create-authhero 0.47.0 → 0.47.2

package/README.md

@@ -256,7 +256,7 @@ Use conventional commits for automatic versioning:
 
 ## Documentation
 
-For more information, visit [https://authhero.net/docs](https://authhero.net/docs)
+For more information, visit [https://docs.authhero.net](https://docs.authhero.net)
 
 ## License
 

package/dist/aws-sst/README.md

@@ -158,6 +158,6 @@ npm run decrypt -- "enc:v1:..."   # decrypt a stored value using ENCRYPTION_KEY
 ## Learn More
 
 - [SST Documentation](https://sst.dev/docs)
-- [AuthHero Documentation](https://authhero.net/docs)
+- [AuthHero Documentation](https://docs.authhero.net)
 - [AWS Lambda](https://docs.aws.amazon.com/lambda/)
 - [DynamoDB](https://docs.aws.amazon.com/dynamodb/)

package/dist/cloudflare/README.md

@@ -189,7 +189,7 @@ routes = [
 ]
 ```
 
-For more information, visit [https://authhero.net/docs](https://authhero.net/docs).
+For more information, visit [https://docs.authhero.net](https://docs.authhero.net).
 
 ## CI/CD with GitHub Actions
 

package/dist/cloudflare-control-plane/README.md

@@ -55,5 +55,5 @@ npm run seed      # seed the control plane tenant + admin
 npm run dev
 ```
 
-See [Control Plane Defaults](https://authhero.net/docs/customization/multi-tenancy/control-plane-defaults)
+See [Control Plane Defaults](https://docs.authhero.net/customization/multi-tenancy/control-plane-defaults)
 for the full architecture and request flows.

package/dist/cloudflare-wfp-tenant/README.md

@@ -58,5 +58,5 @@ wrangler secret put CONTROL_PLANE_ENCRYPTION_KEY  --name tenant-<id>-auth
 
 After the Worker and its D1 exist, run the control plane's
 `sync-defaults` for this tenant so its inherited rows are populated. See the
-[Control Plane Defaults](https://authhero.net/docs/customization/multi-tenancy/control-plane-defaults)
+[Control Plane Defaults](https://docs.authhero.net/customization/multi-tenancy/control-plane-defaults)
 docs for the full flow.

