nuxt-auth-utils 0.0.13 → 0.0.15

package/README.md

@@ -150,10 +150,12 @@ It can also be set using environment variables:
 #### Supported OAuth Providers
 
 - Auth0
+- AWS Cognito
 - Battle.net
 - Discord
 - GitHub
 - Google
+- Keycloak
 - LinkedIn
 - Microsoft
 - Spotify

package/dist/module.json

@@ -1,5 +1,5 @@
 {
   "name": "auth-utils",
   "configKey": "auth",
-  "version": "0.0.13"
+  "version": "0.0.15"
 }

package/dist/module.mjs

@@ -98,10 +98,22 @@ const module = defineNuxtModule({
       clientId: "",
       clientSecret: ""
     });
+    runtimeConfig.oauth.keycloak = defu(runtimeConfig.oauth.keycloak, {
+      clientId: "",
+      clientSecret: "",
+      serverUrl: "",
+      realm: ""
+    });
     runtimeConfig.oauth.linkedin = defu(runtimeConfig.oauth.linkedin, {
       clientId: "",
       clientSecret: ""
     });
+    runtimeConfig.oauth.cognito = defu(runtimeConfig.oauth.cognito, {
+      clientId: "",
+      clientSecret: "",
+      region: "",
+      userPoolId: ""
+    });
   }
 });
 

package/dist/runtime/server/lib/oauth/auth0.d.ts

@@ -38,5 +38,12 @@ export interface OAuthAuth0Config {
      * @see https://auth0.com/docs/authenticate/login/max-age-reauthentication
      */
     maxAge?: number;
+    /**
+     * Login connection. If no connection is specified, it will redirect to the standard Auth0 login page and show the Login Widget.
+     * @default ''
+     * @see https://auth0.com/docs/api/authentication#social
+     * @example 'github'
+     */
+    connection?: string;
 }
 export declare function auth0EventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAuth0Config>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/auth0.mjs

@@ -32,7 +32,8 @@ export function auth0EventHandler({ config, onSuccess, onError }) {
           redirect_uri: redirectUrl,
           scope: config.scope.join(" "),
           audience: config.audience || "",
-          max_age: config.maxAge || 0
+          max_age: config.maxAge || 0,
+          connection: config.connection || ""
         })
       );
     }

package/dist/runtime/server/lib/oauth/cognito.d.ts

@@ -0,0 +1,29 @@
+import type { OAuthConfig } from '#auth-utils';
+export interface OAuthCognitoConfig {
+    /**
+     * AWS Cognito App Client ID
+     * @default process.env.NUXT_OAUTH_COGNITO_CLIENT_ID
+     */
+    clientId?: string;
+    /**
+     * AWS Cognito App Client Secret
+     * @default process.env.NUXT_OAUTH_COGNITO_CLIENT_SECRET
+     */
+    clientSecret?: string;
+    /**
+     * AWS Cognito User Pool ID
+     * @default process.env.NUXT_OAUTH_COGNITO_USER_POOL_ID
+     */
+    userPoolId?: string;
+    /**
+     * AWS Cognito Region
+     * @default process.env.NUXT_OAUTH_COGNITO_REGION
+     */
+    region?: string;
+    /**
+     * AWS Cognito Scope
+     * @default []
+     */
+    scope?: string[];
+}
+export declare function cognitoEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthCognitoConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/cognito.mjs

