authhero 0.0.1 → 1.0.0

package/packages/authhero/src/bun.ts

@@ -0,0 +1,16 @@
+import { OpenAPIHono } from "@hono/zod-openapi";
+import { Bindings } from "./types/Bindings";
+import { Context } from "hono";
+import { init } from "./";
+
+const app = new OpenAPIHono<{ Bindings: Bindings }>();
+
+const authhero = init();
+
+app.get("/test", (ctx: Context) => {
+  return ctx.text("Hello, world!");
+});
+
+app.route("/", authhero);
+
+export default app;

package/packages/authhero/src/index.ts

@@ -0,0 +1,34 @@
+import { OpenAPIHono } from "@hono/zod-openapi";
+import { Context } from "hono";
+import { Bindings, Variables } from "./types";
+import { wellKnownRoutes } from "./routes/oauth2";
+
+export interface AuthHeroConfig {}
+
+export function init() {
+  const rootApp = new OpenAPIHono<{ Bindings: Bindings }>();
+
+  rootApp.get("/", (ctx: Context) => {
+    return ctx.text("Hello, authhero!");
+  });
+
+  /**
+   * The oauth routes
+   */
+  const oauthApp = new OpenAPIHono<{
+    Bindings: Bindings;
+    Variables: Variables;
+  }>().route("/.well-known", wellKnownRoutes);
+
+  oauthApp.doc("/spec", {
+    openapi: "3.0.0",
+    info: {
+      version: "1.0.0",
+      title: "Oauth endpoints",
+    },
+  });
+
+  rootApp.route("/", oauthApp);
+
+  return rootApp;
+}

package/packages/authhero/src/routes/oauth2/index.ts

@@ -0,0 +1 @@
+export * from "./well-known";

