auth 1.2.2 → 1.5.0-beta.15

package/lib/apple-gen-secret.js

@@ -1,101 +0,0 @@
-import fs from "node:fs"
-import path from "node:path"
-import * as y from "yoctocolors"
-
-/**
- * Generates an Apple client secret.
- *
- * @param {object} options
- * @param {string} options.teamId - Apple Team ID.
- * @param {string} options.clientId - Apple Client ID.
- * @param {string} options.keyId - Apple Key ID.
- * @param {string} options.privateKey - Apple Private Key.
- * @param {number} options.expiresInDays - Days until the secret expires.
- *
- * @see https://developer.apple.com/documentation/accountorganizationaldatasharing/creating-a-client-secret
- */
-export async function appleGenSecret({
-  teamId: iss,
-  clientId: sub,
-  keyId: kid,
-  privateKey,
-  expiresInDays,
-}) {
-  const expiresIn = 86400 * expiresInDays
-  const exp = Math.ceil(Date.now() / 1000) + expiresIn
-
-  const secret = await signJWT(sub, iss, kid, privateKey, exp)
-
-  console.log(
-    y.green(
-      `Apple client secret generated. Valid until: ${new Date(exp * 1000)}`
-    )
-  )
-
-  return secret
-}
-
-/**
- *
- * @param {string} sub - Apple client ID.
- * @param {string} iss - Apple team ID.
- * @param {string} kid - Apple key ID.
- * @param {string} privateKeyPath - Apple private key.
- * @param {Date} exp - Expiry date.
- */
-async function signJWT(sub, iss, kid, privateKeyPath, exp) {
-  const header = { alg: "ES256", kid }
-
-  const payload = {
-    iss,
-    iat: Date.now() / 1000,
-    exp,
-    aud: "https://appleid.apple.com",
-    sub,
-  }
-
-  const parts = [
-    toBase64Url(encoder.encode(JSON.stringify(header))),
-    toBase64Url(encoder.encode(JSON.stringify(payload))),
-  ]
-
-  const privateKey = fs.readFileSync(path.resolve(privateKeyPath), "utf8")
-
-  const signature = await sign(parts.join("."), privateKey)
-
-  parts.push(toBase64Url(signature))
-  return parts.join(".")
-}
-
-const encoder = new TextEncoder()
-function toBase64Url(data) {
-  return btoa(String.fromCharCode(...new Uint8Array(data)))
-    .replace(/\+/g, "-")
-    .replace(/\//g, "_")
-    .replace(/=+$/, "")
-}
-
-async function sign(data, private_key) {
-  const pem = private_key.replace(
-    /-----BEGIN PRIVATE KEY-----|\n|-----END PRIVATE KEY-----/g,
-    ""
-  )
-  const binaryDerString = atob(pem)
-  const binaryDer = new Uint8Array(
-    [...binaryDerString].map((char) => char.charCodeAt(0))
-  )
-
-  const privateKey = await globalThis.crypto.subtle.importKey(
-    "pkcs8",
-    binaryDer.buffer,
-    { name: "ECDSA", namedCurve: "P-256" },
-    true,
-    ["sign"]
-  )
-
-  return await globalThis.crypto.subtle.sign(
-    { name: "ECDSA", hash: { name: "SHA-256" } },
-    privateKey,
-    encoder.encode(data)
-  )
-}

package/lib/detect.js

@@ -1,58 +0,0 @@
-// @ts-check
-import { readFile } from "node:fs/promises"
-import { join } from "node:path"
-import { frameworks } from "../lib/meta.js"
-import * as y from "yoctocolors"
-
-/**
- * When this function runs in a framework directory we support,
- * it will return the framework's name
- * @param {string} path
- * @returns {Promise<import("./meta").SupportedFramework | "unknown">}
- */
-export async function detectFramework(path = "") {
-  const dir = process.cwd()
-  const packageJsonPath = join(dir, path, "package.json")
-  try {
-    const packageJson = JSON.parse(await readFile(packageJsonPath, "utf-8"))
-
-    /** @type {import("./meta").SupportedFramework[]} */
-    const foundFrameworks = []
-
-    if (packageJson?.dependencies?.["next"]) foundFrameworks.push("next")
-    if (packageJson?.dependencies?.["express"]) foundFrameworks.push("express")
-    if (packageJson?.devDependencies?.["@sveltejs/kit"])
-      foundFrameworks.push("sveltekit")
-
-    if (foundFrameworks.length === 1) return foundFrameworks[0]
-
-    if (foundFrameworks.length > 1) {
-      console.error(
-        `Multiple supported frameworks detected: ${foundFrameworks.join(", ")}`
-      )
-      return "unknown"
-    }
-    return "unknown"
-  } catch (error) {
-    console.error(error)
-    return "unknown"
-  }
-}
-
-export async function requireFramework(path = "") {
-  const framework = await detectFramework(path)
-
-  if (framework === "unknown") {
-    console.error(
-      y.red(
-        `No framework detected. Currently supported frameworks are: ${y.bold(
-          Object.keys(frameworks).join(", ")
-        )}`
-      )
-    )
-
-    process.exit(0)
-  }
-
-  return framework
-}

