 +1 @@
+"use strict";var a=Object.defineProperty;var p=Object.getOwnPropertyDescriptor;var f=Object.getOwnPropertyNames;var _=Object.prototype.hasOwnProperty;var k=(e,r)=>{for(var t in r)a(e,t,{get:r[t],enumerable:!0})},y=(e,r,t,o)=>{if(r&&typeof r=="object"||typeof r=="function")for(let i of f(r))!_.call(e,i)&&i!==t&&a(e,i,{get:()=>r[i],enumerable:!(o=p(r,i))||o.enumerable});return e};var T=e=>y(a({},"__esModule",{value:!0}),e);var w={};k(w,{createMemoryTokenStorage:()=>g});module.exports=T(w);var n=class extends Error{code;status;details;constructor(r,t,o){super(t),this.name="AuthError",this.code=r,this.status=o?.status,this.details=o?.details}};var m=new Set(["accessToken","tokenType","expiresIn","refreshToken","scope","idToken","authorizationDetails"]);function d(e){if(typeof e!="object"||e===null||Array.isArray(e))return!1;let r=Object.getPrototypeOf(e);return r===Object.prototype||r===null}function l(e){return typeof e=="string"&&e.length>0}function u(e){return typeof e=="string"&&e.length>0?e:void 0}function h(e){if(!d(e))throw new n("invalid_request","Token storage rejected a non-object token payload.");for(let s of Object.keys(e))if(!m.has(s))throw new n("invalid_request",`Token storage rejected unknown field "${s}".`);if(!l(e.accessToken))throw new n("invalid_request","Token storage requires a non-empty accessToken.");if(!l(e.tokenType))throw new n("invalid_request","Token storage requires a non-empty tokenType.");if(typeof e.expiresIn!="number"||!Number.isFinite(e.expiresIn)||e.expiresIn<0)throw new n("invalid_request","Token storage requires a non-negative numeric expiresIn.");let r={accessToken:e.accessToken,tokenType:e.tokenType,expiresIn:e.expiresIn},t=u(e.refreshToken);t&&(r.refreshToken=t);let o=u(e.scope);o&&(r.scope=o);let i=u(e.idToken);if(i&&(r.idToken=i),typeof e.authorizationDetails<"u"){if(!Array.isArray(e.authorizationDetails)||!e.authorizationDetails.every(s=>d(s)&&typeof s.type=="string"))throw new n("invalid_request","Token storage rejected malformed authorizationDetails.");r.authorizationDetails=e.authorizationDetails}return r}var c=class{state=null;get(){return this.state}set(r){if(!r){this.clear();return}this.state=h(r)}clear(){this.state=null}};function g(){return new c}0&&(module.exports={createMemoryTokenStorage});

package/dist/storage/memory.d.cts

@@ -0,0 +1 @@
+export { a2 as createMemoryTokenStorage } from '../memory-CVWZvsJ0.cjs';

package/dist/storage/memory.d.ts

@@ -0,0 +1 @@
+export { a2 as createMemoryTokenStorage } from '../memory-CVWZvsJ0.js';