package/dist/create-authhero.js

@@ -33,21 +33,21 @@ var c = new e(), l = {
 					"@authhero/kysely-adapter": a,
 					...i && { "@authhero/admin": a },
 					"@authhero/widget": a,
-					"@hono/swagger-ui": "^0.5.0",
-					"@hono/zod-openapi": "^0.19.0",
+					"@hono/swagger-ui": "^0.6.0",
+					"@hono/zod-openapi": "^1.4.0",
 					"@hono/node-server": "latest",
 					authhero: a,
 					"better-sqlite3": "latest",
-					hono: "^4.6.0",
+					hono: "^4.12.0",
 					kysely: "latest",
 					...t && { "@authhero/multi-tenancy": a },
 					...n && { bcryptjs: "latest" }
 				},
 				devDependencies: {
 					"@types/better-sqlite3": "^7.6.0",
-					"@types/node": "^20.0.0",
+					"@types/node": "^22.0.0",
 					tsx: "^4.0.0",
-					typescript: "^5.5.0"
+					typescript: "^5.9.0"
 				}
 			};
 		},
@@ -83,19 +83,19 @@ var c = new e(), l = {
 					"@authhero/drizzle": a,
 					...i && { "@authhero/admin": a },
 					"@authhero/widget": a,
-					"@hono/swagger-ui": "^0.5.0",
-					"@hono/zod-openapi": "^0.19.0",
+					"@hono/swagger-ui": "^0.6.0",
+					"@hono/zod-openapi": "^1.4.0",
 					authhero: a,
 					"drizzle-orm": "^0.44.0",
-					hono: "^4.6.0",
+					hono: "^4.12.0",
 					...t && { "@authhero/multi-tenancy": a },
 					...n && { bcryptjs: "latest" }
 				},
 				devDependencies: {
 					"@cloudflare/workers-types": "^4.0.0",
 					"drizzle-kit": "^0.31.0",
-					typescript: "^5.5.0",
-					wrangler: "^3.0.0"
+					typescript: "^5.9.0",
+					wrangler: "^4.0.0"
 				}
 			};
 		},
@@ -124,13 +124,13 @@ var c = new e(), l = {
 					"@authhero/drizzle": i,
 					"@authhero/proxy": i,
 					"drizzle-orm": "^0.44.0",
-					hono: "^4.6.0"
+					hono: "^4.12.0"
 				},
 				devDependencies: {
 					"@cloudflare/workers-types": "^4.0.0",
 					"drizzle-kit": "^0.31.0",
-					typescript: "^5.5.0",
-					wrangler: "^3.0.0"
+					typescript: "^5.9.0",
+					wrangler: "^4.0.0"
 				}
 			};
 		}
@@ -162,17 +162,17 @@ var c = new e(), l = {
 					"@authhero/drizzle": i,
 					"@authhero/multi-tenancy": i,
 					"@authhero/widget": i,
-					"@hono/swagger-ui": "^0.5.0",
-					"@hono/zod-openapi": "^0.19.0",
+					"@hono/swagger-ui": "^0.6.0",
+					"@hono/zod-openapi": "^1.4.0",
 					authhero: i,
 					"drizzle-orm": "^0.44.0",
-					hono: "^4.6.0"
+					hono: "^4.12.0"
 				},
 				devDependencies: {
 					"@cloudflare/workers-types": "^4.0.0",
 					"drizzle-kit": "^0.31.0",
-					typescript: "^5.5.0",
-					wrangler: "^3.0.0"
+					typescript: "^5.9.0",
+					wrangler: "^4.0.0"
 				}
 			};
 		}
@@ -207,17 +207,17 @@ var c = new e(), l = {
 					"@authhero/drizzle": i,
 					"@authhero/multi-tenancy": i,
 					"@authhero/widget": i,
-					"@hono/swagger-ui": "^0.5.0",
-					"@hono/zod-openapi": "^0.19.0",
+					"@hono/swagger-ui": "^0.6.0",
+					"@hono/zod-openapi": "^1.4.0",
 					authhero: i,
 					"drizzle-orm": "^0.44.0",
-					hono: "^4.6.0"
+					hono: "^4.12.0"
 				},
 				devDependencies: {
 					"@cloudflare/workers-types": "^4.0.0",
 					"drizzle-kit": "^0.31.0",
-					typescript: "^5.5.0",
-					wrangler: "^3.0.0"
+					typescript: "^5.9.0",
+					wrangler: "^4.0.0"
 				}
 			};
 		}
@@ -237,13 +237,13 @@ var c = new e(), l = {
 			},
 			dependencies: {
 				"@authhero/proxy": r ? "workspace:*" : "latest",
-				hono: "^4.6.0"
+				hono: "^4.12.0"
 			},
 			devDependencies: {
 				"@cloudflare/workers-types": "^4.0.0",
-				"@types/node": "^20.0.0",
-				typescript: "^5.5.0",
-				wrangler: "^3.0.0"
+				"@types/node": "^22.0.0",
+				typescript: "^5.9.0",
+				wrangler: "^4.0.0"
 			}
 		})
 	},
@@ -272,19 +272,19 @@ var c = new e(), l = {
 					"@authhero/widget": a,
 					"@aws-sdk/client-dynamodb": "^3.0.0",
 					"@aws-sdk/lib-dynamodb": "^3.0.0",
-					"@hono/swagger-ui": "^0.5.0",
-					"@hono/zod-openapi": "^0.19.0",
+					"@hono/swagger-ui": "^0.6.0",
+					"@hono/zod-openapi": "^1.4.0",
 					authhero: a,
-					hono: "^4.6.0",
+					hono: "^4.12.0",
 					...t && { "@authhero/multi-tenancy": a },
 					...n && { bcryptjs: "latest" }
 				},
 				devDependencies: {
 					"@types/aws-lambda": "^8.10.0",
-					"@types/node": "^20.0.0",
+					"@types/node": "^22.0.0",
 					sst: "^3.0.0",
 					tsx: "^4.0.0",
-					typescript: "^5.5.0"
+					typescript: "^5.9.0"
 				}
 			};
 		},
@@ -303,12 +303,14 @@ function d(e, t = !1, n = "authhero-local", r) {
 		"https://local.authhero.net/auth-callback",
 		"http://localhost:5173/auth-callback",
 		"http://localhost:3000/auth-callback",
-		...r ? ["http://localhost:3000/admin/auth-callback"] : []
+		"https://localhost:3000/auth-callback",
+		...r ? ["http://localhost:3000/admin/auth-callback", "https://localhost:3000/admin/auth-callback"] : []
 	], s = t ? [`https://localhost.emobix.co.uk:8443/test/a/${n}/callback`, `https://localhost:8443/test/a/${n}/callback`] : [], c = [...o, ...s], l = [
 		"https://manage.authhero.net",
 		"https://local.authhero.net",
 		"http://localhost:5173",
-		"http://localhost:3000"
+		"http://localhost:3000",
+		"https://localhost:3000"
 	], u = t ? ["https://localhost:8443/", "https://localhost.emobix.co.uk:8443/"] : [], d = [...l, ...u], f = t ? `
   // Create OpenID Conformance Suite test clients and user
   console.log("Creating conformance test clients and user...");
@@ -556,7 +558,7 @@ function f(e, t) {
