create-authhero 0.41.0 → 0.41.2

package/dist/create-authhero.js

@@ -2,18 +2,18 @@
 import { Command as R } from "commander";
 import m from "inquirer";
 import i from "fs";
-import a from "path";
-import { fileURLToPath as U } from "url";
-import { spawn as O } from "child_process";
-const T = new R(), p = {
+import s from "path";
+import { fileURLToPath as O } from "url";
+import { spawn as U } from "child_process";
+const N = new R(), p = {
   local: {
     name: "Local (SQLite)",
     description: "Local development setup with SQLite database - great for getting started",
     templateDir: "local",
-    packageJson: (s, e, o, r, n) => {
+    packageJson: (a, e, o, r, n) => {
       const t = r ? "workspace:*" : "latest";
       return {
-        name: s,
+        name: a,
         version: "1.0.0",
         type: "module",
         scripts: {
@@ -50,10 +50,10 @@ const T = new R(), p = {
     name: "Cloudflare Workers (D1)",
     description: "Cloudflare Workers setup with D1 database",
     templateDir: "cloudflare",
-    packageJson: (s, e, o, r, n) => {
+    packageJson: (a, e, o, r, n) => {
       const t = r ? "workspace:*" : "latest";
       return {
-        name: s,
+        name: a,
         version: "1.0.0",
         type: "module",
         scripts: {
@@ -99,10 +99,10 @@ const T = new R(), p = {
     name: "AWS SST (Lambda + DynamoDB)",
     description: "Serverless AWS deployment with Lambda, DynamoDB, and SST",
     templateDir: "aws-sst",
-    packageJson: (s, e, o, r, n) => {
+    packageJson: (a, e, o, r, n) => {
       const t = r ? "workspace:*" : "latest";
       return {
-        name: s,
+        name: a,
         version: "1.0.0",
         type: "module",
         scripts: {
@@ -137,14 +137,14 @@ const T = new R(), p = {
     seedFile: "seed.ts"
   }
 };
-function P(s, e) {
-  i.readdirSync(s).forEach((r) => {
-    const n = a.join(s, r), t = a.join(e, r);
+function P(a, e) {
+  i.readdirSync(a).forEach((r) => {
+    const n = s.join(a, r), t = s.join(e, r);
     i.lstatSync(n).isDirectory() ? (i.mkdirSync(t, { recursive: !0 }), P(n, t)) : i.copyFileSync(n, t);
   });
 }
-function L(s, e = !1, o = "authhero-local", r) {
-  const n = s ? "control_plane" : "main", t = s ? "Control Plane" : "Main", c = [
+function $(a, e = !1, o = "authhero-local", r) {
+  const n = a ? "control_plane" : "main", t = a ? "Control Plane" : "Main", c = [
     "https://manage.authhero.net/auth-callback",
     "https://local.authhero.net/auth-callback",
     "http://localhost:5173/auth-callback",
@@ -158,17 +158,26 @@ function L(s, e = !1, o = "authhero-local", r) {
     "https://local.authhero.net",
     "http://localhost:5173",
     "http://localhost:3000"
-  ], C = e ? ["https://localhost:8443/", "https://localhost.emobix.co.uk:8443/"] : [], y = [...h, ...C], A = e ? `
+  ], C = e ? ["https://localhost:8443/", "https://localhost.emobix.co.uk:8443/"] : [], y = [...h, ...C], _ = e ? `
   // Create OpenID Conformance Suite test clients and user
   console.log("Creating conformance test clients and user...");
 
   // The OIDCC basic test plan calls /token without an audience param. AuthHero
   // requires either an explicit audience or a tenant default_audience to mint
   // an access token, so set one here for the conformance setup.
+  // enable_dynamic_client_registration is required by the OIDCC dynamic plan,
+  // which has the suite register its own client via /oidc/register. Existing
+  // flags (e.g. inherit_global_permissions_in_organizations set by seed for
+  // the control-plane tenant) are merged in so the update doesn't clobber.
+  const existingTenant = await adapters.tenants.get("${n}");
   await adapters.tenants.update("${n}", {
     default_audience: "urn:authhero:management",
+    flags: {
+      ...(existingTenant?.flags ?? {}),
+      enable_dynamic_client_registration: true,
+    },
   });
-  console.log("✅ Set tenant default_audience for conformance");
+  console.log("✅ Set tenant default_audience and enabled DCR for conformance");
 
