base-idp 1.0.0 → 1.1.0

package/dist/vite.d.ts

@@ -1,6 +1,50 @@
-import type { ReactBaseIdpAuth } from "./react.js";
-import type { BaseIdPConfig } from "./types.js";
+/**
+ * Vite integration for the Base IdP SDK.
+ *
+ * Returns a full BrowserBaseIdpClient so Vite/browser apps get the complete
+ * auth flow: PKCE, callback handling, session management, and token refresh.
+ *
+ * PKCE public clients only — if the discovered client is confidential
+ * (requires a client_secret), loginWithRedirect() will throw and direct the
+ * app to use a backend callback route instead.
+ */
+import { BrowserBaseIdpClient } from "./browser.js";
+import type { BrowserBaseIdpConfig } from "./types.js";
 export type ViteBaseIdpEnv = Record<string, string | boolean | undefined>;
-export declare function baseIdpConfigFromViteEnv(env: ViteBaseIdpEnv, overrides?: Partial<BaseIdPConfig>): BaseIdPConfig;
-export declare function createViteBaseIdpAuth(env: ViteBaseIdpEnv, overrides?: Partial<BaseIdPConfig>): ReactBaseIdpAuth;
+/**
+ * Build a BrowserBaseIdpConfig from Vite's import.meta.env (or a plain
+ * Record). Reads VITE_BASE_IDP_* first, falls back to BASE_IDP_*.
+ *
+ * Never reads BASE_IDP_CLIENT_SECRET — secrets must never appear in
+ * browser bundles.
+ */
+export declare function baseIdpConfigFromViteEnv(env: ViteBaseIdpEnv, overrides?: Partial<BrowserBaseIdpConfig>): BrowserBaseIdpConfig;
+/**
+ * Create a full-featured browser auth client from Vite's import.meta.env.
+ *
+ * Returns a BrowserBaseIdpClient — the same object used by
+ * createBrowserBaseIdpAuth() — so the app gets PKCE, callback handling,
+ * session management, auto-refresh, and onSessionChange events.
+ *
+ * @example
+ * // src/auth.ts
+ * import { createViteBaseIdpAuth } from "base-idp/vite";
+ * export const auth = createViteBaseIdpAuth(import.meta.env);
+ *
+ * // main.tsx — on app load
+ * await auth.init();
+ *
+ * // If this page is the OAuth callback
+ * if (window.location.search.includes("code=")) {
+ *   const { principal, returnTo } = await auth.handleRedirectCallback();
+ *   window.history.replaceState({}, "", returnTo ?? "/");
+ * }
+ *
+ * // Start login
+ * await auth.loginWithRedirect({ returnTo: "/dashboard" });
+ *
+ * // Get the current user synchronously
+ * const user = auth.getUser();
+ */
+export declare function createViteBaseIdpAuth(env: ViteBaseIdpEnv, overrides?: Partial<BrowserBaseIdpConfig>): BrowserBaseIdpClient;
 //# sourceMappingURL=vite.d.ts.map

package/dist/vite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vite.d.ts","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;AAE1E,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,cAAc,EACnB,SAAS,GAAE,OAAO,CAAC,aAAa,CAAM,GACrC,aAAa,CAOf;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,cAAc,EACnB,SAAS,GAAE,OAAO,CAAC,aAAa,CAAM,GACrC,gBAAgB,CAElB"}
+{"version":3,"file":"vite.d.ts","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,oBAAoB,EAA4B,MAAM,cAAc,CAAC;AAC9E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,cAAc,EACnB,SAAS,GAAE,OAAO,CAAC,oBAAoB,CAAM,GAC5C,oBAAoB,CAetB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,cAAc,EACnB,SAAS,GAAE,OAAO,CAAC,oBAAoB,CAAM,GAC5C,oBAAoB,CAEtB"}

