create-authhero 0.24.0 → 0.26.0

package/dist/create-authhero.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import { Command as P } from "commander";
+import { Command as L } from "commander";
 import u from "inquirer";
 import s from "fs";
-import i from "path";
-import { spawn as I } from "child_process";
-const N = new P(), p = {
+import l from "path";
+import { spawn as N } from "child_process";
+const T = new L(), p = {
   local: {
     name: "Local (SQLite)",
     description: "Local development setup with SQLite database - great for getting started",
     templateDir: "local",
-    packageJson: (t, e) => ({
+    packageJson: (t, e, o) => ({
       name: t,
       version: "1.0.0",
       type: "module",
@@ -29,7 +29,8 @@ const N = new P(), p = {
         "better-sqlite3": "latest",
         hono: "^4.6.0",
         kysely: "latest",
-        ...e && { "@authhero/multi-tenancy": "latest" }
+        ...e && { "@authhero/multi-tenancy": "latest" },
+        ...o && { bcryptjs: "latest" }
       },
       devDependencies: {
         "@types/better-sqlite3": "^7.6.0",
@@ -44,7 +45,7 @@ const N = new P(), p = {
     name: "Cloudflare Workers (D1)",
     description: "Cloudflare Workers setup with D1 database",
     templateDir: "cloudflare",
-    packageJson: (t, e) => ({
+    packageJson: (t, e, o) => ({
       name: t,
       version: "1.0.0",
       type: "module",
@@ -72,7 +73,8 @@ const N = new P(), p = {
         hono: "^4.6.0",
         kysely: "latest",
         "kysely-d1": "latest",
-        ...e && { "@authhero/multi-tenancy": "latest" }
+        ...e && { "@authhero/multi-tenancy": "latest" },
+        ...o && { bcryptjs: "latest" }
       },
       devDependencies: {
         "@cloudflare/workers-types": "^4.0.0",
@@ -88,7 +90,7 @@ const N = new P(), p = {
     name: "AWS SST (Lambda + DynamoDB)",
     description: "Serverless AWS deployment with Lambda, DynamoDB, and SST",
     templateDir: "aws-sst",
-    packageJson: (t, e) => ({
+    packageJson: (t, e, o) => ({
       name: t,
       version: "1.0.0",
       type: "module",
@@ -108,7 +110,8 @@ const N = new P(), p = {
         "@hono/zod-openapi": "^0.19.0",
         authhero: "latest",
         hono: "^4.6.0",
-        ...e && { "@authhero/multi-tenancy": "latest" }
+        ...e && { "@authhero/multi-tenancy": "latest" },
+        ...o && { bcryptjs: "latest" }
       },
       devDependencies: {
         "@types/aws-lambda": "^8.10.0",
@@ -121,13 +124,130 @@ const N = new P(), p = {
     seedFile: "seed.ts"
   }
 };
-function k(t, e) {
-  s.readdirSync(t).forEach((a) => {
-    const n = i.join(t, a), o = i.join(e, a);
-    s.lstatSync(n).isDirectory() ? (s.mkdirSync(o, { recursive: !0 }), k(n, o)) : s.copyFileSync(n, o);
+function E(t, e) {
+  s.readdirSync(t).forEach((r) => {
+    const n = l.join(t, r), a = l.join(e, r);
+    s.lstatSync(n).isDirectory() ? (s.mkdirSync(a, { recursive: !0 }), E(n, a)) : s.copyFileSync(n, a);
   });
 }
-function _(t) {
+function R(t, e = !1, o = "authhero-local") {
+  const r = t ? "control_plane" : "main", n = t ? "Control Plane" : "Main", a = [
+    "https://manage.authhero.net/auth-callback",
+    "https://local.authhero.net/auth-callback",
+    "http://localhost:5173/auth-callback",
+    "https://localhost:3000/auth-callback"
+  ], c = e ? [
+    `https://localhost.emobix.co.uk:8443/test/a/${o}/callback`,
+    `https://localhost:8443/test/a/${o}/callback`
+  ] : [], g = [...a, ...c], w = [
+    "https://manage.authhero.net",
+    "https://local.authhero.net",
+    "http://localhost:5173",
+    "https://localhost:3000"
+  ], y = e ? ["https://localhost:8443/", "https://localhost.emobix.co.uk:8443/"] : [], x = [...w, ...y], v = e ? `
+  // Create OpenID Conformance Suite test clients and user
+  console.log("Creating conformance test clients and user...");
+  