package/packages/authhero/src/routes/oauth2/well-known.ts

@@ -0,0 +1,179 @@
+import {
+  Bindings,
+  jwksKeySchema,
+  // jwksSchema,
+  openIDConfigurationSchema,
+} from "../../types";
+import { OpenAPIHono, createRoute } from "@hono/zod-openapi";
+
+export const wellKnownRoutes = new OpenAPIHono<{ Bindings: Bindings }>()
+  // --------------------------------
+  // GET /.well-known/jwks.json
+  // --------------------------------
+  .openapi(
+    createRoute({
+      tags: ["jwks"],
+      method: "get",
+      path: "/jwks.json",
+      request: {},
+      responses: {
+        200: {
+          content: {
+            "application/json": {
+              schema: jwksKeySchema,
+            },
+          },
+          description: "List of tenants",
+        },
+      },
+    }),
+    async (ctx) => {
+      const { env } = ctx;
+
+      // const certificates = await env.data.keys.list();
+      // const keys = certificates.map((cert) => {
+      //   const { alg, n, e, kty } = JSON.parse(cert.public_key);
+      //   if (!alg || !e || !kty || !n) {
+      //     throw new Error("Invalid public key");
+      //   }
+
+      //   return jwksSchema.parse({
+      //     kid: cert.kid,
+      //     alg,
+      //     n,
+      //     e,
+      //     kty,
+      //   });
+      // });
+
+      // TODO: This is a stub implementation. Replace with the actual implementation
+      const keys = [
+        {
+          alg: "RS256",
+          e: "AQAB",
+          kid: "hZ42TWGWLdmyKfwGVA6c2",
+          kty: "RSA",
+          n: "nUd-mktFZQNfVwmXufxcVcvJo6Lkb-jDuymtfQunmEhWCctOccWx9e7LX7_9uN15ZnRS7XJInPMRs9KLYdZ0GCnE2HM_QbrEoHpdkCRgyTE-KzmoaEv_AOVGE_Kg0-0ct3r9Z7aJLDVAsxXl1C9y8Gr7ZYkq0c4DyZr9VT8nQiwZQERbfxXdXw-5RLj21S_Lm-LL-AjKvry_TDBLpfUFJV18SVsM07lY_V45TwykNewRdaGLspFIeGdG5j5eByV8ifzBqvzOSptSCsmOTtW-ceWUk0FPD7g_KKzjjbzenoB0TC8mBb_4vWZlHnuGIAs2YoTFglp9uNu7t_OVl3Svo6ZE6alzUnaNfZNeAi78KPHYQ4tDWPjpYNfGynsiD0nojkDSPCIak56jWNYjj614cPEBiv9MVQRiSbBxpiGhMoHlW_QCCPMcXygLAaRs_tUksqoH4QB80krifG2yHPgGDPjXK1_0cYzV80iOcQIeoceqhkSSc6YxzzgDrQcsV2k3bizRQSL83GWkpdHhTZn-Q_JzsW_bDY_f9fjigYbRnoDSgS7038VFIPc92StE41MdgvIQMomcyEE4lYK1uv1Mo6cnXbCZhm8tvddo7VKNorOB4nsiv8DGrWPlzQBca9VN4C1oE2mH-3WLFR7XEkBHWVouOdTWM2S3K9F10YtahkM",
+        },
+      ];
+
+      return ctx.json(
+        { keys },
+        {
+          headers: {
+            "access-control-allow-origin": "*",
+            "access-control-allow-method": "GET",
+            "cache-control": `public, max-age=${env.JWKS_CACHE_TIMEOUT_IN_SECONDS}, stale-while-revalidate=${
+              env.JWKS_CACHE_TIMEOUT_IN_SECONDS * 2
+            }, stale-if-error=86400`,
+          },
+        },
+      );
+    },
+  )
+  // --------------------------------
+  // GET /.well-known/openid-configuration
+  // --------------------------------
+  .openapi(
+    createRoute({
+      tags: ["well known"],
+      method: "get",
+      path: "/openid-configuration",
+      request: {},
+      responses: {
+        200: {
+          content: {
+            "application/json": {
+              schema: openIDConfigurationSchema,
+            },
+          },
+          description: "List of tenants",
+        },
+      },
+    }),
+    async (ctx) => {
+      const { env } = ctx;
+      const { ISSUER } = env;
+
+      const result = openIDConfigurationSchema.parse({
+        issuer: ISSUER,
+        authorization_endpoint: `${ISSUER}authorize`,
+        token_endpoint: `${ISSUER}oauth/token`,
+        device_authorization_endpoint: `${ISSUER}oauth/device/code`,
+        userinfo_endpoint: `${ISSUER}userinfo`,
+        mfa_challenge_endpoint: `${ISSUER}mfa/challenge`,
+        jwks_uri: `${ISSUER}.well-known/jwks.json`,
+        registration_endpoint: `${ISSUER}oidc/register`,
+        revocation_endpoint: `${ISSUER}oauth/revoke`,
+        scopes_supported: [
+          "openid",
+          "profile",
+          "offline_access",
+          "name",
+          "given_name",
+          "family_name",
+          "nickname",
+          "email",
+          "email_verified",
+          "picture",
+          "created_at",
+          "identities",
+          "phone",
+          "address",
+        ],
+        response_types_supported: [
+          "code",
+          "token",
+          "id_token",
+          "code token",
+          "code id_token",
+          "token id_token",
+          "code token id_token",
+        ],
+        code_challenge_methods_supported: ["S256", "plain"],
+        response_modes_supported: ["query", "fragment", "form_post"],
+        subject_types_supported: ["public"],
+        id_token_signing_alg_values_supported: ["HS256", "RS256"],
+        token_endpoint_auth_methods_supported: [
+          "client_secret_basic",
+          "client_secret_post",
+          "private_key_jwt",
+        ],
+        claims_supported: [
+          "aud",
+          "auth_time",
+          "created_at",
+          "email",
+          "email_verified",
+          "exp",
+          "family_name",
+          "given_name",
+          "iat",
+          "identities",
+          "iss",
+          "name",
+          "nickname",
+          "phone_number",
+          "picture",
+          "sub",
+        ],
+        request_uri_parameter_supported: false,
+        request_parameter_supported: false,
+        token_endpoint_auth_signing_alg_values_supported: [
+          "RS256",
+          "RS384",
+          "PS256",
+        ],
+      });
+
+      return ctx.json(result, {
+        headers: {
+          "access-control-allow-origin": "*",
+          "access-control-allow-method": "GET",
+          "cache-control": `public, max-age=${env.JWKS_CACHE_TIMEOUT_IN_SECONDS}, stale-while-revalidate=${
+            env.JWKS_CACHE_TIMEOUT_IN_SECONDS * 2
+          }, stale-if-error=86400`,
+        },
+      });
+    },
+  );