package/lib/is-online.js

@@ -1,46 +0,0 @@
-// @ts-check
-
-import { execSync } from "node:child_process"
-import dns from "node:dns/promises"
-
-function getProxy() {
-  if (process.env.https_proxy) {
-    return process.env.https_proxy
-  }
-
-  try {
-    const httpsProxy = execSync("npm config get https-proxy").toString().trim()
-    return httpsProxy !== "null" ? httpsProxy : undefined
-  } catch (e) {
-    return
-  }
-}
-
-export async function getOnline() {
-  try {
-    await dns.lookup("registry.yarnpkg.com")
-    // If DNS lookup succeeds, we are online
-    return true
-  } catch {
-    // The DNS lookup failed, but we are still fine as long as a proxy has been set
-    const proxy = getProxy()
-    if (!proxy) {
-      return false
-    }
-
-    const { hostname } = new URL(proxy)
-    if (!hostname) {
-      // Invalid proxy URL
-      return false
-    }
-
-    try {
-      await dns.lookup(hostname)
-      // If DNS lookup succeeds for the proxy server, we are online
-      return true
-    } catch {
-      // The DNS lookup for the proxy server also failed, so we are offline
-      return false
-    }
-  }
-}

package/lib/markdown.js

@@ -1,59 +0,0 @@
-// @ts-check
-import * as y from "yoctocolors"
-
-// double char markdown matchers
-const BOLD_REGEX = /\*{2}([^*]+)\*{2}/g
-const UNDERLINE_REGEX = /_{2}([^_]+)_{2}/g
-const STRIKETHROUGH_REGEX = /~{2}([^~]+)~{2}/g
-const LINK_REGEX = /\[([^\]]+)\]\(([^)]+)\)/g
-
-// single char markdown matchers
-const ITALIC_REGEX = /(?<!\\)\*(.+)(?<!\\)\*|(?<!\\)_(.+)(?<!\\)_/g
-
-export function link(text, url) {
-  return `\x1b]8;;${url}\x1b\\${text}\x1b]8;;\x1b\\`
-}
-
-/**
- * @param {string} input
- * @returns {string}
- */
-export function markdownToAnsi(input) {
-  input = input.replace(BOLD_REGEX, (...args) => y.bold(args[1]))
-  input = input.replace(UNDERLINE_REGEX, (...args) => y.underline(args[1]))
-  input = input.replace(STRIKETHROUGH_REGEX, (...args) =>
-    y.strikethrough(args[1])
-  )
-  input = input.replace(ITALIC_REGEX, (...args) => y.italic(args[1] || args[2]))
-  input = input.replace(/(?<!\\)\\/g, "")
-
-  // @ts-expect-error
-  input = input.replaceAll(LINK_REGEX, (...args) =>
-    y.blue(" " + link(args[2], args[1]))
-  )
-  return input
-}
-
-/**
- * @param {string} str
- * @param {number} maxLineLength
- * @returns {string}
- */
-export function breakStringToLines(str, maxLineLength) {
-  let result = ""
-  let line = ""
-
-  str.split(" ").forEach((word) => {
-    if (line.length + word.length + 1 > maxLineLength) {
-      result += line + "\n"
-      line = word
-    } else {
-      if (line) line += " "
-      line += word
-    }
-  })
-
-  if (line) result += line
-
-  return result
-}

