create-croissant 0.1.7 → 0.1.9

package/template/apps/web/node_modules/@better-auth/core/src/social-providers/google.ts

@@ -1,204 +0,0 @@
-import { betterFetch } from "@better-fetch/fetch";
-import { decodeJwt, decodeProtectedHeader, importJWK, jwtVerify } from "jose";
-import { logger } from "../env";
-import { APIError, BetterAuthError } from "../error";
-import type { OAuthProvider, ProviderOptions } from "../oauth2";
-import {
-	createAuthorizationURL,
-	getPrimaryClientId,
-	refreshAccessToken,
-	validateAuthorizationCode,
-} from "../oauth2";
-
-export interface GoogleProfile {
-	aud: string;
-	azp: string;
-	email: string;
-	email_verified: boolean;
-	exp: number;
-	/**
-	 * The family name of the user, or last name in most
-	 * Western languages.
-	 */
-	family_name: string;
-	/**
-	 * The given name of the user, or first name in most
-	 * Western languages.
-	 */
-	given_name: string;
-	hd?: string | undefined;
-	iat: number;
-	iss: string;
-	jti?: string | undefined;
-	locale?: string | undefined;
-	name: string;
-	nbf?: number | undefined;
-	picture: string;
-	sub: string;
-}
-
-export interface GoogleOptions extends ProviderOptions<GoogleProfile> {
-	clientId: string | string[];
-	/**
-	 * The access type to use for the authorization code request
-	 */
-	accessType?: ("offline" | "online") | undefined;
-	/**
-	 * The display mode to use for the authorization code request
-	 */
-	display?: ("page" | "popup" | "touch" | "wap") | undefined;
-	/**
-	 * The hosted domain of the user
-	 */
-	hd?: string | undefined;
-}
-
-export const google = (options: GoogleOptions) => {
-	return {
-		id: "google",
-		name: "Google",
-		async createAuthorizationURL({
-			state,
-			scopes,
-			codeVerifier,
-			redirectURI,
-			loginHint,
-			display,
-		}) {
-			if (!getPrimaryClientId(options.clientId) || !options.clientSecret) {
-				logger.error(
-					"Client Id and Client Secret is required for Google. Make sure to provide them in the options.",
-				);
-				throw new BetterAuthError("CLIENT_ID_AND_SECRET_REQUIRED");
-			}
-			if (!codeVerifier) {
-				throw new BetterAuthError("codeVerifier is required for Google");
-			}
-			const _scopes = options.disableDefaultScope
-				? []
-				: ["email", "profile", "openid"];
-			if (options.scope) _scopes.push(...options.scope);
-			if (scopes) _scopes.push(...scopes);
-			const url = await createAuthorizationURL({
-				id: "google",
-				options,
-				authorizationEndpoint: "https://accounts.google.com/o/oauth2/v2/auth",
-				scopes: _scopes,
-				state,
-				codeVerifier,
-				redirectURI,
-				prompt: options.prompt,
-				accessType: options.accessType,
-				display: display || options.display,
-				loginHint,
-				hd: options.hd,
-				additionalParams: {
-					include_granted_scopes: "true",
-				},
-			});
-			return url;
-		},
-		validateAuthorizationCode: async ({ code, codeVerifier, redirectURI }) => {
-			return validateAuthorizationCode({
-				code,
-				codeVerifier,
-				redirectURI,
-				options,
-				tokenEndpoint: "https://oauth2.googleapis.com/token",
-			});
-		},
-		refreshAccessToken: options.refreshAccessToken
-			? options.refreshAccessToken
-			: async (refreshToken) => {
-					return refreshAccessToken({
-						refreshToken,
-						options: {
-							clientId: options.clientId,
-							clientKey: options.clientKey,
-							clientSecret: options.clientSecret,
-						},
-						tokenEndpoint: "https://oauth2.googleapis.com/token",
-					});
-				},
-		async verifyIdToken(token, nonce) {
-			if (options.disableIdTokenSignIn) {
-				return false;