package/{src → packages/authhero/src}/types/Bindings.ts

@@ -1,4 +1,7 @@
 export type Bindings = {
   ISSUER: string;
   ENVIRONMENT: string;
+
+  // Constants
+  JWKS_CACHE_TIMEOUT_IN_SECONDS: number;
 };

package/packages/authhero/src/types/JWKS.ts

@@ -0,0 +1,37 @@
+import { z } from "@hono/zod-openapi";
+
+export const jwksSchema = z.object({
+  alg: z.string(),
+  e: z.string(),
+  kid: z.string(),
+  kty: z.string(),
+  n: z.string(),
+  use: z.string().optional(),
+});
+
+export const jwksKeySchema = z.object({
+  keys: z.array(jwksSchema),
+});
+
+export const openIDConfigurationSchema = z.object({
+  issuer: z.string(),
+  authorization_endpoint: z.string(),
+  token_endpoint: z.string(),
+  device_authorization_endpoint: z.string(),
+  userinfo_endpoint: z.string(),
+  mfa_challenge_endpoint: z.string(),
+  jwks_uri: z.string(),
+  registration_endpoint: z.string(),
+  revocation_endpoint: z.string(),
+  scopes_supported: z.array(z.string()),
+  response_types_supported: z.array(z.string()),
+  code_challenge_methods_supported: z.array(z.string()),
+  response_modes_supported: z.array(z.string()),
+  subject_types_supported: z.array(z.string()),
+  id_token_signing_alg_values_supported: z.array(z.string()),
+  token_endpoint_auth_methods_supported: z.array(z.string()),
+  claims_supported: z.array(z.string()),
+  request_uri_parameter_supported: z.boolean(),
+  request_parameter_supported: z.boolean(),
+  token_endpoint_auth_signing_alg_values_supported: z.array(z.string()),
+});

package/packages/authhero/src/types/Variables.ts

@@ -0,0 +1 @@
+export type Variables = {};

package/packages/authhero/src/types/index.ts

@@ -0,0 +1,3 @@
+export * from "./Bindings";
+export * from "./JWKS";
+export * from "./Variables";

package/packages/authhero/src/vite-env.d.ts

@@ -0,0 +1 @@
+/// <reference types="vite/client" />

package/packages/authhero/tsconfig.json

@@ -0,0 +1,11 @@
+{
+  "extends": "../../tsconfig.json",
+  "compilerOptions": {
+    // "noEmit": true,
+    "baseUrl": ".",
+    "outDir": "./dist",
+    "rootDir": "./src"
+  },
+  "include": ["src"],
+  "references": [{ "path": "./tsconfig.node.json" }]
+}

package/packages/authhero/tsconfig.node.json

@@ -0,0 +1,4 @@
+{
+  "extends": "../../tsconfig.node.json",
+  "include": ["vite.config.ts"]
+}

package/packages/create-authhero/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "create-authhero",
+  "version": "0.0.1",
+  "type": "module",
+  "main": "dist/create-authhero.js",
+  "bin": {
+    "create-authhero": "dist/create-authhero.js"
+  },
+  "scripts": {
+    "build": "tsc && vite build",
+    "start": "pnpm build && node dist/create-authhero.js"
+  },
+  "devDependencies": {
+    "@types/node": "^20.14.9",
+    "typescript": "^5.5.2",
+    "vite": "^5.3.2"
+  },
+  "dependencies": {
+    "commander": "^12.1.0",
+    "inquirer": "^9.3.1"
+  }
+}