   // Add admin UI handler if the package is installed
   if (fs.existsSync(adminIndexPath)) {
     const issuer =
-      process.env.ISSUER || \`http://localhost:\${process.env.PORT || 3000}/\`;
+      process.env.ISSUER || \`https://localhost:\${process.env.PORT || 3000}/\`;
     const rawHtml = fs.readFileSync(adminIndexPath, "utf-8")
       .replace(/src="\\.\\//g, 'src="/admin/')
       .replace(/href="\\.\\//g, 'href="/admin/');
@@ -941,8 +943,8 @@ function E() {
 function D() {
 	console.log("\n" + "─".repeat(50)), console.log("🛰️  AuthHero proxy running at http://localhost:8787"), console.log("✏️  Edit src/proxy.config.ts to add hosts and routes"), console.log("📖 See README.md for deployment instructions"), console.log("─".repeat(50) + "\n");
 }
-function O() {
-	console.log("\n" + "─".repeat(50)), console.log("✅ Self-signed certificates generated with openssl"), console.log("⚠️  You may need to trust the certificate in your browser"), console.log("🔐 AuthHero server running at http://localhost:3000"), console.log("📚 API documentation available at http://localhost:3000/docs"), console.log("🚀 Open http://localhost:3000/setup to complete initial setup"), console.log("─".repeat(50) + "\n");
+function O(e) {
+	console.log("\n" + "─".repeat(50)), console.log("🔐 AuthHero server running at https://localhost:3000"), console.log("⚠️  Uses a self-signed certificate — you may need to trust it"), console.log("📚 API documentation available at https://localhost:3000/docs"), console.log("🚀 Open https://localhost:3000/setup to complete initial setup"), console.log(e ? "🛠️  Admin UI available at https://localhost:3000/admin" : "🌐 Portal available at https://local.authhero.net"), console.log("─".repeat(50) + "\n");
 }
 c.version("1.0.0").description("Create a new AuthHero project").argument("[project-name]", "name of the project").option("-t, --template <type>", "template type: local, cloudflare, aws-sst, or proxy").option("--package-manager <pm>", "package manager to use: npm, yarn, pnpm, or bun").option("--multi-tenant", "enable multi-tenant mode").option("--admin-ui", "include admin UI at /admin").option("--skip-install", "skip installing dependencies").option("--skip-migrate", "skip running database migrations").option("--skip-start", "skip starting the development server").option("--github-ci", "include GitHub CI workflows with semantic versioning").option("--conformance", "add OpenID conformance suite test clients").option("--conformance-alias <alias>", "alias for conformance suite (default: authhero-local)").option("--workspace", "use workspace:* dependencies for local monorepo development").option("-y, --yes", "skip all prompts and use defaults/provided options").action(async (e, i) => {
 	let o = i.yes === !0;
@@ -1128,11 +1130,11 @@ ENCRYPTION_KEY=${s()}
 				name: "shouldStart",
 				message: "Would you like to start the development server?",
 				default: !0
-			}])).shouldStart, n && (m === "cloudflare" ? C() : m === "cloudflare-wfp-dispatcher" ? w() : m === "cloudflare-wfp-tenant" ? T() : m === "cloudflare-control-plane" ? E() : m === "aws-sst" ? v() : m === "proxy" ? D() : O(), console.log("🚀 Starting development server...\n"), await x(`${e} run dev`, p)), o && !n && (console.log("\n✅ Setup complete!"), console.log("\nTo start the development server:"), console.log(`  cd ${c}`), console.log("  npm run dev"), m === "cloudflare" ? C() : m === "cloudflare-wfp-dispatcher" ? w() : m === "cloudflare-wfp-tenant" ? T() : m === "cloudflare-control-plane" ? E() : m === "aws-sst" ? v() : m === "proxy" ? D() : O());
+			}])).shouldStart, n && (m === "cloudflare" ? C() : m === "cloudflare-wfp-dispatcher" ? w() : m === "cloudflare-wfp-tenant" ? T() : m === "cloudflare-control-plane" ? E() : m === "aws-sst" ? v() : m === "proxy" ? D() : O(g), console.log("🚀 Starting development server...\n"), await x(`${e} run dev`, p)), o && !n && (console.log("\n✅ Setup complete!"), console.log("\nTo start the development server:"), console.log(`  cd ${c}`), console.log("  npm run dev"), m === "cloudflare" ? C() : m === "cloudflare-wfp-dispatcher" ? w() : m === "cloudflare-wfp-tenant" ? T() : m === "cloudflare-control-plane" ? E() : m === "aws-sst" ? v() : m === "proxy" ? D() : O(g));
 		} catch (e) {
 			console.error("\n❌ An error occurred:", e), process.exit(1);
 		}
 	}
-	H || (console.log("Next steps:"), console.log(`  cd ${c}`), m === "local" ? (console.log("  npm install"), console.log("  npm run migrate"), console.log("  npm run dev"), console.log("\nOpen http://localhost:3000/setup to complete initial setup")) : m === "cloudflare" ? (console.log("  npm install"), console.log("  npm run migrate  # or npm run db:migrate:remote for production"), console.log("  npm run dev  # or npm run dev:remote for production"), console.log("\nOpen https://localhost:3000/setup to complete initial setup")) : m === "cloudflare-wfp-dispatcher" ? (console.log("  npm install"), console.log("  npm run setup  # creates wrangler.local.toml — paste your database_id"), console.log("  npx wrangler dispatch-namespace create authhero-tenants"), console.log("  npm run dev  # or npm run dev:remote for production"), console.log("\nDeploy tenant workers separately (`cloudflare` template):"), console.log("  wrangler deploy --dispatch-namespace=authhero-tenants --name=tenant-<id>-auth")) : m === "cloudflare-control-plane" ? (console.log("  npm install"), console.log("  npm run setup  # creates wrangler.local.toml + .dev.vars"), console.log("  # set CONTROL_PLANE_ENCRYPTION_KEY in .dev.vars (share it with every tenant worker)"), console.log("  npm run migrate"), console.log("  npm run seed"), console.log("  npm run dev  # or npm run dev:remote for production"), console.log("\nWire buildTenantAdapters() in src/index.ts, then project defaults:"), console.log("  POST /internal/tenants/:id/sync-defaults")) : m === "cloudflare-wfp-tenant" ? (console.log("  npm install"), console.log("  npm run setup  # creates wrangler.local.toml + .dev.vars"), console.log("  # set CONTROL_PLANE_ENCRYPTION_KEY in .dev.vars (must match the control plane)"), console.log("  npm run migrate"), console.log("  npm run dev  # or npm run dev:remote for production"), console.log("\nDeploy into the dispatch namespace:"), console.log("  wrangler deploy --dispatch-namespace=authhero-tenants --name=tenant-<id>-auth")) : m === "aws-sst" ? (console.log("  npm install"), console.log("  npm run dev  # Deploys to AWS in development mode"), console.log("\nOpen your server URL /setup to complete initial setup")) : m === "proxy" && (console.log("  npm install"), console.log("  npm run dev"), console.log("\nEdit src/proxy.config.ts to add hosts and routes")), console.log(`\nServer will be available at: http://localhost:${m === "proxy" ? 8787 : m === "cloudflare-wfp-dispatcher" ? 3001 : m === "cloudflare-wfp-tenant" ? 3002 : 3e3}`), k && (console.log("\n🧪 OpenID Conformance Suite Testing:"), console.log("  1. Clone and start the conformance suite (if not already running):"), console.log("     git clone https://gitlab.com/openid/conformance-suite.git"), console.log("     cd conformance-suite && mvn clean package"), console.log("     docker-compose up -d"), console.log("  2. Open https://localhost.emobix.co.uk:8443"), console.log("  3. Create a test plan and use conformance-config.json for settings"), console.log(`  4. Use alias: ${A}`)), console.log("\nFor more information, visit: https://authhero.net/docs\n"));
+	H || (console.log("Next steps:"), console.log(`  cd ${c}`), m === "local" ? (console.log("  npm install"), console.log("  npm run migrate"), console.log("  npm run dev"), console.log("\nOpen https://localhost:3000/setup to complete initial setup")) : m === "cloudflare" ? (console.log("  npm install"), console.log("  npm run migrate  # or npm run db:migrate:remote for production"), console.log("  npm run dev  # or npm run dev:remote for production"), console.log("\nOpen https://localhost:3000/setup to complete initial setup")) : m === "cloudflare-wfp-dispatcher" ? (console.log("  npm install"), console.log("  npm run setup  # creates wrangler.local.toml — paste your database_id"), console.log("  npx wrangler dispatch-namespace create authhero-tenants"), console.log("  npm run dev  # or npm run dev:remote for production"), console.log("\nDeploy tenant workers separately (`cloudflare` template):"), console.log("  wrangler deploy --dispatch-namespace=authhero-tenants --name=tenant-<id>-auth")) : m === "cloudflare-control-plane" ? (console.log("  npm install"), console.log("  npm run setup  # creates wrangler.local.toml + .dev.vars"), console.log("  # set CONTROL_PLANE_ENCRYPTION_KEY in .dev.vars (share it with every tenant worker)"), console.log("  npm run migrate"), console.log("  npm run seed"), console.log("  npm run dev  # or npm run dev:remote for production"), console.log("\nWire buildTenantAdapters() in src/index.ts, then project defaults:"), console.log("  POST /internal/tenants/:id/sync-defaults")) : m === "cloudflare-wfp-tenant" ? (console.log("  npm install"), console.log("  npm run setup  # creates wrangler.local.toml + .dev.vars"), console.log("  # set CONTROL_PLANE_ENCRYPTION_KEY in .dev.vars (must match the control plane)"), console.log("  npm run migrate"), console.log("  npm run dev  # or npm run dev:remote for production"), console.log("\nDeploy into the dispatch namespace:"), console.log("  wrangler deploy --dispatch-namespace=authhero-tenants --name=tenant-<id>-auth")) : m === "aws-sst" ? (console.log("  npm install"), console.log("  npm run dev  # Deploys to AWS in development mode"), console.log("\nOpen your server URL /setup to complete initial setup")) : m === "proxy" && (console.log("  npm install"), console.log("  npm run dev"), console.log("\nEdit src/proxy.config.ts to add hosts and routes")), console.log(`\nServer will be available at: ${m === "proxy" ? "http" : "https"}://localhost:${m === "proxy" ? 8787 : m === "cloudflare-wfp-dispatcher" ? 3001 : m === "cloudflare-wfp-tenant" ? 3002 : 3e3}`), k && (console.log("\n🧪 OpenID Conformance Suite Testing:"), console.log("  1. Clone and start the conformance suite (if not already running):"), console.log("     git clone https://gitlab.com/openid/conformance-suite.git"), console.log("     cd conformance-suite && mvn clean package"), console.log("     docker-compose up -d"), console.log("  2. Open https://localhost.emobix.co.uk:8443"), console.log("  3. Create a test plan and use conformance-config.json for settings"), console.log(`  4. Use alias: ${A}`)), console.log("\nFor more information, visit: https://docs.authhero.net\n"));
 }), c.parse(process.argv);
 //#endregion