   const conformanceCallbacks = [
     "https://localhost.emobix.co.uk:8443/test/a/${o}/callback",
@@ -273,7 +282,7 @@ function L(s, e = !1, o = "authhero-local", r) {
   return `import { SqliteDialect, Kysely } from "kysely";
 import Database from "better-sqlite3";
 import createAdapters from "@authhero/kysely-adapter";
-import { seed } from "authhero";
+import { seed${e ? ", USERNAME_PASSWORD_PROVIDER" : ""} } from "authhero";
 
 interface ExtraClient {
   client_id: string;
@@ -282,6 +291,7 @@ interface ExtraClient {
   callbacks?: string[];
   allowed_logout_urls?: string[];
   web_origins?: string[];
+  auth0_conformant?: boolean;
 }
 
 function parseFlag(name: string): string | undefined {
@@ -333,7 +343,7 @@ async function main() {
     adminPassword,
     tenantId: "${n}",
     tenantName: "${t}",
-    isControlPlane: ${!!s},
+    isControlPlane: ${!!a},
     clientId: "default",
     callbacks: ${JSON.stringify(f)},
     allowedLogoutUrls: ${JSON.stringify(y)},
@@ -354,6 +364,9 @@ async function main() {
       web_origins: c.web_origins ?? [],
       connections: ["Username-Password-Authentication"],
       client_metadata: { universal_login_version: "2" },
+      ...(c.auth0_conformant !== undefined && {
+        auth0_conformant: c.auth0_conformant,
+      }),
     });
     console.log(\`✅ Created client "\${c.client_id}"\`);
   }
@@ -362,7 +375,7 @@ async function main() {
     await adapters.users.update(seedResult.tenantId, seedResult.userId, userProfile);
     console.log(\`✅ Updated profile of user "\${seedResult.username}"\`);
   }
-${A}
+${_}
   await db.destroy();
 }
 
@@ -372,7 +385,7 @@ main().catch((err) => {
 });
 `;
 }
-function $(s, e) {
+function L(a, e) {
   const o = e ? `import fs from "fs";
 ` : "", r = e ? `
 const adminDistPath = path.resolve(
@@ -390,7 +403,7 @@ const adminIndexPath = path.join(adminDistPath, "index.html");
       .replace(/href="\\.\\//g, 'href="/admin/');
     const configJson = JSON.stringify({
       domain: issuer.replace(/\\/$/, ""),
-      clientId: ${s ? "CONTROL_PLANE_CLIENT_ID," : '"default",'}
+      clientId: ${a ? "CONTROL_PLANE_CLIENT_ID," : '"default",'}
       basePath: "/admin",
     }).replace(/</g, "\\\\u003c");
     configWithHandlers.adminIndexHtml = rawHtml.replace(
@@ -403,7 +416,7 @@ const adminIndexPath = path.join(adminDistPath, "index.html");
     });
   }
 ` : "";
-  return s ? `import { Context } from "hono";
+  return a ? `import { Context } from "hono";
 import { swaggerUI } from "@hono/swagger-ui";
 import { AuthHeroConfig, DataAdapters } from "authhero";
 import { serveStatic } from "@hono/node-server/serve-static";
@@ -508,7 +521,7 @@ ${n}
 }
 `;
 }
-function j(s) {
+function j(a) {
   return `import { D1Dialect } from "kysely-d1";
 import { Kysely } from "kysely";
 import createAdapters from "@authhero/kysely-adapter";
@@ -535,9 +548,9 @@ export default {
         adminUsername,
         adminPassword,
         issuer,
-        tenantId: "${s ? "control_plane" : "main"}",
-        tenantName: "${s ? "Control Plane" : "Main"}",
-        isControlPlane: ${!!s},
+        tenantId: "${a ? "control_plane" : "main"}",
+        tenantName: "${a ? "Control Plane" : "Main"}",
+        isControlPlane: ${!!a},
         clientId: "default",
       });
 