package/dist/vite.js

@@ -1,20 +1,73 @@
-import { BaseIdPClient } from "./client.js";
-import { createReactBaseIdpAuth } from "./react.js";
+/**
+ * Vite integration for the Base IdP SDK.
+ *
+ * Returns a full BrowserBaseIdpClient so Vite/browser apps get the complete
+ * auth flow: PKCE, callback handling, session management, and token refresh.
+ *
+ * PKCE public clients only — if the discovered client is confidential
+ * (requires a client_secret), loginWithRedirect() will throw and direct the
+ * app to use a backend callback route instead.
+ */
+import { BrowserBaseIdpClient, createBrowserBaseIdpAuth } from "./browser.js";
+/**
+ * Build a BrowserBaseIdpConfig from Vite's import.meta.env (or a plain
+ * Record). Reads VITE_BASE_IDP_* first, falls back to BASE_IDP_*.
+ *
+ * Never reads BASE_IDP_CLIENT_SECRET — secrets must never appear in
+ * browser bundles.
+ */
 export function baseIdpConfigFromViteEnv(env, overrides = {}) {
     return {
         key: stringEnv(env, "VITE_BASE_IDP_KEY", "BASE_IDP_KEY", overrides.key),
         issuer: stringEnv(env, "VITE_BASE_IDP_ISSUER", "BASE_IDP_ISSUER", overrides.issuer),
-        secret: overrides.secret ?? optionalStringEnv(env, "VITE_BASE_IDP_SECRET", "BASE_IDP_SECRET"),
+        // Never read a client secret — browser clients are always public
+        redirectUri: overrides.redirectUri ??
+            optionalStringEnv(env, "VITE_BASE_IDP_REDIRECT_URI", "BASE_IDP_REDIRECT_URI"),
+        scopes: overrides.scopes ??
+            optionalStringEnv(env, "VITE_BASE_IDP_SCOPES", "BASE_IDP_SCOPES"),
+        audience: overrides.audience ??
+            optionalStringEnv(env, "VITE_BASE_IDP_AUDIENCE", "BASE_IDP_AUDIENCE"),
+        persistSession: overrides.persistSession ?? false,
+        storagePrefix: overrides.storagePrefix,
         fetch: overrides.fetch,
     };
 }
+/**
+ * Create a full-featured browser auth client from Vite's import.meta.env.
+ *
+ * Returns a BrowserBaseIdpClient — the same object used by
+ * createBrowserBaseIdpAuth() — so the app gets PKCE, callback handling,
+ * session management, auto-refresh, and onSessionChange events.
+ *
+ * @example
+ * // src/auth.ts
+ * import { createViteBaseIdpAuth } from "base-idp/vite";
+ * export const auth = createViteBaseIdpAuth(import.meta.env);
+ *
+ * // main.tsx — on app load
+ * await auth.init();
+ *
+ * // If this page is the OAuth callback
+ * if (window.location.search.includes("code=")) {
+ *   const { principal, returnTo } = await auth.handleRedirectCallback();
+ *   window.history.replaceState({}, "", returnTo ?? "/");
+ * }
+ *
+ * // Start login
+ * await auth.loginWithRedirect({ returnTo: "/dashboard" });
+ *
+ * // Get the current user synchronously
+ * const user = auth.getUser();
+ */
 export function createViteBaseIdpAuth(env, overrides = {}) {
-    return createReactBaseIdpAuth(new BaseIdPClient(baseIdpConfigFromViteEnv(env, overrides)));
+    return createBrowserBaseIdpAuth(baseIdpConfigFromViteEnv(env, overrides));
 }
+// ── Private helpers ─────────────────────────────────────────────────────────
 function stringEnv(env, publicKey, fallbackKey, fallback) {
     const value = optionalStringEnv(env, publicKey, fallbackKey) ?? fallback;
-    if (!value)
-        throw new Error(`Missing ${publicKey}`);
+    if (!value) {
+        throw new Error(`Base IdP: ${publicKey} is required. Set it in your .env file or pass it as an override.`);
+    }
     return value;
 }
 function optionalStringEnv(env, publicKey, fallbackKey) {

package/dist/vite.js.map

@@ -1 +1 @@
-{"version":3,"file":"vite.js","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAMpD,MAAM,UAAU,wBAAwB,CACtC,GAAmB,EACnB,YAAoC,EAAE;IAEtC,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,mBAAmB,EAAE,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC;QACvE,MAAM,EAAE,SAAS,CAAC,GAAG,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,SAAS,CAAC,MAAM,CAAC;QACnF,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,sBAAsB,EAAE,iBAAiB,CAAC;QAC7F,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAAmB,EACnB,YAAoC,EAAE;IAEtC,OAAO,sBAAsB,CAAC,IAAI,aAAa,CAAC,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,SAAiB,EAAE,WAAmB,EAAE,QAAiB;IAC/F,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAmB,EAAE,SAAiB,EAAE,WAAmB;IACpF,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"vite.js","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAK9E;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAmB,EACnB,YAA2C,EAAE;IAE7C,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,mBAAmB,EAAE,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC;QACvE,MAAM,EAAE,SAAS,CAAC,GAAG,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,SAAS,CAAC,MAAM,CAAC;QACnF,iEAAiE;QACjE,WAAW,EAAE,SAAS,CAAC,WAAW;YAChC,iBAAiB,CAAC,GAAG,EAAE,4BAA4B,EAAE,uBAAuB,CAAC;QAC/E,MAAM,EAAE,SAAS,CAAC,MAAM;YACtB,iBAAiB,CAAC,GAAG,EAAE,sBAAsB,EAAE,iBAAiB,CAAC;QACnE,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC1B,iBAAiB,CAAC,GAAG,EAAE,wBAAwB,EAAE,mBAAmB,CAAC;QACvE,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,KAAK;QACjD,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAmB,EACnB,YAA2C,EAAE;IAE7C,OAAO,wBAAwB,CAAC,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,+EAA+E;AAE/E,SAAS,SAAS,CAChB,GAAmB,EACnB,SAAiB,EACjB,WAAmB,EACnB,QAAiB;IAEjB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC;IACzE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,aAAa,SAAS,mEAAmE,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CACxB,GAAmB,EACnB,SAAiB,EACjB,WAAmB;IAEnB,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "base-idp",
-  "version": "1.0.0",
-  "description": "Base IdP SDK for React, Next.js, SvelteKit, Vite, and server-side TypeScript.",
+  "version": "1.1.0",
+  "description": "Base IdP SDK — browser Client SDK and server SDK for React, Next.js, SvelteKit, Vite, Express, NestJS, and raw Node.",
   "license": "UNLICENSED",
   "type": "module",
   "publishConfig": {
@@ -13,13 +13,17 @@
     "README.md"
   ],
   "bin": {
-    "base-idp": "./dist/cli.js"
+    "base-idp": "dist/cli.js"
   },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
+    "./browser": {
+      "types": "./dist/browser.d.ts",
+      "import": "./dist/browser.js"
+    },
     "./server": {
       "types": "./dist/server.d.ts",
       "import": "./dist/server.js"
@@ -53,8 +57,17 @@
   "engines": {
     "node": ">=20"
   },
+  "peerDependencies": {
+    "react": ">=18"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  },
   "devDependencies": {
     "@types/node": "^22.13.10",
+    "@types/react": "^18.3.0",
     "typescript": "^5.8.2"
   }
 }