package/lib/meta.js

@@ -1,199 +0,0 @@
-// @ts-check
-
-// TODO: Get these programmatically
-
-/**
- * @typedef {"next" | "express" | "sveltekit"} SupportedFramework
- */
-
-export const frameworks = {
-  next: {
-    name: "Next.js",
-    src: "https://github.com/nextauthjs/next-auth-example",
-    demo: "https://next-auth-example.vercel.app",
-    path: "/api/auth",
-    port: 3000,
-    envFile: ".env.local",
-  },
-  sveltekit: {
-    name: "SvelteKit",
-    src: "https://github.com/nextauthjs/sveltekit-auth-example",
-    demo: "https://sveltekit-auth-example.vercel.app",
-    path: "/auth",
-    port: 5173,
-    envFile: ".env",
-  },
-  express: {
-    name: "Express",
-    src: "https://github.com/nextauthjs/express-auth-example",
-    demo: "https://express-auth-example.vercel.app",
-    path: "/auth",
-    port: 3000,
-    envFile: ".env",
-  },
-}
-
-export const providers = {
-  "42-school": { name: "42 School", setupUrl: undefined },
-  apple: {
-    name: "Apple",
-    setupUrl:
-      "https://developer.apple.com/account/resources/identifiers/list/serviceId",
-  },
-  asgardeo: { name: "Asgardeo", setupUrl: undefined },
-  auth0: { name: "Auth0", setupUrl: undefined },
-  authentik: { name: "Authentik", setupUrl: undefined },
-  "azure-ad-b2c": { name: "Azure AD B2C", setupUrl: undefined },
-  "azure-ad": { name: "Azure AD", setupUrl: undefined },
-  "azure-devops": { name: "Azure DevOps", setupUrl: undefined },
-  battlenet: { name: "Battlenet", setupUrl: undefined },
-  beyondidentity: { name: "Beyond Identity", setupUrl: undefined },
-  box: { name: "Box", setupUrl: undefined },
-  "boxyhq-saml": { name: "Boxyhq SAML", setupUrl: undefined },
-  bungie: { name: "Bungie", setupUrl: undefined },
-  "click-up": { name: "Click-up", setupUrl: undefined },
-  cognito: { name: "Cognito", setupUrl: undefined },
-  coinbase: { name: "Coinbase", setupUrl: undefined },
-  credentials: { name: "Credentials", setupUrl: undefined },
-  descope: { name: "Descope", setupUrl: undefined },
-  discord: {
-    name: "Discord",
-    setupUrl: "https://discord.com/developers/applications",
-    instructions: `\
-      1. Click on *New Application*
-      2. Set *Application name* (can be anything)
-      3. Click on *OAuth2* in the side menu
-      4. Click on *Add Redirect* and paste the callback URI (on your clipboard)
-      5. Click on *Save Changes*
-      6. Copy and paste the *Client ID*
-      7. Copy and paste the *Client Secret*
-      `,
-  },
-  dribbble: { name: "Dribbble", setupUrl: undefined },
-  dropbox: { name: "Dropbox", setupUrl: undefined },
-  "duende-identity-server6": {
-    name: "Duende Identity Server 6",
-    setupUrl: undefined,
-  },
-  email: { name: "Email", setupUrl: undefined },
-  eveonline: { name: "Eveonline", setupUrl: undefined },
-  facebook: { name: "Facebook", setupUrl: undefined },
-  faceit: { name: "Faceit", setupUrl: undefined },
-  foursquare: { name: "Foursquare", setupUrl: undefined },
-  freshbooks: { name: "Freshbooks", setupUrl: undefined },
-  fusionauth: { name: "FusionAuth", setupUrl: undefined },
-  github: {
-    name: "GitHub",
-    setupUrl: "https://github.com/settings/applications/new",
-    instructions: `\
-1. Set *Application name* (can be anything)
-2. Set *Homepage URL* (your business/website, but can be anything)
-3. Paste the redirect URI (on your clipboard) to *Authorization callback URL*
-4. Click *Register application*
-5. Paste the *Client ID* back here
-6. Click *Generate a new client secret*
-7. Paste the *Client secret* back here (Note: This is the only time you can see it)`,
-  },
-  gitlab: { name: "GitLab", setupUrl: undefined },
-  google: {
-    name: "Google",
-    setupUrl: "https://console.cloud.google.com/apis/credentials/oauthclient",
-    instructions: `\
-1. Choose *Application Type: Web Application*
-2. Paste the redirect URI (on your clipboard) to *Authorized redirect URIs*
-3. Fill out the rest of the form