@@ -569,11 +582,11 @@ export default {
 };
 `;
 }
-function H(s, e) {
+function H(a, e) {
   const o = e ? `import adminIndexHtml from "./admin-index-html";
 ` : "", r = e ? `    adminIndexHtml,
 ` : "";
-  return s ? `import { Context } from "hono";
+  return a ? `import { Context } from "hono";
 import { swaggerUI } from "@hono/swagger-ui";
 import { AuthHeroConfig, DataAdapters } from "authhero";
 import { initMultiTenant } from "@authhero/multi-tenancy";
@@ -654,8 +667,8 @@ ${r}  });
 }
 `;
 }
-function F(s) {
-  return s ? `import { Context } from "hono";
+function M(a) {
+  return a ? `import { Context } from "hono";
 import { swaggerUI } from "@hono/swagger-ui";
 import { AuthHeroConfig, DataAdapters } from "authhero";
 import { initMultiTenant } from "@authhero/multi-tenancy";
@@ -760,7 +773,7 @@ export default function createApp(config: AppConfig) {
 }
 `;
 }
-function M(s) {
+function F(a) {
   return `import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
 import { DynamoDBDocumentClient } from "@aws-sdk/lib-dynamodb";
 import createAdapters from "@authhero/aws";
@@ -789,9 +802,9 @@ async function main() {
   await seed(adapters, {
     adminUsername,
     adminPassword,
-    tenantId: "${s ? "control_plane" : "main"}",
-    tenantName: "${s ? "Control Plane" : "Main"}",
-    isControlPlane: ${!!s},
+    tenantId: "${a ? "control_plane" : "main"}",
+    tenantName: "${a ? "Control Plane" : "Main"}",
+    isControlPlane: ${!!a},
   });
 
   console.log("✅ Database seeded successfully!");
@@ -800,21 +813,21 @@ async function main() {
 main().catch(console.error);
 `;
 }
-function W(s, e) {
-  const o = a.join(s, "src");
+function W(a, e) {
+  const o = s.join(a, "src");
   i.writeFileSync(
-    a.join(o, "app.ts"),
-    F(e)
-  ), i.writeFileSync(
-    a.join(o, "seed.ts"),
+    s.join(o, "app.ts"),
     M(e)
+  ), i.writeFileSync(
+    s.join(o, "seed.ts"),
+    F(e)
   );
 }
-function I() {
+function k() {
   console.log("\\n" + "─".repeat(50)), console.log("🔐 AuthHero deployed to AWS!"), console.log("📚 Check SST output for your API URL"), console.log("🚀 Open your server URL /setup to complete initial setup"), console.log("🌐 Portal available at https://local.authhero.net"), console.log("─".repeat(50) + "\\n");
 }
-function q(s) {
-  const e = a.join(s, ".github", "workflows");
+function q(a) {
+  const e = s.join(a, ".github", "workflows");
   i.mkdirSync(e, { recursive: !0 });
   const o = `name: Unit tests
 