-			}
-			if (options.verifyIdToken) {
-				return options.verifyIdToken(token, nonce);
-			}
-
-			// Verify JWT integrity
-			// See https://developers.google.com/identity/sign-in/web/backend-auth#verify-the-integrity-of-the-id-token
-
-			try {
-				const { kid, alg: jwtAlg } = decodeProtectedHeader(token);
-				if (!kid || !jwtAlg) return false;
-
-				const publicKey = await getGooglePublicKey(kid);
-				const { payload: jwtClaims } = await jwtVerify(token, publicKey, {
-					algorithms: [jwtAlg],
-					issuer: ["https://accounts.google.com", "accounts.google.com"],
-					audience: options.clientId,
-					maxTokenAge: "1h",
-				});
-
-				if (nonce && jwtClaims.nonce !== nonce) {
-					return false;
-				}
-
-				return true;
-			} catch {
-				return false;
-			}
-		},
-		async getUserInfo(token) {
-			if (options.getUserInfo) {
-				return options.getUserInfo(token);
-			}
-			if (!token.idToken) {
-				return null;
-			}
-			const user = decodeJwt(token.idToken) as GoogleProfile;
-			const userMap = await options.mapProfileToUser?.(user);
-			return {
-				user: {
-					id: user.sub,
-					name: user.name,
-					email: user.email,
-					image: user.picture,
-					emailVerified: user.email_verified,
-					...userMap,
-				},
-				data: user,
-			};
-		},
-		options,
-	} satisfies OAuthProvider<GoogleProfile>;
-};
-
-export const getGooglePublicKey = async (kid: string) => {
-	const { data } = await betterFetch<{
-		keys: Array<{
-			kid: string;
-			alg: string;
-			kty: string;
-			use: string;
-			n: string;
-			e: string;
-		}>;
-	}>("https://www.googleapis.com/oauth2/v3/certs");
-
-	if (!data?.keys) {
-		throw new APIError("BAD_REQUEST", {
-			message: "Keys not found",
-		});
-	}
-
-	const jwk = data.keys.find((key) => key.kid === kid);
-	if (!jwk) {
-		throw new Error(`JWK with kid ${kid} not found`);
-	}
-
-	return await importJWK(jwk, jwk.alg);
-};

package/template/apps/web/node_modules/@better-auth/core/src/social-providers/huggingface.ts

@@ -1,119 +0,0 @@
-import { betterFetch } from "@better-fetch/fetch";
-import type { OAuthProvider, ProviderOptions } from "../oauth2";
-import {
-	createAuthorizationURL,
-	refreshAccessToken,
-	validateAuthorizationCode,
-} from "../oauth2";
-
-export interface HuggingFaceProfile {
-	sub: string;
-	name: string;
-	preferred_username: string;
-	profile: string;
-	picture: string;
-	website?: string | undefined;
-	email?: string | undefined;
-	email_verified?: boolean | undefined;
-	isPro: boolean;
-	canPay?: boolean | undefined;
-	orgs?:
-		| {
-				sub: string;
-				name: string;
-				picture: string;
-				preferred_username: string;
-				isEnterprise: boolean | "plus";
-				canPay?: boolean;
-				roleInOrg?: "admin" | "write" | "contributor" | "read";
-				pendingSSO?: boolean;
-				missingMFA?: boolean;
-				resourceGroups?: {
-					sub: string;
-					name: string;
-					role: "admin" | "write" | "contributor" | "read";
-				}[];
-		  }
-		| undefined;
-}
-
-export interface HuggingFaceOptions
-	extends ProviderOptions<HuggingFaceProfile> {
-	clientId: string;
-}
-
-export const huggingface = (options: HuggingFaceOptions) => {
-	const tokenEndpoint = "https://huggingface.co/oauth/token";
-	return {
-		id: "huggingface",
-		name: "Hugging Face",
-		createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }) {
-			const _scopes = options.disableDefaultScope
-				? []
-				: ["openid", "profile", "email"];
-			if (options.scope) _scopes.push(...options.scope);
-			if (scopes) _scopes.push(...scopes);
-			return createAuthorizationURL({
-				id: "huggingface",
