limen-auth 0.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Brian Iyoha
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,72 @@
+<p align="center">
+  <a href="https://limenauth.dev">
+    <img src="./banner.svg" alt="Limen" width="640" />
+  </a>
+</p>
+
+# limen-auth
+
+Official TypeScript client SDK for **[Limen](https://github.com/thecodearcher/limen)** — a modern, composable authentication library for Go. Framework-agnostic core with first-class **React, Vue, Svelte, and Solid** adapters.
+
+> 📖 Full guides and API reference: **[limenauth.dev](https://limenauth.dev)**
+
+## Install
+
+```bash
+npm install limen-auth
+```
+
+Works with any framework — or none at all. If you're on React, Vue, Svelte, or Solid, just have that framework installed; there's nothing else to add.
+
+## Quick start
+
+```ts
+import { createAuthClient } from "limen-auth";
+import { credentialPasswordPlugin } from "limen-auth/plugins/credential";
+
+export const auth = createAuthClient({
+  baseURL: "http://localhost:8080", // your Limen server origin
+  plugins: [credentialPasswordPlugin()],
+});
+
+await auth.signIn.credential({ credential: "ada@example.com", password: "secret" });
+const session = await auth.getSession(); // Session | null
+await auth.signout();
+```
+
+`auth.$session` is a reactive store for the current user. It loads on its own, keeps your open tabs in sync, and updates as you sign in and out — so the UI always reflects the real session.
+
+## Framework adapters
+
+Import `createAuthClient` from your framework's entry point and you get a `useSession()` wired to it:
+
+```tsx
+import { createAuthClient } from "limen-auth/react";
+import { credentialPasswordPlugin } from "limen-auth/plugins/credential";
+
+export const auth = createAuthClient({ baseURL: "...", plugins: [credentialPasswordPlugin()] });
+
+function Profile() {
+  const { data, isPending } = auth.useSession();
+  if (isPending) return <p>Loading…</p>;
+  return data ? <p>Hi {data.user.email}</p> : <p>Signed out</p>;
+}
+```
+
+Also available from `limen-auth/vue`, `limen-auth/svelte`, and `limen-auth/solid`.
+
+## Plugins
+
+Add the sign-in flows you need as plugins (each lives under `limen-auth/plugins/<name>`):
+
+- `credentialPasswordPlugin` — email/username + password
+- `oauthClientPlugin` — social / OAuth providers
+- `magicLinkPlugin` — passwordless email links
+- `twoFactorPlugin` — TOTP, OTP, and backup codes
+- `bearerPlugin` / `sessionJwtPlugin` — token-based sessions
+
+See the plugin and full API reference at **[limenauth.dev](https://limenauth.dev)**.
+
+## License
+
+MIT © Brian Iyoha

package/dist/bearer-Cqmrmjjf.mjs

@@ -0,0 +1,84 @@
+import { a as SET_REFRESH_TOKEN_HEADER, i as SET_AUTH_TOKEN_HEADER, r as DEFAULT_TOKEN_STORAGE_KEY } from "./constants-CsR2pQ_9.mjs";
+import { n as defineRoutes, t as defineClientPlugin } from "./define-plugin-C7WOGU4b.mjs";
+//#region src/plugins/bearer/storage.ts
+function memoryBearerStorage() {
+	let tokens = null;
+	return {
+		get: () => tokens,
+		set: (next) => {
+			tokens = next;
+		},
+		clear: () => {
+			tokens = null;
+		}
+	};
+}
+function localStorageBearerStorage(key = DEFAULT_TOKEN_STORAGE_KEY) {
+	return {
+		get: () => {
+			try {
+				const raw = globalThis.localStorage.getItem(key);
+				if (!raw) return null;
+				const parsed = JSON.parse(raw);