@@ -902,9 +915,9 @@ jobs:
           apiToken: \${{ secrets.PROD_CLOUDFLARE_API_TOKEN }}
           command: deploy --env production
 `;
-  i.writeFileSync(a.join(e, "unit-tests.yml"), o), i.writeFileSync(a.join(e, "deploy-dev.yml"), r), i.writeFileSync(a.join(e, "release.yml"), n), console.log("\\n📦 GitHub CI workflows created!");
+  i.writeFileSync(s.join(e, "unit-tests.yml"), o), i.writeFileSync(s.join(e, "deploy-dev.yml"), r), i.writeFileSync(s.join(e, "release.yml"), n), console.log("\\n📦 GitHub CI workflows created!");
 }
-function J(s) {
+function J(a) {
   const e = {
     branches: ["main"],
     plugins: [
@@ -914,10 +927,10 @@ function J(s) {
     ]
   };
   i.writeFileSync(
-    a.join(s, ".releaserc.json"),
+    s.join(a, ".releaserc.json"),
     JSON.stringify(e, null, 2)
   );
-  const o = a.join(s, "package.json"), r = JSON.parse(i.readFileSync(o, "utf-8"));
+  const o = s.join(a, "package.json"), r = JSON.parse(i.readFileSync(o, "utf-8"));
   r.devDependencies = {
     ...r.devDependencies,
     "semantic-release": "^24.0.0"
@@ -927,9 +940,9 @@ function J(s) {
     "type-check": "tsc --noEmit"
   }, i.writeFileSync(o, JSON.stringify(r, null, 2));
 }
-function b(s, e) {
+function A(a, e) {
   return new Promise((o, r) => {
-    const n = O(s, [], {
+    const n = U(a, [], {
       cwd: e,
       shell: !0,
       stdio: "inherit"
@@ -939,13 +952,13 @@ function b(s, e) {
     }), n.on("error", r);
   });
 }
-function z(s, e, o) {
-  const r = a.join(s, "src");
+function z(a, e, o) {
+  const r = s.join(a, "src");
   i.writeFileSync(
-    a.join(r, "app.ts"),
+    s.join(r, "app.ts"),
     H(e, o)
   ), i.writeFileSync(
-    a.join(r, "seed.ts"),
+    s.join(r, "seed.ts"),
     j(e)
   );
 }
@@ -954,12 +967,12 @@ function D() {
 ` + "─".repeat(50)), console.log("🔐 AuthHero server running at https://localhost:3000"), console.log("🚀 Open https://localhost:3000/setup to complete initial setup"), console.log("─".repeat(50) + `
 `);
 }
-function N() {
+function T() {
   console.log(`
 ` + "─".repeat(50)), console.log("✅ Self-signed certificates generated with openssl"), console.log("⚠️  You may need to trust the certificate in your browser"), console.log("🔐 AuthHero server running at http://localhost:3000"), console.log("📚 API documentation available at http://localhost:3000/docs"), console.log("🚀 Open http://localhost:3000/setup to complete initial setup"), console.log("─".repeat(50) + `
 `);
 }
-T.version("1.0.0").description("Create a new AuthHero project").argument("[project-name]", "name of the project").option("-t, --template <type>", "template type: local or cloudflare").option(
+N.version("1.0.0").description("Create a new AuthHero project").argument("[project-name]", "name of the project").option("-t, --template <type>", "template type: local or cloudflare").option(
   "--package-manager <pm>",
   "package manager to use: npm, yarn, pnpm, or bun"
 ).option("--multi-tenant", "enable multi-tenant mode").option("--admin-ui", "include admin UI at /admin").option("--skip-install", "skip installing dependencies").option("--skip-migrate", "skip running database migrations").option("--skip-start", "skip starting the development server").option("--github-ci", "include GitHub CI workflows with semantic versioning").option("--conformance", "add OpenID conformance suite test clients").option(
@@ -968,12 +981,12 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
 ).option(
   "--workspace",
   "use workspace:* dependencies for local monorepo development"
-).option("-y, --yes", "skip all prompts and use defaults/provided options").action(async (s, e) => {
+).option("-y, --yes", "skip all prompts and use defaults/provided options").action(async (a, e) => {
   const o = e.yes === !0;
   console.log(`
 🔐 Welcome to AuthHero!
 `);
-  let r = s;
+  let r = a;
   r || (o ? (r = "auth-server", console.log(`Using default project name: ${r}`)) : r = (await m.prompt([
     {
       type: "input",
@@ -983,7 +996,7 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
       validate: (u) => u !== "" || "Project name cannot be empty"
     }
   ])).projectName);
-  const n = a.join(process.cwd(), r);
+  const n = s.join(process.cwd(), r);
   i.existsSync(n) && (console.error(`❌ Project "${r}" already exists.`), process.exit(1));
   let t;
   e.template ? (["local", "cloudflare", "aws-sst"].includes(e.template) || (console.error(`❌ Invalid template: ${e.template}`), console.error("Valid options: local, cloudflare, aws-sst"), process.exit(1)), t = e.template, console.log(`Using template: ${p[t].name}`)) : t = (await m.prompt([
@@ -1039,7 +1052,7 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
   C && console.log("Workspace mode: enabled (using workspace:* dependencies)");
   const y = p[t];