+  const conformanceCallbacks = [
+    "https://localhost.emobix.co.uk:8443/test/a/${o}/callback",
+    "https://localhost:8443/test/a/${o}/callback",
+  ];
+  const conformanceLogoutUrls = [
+    "https://localhost:8443/",
+    "https://localhost.emobix.co.uk:8443/",
+  ];
+  const conformanceWebOrigins = [
+    "https://localhost:8443",
+    "https://localhost.emobix.co.uk:8443",
+  ];
+
+  try {
+    await adapters.clients.create("${r}", {
+      client_id: "conformance-test",
+      client_secret: "conformanceTestSecret123",
+      name: "Conformance Test Client",
+      callbacks: conformanceCallbacks,
+      allowed_logout_urls: conformanceLogoutUrls,
+      web_origins: conformanceWebOrigins,
+    });
+    console.log("✅ Created conformance-test client");
+  } catch (e: any) {
+    if (e.message?.includes("UNIQUE constraint")) {
+      console.log("ℹ️  conformance-test client already exists");
+    } else {
+      throw e;
+    }
+  }
+
+  try {
+    await adapters.clients.create("${r}", {
+      client_id: "conformance-test2",
+      client_secret: "conformanceTestSecret456",
+      name: "Conformance Test Client 2",
+      callbacks: conformanceCallbacks,
+      allowed_logout_urls: conformanceLogoutUrls,
+      web_origins: conformanceWebOrigins,
+    });
+    console.log("✅ Created conformance-test2 client");
+  } catch (e: any) {
+    if (e.message?.includes("UNIQUE constraint")) {
+      console.log("ℹ️  conformance-test2 client already exists");
+    } else {
+      throw e;
+    }
+  }
+
+  // Create a conformance test user with ALL OIDC profile claims populated
+  // This is required for OIDCC-5.4 (VerifyScopesReturnedInUserInfoClaims) test
+  try {
+    await adapters.users.create("${r}", {
+      user_id: "auth2|conformance-user",
+      email: "conformance@example.com",
+      email_verified: true,
+      name: "Conformance Test User",
+      given_name: "Conformance",
+      family_name: "User",
+      middle_name: "Test",
+      nickname: "conformance",
+      username: "conformance_user",
+      picture: "https://example.com/conformance.png",
+      profile: "https://example.com/conformance",
+      website: "https://example.com",
+      gender: "other",
+      birthdate: "2000-01-01",
+      zoneinfo: "Europe/London",
+      locale: "en-US",
+      connection: "Username-Password-Authentication",
+      provider: "auth2",
+      is_social: false,
+    });
+    console.log("✅ Created conformance test user (conformance@example.com)");
+  } catch (e: any) {
+    if (e.message?.includes("UNIQUE constraint")) {
+      console.log("ℹ️  conformance test user already exists");
+    } else {
+      throw e;
+    }
+  }
+
+  // Create password for conformance test user
+  // Password: ConformanceTest123!
+  try {
+    const bcrypt = await import("bcryptjs");
+    const hashedPassword = await bcrypt.hash("ConformanceTest123!", 10);
+    await adapters.passwords.create("${r}", {
+      user_id: "auth2|conformance-user",
+      password: hashedPassword,
+    });
+    console.log("✅ Created password for conformance test user");
+  } catch (e: any) {
+    if (e.message?.includes("UNIQUE constraint")) {
+      console.log("ℹ️  conformance test user password already exists");
+    } else {
+      throw e;
+    }
+  }
+` : "";
   return `import { SqliteDialect, Kysely } from "kysely";
 import Database from "better-sqlite3";
 import createAdapters from "@authhero/kysely-adapter";
@@ -153,32 +273,38 @@ async function main() {
   await seed(adapters, {
     adminEmail,
     adminPassword,
-    tenantId: "${t ? "control_plane" : "main"}",
-    tenantName: "${t ? "Control Plane" : "Main"}",
+    tenantId: "${r}",
+    tenantName: "${n}",
     isControlPlane: ${t},
+    callbacks: ${JSON.stringify(g)},
+    allowedLogoutUrls: ${JSON.stringify(x)},
   });
-
+${v}
   await db.destroy();
 }
 