-				options,
-				authorizationEndpoint: "https://huggingface.co/oauth/authorize",
-				scopes: _scopes,
-				state,
-				codeVerifier,
-				redirectURI,
-			});
-		},
-		validateAuthorizationCode: async ({ code, codeVerifier, redirectURI }) => {
-			return validateAuthorizationCode({
-				code,
-				codeVerifier,
-				redirectURI,
-				options,
-				tokenEndpoint,
-			});
-		},
-		refreshAccessToken: options.refreshAccessToken
-			? options.refreshAccessToken
-			: async (refreshToken) => {
-					return refreshAccessToken({
-						refreshToken,
-						options: {
-							clientId: options.clientId,
-							clientKey: options.clientKey,
-							clientSecret: options.clientSecret,
-						},
-						tokenEndpoint,
-					});
-				},
-		async getUserInfo(token) {
-			if (options.getUserInfo) {
-				return options.getUserInfo(token);
-			}
-			const { data: profile, error } = await betterFetch<HuggingFaceProfile>(
-				"https://huggingface.co/oauth/userinfo",
-				{
-					method: "GET",
-					headers: {
-						Authorization: `Bearer ${token.accessToken}`,
-					},
-				},
-			);
-			if (error) {
-				return null;
-			}
-			const userMap = await options.mapProfileToUser?.(profile);
-			return {
-				user: {
-					id: profile.sub,
-					name: profile.name || profile.preferred_username || "",
-					email: profile.email,
-					image: profile.picture,
-					emailVerified: profile.email_verified ?? false,
-					...userMap,
-				},
-				data: profile,
-			};
-		},
-		options,
-	} satisfies OAuthProvider<HuggingFaceProfile>;
-};

package/template/apps/web/node_modules/@better-auth/core/src/social-providers/index.ts

@@ -1,132 +0,0 @@
-import * as z from "zod";
-import type { AwaitableFunction } from "../types";
-import { apple } from "./apple";
-import { atlassian } from "./atlassian";
-import { cognito } from "./cognito";
-import { discord } from "./discord";
-import { dropbox } from "./dropbox";
-import { facebook } from "./facebook";
-import { figma } from "./figma";
-import { github } from "./github";
-import { gitlab } from "./gitlab";
-import { google } from "./google";
-import { huggingface } from "./huggingface";
-import { kakao } from "./kakao";
-import { kick } from "./kick";
-import { line } from "./line";
-import { linear } from "./linear";
-import { linkedin } from "./linkedin";
-import { microsoft } from "./microsoft-entra-id";
-import { naver } from "./naver";
-import { notion } from "./notion";
-import { paybin } from "./paybin";
-import { paypal } from "./paypal";
-import { polar } from "./polar";
-import { railway } from "./railway";
-import { reddit } from "./reddit";
-import { roblox } from "./roblox";
-import { salesforce } from "./salesforce";
-import { slack } from "./slack";
-import { spotify } from "./spotify";
-import { tiktok } from "./tiktok";
-import { twitch } from "./twitch";
-import { twitter } from "./twitter";
-import { vercel } from "./vercel";
-import { vk } from "./vk";
-import { wechat } from "./wechat";
-import { zoom } from "./zoom";
-
-export const socialProviders = {
-	apple,
-	atlassian,
-	cognito,
-	discord,
-	facebook,
-	figma,
-	github,
-	microsoft,
-	google,
-	huggingface,
-	slack,
-	spotify,
-	twitch,
-	twitter,
-	dropbox,
-	kick,
-	linear,
-	linkedin,
-	gitlab,
-	tiktok,
-	reddit,
-	roblox,
-	salesforce,
-	vk,
-	zoom,
-	notion,
-	kakao,
-	naver,
-	line,
-	paybin,
-	paypal,
-	polar,
-	railway,
-	vercel,
-	wechat,
-};
-
-export const socialProviderList = Object.keys(socialProviders) as [
-	"github",
-	...(keyof typeof socialProviders)[],
-];
-
-export const SocialProviderListEnum = z