-4. Click *Create*`,
-  },
-  hubspot: { name: "Hubspot", setupUrl: undefined },
-  "identity-server4": { name: "Identity Server 4", setupUrl: undefined },
-  instagram: { name: "Instagram", setupUrl: undefined },
-  kakao: { name: "Kakao", setupUrl: undefined },
-  keycloak: { name: "Keycloak", setupUrl: undefined },
-  line: { name: "Line", setupUrl: undefined },
-  linkedin: {
-    name: "LinkedIn",
-    setupUrl: "https://linkedin.com/developers/apps",
-    instructions: `\
-      1. Click on *Create app*
-      2. Set *App name* (can be anything)
-      3. Create a *LinkedIn page*
-      4. Set *LinkedIn Page URL* (LinkedIn page you created)
-      5. Set *App logo* (can be anything)
-      6. Navigate to *Auth* in the top menu
-      7. Set *Authorized redirect URLs for your app* (paste the callback URI on your clipboard)
-      8. Copy and paste the *Client ID*
-      9. Copy and paste the *Primary Client Secret*
-      `,
-  },
-  mailchimp: { name: "Mailchimp", setupUrl: undefined },
-  mailru: { name: "Mail.ru", setupUrl: undefined },
-  mastodon: { name: "Mastodon", setupUrl: undefined },
-  mattermost: { name: "Mattermost", setupUrl: undefined },
-  medium: { name: "Medium", setupUrl: undefined },
-  "microsoft-entra-id": { name: "Microsoft Entra ID", setupUrl: undefined },
-  naver: { name: "Naver", setupUrl: undefined },
-  netlify: { name: "Netlify", setupUrl: undefined },
-  netsuite: { name: "Netsuite", setupUrl: undefined },
-  nodemailer: { name: "Nodemailer", setupUrl: undefined },
-  notion: { name: "Notion", setupUrl: undefined },
-  okta: { name: "Okta", setupUrl: undefined },
-  onelogin: { name: "Onelogin", setupUrl: undefined },
-  "ory-hydra": { name: "Ory Hydra", setupUrl: undefined },
-  osso: { name: "Osso", setupUrl: undefined },
-  osu: { name: "Osu", setupUrl: undefined },
-  passage: { name: "Passage", setupUrl: undefined },
-  passkey: { name: "Passkey", setupUrl: undefined },
-  patreon: { name: "Patreon", setupUrl: undefined },
-  pinterest: { name: "Pinterest", setupUrl: undefined },
-  pipedrive: { name: "Pipedrive", setupUrl: undefined },
-  postmark: { name: "Postmark", setupUrl: undefined },
-  reddit: { name: "Reddit", setupUrl: undefined },
-  resend: { name: "Resend", setupUrl: undefined },
-  salesforce: { name: "Salesforce", setupUrl: undefined },
-  sendgrid: { name: "Sendgrid", setupUrl: undefined },
-  slack: { name: "Slack", setupUrl: undefined },
-  spotify: { name: "Spotify", setupUrl: undefined },
-  strava: { name: "Strava", setupUrl: undefined },
-  tiktok: { name: "Tiktok", setupUrl: undefined },
-  todoist: { name: "Todoist", setupUrl: undefined },
-  trakt: { name: "Trakt", setupUrl: undefined },
-  twitch: { name: "Twitch", setupUrl: undefined },
-  twitter: { name: "Twitter", setupUrl: undefined },
-  "united-effects": { name: "United Effects", setupUrl: undefined },
-  vk: { name: "Vk", setupUrl: undefined },
-  webex: { name: "Webex", setupUrl: undefined },
-  wikimedia: { name: "Wikimedia", setupUrl: undefined },
-  wordpress: { name: "Wordpress", setupUrl: undefined },
-  workos: { name: "WorkOS", setupUrl: undefined },
-  yandex: { name: "Yandex", setupUrl: undefined },
-  zitadel: { name: "Zitadel", setupUrl: undefined },
-  zoho: { name: "Zoho", setupUrl: undefined },
-  zoom: { name: "Zoom", setupUrl: undefined },
-}
-
-export const adapters = {
-  none: "None",
-  "adapter-azure-tables": "Azure Tables",
-  d1: "d1",
-  dgraph: "Dgraph",
-  drizzle: "Drizzle",
-  dynamodb: "DynamoDB",
-  edgedb: "EdgeDB",
-  fauna: "Fauna",
-  firebase: "Firebase",
-  hasura: "Hasura",
-  kysely: "Kysely",
-  "mikro-orm": "MikroORM",
-  mongodb: "MongoDB",
-  neo4j: "Neo4j",
-  pg: "PostgreSQL",
-  pouchdb: "PouchDB",
-  prisma: "Prisma",
-  sequelize: "Sequelize",
-  supabase: "Supabase",
-  surrealdb: "SurrealDB",
-  typeorm: "TypeORM",
-  unstorage: "Unstorage",
-  "upstash-redis": "Upstash Redis",
-  xata: "Xata",
-}