+				if (typeof parsed?.accessToken !== "string") return null;
+				return parsed;
+			} catch {
+				return null;
+			}
+		},
+		set: (tokens) => {
+			globalThis.localStorage.setItem(key, JSON.stringify(tokens));
+		},
+		clear: () => {
+			globalThis.localStorage.removeItem(key);
+		}
+	};
+}
+function resolveDefaultStorage(key) {
+	if (typeof globalThis.localStorage !== "undefined") return localStorageBearerStorage(key);
+	return memoryBearerStorage();
+}
+//#endregion
+//#region src/plugins/bearer/index.ts
+function bearerPlugin(config = {}) {
+	const store = config.storage ?? resolveDefaultStorage(config.storageKey ?? "limen.tokens");
+	return defineClientPlugin({
+		id: "bearer",
+		routes: defineRoutes(),
+		actions: () => ({ bearer: {
+			getTokens: () => store.get(),
+			setTokens: (tokens) => store.set(tokens),
+			clear: () => store.clear()
+		} }),
+		hooks: {
+			beforeRequest: [{ run: (req) => {
+				const tokens = store.get();
+				if (tokens?.accessToken && !req.headers.has("Authorization")) req.headers.set("Authorization", `Bearer ${tokens.accessToken}`);
+				return req;
+			} }],
+			afterResponse: [{
+				allowOnFailure: true,
+				run: (res) => {
+					const accessToken = res.headers.get(SET_AUTH_TOKEN_HEADER);
+					if (accessToken) {
+						const tokens = { accessToken };
+						const refreshToken = res.headers.get(SET_REFRESH_TOKEN_HEADER);
+						if (refreshToken) tokens.refreshToken = refreshToken;
+						store.set(tokens);
+					}
+					return res;
+				}
+			}, {
+				match: ["/signout", "/revoke-sessions"],
+				run: (res) => {
+					store.clear();
+					return res;
+				}
+			}]
+		}
+	});
+}
+//#endregion
+export { resolveDefaultStorage as i, localStorageBearerStorage as n, memoryBearerStorage as r, bearerPlugin as t };
+
+//# sourceMappingURL=bearer-Cqmrmjjf.mjs.map

package/dist/bearer-Cqmrmjjf.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer-Cqmrmjjf.mjs","names":[],"sources":["../src/plugins/bearer/storage.ts","../src/plugins/bearer/index.ts"],"sourcesContent":["import { DEFAULT_TOKEN_STORAGE_KEY } from \"../../constants\";\nimport type { BearerStorage, BearerTokens } from \"./types\";\n\nexport function memoryBearerStorage(): BearerStorage {\n  let tokens: BearerTokens | null = null;\n  return {\n    get: () => tokens,\n    set: (next) => {\n      tokens = next;\n    },\n    clear: () => {\n      tokens = null;\n    },\n  };\n}\n\nexport function localStorageBearerStorage(key: string = DEFAULT_TOKEN_STORAGE_KEY): BearerStorage {\n  return {\n    get: () => {\n      try {\n        const raw = globalThis.localStorage.getItem(key);\n        if (!raw) {\n          return null;\n        }\n        const parsed = JSON.parse(raw) as Partial<BearerTokens>;\n        if (typeof parsed?.accessToken !== \"string\") {\n          return null;\n        }\n        return parsed as BearerTokens;\n      } catch {\n        return null;\n      }\n    },\n    set: (tokens) => {\n      globalThis.localStorage.setItem(key, JSON.stringify(tokens));\n    },\n    clear: () => {\n      globalThis.localStorage.removeItem(key);\n    },\n  };\n}\n\nexport function resolveDefaultStorage(key: string): BearerStorage {\n  if (typeof globalThis.localStorage !