package/packages/create-authhero/src/index.ts

@@ -0,0 +1,72 @@
+#!/usr/bin/env node
+
+import { Command } from "commander";
+import inquirer from "inquirer";
+import fs from "fs";
+import path from "path";
+
+const program = new Command();
+
+program
+  .version("1.0.0")
+  .description("Create a new AuthHero project")
+  .argument("[project-name]", "name of the project")
+  .action(async (projectName) => {
+    if (!projectName) {
+      const answers = await inquirer.prompt([
+        {
+          type: "input",
+          name: "projectName",
+          message: "Project name:",
+          default: "auth-server",
+          validate: (input) => input !== "" || "Project name cannot be empty",
+        },
+      ]);
+      projectName = answers.projectName;
+    }
+
+    const projectPath = path.join(process.cwd(), projectName);
+
+    if (fs.existsSync(projectPath)) {
+      console.error(`Project "${projectName}" already exists.`);
+      process.exit(1);
+    }
+
+    const answers = await inquirer.prompt([
+      {
+        type: "input",
+        name: "description",
+        message: "Project description:",
+      },
+      {
+        type: "input",
+        name: "author",
+        message: "Author name:",
+      },
+    ]);
+
+    fs.mkdirSync(projectPath);
+    fs.writeFileSync(
+      path.join(projectPath, "package.json"),
+      JSON.stringify(
+        {
+          name: projectName,
+          version: "1.0.0",
+          description: answers.description,
+          author: answers.author,
+          scripts: {
+            start: "node index.js",
+          },
+        },
+        null,
+        2,
+      ),
+    );
+    fs.writeFileSync(
+      path.join(projectPath, "index.js"),
+      `console.log('Welcome to AuthHero!');`,
+    );
+    console.log(`Project "${projectName}" has been created.`);
+  });
+
+program.parse(process.argv);

package/packages/create-authhero/src/vite-env.d.ts

@@ -0,0 +1 @@
+/// <reference types="vite/client" />

package/packages/create-authhero/templates/sqlite/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "sqlite",
+  "version": "1.0.0",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "dev": "bun src/index.ts"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "MIT",
+  "dependencies": {
+    "@hono/zod-openapi": "^0.14.9",
+    "authhero": "workspace:^",
+    "hono": "^4.4.10"
+  }
+}

package/packages/create-authhero/templates/sqlite/src/index.ts

@@ -0,0 +1,19 @@
+import { Hono } from "hono";
+import { init } from "../../../../authhero";
+
+// function init() {
+//   const app = new OpenAPIHono<{ Bindings: Bindings }>();
+
+//   app.get("/test", (ctx: Context) => {
+//     return ctx.text("Hello, world!");
+//   });
+
+//   return app;
+// }
+
+const app = new Hono();
+app.get("/", (c) => c.text("Hono!"));
+const authhero = init();
+
+app.route("/", authhero);
+export default app;