package/lib/pkg-manager.js

@@ -1,70 +0,0 @@
-// @ts-check
-
-import { yellow } from "yoctocolors"
-import { spawn } from "node:child_process"
-import { getOnline } from "./is-online.js"
-
-/**
- * @typedef {'npm' | 'pnpm' | 'yarn' | 'bun'} PackageManager
- */
-
-/**
- * @source https://github.com/vercel/next.js/blob/canary/packages/create-next-app/helpers/get-pkg-manager.ts
- * @returns {PackageManager}
- */
-export function getPkgManager() {
-  const userAgent = process.env.npm_config_user_agent || ""
-
-  if (userAgent.startsWith("pnpm")) {
-    return "pnpm"
-  }
-
-  if (userAgent.startsWith("bun")) {
-    return "bun"
-  }
-
-  if (userAgent.startsWith("yarn")) {
-    return "yarn"
-  }
-
-  return "npm"
-}
-
-/**
- * @source https://github.com/vercel/next.js/blob/canary/packages/create-next-app/helpers/install.ts
- * Spawn a package manager installation based on user preference.
- *
- * @returns A Promise that resolves once the installation is finished.
- */
-export async function install() {
-  const packageManager = getPkgManager()
-  /** @type {string[]} */
-  const args = ["install"]
-  if (!(await getOnline())) {
-    console.log(
-      yellow("You appear to be offline.\nFalling back to the local cache.")
-    )
-    args.push("--offline")
-  }
-  return new Promise((resolve, reject) => {
-    /** Spawn the installation process. */
-    const child = spawn(packageManager, args, {
-      stdio: "inherit",
-      env: {
-        ...process.env,
-        ADBLOCK: "1",
-        // we set NODE_ENV to development as pnpm skips dev
-        // dependencies when production
-        NODE_ENV: "development",
-        DISABLE_OPENCOLLECTIVE: "1",
-      },
-    })
-    child.on("close", (code) => {
-      if (code !== 0) {
-        reject({ command: `${packageManager} ${args.join(" ")}` })
-        return
-      }
-      resolve(void 0)
-    })
-  })
-}

package/lib/write-env.js

@@ -1,61 +0,0 @@
-// @ts-check
-
-import * as y from "yoctocolors"
-import { readFile, writeFile } from "node:fs/promises"
-import prompt from "prompts"
-import { join } from "node:path"
-import { frameworks } from "./meta.js"
-import { detectFramework } from "./detect.js"
-
-/**
- * Add/update key-value pair(s) to a .env file
- * @param {Record<string, string>} env
- * @param {string|undefined} envPath
- * @param {boolean} comment
- */
-export async function updateEnvFile(env, envPath = "", comment = true) {
-  const framework = await detectFramework(envPath)
-  const dotEnvFile = frameworks[framework]?.envFile
-  const file = join(process.cwd(), envPath, dotEnvFile)
-  let content = ""
-  let read = false
-  let created = false
-  for (const [key, value] of Object.entries(env)) {
-    const line = `${key}="${value}"${
-      comment ? " # Added by `npx auth`. Read more: https://cli.authjs.dev" : ""
-    }`
-    try {
-      if (!read) {
-        content = await readFile(file, "utf-8")
-        read = true
-      }
-      if (!content.includes(`${key}=`)) {
-        console.log(`➕ Added \`${key}\` to ${y.italic(file)}.`)
-        content = content ? `${content}\n${line}` : line
-      } else {
-        const { overwrite } = await prompt({
-          type: "confirm",
-          name: "overwrite",
-          message: `Overwrite existing \`${key}\`?`,
-          initial: false,
-        })
-        if (!overwrite) continue
-        console.log(`✨ Updated \`${key}\` in ${y.italic(file)}.`)
-        content = content.replace(new RegExp(`${key}=(.*)`), `${line}`)
-      }
-    } catch (error) {
-      if (error.code === "ENOENT") {
-        if (!created) {
-          console.log(`📝 Created ${y.italic(file)} with \`${key}\`.`)
-          created = true
-        } else {
-          console.log(`➕ Added \`${key}\` to ${y.italic(file)}.`)
-        }
-        content = content ? `${content}\n${line}` : line
-      } else {
-        throw error
-      }
-    }
-  }
-  if (content) await writeFile(file, content)
-}