@@ -0,0 +1,68 @@
+import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from "h3";
+import { withQuery, parsePath } from "ufo";
+import { ofetch } from "ofetch";
+import { defu } from "defu";
+import { useRuntimeConfig } from "#imports";
+export function cognitoEventHandler({ config, onSuccess, onError }) {
+  return eventHandler(async (event) => {
+    config = defu(config, useRuntimeConfig(event).oauth?.cognito);
+    const { code } = getQuery(event);
+    if (!config.clientId || !config.clientSecret || !config.userPoolId || !config.region) {
+      const error = createError({
+        statusCode: 500,
+        message: "Missing NUXT_OAUTH_COGNITO_CLIENT_ID, NUXT_OAUTH_COGNITO_CLIENT_SECRET, NUXT_OAUTH_COGNITO_USER_POOL_ID, or NUXT_OAUTH_COGNITO_REGION env variables."
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
+    const authorizationURL = `https://${config.userPoolId}.auth.${config.region}.amazoncognito.com/oauth2/authorize`;
+    const tokenURL = `https://${config.userPoolId}.auth.${config.region}.amazoncognito.com/oauth2/token`;
+    const redirectUrl = getRequestURL(event).href;
+    if (!code) {
+      config.scope = config.scope || ["openid", "profile"];
+      return sendRedirect(
+        event,
+        withQuery(authorizationURL, {
+          client_id: config.clientId,
+          redirect_uri: redirectUrl,
+          response_type: "code",
+          scope: config.scope.join(" ")
+        })
+      );
+    }
+    const tokens = await ofetch(
+      tokenURL,
+      {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: `grant_type=authorization_code&client_id=${config.clientId}&client_secret=${config.clientSecret}&redirect_uri=${parsePath(redirectUrl).pathname}&code=${code}`
+      }
+    ).catch((error) => {
+      return { error };
+    });
+    if (tokens.error) {
+      const error = createError({
+        statusCode: 401,
+        message: `Cognito login failed: ${tokens.error_description || "Unknown error"}`,
+        data: tokens
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
+    const tokenType = tokens.token_type;
+    const accessToken = tokens.access_token;
+    const user = await ofetch(`https://${config.userPoolId}.auth.${config.region}.amazoncognito.com/oauth2/userInfo`, {
+      headers: {
+        Authorization: `${tokenType} ${accessToken}`
+      }
+    });
+    return onSuccess(event, {
+      tokens,
+      user
+    });
+  });
+}

package/dist/runtime/server/lib/oauth/github.mjs

@@ -30,7 +30,7 @@ export function githubEventHandler({ config, onSuccess, onError }) {
         withQuery(config.authorizationURL, {
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join("%20")
+          scope: config.scope.join(" ")
         })
       );
     }

package/dist/runtime/server/lib/oauth/keycloak.d.ts

@@ -0,0 +1,32 @@
+import type { OAuthConfig } from '#auth-utils';
+export interface OAuthKeycloakConfig {
+    /**
+     * Keycloak OAuth Client ID
+     * @default process.env.NUXT_OAUTH_KEYCLOAK_CLIENT_ID
+     */
+    clientId?: string;
+    /**
+     * Keycloak OAuth Client Secret
+     * @default process.env.NUXT_OAUTH_KEYCLOAK_CLIENT_SECRET
+     */
+    clientSecret?: string;
+    /**
+     * Keycloak OAuth Server URL
+     * @example http://192.168.1.10:8080/auth
+     * @default process.env.NUXT_OAUTH_KEYCLOAK_SERVER_URL
+     */
+    serverUrl?: string;
+    /**
+     * Keycloak OAuth Realm
+     * @default process.env.NUXT_OAUTH_KEYCLOAK_REALM
+     */
+    realm?: string;
+    /**
+     * Keycloak OAuth Scope
+     * @default []
+     * @see https://www.keycloak.org/docs/latest/authorization_services/
+     * @example ['openid']
+     */
+    scope?: string[];
+}
+export declare function keycloakEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthKeycloakConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/keycloak.mjs