package/packages/create-authhero/templates/sqlite/yarn.lock

@@ -0,0 +1,48 @@
+# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+# yarn lockfile v1
+
+
+"@asteasolutions/zod-to-openapi@^7.1.0":
+  version "7.1.1"
+  resolved "https://registry.yarnpkg.com/@asteasolutions/zod-to-openapi/-/zod-to-openapi-7.1.1.tgz#27784396d9f854db975a3b784095efef25258422"
+  integrity sha512-lF0d1gAc0lYLO9/BAGivwTwE2Sh9h6CHuDcbk5KnGBfIuAsAkDC+Fdat4dkQY3CS/zUWKHRmFEma0B7X132Ymw==
+  dependencies:
+    openapi3-ts "^4.1.2"
+
+"@hono/zod-openapi@^0.14.5", "@hono/zod-openapi@^0.14.9":
+  version "0.14.9"
+  resolved "https://registry.yarnpkg.com/@hono/zod-openapi/-/zod-openapi-0.14.9.tgz#f0722f323f89ba4bb887b2b4242a6b13838ca960"
+  integrity sha512-7qWxZiSG4CogPb00TKorPMb2YsniOI0AReFrR7nIvsIdZ5XeorIQtFTI7G+o7HaaKPyzSPqcRllkFnQIIqxCMQ==
+  dependencies:
+    "@asteasolutions/zod-to-openapi" "^7.1.0"
+    "@hono/zod-validator" "0.2.2"
+
+"@hono/zod-validator@0.2.2":
+  version "0.2.2"
+  resolved "https://registry.yarnpkg.com/@hono/zod-validator/-/zod-validator-0.2.2.tgz#929a1c40aee5eac1ed9c84094d6d977e0b70187a"
+  integrity sha512-dSDxaPV70Py8wuIU2QNpoVEIOSzSXZ/6/B/h4xA7eOMz7+AarKTSGV8E6QwrdcCbBLkpqfJ4Q2TmBO0eP1tCBQ==
+
+"authhero@workspace:^":
+  version "0.0.1"
+  resolved "https://registry.yarnpkg.com/authhero/-/authhero-0.0.1.tgz#6d1e8a3b1ff40be9f771e8ae1f04451fb44e1b31"
+  integrity sha512-iLV7EoYKMYism/CY+G7tjXFZ6G09aX/+ircsQtnO48re0ujEkj1VTGR5OY87mimI1yH1BlA69hyMBtnwBQUUag==
+  dependencies:
+    "@hono/zod-openapi" "^0.14.5"
+    hono "^4.4.10"
+
+hono@^4.4.10:
+  version "4.4.13"
+  resolved "https://registry.yarnpkg.com/hono/-/hono-4.4.13.tgz#954e8f6e4bab14f3f9d7bac4eef4c56d23e7f900"
+  integrity sha512-c6qqenclmQ6wpXzqiElMa2jt423PVCmgBreDfC5s2lPPpGk7d0lOymd8QTzFZyYC5mSSs6imiTMPip+gLwuW/g==
+
+openapi3-ts@^4.1.2:
+  version "4.3.3"
+  resolved "https://registry.yarnpkg.com/openapi3-ts/-/openapi3-ts-4.3.3.tgz#de43a2f2fab912939495c169b92d81fe78a4ec10"
+  integrity sha512-LKkzBGJcZ6wdvkKGMoSvpK+0cbN5Xc3XuYkJskO+vjEQWJgs1kgtyUk0pjf8KwPuysv323Er62F5P17XQl96Qg==
+  dependencies:
+    yaml "^2.4.5"
+
+yaml@^2.4.5:
+  version "2.4.5"
+  resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.4.5.tgz#60630b206dd6d84df97003d33fc1ddf6296cca5e"
+  integrity sha512-aBx2bnqDzVOyNKfsysjA2ms5ZlnjSAW2eG3/L5G/CSujfjLJTJsEw1bGw8kCf04KodQWk1pxlGnZ56CRxiawmg==

package/packages/create-authhero/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../../tsconfig.json",
+  "compilerOptions": {
+    // "noEmit": true,
+    "baseUrl": "."
+  },
+  "include": ["src"],
+  "references": [{ "path": "./tsconfig.node.json" }]
+}

package/packages/create-authhero/tsconfig.node.json

@@ -0,0 +1,4 @@
+{
+  "extends": "../../tsconfig.node.json",
+  "include": ["vite.config.ts"]
+}

package/packages/create-authhero/vite.config.ts

@@ -0,0 +1,14 @@
+import { defineConfig } from "vite";
+
+export default defineConfig({
+  build: {
+    lib: {
+      entry: "src/index.ts",
+      formats: ["es"],
+      fileName: "create-authhero",
+    },
+    rollupOptions: {
+      external: ["commander", "inquirer", "fs", "path"],
+    },
+  },
+});

package/pnpm-workspace.yaml

@@ -0,0 +1,3 @@
+packages:
+  - "apps/*"
+  - "packages/*"

package/tsconfig.json

@@ -1,11 +1,31 @@
 {
-  "extends": "../../tsconfig.json",
   "compilerOptions": {
-    // "noEmit": true,
-    "baseUrl": ".",
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src"],
-  "references": [{ "path": "./tsconfig.node.json" }]
+    "target": "ESNext",
+    "lib": ["DOM", "DOM.Iterable", "ESNext"],
+    "module": "ESNext",
+    "skipLibCheck": true,
+    "noImplicitAny": false,
+    "allowJs": true,
+    "noErrorTruncation": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+
+    /* Linting */
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "noFallthroughCasesInSwitch": true,
+
+    "declaration": true,
+    "composite": true,
+    "sourceMap": true,
+    "declarationMap": true
+  }
 }

package/tsconfig.node.json

@@ -1,4 +1,9 @@
 {
-  "extends": "../../tsconfig.node.json",
-  "include": ["vite.config.ts"]
+  "compilerOptions": {
+    "composite": true,
+    "skipLibCheck": true,
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "allowSyntheticDefaultImports": true
+  }
 }