@uln/auth 0.2.0 → 0.3.0

package/dist/client.d.ts

@@ -1,6 +1,6 @@
 export type { TokenPayload, VerifyConfig, PublicKeyEntry, CookieConfig } from "./types.ts";
 export { validateToken, importPublicKey } from "./token.ts";
 export { makeSessionCookie, makeClearCookie, extractCookie } from "./cookie.ts";
-export { getAuthUser, redirectToLogin, getClientIP, checkBearerToken } from "./middleware.ts";
+export { getAuthUser, redirectToLogin, handleCallback, getClientIP, checkBearerToken } from "./middleware.ts";
 import type { PublicKeyEntry } from "./types.ts";
 export declare function fetchPublicKeys(baseUrl: string): Promise<PublicKeyEntry[]>;

package/dist/client.js

@@ -134,6 +134,24 @@ function redirectToLogin(currentUrl) {
   const loginUrl = `https://auth.uln.industries/login?redirect=${encodeURIComponent(currentUrl)}`;
   return Response.redirect(loginUrl, 302);
 }
+async function handleCallback(request, verifyConfig, cookieConfig) {
+  const url = new URL(request.url);
+  const token = url.searchParams.get("token");
+  if (!token)
+    return null;
+  const payload = await validateToken(verifyConfig, token);
+  if (!payload) {
+    return redirectToLogin(url.origin);
+  }
+  url.searchParams.delete("token");
+  return new Response(null, {
+    status: 302,
+    headers: {
+      Location: url.toString(),
+      "Set-Cookie": makeSessionCookie(cookieConfig, token)
+    }
+  });
+}
 // src/client.ts
 async function fetchPublicKeys(baseUrl) {
   const res = await fetch(`${baseUrl}/.well-known/jwk.json`);
@@ -151,6 +169,7 @@ export {
   makeSessionCookie,
   makeClearCookie,
   importPublicKey,
+  handleCallback,
   getClientIP,
   getAuthUser,
   fetchPublicKeys,

package/dist/index.js

@@ -134,6 +134,24 @@ function redirectToLogin(currentUrl) {
   const loginUrl = `https://auth.uln.industries/login?redirect=${encodeURIComponent(currentUrl)}`;
   return Response.redirect(loginUrl, 302);
 }
+async function handleCallback(request, verifyConfig, cookieConfig) {
+  const url = new URL(request.url);
+  const token = url.searchParams.get("token");
+  if (!token)
+    return null;
+  const payload = await validateToken(verifyConfig, token);
+  if (!payload) {
+    return redirectToLogin(url.origin);
+  }
+  url.searchParams.delete("token");
+  return new Response(null, {
+    status: 302,
+    headers: {
+      Location: url.toString(),
+      "Set-Cookie": makeSessionCookie(cookieConfig, token)
+    }
+  });
+}
 
 // src/password.ts
 var SALT_LENGTH = 32;

package/dist/middleware.d.ts

@@ -3,3 +3,10 @@ export declare function getClientIP(request: Request): string;
 export declare function checkBearerToken(request: Request, expectedToken: string): boolean;
 export declare function getAuthUser(request: Request, verifyConfig: VerifyConfig, cookieConfig: CookieConfig): Promise<TokenPayload | null>;
 export declare function redirectToLogin(currentUrl: string): Response;
+/**
+ * Handle the auth callback on consuming sites.
+ * If the request URL has a `?token=` param, validates it, sets a session cookie,
+ * and redirects to the same URL without the token param.
+ * Returns null if there's no token param (not a callback request).
+ */
+export declare function handleCallback(request: Request, verifyConfig: VerifyConfig, cookieConfig: CookieConfig): Promise<Response | null>;

package/dist/middleware.js

@@ -134,8 +134,27 @@ function redirectToLogin(currentUrl) {
   const loginUrl = `https://auth.uln.industries/login?redirect=${encodeURIComponent(currentUrl)}`;
   return Response.redirect(loginUrl, 302);
 }
+async function handleCallback(request, verifyConfig, cookieConfig) {
+  const url = new URL(request.url);
+  const token = url.searchParams.get("token");
+  if (!token)
+    return null;
+  const payload = await validateToken(verifyConfig, token);
+  if (!payload) {
+    return redirectToLogin(url.origin);
+  }
+  url.searchParams.delete("token");
+  return new Response(null, {
+    status: 302,
+    headers: {
+      Location: url.toString(),
+      "Set-Cookie": makeSessionCookie(cookieConfig, token)
+    }
+  });
+}
 export {
   redirectToLogin,
+  handleCallback,
   getClientIP,
   getAuthUser,
   checkBearerToken

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@uln/auth",
-	"version": "0.2.0",
+	"version": "0.3.0",
 	"type": "module",
 	"exports": {
 		".": {
@@ -35,7 +35,7 @@
 		"build": "bun run scripts/build.ts",
 		"check": "biome check --write .",
 		"test": "bun test",
-		"deploy": "bunx wrangler deploy",
+		"deploy": "bunx wrangler d1 migrations apply uln-auth --remote && bunx wrangler deploy",
 		"publish:check": "bun run scripts/publish.ts check",
 		"publish:release": "bun run scripts/publish.ts release"
 	},

package/src/client.ts

@@ -1,7 +1,7 @@
 export type { TokenPayload, VerifyConfig, PublicKeyEntry, CookieConfig } from "./types.ts";
 export { validateToken, importPublicKey } from "./token.ts";
 export { makeSessionCookie, makeClearCookie, extractCookie } from "./cookie.ts";
-export { getAuthUser, redirectToLogin, getClientIP, checkBearerToken } from "./middleware.ts";
+export { getAuthUser, redirectToLogin, handleCallback, getClientIP, checkBearerToken } from "./middleware.ts";
 
 import { importPublicKey } from "./token.ts";
 import type { PublicKeyEntry } from "./types.ts";

package/src/middleware.ts

@@ -1,4 +1,4 @@
-import { extractCookie } from "./cookie.ts";
+import { extractCookie, makeSessionCookie } from "./cookie.ts";
 import { validateToken } from "./token.ts";
 import type { CookieConfig, TokenPayload, VerifyConfig } from "./types.ts";
 
@@ -33,3 +33,33 @@ export function redirectToLogin(currentUrl: string): Response {
   const loginUrl = `https://auth.uln.industries/login?redirect=${encodeURIComponent(currentUrl)}`;
   return Response.redirect(loginUrl, 302);
 }
+
+/**
+ * Handle the auth callback on consuming sites.
+ * If the request URL has a `?token=` param, validates it, sets a session cookie,
+ * and redirects to the same URL without the token param.
+ * Returns null if there's no token param (not a callback request).
+ */
+export async function handleCallback(
+  request: Request,
+  verifyConfig: VerifyConfig,
+  cookieConfig: CookieConfig,
+): Promise<Response | null> {
+  const url = new URL(request.url);
+  const token = url.searchParams.get("token");
+  if (!token) return null;
+
+  const payload = await validateToken(verifyConfig, token);
+  if (!payload) {
+    return redirectToLogin(url.origin);
+  }
+
+  url.searchParams.delete("token");
+  return new Response(null, {
+    status: 302,
+    headers: {
+      Location: url.toString(),
+      "Set-Cookie": makeSessionCookie(cookieConfig, token),
+    },
+  });
+}