 main().catch(console.error);
 `;
 }
-function R(t) {
+function O(t) {
   return t ? `import { Context } from "hono";
 import { swaggerUI } from "@hono/swagger-ui";
 import { AuthHeroConfig, DataAdapters } from "authhero";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { initMultiTenant } from "@authhero/multi-tenancy";
 
-// Control plane tenant ID - the tenant that manages all other tenants
+// Control plane configuration
 const CONTROL_PLANE_TENANT_ID = "control_plane";
+const CONTROL_PLANE_CLIENT_ID = "default_client";
 
 export default function createApp(config: AuthHeroConfig & { dataAdapter: DataAdapters }) {
   // Initialize multi-tenant AuthHero - syncs resource servers, roles, and connections by default
   const { app } = initMultiTenant({
     ...config,
-    controlPlaneTenantId: CONTROL_PLANE_TENANT_ID,
+    controlPlane: {
+      tenantId: CONTROL_PLANE_TENANT_ID,
+      clientId: CONTROL_PLANE_CLIENT_ID,
+    },
   });
 
   app
@@ -264,7 +390,7 @@ export default function createApp(config: AuthHeroConfig) {
 }
 `;
 }
-function M(t) {
+function j(t) {
   return `import { D1Dialect } from "kysely-d1";
 import { Kysely } from "kysely";
 import createAdapters from "@authhero/kysely-adapter";
@@ -337,20 +463,24 @@ export default {
 };
 `;
 }
-function j(t) {
+function U(t) {
   return t ? `import { Context } from "hono";
 import { swaggerUI } from "@hono/swagger-ui";
 import { AuthHeroConfig, DataAdapters } from "authhero";
 import { initMultiTenant } from "@authhero/multi-tenancy";
 
-// Control plane tenant ID - the tenant that manages all other tenants
+// Control plane configuration
 const CONTROL_PLANE_TENANT_ID = "control_plane";
+const CONTROL_PLANE_CLIENT_ID = "default_client";
 
 export default function createApp(config: AuthHeroConfig & { dataAdapter: DataAdapters }) {
   // Initialize multi-tenant AuthHero - syncs resource servers, roles, and connections by default
   const { app } = initMultiTenant({
     ...config,
-    controlPlaneTenantId: CONTROL_PLANE_TENANT_ID,
+    controlPlane: {
+      tenantId: CONTROL_PLANE_TENANT_ID,
+      clientId: CONTROL_PLANE_CLIENT_ID,
+    },
   });
 
   app
@@ -413,14 +543,15 @@ export default function createApp(config: AuthHeroConfig) {
 }
 `;
 }
-function L(t) {
+function M(t) {
   return t ? `import { Context } from "hono";
 import { swaggerUI } from "@hono/swagger-ui";
 import { AuthHeroConfig, DataAdapters } from "authhero";
 import { initMultiTenant } from "@authhero/multi-tenancy";
 
-// Control plane tenant ID - the tenant that manages all other tenants
+// Control plane configuration
 const CONTROL_PLANE_TENANT_ID = "control_plane";
+const CONTROL_PLANE_CLIENT_ID = "default_client";
 
 interface AppConfig extends AuthHeroConfig {
   dataAdapter: DataAdapters;
@@ -431,7 +562,10 @@ export default function createApp(config: AppConfig) {
   // Initialize multi-tenant AuthHero
   const { app } = initMultiTenant({
     ...config,
-    controlPlaneTenantId: CONTROL_PLANE_TENANT_ID,
+    controlPlane: {
+      tenantId: CONTROL_PLANE_TENANT_ID,
+      clientId: CONTROL_PLANE_CLIENT_ID,
+    },
   });
 
   app
@@ -561,23 +695,23 @@ async function main() {
 main().catch(console.error);
 `;
 }
-function O(t, e) {
-  const r = i.join(t, "src");
+function H(t, e) {
+  const o = l.join(t, "src");
   s.writeFileSync(
-    i.join(r, "app.ts"),
-    L(e)
+    l.join(o, "app.ts"),
+    M(e)
   ), s.writeFileSync(
-    i.join(r, "seed.ts"),
+    l.join(o, "seed.ts"),
     $(e)
   );
 }
-function C(t) {
+function I(t) {
   console.log("\\n" + "─".repeat(50)), console.log("🔐 AuthHero deployed to AWS!"), console.log("📚 Check SST output for your API URL"), console.log("🌐 Portal available at https://local.authhero.net"), console.log(t ? "🏢 Multi-tenant mode enabled with control_plane tenant" : "🏠 Single-tenant mode with 'main' tenant"), console.log("─".repeat(50) + "\\n");
 }
-function H(t) {
-  const e = i.join(t, ".github", "workflows");
+function F(t) {
+  const e = l.join(t, ".github", "workflows");
   s.mkdirSync(e, { recursive: !0 });
-  const r = `name: Unit tests
+  const o = `name: Unit tests
 
 on: push
 
@@ -598,7 +732,7 @@ jobs:
 