-	.enum(socialProviderList)
-	.or(z.string()) as z.ZodType<SocialProviderList[number] | (string & {})>;
-
-export type SocialProvider = z.infer<typeof SocialProviderListEnum>;
-
-export type SocialProviders = {
-	[K in SocialProviderList[number]]?: AwaitableFunction<
-		Parameters<(typeof socialProviders)[K]>[0] & {
-			enabled?: boolean | undefined;
-		}
-	>;
-};
-
-export * from "./apple";
-export * from "./atlassian";
-export * from "./cognito";
-export * from "./discord";
-export * from "./dropbox";
-export * from "./facebook";
-export * from "./figma";
-export * from "./github";
-export * from "./gitlab";
-export * from "./google";
-export * from "./huggingface";
-export * from "./kakao";
-export * from "./kick";
-export * from "./line";
-export * from "./linear";
-export * from "./linkedin";
-export * from "./microsoft-entra-id";
-export * from "./naver";
-export * from "./notion";
-export * from "./paybin";
-export * from "./paypal";
-export * from "./polar";
-export * from "./railway";
-export * from "./reddit";
-export * from "./roblox";
-export * from "./salesforce";
-export * from "./slack";
-export * from "./spotify";
-export * from "./tiktok";
-export * from "./twitch";
-export * from "./twitter";
-export * from "./vercel";
-export * from "./vk";
-export * from "./wechat";
-export * from "./zoom";
-
-export type SocialProviderList = typeof socialProviderList;

package/template/apps/web/node_modules/@better-auth/core/src/social-providers/kakao.ts

@@ -1,179 +0,0 @@
-import { betterFetch } from "@better-fetch/fetch";
-import type { OAuthProvider, ProviderOptions } from "../oauth2";
-import {
-	createAuthorizationURL,
-	refreshAccessToken,
-	validateAuthorizationCode,
-} from "../oauth2";
-
-interface Partner {
-	/** Partner-specific ID (consent required: kakaotalk_message) */
-	uuid?: string | undefined;
-}
-
-interface Profile {
-	/** Nickname (consent required: profile/nickname) */
-	nickname?: string | undefined;
-	/** Thumbnail image URL (consent required: profile/profile image) */
-	thumbnail_image_url?: string | undefined;
-	/** Profile image URL (consent required: profile/profile image) */
-	profile_image_url?: string | undefined;
-	/** Whether the profile image is the default */
-	is_default_image?: boolean | undefined;
-	/** Whether the nickname is the default */
-	is_default_nickname?: boolean | undefined;
-}
-
-interface KakaoAccount {
-	/** Consent required: profile info (nickname/profile image) */
-	profile_needs_agreement?: boolean | undefined;
-	/** Consent required: nickname */
-	profile_nickname_needs_agreement?: boolean | undefined;
-	/** Consent required: profile image */
-	profile_image_needs_agreement?: boolean | undefined;
-	/** Profile info */
-	profile?: Profile | undefined;
-	/** Consent required: name */
-	name_needs_agreement?: boolean | undefined;
-	/** Name */
-	name?: string | undefined;
-	/** Consent required: email */
-	email_needs_agreement?: boolean | undefined;
-	/** Email valid */
-	is_email_valid?: boolean | undefined;
-	/** Email verified */
-	is_email_verified?: boolean | undefined;
-	/** Email */
-	email?: string | undefined;
-	/** Consent required: age range */
-	age_range_needs_agreement?: boolean | undefined;
-	/** Age range */
-	age_range?: string | undefined;
-	/** Consent required: birth year */
-	birthyear_needs_agreement?: boolean | undefined;
-	/** Birth year (YYYY) */
-	birthyear?: string | undefined;
-	/** Consent required: birthday */
-	birthday_needs_agreement?: boolean | undefined;
-	/** Birthday (MMDD) */
-	birthday?: string | undefined;