@@ -0,0 +1,114 @@
+import {
+  eventHandler,
+  createError,
+  getQuery,
+  getRequestURL,
+  sendRedirect
+} from "h3";
+import { ofetch } from "ofetch";
+import { withQuery, parsePath } from "ufo";
+import { defu } from "defu";
+import { useRuntimeConfig } from "#imports";
+export function keycloakEventHandler({
+  config,
+  onSuccess,
+  onError
+}) {
+  return eventHandler(async (event) => {
+    config = defu(
+      config,
+      // @ts-ignore
+      useRuntimeConfig(event).oauth?.keycloak
+    );
+    const query = getQuery(event);
+    const { code } = query;
+    if (query.error) {
+      const error = createError({
+        statusCode: 401,
+        message: `Keycloak login failed: ${query.error || "Unknown error"}`,
+        data: query
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
+    if (!config.clientId || !config.clientSecret || !config.serverUrl || !config.realm) {
+      const error = createError({
+        statusCode: 500,
+        message: "Missing NUXT_OAUTH_KEYCLOAK_CLIENT_ID or NUXT_OAUTH_KEYCLOAK_CLIENT_SECRET or NUXT_OAUTH_KEYCLOAK_SERVER_URL or NUXT_OAUTH_KEYCLOAK_REALM env variables."
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
+    const realmURL = `${config.serverUrl}/realms/${config.realm}`;
+    const authorizationURL = `${realmURL}/protocol/openid-connect/auth`;
+    const tokenURL = `${realmURL}/protocol/openid-connect/token`;
+    const redirectUrl = getRequestURL(event).href;
+    if (!code) {
+      config.scope = config.scope || ["openid"];
+      return sendRedirect(
+        event,
+        withQuery(authorizationURL, {
+          client_id: config.clientId,
+          redirect_uri: redirectUrl,
+          scope: config.scope.join(" "),
+          response_type: "code"
+        })
+      );
+    }
+    config.scope = config.scope || [];
+    if (!config.scope.includes("openid")) {
+      config.scope.push("openid");
+    }
+    const tokens = await ofetch(tokenURL, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded"
+      },
+      body: new URLSearchParams({
+        client_id: config.clientId,
+        client_secret: config.clientSecret,
+        grant_type: "authorization_code",
+        redirect_uri: parsePath(redirectUrl).pathname,
+        code
+      }).toString()
+    }).catch((error) => {
+      return { error };
+    });
+    if (tokens.error) {
+      const error = createError({
+        statusCode: 401,
+        message: `Keycloak login failed: ${tokens.error?.data?.error_description || "Unknown error"}`,
+        data: tokens
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
+    const accessToken = tokens.access_token;
+    const user = await ofetch(
+      `${realmURL}/protocol/openid-connect/userinfo`,
+      {
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+          Accept: "application/json"
+        }
+      }
+    );
+    if (!user) {
+      const error = createError({
+        statusCode: 500,
+        message: "Could not get Keycloak user",
+        data: tokens
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
+    return onSuccess(event, {
+      user,
+      tokens
+    });
+  });
+}

package/dist/runtime/server/lib/oauth/microsoft.mjs

@@ -27,7 +27,7 @@ export function microsoftEventHandler({ config, onSuccess, onError }) {
           client_id: config.clientId,
           response_type: "code",
           redirect_uri: redirectUrl,
-          scope: scope.join("%20")
+          scope: scope.join(" ")
         })
       );
     }

package/dist/runtime/server/lib/oauth/spotify.mjs

@@ -31,7 +31,7 @@ export function spotifyEventHandler({ config, onSuccess, onError }) {
           response_type: "code",
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join("%20")
+          scope: config.scope.join(" ")
         })
       );
     }

package/dist/runtime/server/lib/oauth/twitch.mjs

@@ -31,7 +31,7 @@ export function twitchEventHandler({ config, onSuccess, onError }) {
           response_type: "code",
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join("%20")
+          scope: config.scope.join(" ")
         })
       );
     }

package/dist/runtime/server/utils/oauth.d.ts

@@ -6,7 +6,9 @@ import { auth0EventHandler } from '../lib/oauth/auth0';
 import { microsoftEventHandler } from '../lib/oauth/microsoft';
 import { discordEventHandler } from '../lib/oauth/discord';
 import { battledotnetEventHandler } from '../lib/oauth/battledotnet';
+import { keycloakEventHandler } from '../lib/oauth/keycloak';
 import { linkedinEventHandler } from '../lib/oauth/linkedin';
+import { cognitoEventHandler } from '../lib/oauth/cognito';
 export declare const oauth: {
     githubEventHandler: typeof githubEventHandler;
     spotifyEventHandler: typeof spotifyEventHandler;
@@ -16,5 +18,7 @@ export declare const oauth: {
     microsoftEventHandler: typeof microsoftEventHandler;
     discordEventHandler: typeof discordEventHandler;
     battledotnetEventHandler: typeof battledotnetEventHandler;
+    keycloakEventHandler: typeof keycloakEventHandler;
     linkedinEventHandler: typeof linkedinEventHandler;
+    cognitoEventHandler: typeof cognitoEventHandler;
 };