       - run: npm run type-check
       - run: npm test
-`, a = `name: Deploy to Dev
+`, r = `name: Deploy to Dev
 
 on:
   push:
@@ -663,9 +797,9 @@ jobs:
           apiToken: \${{ secrets.PROD_CLOUDFLARE_API_TOKEN }}
           command: deploy --env production
 `;
-  s.writeFileSync(i.join(e, "unit-tests.yml"), r), s.writeFileSync(i.join(e, "deploy-dev.yml"), a), s.writeFileSync(i.join(e, "release.yml"), n), console.log("\\n📦 GitHub CI workflows created!");
+  s.writeFileSync(l.join(e, "unit-tests.yml"), o), s.writeFileSync(l.join(e, "deploy-dev.yml"), r), s.writeFileSync(l.join(e, "release.yml"), n), console.log("\\n📦 GitHub CI workflows created!");
 }
-function U(t) {
+function W(t) {
   const e = {
     branches: ["main"],
     plugins: [
@@ -675,74 +809,77 @@ function U(t) {
     ]
   };
   s.writeFileSync(
-    i.join(t, ".releaserc.json"),
+    l.join(t, ".releaserc.json"),
     JSON.stringify(e, null, 2)
   );
-  const r = i.join(t, "package.json"), a = JSON.parse(s.readFileSync(r, "utf-8"));
-  a.devDependencies = {
-    ...a.devDependencies,
+  const o = l.join(t, "package.json"), r = JSON.parse(s.readFileSync(o, "utf-8"));
+  r.devDependencies = {
+    ...r.devDependencies,
     "semantic-release": "^24.0.0"
-  }, a.scripts = {
-    ...a.scripts,
+  }, r.scripts = {
+    ...r.scripts,
     test: 'echo "No tests yet"',
     "type-check": "tsc --noEmit"
-  }, s.writeFileSync(r, JSON.stringify(a, null, 2));
+  }, s.writeFileSync(o, JSON.stringify(r, null, 2));
 }
-function v(t, e) {
-  return new Promise((r, a) => {
-    const n = I(t, [], {
+function b(t, e) {
+  return new Promise((o, r) => {
+    const n = N(t, [], {
       cwd: e,
       shell: !0,
       stdio: "inherit"
     });
-    n.on("close", (o) => {
-      o === 0 ? r() : a(new Error(`Command failed with exit code ${o}`));
-    }), n.on("error", a);
+    n.on("close", (a) => {
+      a === 0 ? o() : r(new Error(`Command failed with exit code ${a}`));
+    }), n.on("error", r);
   });
 }
-function D(t, e, r) {
-  return new Promise((a, n) => {
-    const o = I(t, [], {
+function D(t, e, o) {
+  return new Promise((r, n) => {
+    const a = N(t, [], {
       cwd: e,
       shell: !0,
       stdio: "inherit",
-      env: { ...process.env, ...r }
+      env: { ...process.env, ...o }
     });
-    o.on("close", (c) => {
-      c === 0 ? a() : n(new Error(`Command failed with exit code ${c}`));
-    }), o.on("error", n);
+    a.on("close", (c) => {
+      c === 0 ? r() : n(new Error(`Command failed with exit code ${c}`));
+    }), a.on("error", n);
   });
 }
-function F(t, e) {
-  const r = i.join(t, "src");
+function q(t, e) {
+  const o = l.join(t, "src");
   s.writeFileSync(
-    i.join(r, "app.ts"),
-    j(e)
+    l.join(o, "app.ts"),
+    U(e)
   ), s.writeFileSync(
-    i.join(r, "seed.ts"),
-    M(e)
+    l.join(o, "seed.ts"),
+    j(e)
   );
 }
-function x(t) {
+function k(t) {
   console.log(`
 ` + "─".repeat(50)), console.log("🔐 AuthHero server running at https://localhost:3000"), console.log("📚 API documentation available at https://localhost:3000/docs"), console.log("🌐 Portal available at https://local.authhero.net"), console.log(t ? "🏢 Multi-tenant mode enabled with control_plane tenant" : "🏠 Single-tenant mode with 'main' tenant"), console.log("─".repeat(50) + `
 `);
 }
-function b(t) {
+function _(t) {
   console.log(`
 ` + "─".repeat(50)), console.log("✅ Self-signed certificates generated with openssl"), console.log("⚠️  You may need to trust the certificate in your browser"), console.log("🔐 AuthHero server running at https://localhost:3000"), console.log("📚 API documentation available at https://localhost:3000/docs"), console.log("🌐 Portal available at https://local.authhero.net"), console.log(t ? "🏢 Multi-tenant mode enabled with control_plane tenant" : "🏠 Single-tenant mode with 'main' tenant"), console.log("─".repeat(50) + `
 `);
 }