== \"undefined\") {\n    return localStorageBearerStorage(key);\n  }\n  return memoryBearerStorage();\n}\n","import { DEFAULT_TOKEN_STORAGE_KEY, SET_AUTH_TOKEN_HEADER, SET_REFRESH_TOKEN_HEADER } from \"../../constants\";\nimport { defineClientPlugin, defineRoutes } from \"../../define-plugin\";\nimport { resolveDefaultStorage } from \"./storage\";\nimport type { BearerPluginConfig, BearerTokens } from \"./types\";\n\nexport function bearerPlugin(config: BearerPluginConfig = {}) {\n  const store = config.storage ?? resolveDefaultStorage(config.storageKey ?? DEFAULT_TOKEN_STORAGE_KEY);\n\n  return defineClientPlugin({\n    id: \"bearer\",\n    routes: defineRoutes(),\n    actions: () => ({\n      bearer: {\n        getTokens: () => store.get(),\n        setTokens: (tokens: BearerTokens) => store.set(tokens),\n        clear: () => store.clear(),\n      },\n    }),\n    hooks: {\n      beforeRequest: [\n        {\n          run: (req) => {\n            const tokens = store.get();\n            if (tokens?.accessToken && !req.headers.has(\"Authorization\")) {\n              req.headers.set(\"Authorization\", `Bearer ${tokens.accessToken}`);\n            }\n            return req;\n          },\n        },\n      ],\n      afterResponse: [\n        {\n          allowOnFailure: true,\n          run: (res) => {\n            const accessToken = res.headers.get(SET_AUTH_TOKEN_HEADER);\n            if (accessToken) {\n              const tokens: BearerTokens = { accessToken };\n              const refreshToken = res.headers.get(SET_REFRESH_TOKEN_HEADER);\n              if (refreshToken) {\n                tokens.refreshToken = refreshToken;\n              }\n              store.set(tokens);\n            }\n            return res;\n          },\n        },\n        {\n          match: [\"/signout\", \"/revoke-sessions\"],\n          run: (res) => {\n            store.clear();\n            return res;\n          },\n        },\n      ],\n    },\n  });\n}\n\nexport { localStorageBearerStorage, memoryBearerStorage, resolveDefaultStorage } from \"./storage\";\nexport type { BearerPluginConfig, BearerPlugin as BearerPublic, BearerStorage, BearerTokens } from \"./types\";\n"],"mappings":";;;AAGA,SAAgB,sBAAqC;CACnD,IAAI,SAA8B;CAClC,OAAO;EACL,WAAW;EACX,MAAM,SAAS;GACb,SAAS;EACX;EACA,aAAa;GACX,SAAS;EACX;CACF;AACF;AAEA,SAAgB,0BAA0B,MAAc,2BAA0C;CAChG,OAAO;EACL,WAAW;GACT,IAAI;IACF,MAAM,MAAM,WAAW,aAAa,QAAQ,GAAG;IAC/C,IAAI,CAAC,KACH,OAAO;IAET,MAAM,SAAS,KAAK,MAAM,GAAG;IAC7B,IAAI,OAAO,QAAQ,gBAAgB,UACjC,OAAO;IAET,OAAO;GACT,QAAQ;IACN,OAAO;GACT;EACF;EACA,MAAM,WAAW;GACf,WAAW,aAAa,QAAQ,KAAK,KAAK,UAAU,MAAM,CAAC;EAC7D;EACA,aAAa;GACX,WAAW,aAAa,WAAW,GAAG;EACxC;CACF;AACF;AAEA,SAAgB,sBAAsB,KAA4B;CAChE,IAAI,OAAO,WAAW,iBAAiB,aACrC,OAAO,0BAA0B,GAAG;CAEtC,OAAO,oBAAoB;AAC7B;;;AC1CA,SAAgB,aAAa,SAA6B,CAAC,GAAG;CAC5D,MAAM,QAAQ,OAAO,WAAW,sBAAsB,OAAO,cAAA,cAAuC;CAEpG,OAAO,mBAAmB;EACxB,IAAI;EACJ,QAAQ,aAAa;EACrB,gBAAgB,EACd,QAAQ;GACN,iBAAiB,MAAM,IAAI;GAC3B,YAAY,WAAyB,MAAM,IAAI,MAAM;GACrD,aAAa,MAAM,MAAM;EAC3B,EACF;EACA,OAAO;GACL,eAAe,CACb,EACE,MAAM,QAAQ;IACZ,MAAM,SAAS,MAAM,IAAI;IACzB,IAAI,QAAQ,eAAe,CAAC,IAAI,QAAQ,IAAI,eAAe,GACzD,IAAI,QAAQ,IAAI,iBAAiB,UAAU,OAAO,aAAa;IAEjE,OAAO;GACT,EACF,CACF;GACA,eAAe,CACb;IACE,gBAAgB;IAChB,MAAM,QAAQ;KACZ,MAAM,cAAc,IAAI,QAAQ,IAAI,qBAAqB;KACzD,IAAI,aAAa;MACf,MAAM,SAAuB,EAAE,YAAY;MAC3C,MAAM,eAAe,IAAI,QAAQ,IAAI,wBAAwB;MAC7D,IAAI,cACF,OAAO,eAAe;MAExB,MAAM,IAAI,MAAM;KAClB;KACA,OAAO;IACT;GACF,GACA;IACE,OAAO,CAAC,YAAY,kBAAkB;IACtC,MAAM,QAAQ;KACZ,MAAM,MAAM;KACZ,OAAO;IACT;GACF,CACF;EACF;CACF,CAAC;AACH"}