glashjs 0.12.1 → 0.13.1

package/src/auth.mjs

@@ -0,0 +1,96 @@
+// glashAuth helpers for glashjs
+// ---------------------------------------------------------------------------
+// Thin client/server wrapper for the GlashDB auth API:
+//   /api/auth/v1/:projectId/signup
+//   /api/auth/v1/:projectId/signin
+//   /api/auth/v1/:projectId/me
+
+export function glashAuth(options = {}) {
+  const apiUrl = trimSlash(options.apiUrl ?? process.env.GLASHDB_API_URL ?? 'https://api.glashdb.com/api');
+  const projectId = options.projectId
+    ?? process.env.GLASHDB_PROJECT_ID
+    ?? process.env.GLASHAUTH_PROJECT_ID
+    ?? process.env.NEXT_PUBLIC_GLASHDB_PROJECT_ID;
+  const anonKey = options.anonKey
+    ?? process.env.GLASHDB_ANON_KEY
+    ?? process.env.GLASHAUTH_ANON_KEY
+    ?? process.env.NEXT_PUBLIC_GLASHAUTH_ANON_KEY;
+
+  if (!projectId) throw new Error('GLASHDB_PROJECT_ID is required for glashAuth');
+  if (!anonKey) throw new Error('GLASHDB_ANON_KEY is required for glashAuth');
+
+  async function request(path, { body, accessToken, method = 'POST', headers = {} } = {}) {
+    const res = await fetch(`${apiUrl}/auth/v1/${encodeURIComponent(projectId)}/${path.replace(/^\/+/, '')}`, {
+      method,
+      headers: {
+        apikey: anonKey,
+        'content-type': 'application/json',
+        ...(accessToken ? { authorization: `Bearer ${accessToken}` } : {}),
+        ...headers,
+      },
+      body: body === undefined ? undefined : JSON.stringify(body),
+    });
+    const data = await readJson(res);
+    if (!res.ok) {
+      const message = data?.message || data?.error || `glashAuth ${path} failed with HTTP ${res.status}`;
+      throw new Error(message);
+    }
+    return data;
+  }
+
+  return {
+    projectId,
+    apiUrl,
+    signup: ({ email, password, fullName }) => request('signup', { body: { email, password, fullName } }),
+    signin: ({ email, password }) => request('signin', { body: { email, password } }),
+    signout: (refreshToken) => request('signout', { body: { refreshToken } }),
+    refresh: (refreshToken) => request('refresh', { body: { refreshToken } }),
+    magicLink: ({ email, redirectTo }) => request('magic-link/request', { body: { email, redirectTo } }),
+    me: (accessToken) => request('me', { method: 'GET', accessToken }),
+    googleAuthorizeUrl: (redirectTo) => {
+      const url = new URL(`${apiUrl}/auth/v1/${encodeURIComponent(projectId)}/google/authorize`);
+      if (redirectTo) url.searchParams.set('redirect_to', redirectTo);
+      return url.toString();
+    },
+  };
+}
+
+export function readSessionCookie(ctx, name = 'glash_session') {
+  const cookie = ctx?.headers?.cookie || ctx?.req?.headers?.cookie || '';
+  const found = cookie.split(';').map((part) => part.trim()).find((part) => part.startsWith(`${name}=`));
+  if (!found) return null;
+  try {
+    return JSON.parse(Buffer.from(decodeURIComponent(found.slice(name.length + 1)), 'base64url').toString('utf8'));
+  } catch {
+    return null;
+  }
+}
+
+export function sessionCookie(session, options = {}) {
+  const name = options.name ?? 'glash_session';
+  const maxAge = options.maxAge ?? 60 * 60 * 24 * 30;
+  const encoded = Buffer.from(JSON.stringify(session), 'utf8').toString('base64url');
+  const parts = [
+    `${name}=${encodeURIComponent(encoded)}`,
+    'Path=/',
+    `Max-Age=${maxAge}`,
+    'HttpOnly',
+    'SameSite=Lax',
+  ];
+  if (options.secure ?? process.env.NODE_ENV === 'production') parts.push('Secure');
+  return parts.join('; ');
+}
+
+export function clearSessionCookie(name = 'glash_session') {
+  return `${name}=; Path=/; Max-Age=0; HttpOnly; SameSite=Lax`;
+}
+
+async function readJson(res) {
+  const text = await res.text();
+  if (!text) return null;
+  try { return JSON.parse(text); } catch { return { message: text }; }
+}
+
+function trimSlash(value) {
+  return String(value || '').replace(/\/+$/, '');
+}

package/src/build.mjs

@@ -13,6 +13,7 @@ import { securityHeaders } from './security/headers.mjs';
 import { discoverRoutes } from './server/router.mjs';
 import { isComponentRoute, findLayouts, loadComponentRoute, clientBundle, routeId } from './server/jsx.mjs';
 import { loadConfig } from './config.mjs';
+import { loadEnvFiles } from './env.mjs';
 
 // Precompile JSX routes: server modules (-> .glash/server) + minified client
 // hydration bundles (-> outDir/_glash/<id>.js). Production `glash serve` then
@@ -56,6 +57,7 @@ function pwaManifest(cfg, version) {
 }
 
 export async function build({ root = process.cwd(), log = console.log } = {}) {
+  loadEnvFiles(root, { mode: process.env.NODE_ENV || 'production' });
   const cfg = await loadConfig(root);
   const publicDir = path.resolve(root, cfg.publicDir);
   const outDir = path.resolve(root, cfg.outDir);
@@ -77,6 +79,9 @@ export async function build({ root = process.cwd(), log = console.log } = {}) {
   manifest.generatedAt = new Date().toISOString();
 
   await fs.mkdir(outDir, { recursive: true });
+  if (existsSync(publicDir)) {
+    await fs.cp(publicDir, outDir, { recursive: true, force: true });
+  }
 
   // Precompile JSX routes (server modules + client bundles) for production.
   let routesBuilt = { compiled: 0 };

package/src/config.mjs

@@ -19,6 +19,8 @@ export const DEFAULT_CONFIG = {
   publicDir: 'public',
   // File-based routes (pages + api/) served by `glash dev` / `glash serve`.
   routesDir: 'routes',
+  // Global stylesheets injected into every rendered document.
+  stylesheets: [],
   port: 3000,
   outDir: '.glash/out',
   themeColor: '#0b0d12',