-N.version("1.0.0").description("Create a new AuthHero project").argument("[project-name]", "name of the project").option("-t, --template <type>", "template type: local or cloudflare").option("-e, --email <email>", "admin email address").option("-p, --password <password>", "admin password (min 8 characters)").option(
+T.version("1.0.0").description("Create a new AuthHero project").argument("[project-name]", "name of the project").option("-t, --template <type>", "template type: local or cloudflare").option("-e, --email <email>", "admin email address").option("-p, --password <password>", "admin password (min 8 characters)").option(
   "--package-manager <pm>",
   "package manager to use: npm, yarn, pnpm, or bun"
-).option("--multi-tenant", "enable multi-tenant mode").option("--skip-install", "skip installing dependencies").option("--skip-migrate", "skip running database migrations").option("--skip-seed", "skip seeding the database").option("--skip-start", "skip starting the development server").option("--github-ci", "include GitHub CI workflows with semantic versioning").option("-y, --yes", "skip all prompts and use defaults/provided options").action(async (t, e) => {
-  const r = e.yes === !0;
+).option("--multi-tenant", "enable multi-tenant mode").option("--skip-install", "skip installing dependencies").option("--skip-migrate", "skip running database migrations").option("--skip-seed", "skip seeding the database").option("--skip-start", "skip starting the development server").option("--github-ci", "include GitHub CI workflows with semantic versioning").option("--conformance", "add OpenID conformance suite test clients").option(
+  "--conformance-alias <alias>",
+  "alias for conformance suite (default: authhero-local)"
+).option("-y, --yes", "skip all prompts and use defaults/provided options").action(async (t, e) => {
+  const o = e.yes === !0;
   console.log(`
 🔐 Welcome to AuthHero!
 `);
-  let a = t;
-  a || (r ? (a = "auth-server", console.log(`Using default project name: ${a}`)) : a = (await u.prompt([
+  let r = t;
+  r || (o ? (r = "auth-server", console.log(`Using default project name: ${r}`)) : r = (await u.prompt([
     {
       type: "input",
       name: "projectName",
@@ -751,10 +888,10 @@ N.version("1.0.0").description("Create a new AuthHero project").argument("[proje
       validate: (d) => d !== "" || "Project name cannot be empty"
     }
   ])).projectName);
-  const n = i.join(process.cwd(), a);
-  s.existsSync(n) && (console.error(`❌ Project "${a}" already exists.`), process.exit(1));
-  let o;
-  e.template ? (["local", "cloudflare", "aws-sst"].includes(e.template) || (console.error(`❌ Invalid template: ${e.template}`), console.error("Valid options: local, cloudflare, aws-sst"), process.exit(1)), o = e.template, console.log(`Using template: ${p[o].name}`)) : o = (await u.prompt([
+  const n = l.join(process.cwd(), r);
+  s.existsSync(n) && (console.error(`❌ Project "${r}" already exists.`), process.exit(1));
+  let a;
+  e.template ? (["local", "cloudflare", "aws-sst"].includes(e.template) || (console.error(`❌ Invalid template: ${e.template}`), console.error("Valid options: local, cloudflare, aws-sst"), process.exit(1)), a = e.template, console.log(`Using template: ${p[a].name}`)) : a = (await u.prompt([
     {
       type: "list",
       name: "setupType",
@@ -782,7 +919,7 @@ N.version("1.0.0").description("Create a new AuthHero project").argument("[proje
     }
   ])).setupType;
   let c;
-  e.multiTenant !== void 0 ? (c = e.multiTenant, console.log(`Multi-tenant mode: ${c ? "enabled" : "disabled"}`)) : r ? c = !1 : c = (await u.prompt([
+  e.multiTenant !== void 0 ? (c = e.multiTenant, console.log(`Multi-tenant mode: ${c ? "enabled" : "disabled"}`)) : o ? c = !1 : c = (await u.prompt([
     {
       type: "confirm",
       name: "multiTenant",
@@ -791,57 +928,90 @@ N.version("1.0.0").description("Create a new AuthHero project").argument("[proje
       default: !1
     }
   ])).multiTenant;
-  const A = p[o];
+  const g = e.conformance || !1, w = e.conformanceAlias || "authhero-local";