package/dist/local/README.md

@@ -69,4 +69,4 @@ npm run gen:key                   # print a fresh base64 key
 npm run decrypt -- "enc:v1:..."   # decrypt a stored value using ENCRYPTION_KEY from .env
 ```
 
-For more information, visit [https://authhero.net/docs](https://authhero.net/docs).
+For more information, visit [https://docs.authhero.net](https://docs.authhero.net).

package/dist/local/src/index.ts

@@ -9,6 +9,7 @@ import fs from "fs";
 import path from "path";
 import { execFileSync } from "child_process";
 import https from "https";
+import { fileURLToPath } from "url";
 
 // Generate self-signed certificates for local HTTPS if they don't exist
 const certDir = path.join(process.cwd(), ".certs");
@@ -130,9 +131,22 @@ const issuer = process.env.ISSUER || `https://localhost:${port}/`;
 // Get or generate certificates
 const { key, cert } = ensureCertificates();
 
+// Point at the locally installed admin UI when the @authhero/admin package is
+// present (same check as app.ts); fall back to the hosted portal otherwise.
+const hasLocalAdminUi = fs.existsSync(
+  path.resolve(
+    path.dirname(fileURLToPath(import.meta.url)),
+    "../node_modules/@authhero/admin/dist/index.html",
+  ),
+);
+
 console.log(`🔐 AuthHero server running at https://localhost:${port}`);
 console.log(`📚 API documentation available at https://localhost:${port}/docs`);
-console.log(`🌐 Portal available at https://local.authhero.net`);
+if (hasLocalAdminUi) {
+  console.log(`🛠️  Admin UI available at https://localhost:${port}/admin`);
+} else {
+  console.log(`🌐 Portal available at https://local.authhero.net`);
+}
 
 serve({
   fetch: (request) => {

package/package.json

@@ -5,7 +5,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "0.47.0",
+  "version": "0.47.2",
   "type": "module",
   "main": "dist/create-authhero.js",
   "bin": {