package/dist/runtime/server/utils/oauth.mjs

@@ -6,7 +6,9 @@ import { auth0EventHandler } from "../lib/oauth/auth0.mjs";
 import { microsoftEventHandler } from "../lib/oauth/microsoft.mjs";
 import { discordEventHandler } from "../lib/oauth/discord.mjs";
 import { battledotnetEventHandler } from "../lib/oauth/battledotnet.mjs";
+import { keycloakEventHandler } from "../lib/oauth/keycloak.mjs";
 import { linkedinEventHandler } from "../lib/oauth/linkedin.mjs";
+import { cognitoEventHandler } from "../lib/oauth/cognito.mjs";
 export const oauth = {
   githubEventHandler,
   spotifyEventHandler,
@@ -16,5 +18,7 @@ export const oauth = {
   microsoftEventHandler,
   discordEventHandler,
   battledotnetEventHandler,
-  linkedinEventHandler
+  keycloakEventHandler,
+  linkedinEventHandler,
+  cognitoEventHandler
 };

package/dist/types.d.mts

@@ -1,5 +1,5 @@
 
-import type { ModuleOptions } from './module'
+import type { ModuleOptions } from './module.js'
 
 
 declare module '@nuxt/schema' {
@@ -13,4 +13,4 @@ declare module 'nuxt/schema' {
 }
 
 
-export type { ModuleOptions, default } from './module'
+export type { ModuleOptions, default } from './module.js'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-auth-utils",
-  "version": "0.0.13",
+  "version": "0.0.15",
   "description": "Minimalist Auth module for Nuxt with SSR",
   "repository": "Atinux/nuxt-auth-utils",
   "license": "MIT",
@@ -30,27 +30,27 @@
     "test:watch": "vitest watch"
   },
   "dependencies": {
-    "@nuxt/kit": "^3.8.2",
-    "defu": "^6.1.3",
+    "@nuxt/kit": "^3.9.3",
+    "defu": "^6.1.4",
     "hookable": "^5.5.3",
     "ofetch": "^1.3.3",
     "ohash": "^1.1.3"
   },
   "devDependencies": {
-    "@iconify-json/simple-icons": "^1.1.82",
+    "@iconify-json/simple-icons": "^1.1.90",
     "@nuxt/devtools": "latest",
     "@nuxt/eslint-config": "^0.2.0",
-    "@nuxt/module-builder": "^0.5.4",
-    "@nuxt/schema": "^3.8.2",
-    "@nuxt/test-utils": "^3.8.1",
-    "@nuxt/ui": "^2.11.0",
-    "@nuxt/ui-pro": "^0.5.0",
-    "@types/node": "^20.10.4",
+    "@nuxt/module-builder": "^0.5.5",
+    "@nuxt/schema": "^3.9.3",
+    "@nuxt/test-utils": "^3.11.0",
+    "@nuxt/ui": "^2.12.3",
+    "@nuxt/ui-pro": "^0.7.3",
+    "@types/node": "^20.11.10",
     "changelogen": "^0.5.5",
-    "eslint": "^8.55.0",
-    "nuxt": "^3.8.2",
+    "eslint": "^8.56.0",
+    "nuxt": "^3.9.3",
     "typescript": "^5.3.3",
-    "vitest": "^1.0.2",
-    "vue-tsc": "^1.8.25"
+    "vitest": "^1.2.2",
+    "vue-tsc": "^1.8.27"
   }
 }