+  g && console.log(
+    `OpenID Conformance Suite: enabled (alias: ${w})`
+  );
+  const y = p[a];
   s.mkdirSync(n, { recursive: !0 }), s.writeFileSync(
-    i.join(n, "package.json"),
-    JSON.stringify(A.packageJson(a, c), null, 2)
+    l.join(n, "package.json"),
+    JSON.stringify(y.packageJson(r, c, g), null, 2)
   );
-  const E = A.templateDir, S = i.join(
+  const x = y.templateDir, v = l.join(
     import.meta.url.replace("file://", "").replace("/create-authhero.js", ""),
-    E
+    x
   );
-  if (s.existsSync(S) ? k(S, n) : (console.error(`❌ Template directory not found: ${S}`), process.exit(1)), o === "cloudflare" && F(n, c), o === "cloudflare") {
-    const l = i.join(n, "wrangler.toml"), d = i.join(n, "wrangler.local.toml");
-    s.existsSync(l) && s.copyFileSync(l, d);
-    const m = i.join(n, ".dev.vars.example"), g = i.join(n, ".dev.vars");
-    s.existsSync(m) && s.copyFileSync(m, g), console.log(
+  if (s.existsSync(v) ? E(v, n) : (console.error(`❌ Template directory not found: ${v}`), process.exit(1)), a === "cloudflare" && q(n, c), a === "cloudflare") {
+    const i = l.join(n, "wrangler.toml"), d = l.join(n, "wrangler.local.toml");
+    s.existsSync(i) && s.copyFileSync(i, d);
+    const m = l.join(n, ".dev.vars.example"), f = l.join(n, ".dev.vars");
+    s.existsSync(m) && s.copyFileSync(m, f), console.log(
       "📁 Created wrangler.local.toml and .dev.vars for local development"
     );
   }
-  let w = !1;
-  if (o === "cloudflare" && (e.githubCi !== void 0 ? (w = e.githubCi, w && console.log("Including GitHub CI workflows with semantic versioning")) : r || (w = (await u.prompt([
+  let C = !1;
+  if (a === "cloudflare" && (e.githubCi !== void 0 ? (C = e.githubCi, C && console.log("Including GitHub CI workflows with semantic versioning")) : o || (C = (await u.prompt([
     {
       type: "confirm",
       name: "includeGithubCi",
       message: "Would you like to include GitHub CI with semantic versioning?",
       default: !1
     }
-  ])).includeGithubCi), w && (H(n), U(n))), o === "local") {
-    const l = _(c);
-    s.writeFileSync(i.join(n, "src/seed.ts"), l);
-    const d = R(c);
-    s.writeFileSync(i.join(n, "src/app.ts"), d);
+  ])).includeGithubCi), C && (F(n), W(n))), a === "local") {
+    const i = R(
+      c,
+      g,
+      w
+    );
+    s.writeFileSync(l.join(n, "src/seed.ts"), i);
+    const d = O(c);
+    s.writeFileSync(l.join(n, "src/app.ts"), d);
+  }
+  if (a === "aws-sst" && H(n, c), g) {
+    const i = {
+      alias: w,
+      description: "AuthHero Conformance Test",
+      server: {
+        discoveryUrl: "http://host.docker.internal:3000/.well-known/openid-configuration"
+      },
+      client: {
+        client_id: "conformance-test",
+        client_secret: "conformanceTestSecret123"
+      },
+      client2: {
+        client_id: "conformance-test2",
+        client_secret: "conformanceTestSecret456"
+      },
+      resource: {
+        resourceUrl: "http://host.docker.internal:3000/userinfo"
+      }
+    };
+    s.writeFileSync(
+      l.join(n, "conformance-config.json"),
+      JSON.stringify(i, null, 2)
+    ), console.log(
+      "📝 Created conformance-config.json for OpenID Conformance Suite"
+    );
   }
-  o === "aws-sst" && O(n, c);
-  const T = c ? "multi-tenant" : "single-tenant";
+  const P = c ? "multi-tenant" : "single-tenant";
   console.log(
     `
-✅ Project "${a}" has been created with ${A.name} (${T}) setup!
+✅ Project "${r}" has been created with ${y.name} (${P}) setup!
 `
   );
-  let h;
-  if (e.skipInstall ? h = !1 : r ? h = !0 : h = (await u.prompt([
+  let A;
+  if (e.skipInstall ? A = !1 : o ? A = !0 : A = (await u.prompt([
     {
       type: "confirm",
       name: "shouldInstall",
       message: "Would you like to install dependencies now?",
       default: !0
     }
-  ])).shouldInstall, h) {
-    let l;
+  ])).shouldInstall, A) {
+    let i;
     e.packageManager ? (["npm", "yarn", "pnpm", "bun"].includes(e.packageManager) || (console.error(