   i.mkdirSync(n, { recursive: !0 }), i.writeFileSync(
-    a.join(n, "package.json"),
+    s.join(n, "package.json"),
     JSON.stringify(
       y.packageJson(
         r,
@@ -1052,40 +1065,40 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
       2
     )
   );
-  const A = y.templateDir, S = a.dirname(U(import.meta.url)), x = [
-    a.join(S, A),
-    a.join(S, "..", "templates", A)
-  ], k = x.find((l) => i.existsSync(l));
-  if (k ? P(k, n) : (console.error(
+  const _ = y.templateDir, S = s.dirname(O(import.meta.url)), x = [
+    s.join(S, _),
+    s.join(S, "..", "templates", _)
+  ], I = x.find((l) => i.existsSync(l));
+  if (I ? P(I, n) : (console.error(
     `❌ Template directory not found. Looked in:
   ${x.join(`
   `)}`
   ), process.exit(1)), t === "cloudflare" && z(n, c, d), t === "cloudflare") {
-    const l = a.join(n, "wrangler.toml"), u = a.join(n, "wrangler.local.toml");
+    const l = s.join(n, "wrangler.toml"), u = s.join(n, "wrangler.local.toml");
     i.existsSync(l) && i.copyFileSync(l, u);
-    const g = a.join(n, ".dev.vars.example"), w = a.join(n, ".dev.vars");
+    const g = s.join(n, ".dev.vars.example"), w = s.join(n, ".dev.vars");
     i.existsSync(g) && i.copyFileSync(g, w), console.log(
       "📁 Created wrangler.local.toml and .dev.vars for local development"
     );
   }
-  let _ = !1;
-  if (t === "cloudflare" && (e.githubCi !== void 0 ? (_ = e.githubCi, _ && console.log("Including GitHub CI workflows with semantic versioning")) : o || (_ = (await m.prompt([
+  let b = !1;
+  if (t === "cloudflare" && (e.githubCi !== void 0 ? (b = e.githubCi, b && console.log("Including GitHub CI workflows with semantic versioning")) : o || (b = (await m.prompt([
     {
       type: "confirm",
       name: "includeGithubCi",
       message: "Would you like to include GitHub CI with semantic versioning?",
       default: !1
     }
-  ])).includeGithubCi), _ && (q(n), J(n))), t === "local") {
-    const l = L(
+  ])).includeGithubCi), b && (q(n), J(n))), t === "local") {
+    const l = $(
       c,
       f,
       h,
       d
     );
-    i.writeFileSync(a.join(n, "src/seed.ts"), l);
-    const u = $(c, d);
-    i.writeFileSync(a.join(n, "src/app.ts"), u);
+    i.writeFileSync(s.join(n, "src/seed.ts"), l);
+    const u = L(c, d);
+    i.writeFileSync(s.join(n, "src/app.ts"), u);
   }
   if (t === "aws-sst" && W(n, c), f) {
     const l = {
@@ -1107,7 +1120,7 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
       }
     };
     i.writeFileSync(
-      a.join(n, "conformance-config.json"),
+      s.join(n, "conformance-config.json"),
       JSON.stringify(l, null, 2)
     ), console.log(
       "📝 Created conformance-config.json for OpenID Conformance Suite"
@@ -1149,9 +1162,9 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
 `);
     try {
       const u = l === "pnpm" ? "pnpm install --ignore-workspace" : `${l} install`;
-      if (await b(u, n), t === "local" && (console.log(`
+      if (await A(u, n), t === "local" && (console.log(`
 🔧 Building native modules...
-`), await b("npm rebuild better-sqlite3", n)), console.log(`
+`), await A("npm rebuild better-sqlite3", n)), console.log(`
 ✅ Dependencies installed successfully!
 `), (t === "local" || t === "cloudflare") && !e.skipMigrate) {
         let w;
@@ -1164,7 +1177,7 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
           }
         ])).shouldMigrate, w && (console.log(`
 🔄 Running migrations...
-`), await b(`${l} run migrate`, n));
+`), await A(`${l} run migrate`, n));
       }
       let g;
       e.skipStart || o ? g = !1 : g = (await m.prompt([
@@ -1174,10 +1187,10 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
           message: "Would you like to start the development server?",
           default: !0
         }
-      ])).shouldStart, g && (t === "cloudflare" ? D() : t === "aws-sst" ? I() : N(), console.log(`🚀 Starting development server...
-`), await b(`${l} run dev`, n)), o && !g && (console.log(`
+      ])).shouldStart, g && (t === "cloudflare" ? D() : t === "aws-sst" ? k() : T(), console.log(`🚀 Starting development server...
+`), await A(`${l} run dev`, n)), o && !g && (console.log(`
 ✅ Setup complete!`), console.log(`
-To start the development server:`), console.log(`  cd ${r}`), console.log("  npm run dev"), t === "cloudflare" ? D() : t === "aws-sst" ? I() : N());
+To start the development server:`), console.log(`  cd ${r}`), console.log("  npm run dev"), t === "cloudflare" ? D() : t === "aws-sst" ? k() : T());
     } catch (u) {
       console.error(`
 ❌ An error occurred:`, u), process.exit(1);
@@ -1204,4 +1217,4 @@ Server will be available at: http://localhost:3000`), f && (console.log(`
 For more information, visit: https://authhero.net/docs
 `));
 });
-T.parse(process.argv);
+N.parse(process.argv);