-	/** Birthday type (SOLAR/LUNAR) */
-	birthday_type?: string | undefined;
-	/** Whether birthday is in a leap month */
-	is_leap_month?: boolean | undefined;
-	/** Consent required: gender */
-	gender_needs_agreement?: boolean | undefined;
-	/** Gender (male/female) */
-	gender?: string | undefined;
-	/** Consent required: phone number */
-	phone_number_needs_agreement?: boolean | undefined;
-	/** Phone number */
-	phone_number?: string | undefined;
-	/** Consent required: CI */
-	ci_needs_agreement?: boolean | undefined;
-	/** CI (unique identifier) */
-	ci?: string | undefined;
-	/** CI authentication time (UTC) */
-	ci_authenticated_at?: string | undefined;
-}
-
-export interface KakaoProfile {
-	/** Kakao user ID */
-	id: number;
-	/**
-	 * Whether the user has signed up (only present if auto-connection is disabled)
-	 * false: preregistered, true: registered
-	 */
-	has_signed_up?: boolean | undefined;
-	/** UTC datetime when the user connected the service */
-	connected_at?: string | undefined;
-	/** UTC datetime when the user signed up via Kakao Sync */
-	synched_at?: string | undefined;
-	/** Custom user properties */
-	properties?: Record<string, any> | undefined;
-	/** Kakao account info */
-	kakao_account: KakaoAccount;
-	/** Partner info */
-	for_partner?: Partner | undefined;
-}
-
-export interface KakaoOptions extends ProviderOptions<KakaoProfile> {
-	clientId: string;
-}
-
-export const kakao = (options: KakaoOptions) => {
-	const tokenEndpoint = "https://kauth.kakao.com/oauth/token";
-	return {
-		id: "kakao",
-		name: "Kakao",
-		createAuthorizationURL({ state, scopes, redirectURI }) {
-			const _scopes = options.disableDefaultScope
-				? []
-				: ["account_email", "profile_image", "profile_nickname"];
-			if (options.scope) _scopes.push(...options.scope);
-			if (scopes) _scopes.push(...scopes);
-			return createAuthorizationURL({
-				id: "kakao",
-				options,
-				authorizationEndpoint: "https://kauth.kakao.com/oauth/authorize",
-				scopes: _scopes,
-				state,
-				redirectURI,
-			});
-		},
-		validateAuthorizationCode: async ({ code, redirectURI }) => {
-			return validateAuthorizationCode({
-				code,
-				redirectURI,
-				options,
-				tokenEndpoint,
-			});
-		},
-		refreshAccessToken: options.refreshAccessToken
-			? options.refreshAccessToken
-			: async (refreshToken) => {
-					return refreshAccessToken({
-						refreshToken,
-						options: {
-							clientId: options.clientId,
-							clientKey: options.clientKey,
-							clientSecret: options.clientSecret,
-						},
-						tokenEndpoint,
-					});
-				},
-		async getUserInfo(token) {
-			if (options.getUserInfo) {
-				return options.getUserInfo(token);
-			}
-			const { data: profile, error } = await betterFetch<KakaoProfile>(
-				"https://kapi.kakao.com/v2/user/me",
-				{
-					headers: {
-						Authorization: `Bearer ${token.accessToken}`,
-					},
-				},
-			);
-			if (error || !profile) {
-				return null;
-			}
-			const userMap = await options.mapProfileToUser?.(profile);
-			const account = profile.kakao_account || {};
-			const kakaoProfile = account.profile || {};
-			const user = {
-				id: String(profile.id),
-				name: kakaoProfile.nickname || account.name || "",
-				email: account.email,
-				image:
-					kakaoProfile.profile_image_url || kakaoProfile.thumbnail_image_url,
-				emailVerified: !!account.is_email_valid && !!account.is_email_verified,
-				...userMap,
-			};
-			return {
-				user,
-				data: profile,
-			};
-		},
-		options,
-	} satisfies OAuthProvider<KakaoProfile>;
-};