       `❌ Invalid package manager: ${e.packageManager}`
-    ), console.error("Valid options: npm, yarn, pnpm, bun"), process.exit(1)), l = e.packageManager) : r ? l = "pnpm" : l = (await u.prompt([
+    ), console.error("Valid options: npm, yarn, pnpm, bun"), process.exit(1)), i = e.packageManager) : o ? i = "pnpm" : i = (await u.prompt([
       {
         type: "list",
         name: "packageManager",
@@ -855,92 +1025,99 @@ N.version("1.0.0").description("Create a new AuthHero project").argument("[proje
         default: "pnpm"
       }
     ])).packageManager, console.log(`
-📦 Installing dependencies with ${l}...
+📦 Installing dependencies with ${i}...
 `);
     try {
-      const d = l === "pnpm" ? "pnpm install --ignore-workspace" : `${l} install`;
-      if (await v(d, n), o === "local" && (console.log(`
+      const d = i === "pnpm" ? "pnpm install --ignore-workspace" : `${i} install`;
+      if (await b(d, n), a === "local" && (console.log(`
 🔧 Building native modules...
-`), await v("npm rebuild better-sqlite3", n)), console.log(`
+`), await b("npm rebuild better-sqlite3", n)), console.log(`
 ✅ Dependencies installed successfully!
-`), o === "local" || o === "cloudflare") {
-        let g;
-        if (e.skipMigrate && e.skipSeed ? g = !1 : r ? g = !e.skipMigrate || !e.skipSeed : g = (await u.prompt([
+`), a === "local" || a === "cloudflare") {
+        let f;
+        if (e.skipMigrate && e.skipSeed ? f = !1 : o ? f = !e.skipMigrate || !e.skipSeed : f = (await u.prompt([
           {
             type: "confirm",
             name: "shouldSetup",
             message: "Would you like to run migrations and seed the database?",
             default: !0
           }
-        ])).shouldSetup, g) {
-          let f;
-          e.email && e.password ? (/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(e.email) || (console.error("❌ Invalid email address provided"), process.exit(1)), e.password.length < 8 && (console.error("❌ Password must be at least 8 characters"), process.exit(1)), f = {
+        ])).shouldSetup, f) {
+          let h;
+          e.email && e.password ? (/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(e.email) || (console.error("❌ Invalid email address provided"), process.exit(1)), e.password.length < 8 && (console.error("❌ Password must be at least 8 characters"), process.exit(1)), h = {
             username: e.email,
             password: e.password
-          }, console.log(`Using admin email: ${e.email}`)) : f = await u.prompt([
+          }, console.log(`Using admin email: ${e.email}`)) : h = await u.prompt([
             {
               type: "input",
               name: "username",
               message: "Admin email:",
               default: "admin@example.com",
-              validate: (y) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(y) || "Please enter a valid email address"
+              validate: (S) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(S) || "Please enter a valid email address"
             },
             {
               type: "password",
               name: "password",
               message: "Admin password:",
               mask: "*",
-              validate: (y) => y.length < 8 ? "Password must be at least 8 characters" : !0
+              validate: (S) => S.length < 8 ? "Password must be at least 8 characters" : !0
             }
           ]), e.skipMigrate || (console.log(`
 🔄 Running migrations...
-`), await v(`${l} run migrate`, n)), e.skipSeed || (console.log(`
+`), await b(`${i} run migrate`, n)), e.skipSeed || (console.log(`
 🌱 Seeding database...
-`), o === "local" ? await D(
-            `${l} run seed`,
+`), a === "local" ? await D(
+            `${i} run seed`,
             n,
             {
-              ADMIN_EMAIL: f.username,
-              ADMIN_PASSWORD: f.password
+              ADMIN_EMAIL: h.username,
+              ADMIN_PASSWORD: h.password
             }
           ) : await D(