package/dist/storage/memory.js

@@ -0,0 +1 @@
+var t=class extends Error{code;status;details;constructor(r,i,n){super(i),this.name="AuthError",this.code=r,this.status=n?.status,this.details=n?.details}};var h=new Set(["accessToken","tokenType","expiresIn","refreshToken","scope","idToken","authorizationDetails"]);function c(e){if(typeof e!="object"||e===null||Array.isArray(e))return!1;let r=Object.getPrototypeOf(e);return r===Object.prototype||r===null}function d(e){return typeof e=="string"&&e.length>0}function s(e){return typeof e=="string"&&e.length>0?e:void 0}function l(e){if(!c(e))throw new t("invalid_request","Token storage rejected a non-object token payload.");for(let o of Object.keys(e))if(!h.has(o))throw new t("invalid_request",`Token storage rejected unknown field "${o}".`);if(!d(e.accessToken))throw new t("invalid_request","Token storage requires a non-empty accessToken.");if(!d(e.tokenType))throw new t("invalid_request","Token storage requires a non-empty tokenType.");if(typeof e.expiresIn!="number"||!Number.isFinite(e.expiresIn)||e.expiresIn<0)throw new t("invalid_request","Token storage requires a non-negative numeric expiresIn.");let r={accessToken:e.accessToken,tokenType:e.tokenType,expiresIn:e.expiresIn},i=s(e.refreshToken);i&&(r.refreshToken=i);let n=s(e.scope);n&&(r.scope=n);let u=s(e.idToken);if(u&&(r.idToken=u),typeof e.authorizationDetails<"u"){if(!Array.isArray(e.authorizationDetails)||!e.authorizationDetails.every(o=>c(o)&&typeof o.type=="string"))throw new t("invalid_request","Token storage rejected malformed authorizationDetails.");r.authorizationDetails=e.authorizationDetails}return r}var a=class{state=null;get(){return this.state}set(r){if(!r){this.clear();return}this.state=l(r)}clear(){this.state=null}};function y(){return new a}export{y as createMemoryTokenStorage};

package/package.json

@@ -0,0 +1,90 @@
+{
+  "name": "@tktchurch/auth",
+  "version": "0.9.1",
+  "description": "Framework-agnostic auth SDK for TKTChurch OAuth/AuthFlow services",
+  "license": "MIT",
+  "type": "module",
+  "packageManager": "bun@1.3.4",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "sideEffects": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/tktchurch/auth-sdk-js.git"
+  },
+  "bugs": {
+    "url": "https://github.com/tktchurch/auth-sdk-js/issues"
+  },
+  "homepage": "https://github.com/tktchurch/auth-sdk-js#readme",
+  "keywords": [
+    "auth",
+    "oauth2",
+    "oidc",
+    "nuxt",
+    "nextjs",
+    "sdk",
+    "typescript",
+    "tktchurch"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./storage/memory": {
+      "types": "./dist/storage/memory.d.ts",
+      "import": "./dist/storage/memory.js",
+      "require": "./dist/storage/memory.cjs"
+    },
+    "./nuxt": {
+      "types": "./dist/nuxt/module.d.ts",
+      "import": "./dist/nuxt/module.js",
+      "require": "./dist/nuxt/module.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "CHANGELOG.md",
+    "PUBLISHING.md",
+    "README.md",
+    "SECURITY.md"
+  ],
+  "scripts": {
+    "build": "BUILD_PROFILE=full ./node_modules/.bin/tsup",
+    "build:full": "BUILD_PROFILE=full ./node_modules/.bin/tsup",
+    "build:consumer": "BUILD_PROFILE=consumer ./node_modules/.bin/tsup",
+    "typecheck": "./node_modules/.bin/tsc --noEmit",
+    "test": "./node_modules/.bin/vitest run",
+    "test:watch": "./node_modules/.bin/vitest",
+    "test:local": "RUN_LOCAL_STACK_TESTS=true ./node_modules/.bin/vitest run tests/integration/local-stack.test.ts",
+    "test:local:env": "bash scripts/run-local-tests.sh",
+    "test:e2e": "playwright test",
+    "test:e2e:env": "bash scripts/run-e2e-tests.sh",
+    "release:check": "bun run typecheck && bun run test && bun run build:full",
+    "release:check:consumer": "bun run typecheck && bun run test && bun run build:consumer",
+    "prepublishOnly": "bun run release:check",
+    "publish:github": "bun run release:check && npm publish --registry=https://npm.pkg.github.com --access=restricted --ignore-scripts",
+    "publish:npmjs": "bun run release:check:consumer && npm publish --registry=https://registry.npmjs.org --access=public --ignore-scripts"
+  },
+  "peerDependencies": {
+    "nuxt": "^3.0.0 || ^4.0.0"
+  },
+  "peerDependenciesMeta": {
+    "nuxt": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@nuxt/kit": "^4.3.1",
+    "@playwright/test": "^1.60.0",
+    "@types/node": "^25.3.1",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18"
+  }
+}