@~lyre/auth 0.0.4 → 0.0.6

package/dist/{chunk-R3JOX2XR.js → chunk-RADVGFYQ.js}

@@ -2,11 +2,15 @@
 import { createHmac, timingSafeEqual } from "crypto";
 var SESSION_COOKIE_NAME = "platform_session";
 var STATE_COOKIE_NAME = "accounts_auth_state";
+function normalizeOptionalString(value) {
+  const trimmed = value?.trim();
+  return trimmed ? trimmed : void 0;
+}
 function createAccountsClientConfig(input = {}) {
   return {
-    baseUrl: input.baseUrl ?? process.env.ACCOUNTS_BASE_URL,
+    baseUrl: normalizeOptionalString(input.baseUrl ?? process.env.ACCOUNTS_BASE_URL),
     clientId: input.clientId ?? process.env.ACCOUNTS_CLIENT_ID ?? "accounts-app",
-    clientSecret: input.clientSecret ?? process.env.ACCOUNTS_CLIENT_SECRET,
+    clientSecret: normalizeOptionalString(input.clientSecret ?? process.env.ACCOUNTS_CLIENT_SECRET),
     redirectUri: input.redirectUri ?? process.env.ACCOUNTS_REDIRECT_URI ?? "http://localhost:5173/auth/callback",
     logoutRedirectUri: input.logoutRedirectUri ?? process.env.ACCOUNTS_LOGOUT_REDIRECT_URI ?? "http://localhost:5173/",
     useMock: input.useMock ?? (process.env.ACCOUNTS_USE_MOCK === "true" || !process.env.ACCOUNTS_BASE_URL || !process.env.ACCOUNTS_CLIENT_ID)
@@ -94,18 +98,22 @@ async function exchangeAuthorizationCode(input) {
     return createMockTokenResponse(input.code);
   }
   const fetchImpl = input.fetchImpl ?? fetch;
+  const clientSecret = normalizeOptionalString(input.config.clientSecret);
+  const tokenBody = {
+    grant_type: "authorization_code",
+    code: input.code,
+    redirect_uri: input.config.redirectUri,
+    client_id: input.config.clientId
+  };
+  if (clientSecret) {
+    tokenBody.client_secret = clientSecret;
+  }
   const response = await fetchImpl(new URL("/api/auth/token", input.config.baseUrl), {
     method: "POST",
     headers: {
       "content-type": "application/json"
     },
-    body: JSON.stringify({
-      grant_type: "authorization_code",
-      code: input.code,
-      redirect_uri: input.config.redirectUri,
-      client_id: input.config.clientId,
-      client_secret: input.config.clientSecret
-    })
+    body: JSON.stringify(tokenBody)
   });
   if (!response.ok) {
     throw new Error(`Accounts token exchange failed with status ${response.status}.`);
@@ -196,13 +204,16 @@ function parseAuthorizationState(value) {
   }
 }
 function normalizeIdentity(user) {
+  const firstName = user.firstName ?? user.first_name;
+  const lastName = user.lastName ?? user.last_name;
   return {
     id: user.id,
-    email: user.email ?? `${user.id}@accounts.local`,
-    name: user.name ?? ([user.first_name, user.last_name].filter(Boolean).join(" ") || "Accounts User"),
-    firstName: user.first_name,
-    lastName: user.last_name,
-    avatarUrl: user.avatar_url
+    // Prefer the real address under either key; only synthesize when truly absent.
+    email: user.emailAddress ?? user.email ?? `${user.id}@accounts.local`,
+    name: user.name ?? ([firstName, lastName].filter(Boolean).join(" ") || "Accounts User"),
+    firstName,
+    lastName,
+    avatarUrl: user.avatarUrl ?? user.avatar_url
   };
 }
 function createMockTokenResponse(code) {

package/dist/index.d.ts

@@ -69,10 +69,14 @@ type AccountsTokenResponse = {
     user: {
         id: string;
         email?: string;
+        emailAddress?: string;
         name?: string;
         first_name?: string;
+        firstName?: string;
         last_name?: string;
+        lastName?: string;
         avatar_url?: string;
+        avatarUrl?: string;
     };
 };
 type SyncAccountsUserResult = {

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   readPlatformSessionCookie,
   resolveActiveTenant,
   syncAccountsUser
-} from "./chunk-R3JOX2XR.js";
+} from "./chunk-RADVGFYQ.js";
 export {
   beginAccountsLoginRedirect,
   clearPlatformSessionCookie,

package/dist/sveltekit.js

@@ -4,7 +4,7 @@ import {
   handleAccountsCallback,
   identityPassthroughSync,
   readPlatformSessionCookie
-} from "./chunk-R3JOX2XR.js";
+} from "./chunk-RADVGFYQ.js";
 
 // src/sveltekit.ts
 import { redirect } from "@sveltejs/kit";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@~lyre/auth",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "description": "Shared Axis Accounts auth SDK — framework-agnostic session/identity core (HMAC-signed cookies, accounts login/callback/logout) plus an optional turnkey SvelteKit adapter.",
   "type": "module",
   "sideEffects": false,