autherr 1.0.1 → 2.0.1

package/dist/hooks/useAutherr.d.ts

@@ -1,5 +1,4 @@
 export declare function useAutherr(): {
-    user: import("../types/auth").AutherrUser | null;
     accessToken: string | null;
     isAuthenticated: boolean;
     login: () => void;

package/dist/hooks/useAutherr.js

@@ -1,8 +1,7 @@
 import { useAutherrContext } from "../provider/AutherrProvider";
 export function useAutherr() {
-    const { user, accessToken, isAuthenticated, login, signup, logout, getAccessToken, refreshSession, } = useAutherrContext();
+    const { accessToken, isAuthenticated, login, signup, logout, getAccessToken, refreshSession, } = useAutherrContext();
     return {
-        user,
         accessToken,
         isAuthenticated,
         login,

package/dist/provider/AutherrProvider.d.ts

@@ -1,7 +1,5 @@
 import React from "react";
-import { AutherrUser } from "../types/auth";
 interface AutherrContextValue {
-    user: AutherrUser | null;
     accessToken: string | null;
     isAuthenticated: boolean;
     login: () => void;

package/dist/provider/AutherrProvider.js

@@ -4,7 +4,6 @@ import { fetchSession } from "../api/session";
 import { logoutSession } from "../api/logout";
 const AutherrContext = createContext(null);
 export function AutherrProvider({ children, clientId, baseUrl, }) {
-    const [user, setUser] = useState(null);
     const [accessToken, setAccessToken] = useState(null);
     const [isAuthenticated, setIsAuthenticated] = useState(false);
     const refreshSession = async () => {
@@ -14,7 +13,6 @@ export function AutherrProvider({ children, clientId, baseUrl, }) {
             setIsAuthenticated(true);
         }
         else {
-            setUser(null);
             setAccessToken(null);
             setIsAuthenticated(false);
         }
@@ -43,14 +41,12 @@ export function AutherrProvider({ children, clientId, baseUrl, }) {
             await logoutSession(baseUrl, clientId);
         }
         finally {
-            setUser(null);
             setAccessToken(null);
             setIsAuthenticated(false);
             window.location.href = window.location.origin;
         }
     };
     const value = useMemo(() => ({
-        user,
         accessToken,
         isAuthenticated,
         login,
@@ -58,7 +54,7 @@ export function AutherrProvider({ children, clientId, baseUrl, }) {
         logout,
         refreshSession,
         getAccessToken: () => accessToken,
-    }), [user, accessToken, isAuthenticated]);
+    }), [accessToken, isAuthenticated]);
     return (_jsx(AutherrContext.Provider, { value: value, children: children }));
 }
 export function useAutherrContext() {

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "autherr",
-  "version": "1.0.1",
+  "version": "2.0.1",
   "dest": "dist",
   "main": "dist/index.js",
   "scripts": {
     "build": "tsc -p tsconfig.json"
   },
   "dependencies": {
+    "jose": "^6.1.3",
     "react": "^19.2.3"
   },
   "devDependencies": {

package/src/crypto/createClientAssertion.ts

@@ -0,0 +1,29 @@
+// src/crypto/createClientAssertion.ts
+import { SignJWT } from "jose";
+import { pemToArrayBuffer } from "./pemUtils";
+
+export async function createClientAssertion(
+  clientId: string,
+  privateKeyPem: string
+): Promise<string> {
+  const key = await crypto.subtle.importKey(
+    "pkcs8",
+    pemToArrayBuffer(privateKeyPem),
+    {
+      name: "RSASSA-PKCS1-v1_5",
+      hash: "SHA-256",
+    },
+    false,
+    ["sign"]
+  );
+
+  const now = Math.floor(Date.now() / 1000);
+
+  return await new SignJWT({ clientId })
+    .setProtectedHeader({ alg: "RS256", typ: "JWT" })
+    .setIssuedAt(now)
+    .setExpirationTime(now + 120) // ⏱ 2 minutes
+    .setAudience("autherr")
+    .setIssuer(clientId)
+    .sign(key);
+}

package/src/crypto/pemUtils.ts

@@ -0,0 +1,16 @@
+// src/crypto/pemUtils.ts
+export function pemToArrayBuffer(pem: string): ArrayBuffer {
+  const b64 = pem
+    .replace(/-----BEGIN [^-]+-----/, "")
+    .replace(/-----END [^-]+-----/, "")
+    .replace(/\s+/g, "");
+
+  const binary = atob(b64);
+  const bytes = new Uint8Array(binary.length);
+
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+
+  return bytes.buffer;
+}

package/src/hooks/useAutherr.ts

@@ -2,7 +2,6 @@ import { useAutherrContext } from "../provider/AutherrProvider";
 
 export function useAutherr() {
   const {
-    user,
     accessToken,
     isAuthenticated,
     login,
@@ -13,7 +12,6 @@ export function useAutherr() {
   } = useAutherrContext();
 
   return {
-    user,
     accessToken,
     isAuthenticated,
     login,

package/src/provider/AutherrProvider.tsx

@@ -8,6 +8,7 @@ import React, {
 import { fetchSession } from "../api/session";
 import { logoutSession } from "../api/logout";
 import { AutherrUser } from "../types/auth";
+import { createClientAssertion } from "../crypto/createClientAssertion";
 
 interface AutherrContextValue {
   accessToken: string | null;
@@ -19,6 +20,15 @@ interface AutherrContextValue {
   refreshSession: () => Promise<void>;
 }
 
+function setClientAssertionCookie(token: string) {
+  document.cookie =
+    `autherr_client_assertion=${token};` +
+    `Path=/;` +
+    `Secure;` +
+    `SameSite=None`;
+}
+
+
 
 const AutherrContext = createContext<AutherrContextValue | null>(null);
 
@@ -26,12 +36,14 @@ interface AutherrProviderProps {
   children: React.ReactNode;
   clientId: string;
   baseUrl: string; // e.g. https://autherr.com
+  clientPrivateKey: string;
 }
 
 export function AutherrProvider({
   children,
   clientId,
   baseUrl,
+  clientPrivateKey,
 }: AutherrProviderProps) {
   
   const [accessToken, setAccessToken] = useState<string | null>(null);
@@ -54,8 +66,16 @@ export function AutherrProvider({
     refreshSession();
   }, [baseUrl, clientId]);
 
-  const login = () => {
+  const login = async () => {
     const state = crypto.randomUUID();
+
+    const assertion = await createClientAssertion(
+      clientId,
+      clientPrivateKey
+    );
+
+    setClientAssertionCookie(assertion);
+
     window.location.href =
       `${baseUrl}/auth/login` +
       `?client_id=${clientId}` +
@@ -63,8 +83,16 @@ export function AutherrProvider({
       `&state=${state}`;
   };
 
-  const signup = () => {
+  const signup = async () => {
     const state = crypto.randomUUID();
+
+    const assertion = await createClientAssertion(
+      clientId,
+      clientPrivateKey
+    );
+
+    setClientAssertionCookie(assertion);
+
     window.location.href =
       `${baseUrl}/auth/signup` +
       `?client_id=${clientId}` +
@@ -72,6 +100,7 @@ export function AutherrProvider({
       `&state=${state}`;
   };
 
+
   const logout = async () => {
     try {
       await logoutSession(baseUrl, clientId);