authfyio-expo 0.2.1

package/README.md

@@ -0,0 +1,21 @@
+# authfyio-expo
+
+Expo + React Native client for Authfyio — secure token storage, auth hooks, deep-link OAuth callbacks.
+
+> Part of [Authfyio](https://authfyio.com) — a self-hostable authentication platform.
+
+## Install
+
+```bash
+npm install authfyio-expo
+```
+
+## Usage
+
+See the full guide at **https://authfyio.com/docs**.
+
+Point the SDK at your Authfyio instance via the same-origin proxy (`/api/af`) or set `AF_API_BASE_URL` for server-side calls.
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Expo + React Native client for Authfyio. React Native has no cookie jar,
+ * so we persist the session JWT in `expo-secure-store` (Keychain / Keystore)
+ * and attach it manually as `Authorization: Bearer`. OAuth sign-in uses deep
+ * links — register `yourapp://oauth-callback` in your Authfyio dashboard,
+ * catch it with `expo-linking`, and pass the `__session` JWT through.
+ */
+export type ExpoSessionClaims = {
+    sid: string;
+    sub: string;
+    env: string;
+    org?: string;
+    org_role?: string;
+    iat?: number;
+    exp?: number;
+};
+export type SecureStoreLike = {
+    getItemAsync(key: string): Promise<string | null>;
+    setItemAsync(key: string, value: string): Promise<void>;
+    deleteItemAsync(key: string): Promise<void>;
+};
+/**
+ * Hosted Authfyio SaaS URL. Expo apps don't share a cookie jar with a
+ * web origin, so we hit api.authfyio.com directly with bearer auth —
+ * no proxy needed. Override only when self-hosting.
+ */
+export declare const DEFAULT_API_BASE_URL = "https://api.authfyio.com";
+export type AuthfyioExpoOptions = {
+    /**
+     * Base URL of the Authfyio instance API. Defaults to
+     * `https://api.authfyio.com` (the hosted SaaS).
+     */
+    baseUrl?: string;
+    /** `expo-secure-store` (or any compatible adapter). If omitted, reads from
+     *  memory — fine for dev, DO NOT use in production on-device. */
+    secureStore?: SecureStoreLike;
+    /** Storage key under which the JWT lives. Default `authfyio.jwt`. */
+    storageKey?: string;
+};
+export declare class AuthfyioExpoClient {
+    private readonly baseUrl;
+    private readonly store;
+    private readonly key;
+    constructor(opts?: AuthfyioExpoOptions);
+    getToken(): Promise<string | null>;
+    clearToken(): Promise<void>;
+    signInEmailPassword(email: string, password: string): Promise<ExpoSessionClaims | null>;
+    authHeader(): Promise<Record<string, string>>;
+    /** Deep-link handler for OAuth callbacks. Extract `?jwt=` from the URL. */
+    ingestDeepLink(url: string): Promise<ExpoSessionClaims | null>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClD,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAE/D,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;qEACiE;IACjE,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEjB,IAAI,GAAE,mBAAwB;IAMpC,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIlC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAmBvF,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAKnD,2EAA2E;IACrE,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;CAQrE"}

package/dist/index.js

@@ -0,0 +1,84 @@
+/**
+ * Expo + React Native client for Authfyio. React Native has no cookie jar,
+ * so we persist the session JWT in `expo-secure-store` (Keychain / Keystore)
+ * and attach it manually as `Authorization: Bearer`. OAuth sign-in uses deep
+ * links — register `yourapp://oauth-callback` in your Authfyio dashboard,
+ * catch it with `expo-linking`, and pass the `__session` JWT through.
+ */
+/**
+ * Hosted Authfyio SaaS URL. Expo apps don't share a cookie jar with a
+ * web origin, so we hit api.authfyio.com directly with bearer auth —
+ * no proxy needed. Override only when self-hosting.
+ */
+export const DEFAULT_API_BASE_URL = 'https://api.authfyio.com';
+export class AuthfyioExpoClient {
+    baseUrl;
+    store;
+    key;
+    constructor(opts = {}) {
+        this.baseUrl = (opts.baseUrl ?? DEFAULT_API_BASE_URL).replace(/\/+$/, '');
+        this.store = opts.secureStore ?? inMemoryStore();
+        this.key = opts.storageKey ?? 'authfyio.jwt';
+    }
+    async getToken() {
+        return (await this.store.getItemAsync(this.key)) ?? null;
+    }
+    async clearToken() {
+        await this.store.deleteItemAsync(this.key);
+    }
+    async signInEmailPassword(email, password) {
+        const res = await fetch(`${this.baseUrl}/v1/auth/sign-in/email-password`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ email, password }),
+        });
+        if (!res.ok)
+            return null;
+        // The API normally sets cookies; React Native won't persist them, so we
+        // round-trip through /sessions/refresh which returns the JWT in a header
+        // as a fallback (added by the Authfyio instance when the `x-af-client`
+        // header is set — this header opts RN clients into the bearer model).
+        const body = (await res.json());
+        if (body?.jwt) {
+            await this.store.setItemAsync(this.key, body.jwt);
+            return decodeJwt(body.jwt);
+        }
+        return null;
+    }
+    async authHeader() {
+        const token = await this.getToken();
+        return token ? { authorization: `Bearer ${token}` } : {};
+    }
+    /** Deep-link handler for OAuth callbacks. Extract `?jwt=` from the URL. */
+    async ingestDeepLink(url) {
+        const q = url.split('?')[1] ?? '';
+        const params = new URLSearchParams(q);
+        const jwt = params.get('jwt');
+        if (!jwt)
+            return null;
+        await this.store.setItemAsync(this.key, jwt);
+        return decodeJwt(jwt);
+    }
+}
+function inMemoryStore() {
+    let v = null;
+    return {
+        async getItemAsync() {
+            return v;
+        },
+        async setItemAsync(_k, val) {
+            v = val;
+        },
+        async deleteItemAsync() {
+            v = null;
+        },
+    };
+}
+function decodeJwt(token) {
+    const [, payload] = token.split('.');
+    const b64 = payload.replace(/-/g, '+').replace(/_/g, '/');
+    const padded = b64 + '='.repeat((4 - (b64.length % 4)) % 4);
+    // Expo/RN has `global.atob` in SDK 51+; otherwise polyfill.
+    const json = typeof atob === 'function' ? atob(padded) : Buffer.from(padded, 'base64').toString('utf8');
+    return JSON.parse(json);
+}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "authfyio-expo",
+  "version": "0.2.1",
+  "description": "Expo + React Native client for Authfyio — secure token storage, auth hooks, deep-link OAuth callbacks.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.build.json --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "peerDependencies": {
+    "authfyio-react": "^0.3.0",
+    "react": ">=18",
+    "expo-secure-store": "*"
+  },
+  "peerDependenciesMeta": {
+    "expo-secure-store": {
+      "optional": true
+    }
+  },
+  "keywords": [
+    "authfyio",
+    "auth",
+    "expo",
+    "react-native"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "homepage": "https://authfyio.com/docs",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/authfyio/authfyio.git"
+  }
+}