-            `${l} run seed:local`,
+            `${i} run seed:local`,
             n,
             {
-              ADMIN_EMAIL: f.username,
-              ADMIN_PASSWORD: f.password
+              ADMIN_EMAIL: h.username,
+              ADMIN_PASSWORD: h.password
             }
           ));
         }
       }
       let m;
-      e.skipStart || r ? m = !1 : m = (await u.prompt([
+      e.skipStart || o ? m = !1 : m = (await u.prompt([
         {
           type: "confirm",
           name: "shouldStart",
           message: "Would you like to start the development server?",
           default: !0
         }
-      ])).shouldStart, m && (o === "cloudflare" ? x(c) : o === "aws-sst" ? C(c) : b(c), console.log(`🚀 Starting development server...
-`), await v(`${l} run dev`, n)), r && !m && (console.log(`
+      ])).shouldStart, m && (a === "cloudflare" ? k(c) : a === "aws-sst" ? I(c) : _(c), console.log(`🚀 Starting development server...
+`), await b(`${i} run dev`, n)), o && !m && (console.log(`
 ✅ Setup complete!`), console.log(`
-To start the development server:`), console.log(`  cd ${a}`), console.log("  npm run dev"), o === "cloudflare" ? x(c) : o === "aws-sst" ? C(c) : b(c));
+To start the development server:`), console.log(`  cd ${r}`), console.log("  npm run dev"), a === "cloudflare" ? k(c) : a === "aws-sst" ? I(c) : _(c));
     } catch (d) {
       console.error(`
 ❌ An error occurred:`, d), process.exit(1);
     }
   }
-  h || (console.log("Next steps:"), console.log(`  cd ${a}`), o === "local" ? (console.log("  npm install"), console.log("  npm run migrate"), console.log(
+  A || (console.log("Next steps:"), console.log(`  cd ${r}`), a === "local" ? (console.log("  npm install"), console.log("  npm run migrate"), console.log(
     "  ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed"
-  ), console.log("  npm run dev")) : o === "cloudflare" ? (console.log("  npm install"), console.log(
+  ), console.log("  npm run dev")) : a === "cloudflare" ? (console.log("  npm install"), console.log(
     "  npm run migrate  # or npm run db:migrate:remote for production"
   ), console.log(
     "  ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed"
-  ), console.log("  npm run dev  # or npm run dev:remote for production")) : o === "aws-sst" && (console.log("  npm install"), console.log("  npm run dev  # Deploys to AWS in development mode"), console.log("  # After deploy, get TABLE_NAME from output, then:"), console.log(
+  ), console.log("  npm run dev  # or npm run dev:remote for production")) : a === "aws-sst" && (console.log("  npm install"), console.log("  npm run dev  # Deploys to AWS in development mode"), console.log("  # After deploy, get TABLE_NAME from output, then:"), console.log(
     "  TABLE_NAME=<your-table> ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed"
   )), console.log(`
-Server will be available at: https://localhost:3000`), console.log("Portal available at: https://local.authhero.net"), console.log(`
+Server will be available at: https://localhost:3000`), console.log("Portal available at: https://local.authhero.net"), g && (console.log(`
+🧪 OpenID Conformance Suite Testing:`), console.log(
+    "  1. Clone and start the conformance suite (if not already running):"
+  ), console.log(
+    "     git clone https://gitlab.com/openid/conformance-suite.git"
+  ), console.log("     cd conformance-suite && mvn clean package"), console.log("     docker-compose up -d"), console.log("  2. Open https://localhost.emobix.co.uk:8443"), console.log(
+    "  3. Create a test plan and use conformance-config.json for settings"
+  ), console.log(`  4. Use alias: ${w}`)), console.log(`
 For more information, visit: https://authhero.net/docs
 `));
 });
-N.parse(process.argv);
+T.parse(process.argv);

package/package.json

@@ -5,7 +5,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "0.24.0",
+  "version": "0.26.0",
   "type": "module",
   "main": "dist/create-authhero.js",
   "bin": {