package/dist/local/src/index.ts

@@ -4,6 +4,76 @@ import { Kysely } from "kysely";
 import Database from "better-sqlite3";
 import createAdapters from "@authhero/kysely-adapter";
 import createApp from "./app";
+import fs from "fs";
+import path from "path";
+import { execFileSync } from "child_process";
+import https from "https";
+
+// Generate self-signed certificates for local HTTPS if they don't exist
+const certDir = path.join(process.cwd(), ".certs");
+const keyPath = path.join(certDir, "localhost-key.pem");
+const certPath = path.join(certDir, "localhost.pem");
+
+function ensureCertificates() {
+  if (!fs.existsSync(certDir)) {
+    fs.mkdirSync(certDir, { recursive: true });
+  }
+
+  if (!fs.existsSync(keyPath) || !fs.existsSync(certPath)) {
+    console.log("🔑 Generating self-signed certificates for local HTTPS...");
+
+    // Try mkcert first (if installed), otherwise fall back to openssl
+    try {
+      execFileSync("which", ["mkcert"], { stdio: "ignore" });
+      execFileSync(
+        "mkcert",
+        ["-key-file", keyPath, "-cert-file", certPath, "localhost", "127.0.0.1"],
+        { stdio: "inherit" },
+      );
+      console.log("✅ Certificates generated with mkcert");
+    } catch {
+      // Fall back to openssl
+      try {
+        execFileSync(
+          "openssl",
+          [
+            "req",
+            "-x509",
+            "-newkey",
+            "rsa:2048",
+            "-keyout",
+            keyPath,
+            "-out",
+            certPath,
+            "-days",
+            "365",
+            "-nodes",
+            "-subj",
+            "/CN=localhost",
+          ],
+          { stdio: "inherit" },
+        );
+        console.log("✅ Self-signed certificates generated with openssl");
+        console.log(
+          "⚠️  You may need to trust the certificate in your browser",
+        );
+      } catch (err) {
+        console.error(
+          "❌ Failed to generate certificates. Please install mkcert or openssl",
+        );
+        console.error(
+          "   Install mkcert: brew install mkcert && mkcert -install",
+        );
+        process.exit(1);
+      }
+    }
+  }
+
+  return {
+    key: fs.readFileSync(keyPath),
+    cert: fs.readFileSync(certPath),
+  };
+}
 
 // Initialize SQLite database
 let db: Kysely<any>;
@@ -34,15 +104,19 @@ const app = createApp({
     "https://manage.authhero.net",
     "https://local.authhero.net",
     "http://localhost:5173",
+    "https://localhost:5173",
   ],
 });
 
 // Start the server
 const port = Number(process.env.PORT) || 3000;
-const issuer = process.env.ISSUER || `http://localhost:${port}/`;
+const issuer = process.env.ISSUER || `https://localhost:${port}/`;
+
+// Get or generate certificates
+const { key, cert } = ensureCertificates();
 
-console.log(`🔐 AuthHero server running at http://localhost:${port}`);
-console.log(`📚 API documentation available at http://localhost:${port}/docs`);
+console.log(`🔐 AuthHero server running at https://localhost:${port}`);
+console.log(`📚 API documentation available at https://localhost:${port}/docs`);
 console.log(`🌐 Portal available at https://local.authhero.net`);
 
 serve({
@@ -53,4 +127,11 @@ serve({
     });
   },
   port,
+  // Bind to all IPv4 interfaces explicitly. Node's default (`::`) is
+  // supposed to be dual-stack but on Docker Desktop Mac the docker bridge
+  // gateway IPv4 (e.g. 192.168.65.254) often isn't reachable that way,
+  // causing connections from inside the suite container to be refused.
+  hostname: "0.0.0.0",
+  createServer: https.createServer,
+  serverOptions: { key, cert },
 });

package/package.json

@@ -5,7 +5,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "0.41.0",
+  "version": "0.41.2",
   "type": "module",
   "main": "dist/create-authhero.js",
   "bin": {