nuxt-auth-utils 0.0.14 → 0.0.16

package/README.md

@@ -90,6 +90,7 @@ The following helpers are auto-imported in your `server/` directory.
 ```ts
 // Set a user session, note that this data is encrypted in the cookie but can be decrypted with an API call
 // Only store the data that allow you to recognize an user, but do not store sensitive data
+// Merges new data with existing data using defu()
 await setUserSession(event, {
   user: {
     // ... user data
@@ -98,6 +99,9 @@ await setUserSession(event, {
   // Any extra fields
 })
 
+// Replace a user session. Same behaviour as setUserSession, except it does not merge data with existing data
+await replaceUserSession(event, data)
+
 // Get the current user session
 const session = await getUserSession(event)
 
@@ -150,6 +154,7 @@ It can also be set using environment variables:
 #### Supported OAuth Providers
 
 - Auth0
+- AWS Cognito
 - Battle.net
 - Discord
 - GitHub

package/dist/module.json

@@ -1,5 +1,5 @@
 {
   "name": "auth-utils",
   "configKey": "auth",
-  "version": "0.0.14"
+  "version": "0.0.16"
 }

package/dist/module.mjs

@@ -33,6 +33,7 @@ const module = defineNuxtModule({
               "sessionHooks",
               "getUserSession",
               "setUserSession",
+              "replaceUserSession",
               "clearUserSession",
               "requireUserSession"
             ]
@@ -108,6 +109,12 @@ const module = defineNuxtModule({
       clientId: "",
       clientSecret: ""
     });
+    runtimeConfig.oauth.cognito = defu(runtimeConfig.oauth.cognito, {
+      clientId: "",
+      clientSecret: "",
+      region: "",
+      userPoolId: ""
+    });
   }
 });
 

package/dist/runtime/server/lib/oauth/auth0.d.ts

@@ -38,5 +38,12 @@ export interface OAuthAuth0Config {
      * @see https://auth0.com/docs/authenticate/login/max-age-reauthentication
      */
     maxAge?: number;
+    /**
+     * Login connection. If no connection is specified, it will redirect to the standard Auth0 login page and show the Login Widget.
+     * @default ''
+     * @see https://auth0.com/docs/api/authentication#social
+     * @example 'github'
+     */
+    connection?: string;
 }
 export declare function auth0EventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAuth0Config>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/auth0.mjs

@@ -32,7 +32,8 @@ export function auth0EventHandler({ config, onSuccess, onError }) {
           redirect_uri: redirectUrl,
           scope: config.scope.join(" "),
           audience: config.audience || "",
-          max_age: config.maxAge || 0
+          max_age: config.maxAge || 0,
+          connection: config.connection || ""
         })
       );
     }

package/dist/runtime/server/lib/oauth/cognito.d.ts

@@ -0,0 +1,29 @@
+import type { OAuthConfig } from '#auth-utils';
+export interface OAuthCognitoConfig {
+    /**
+     * AWS Cognito App Client ID
+     * @default process.env.NUXT_OAUTH_COGNITO_CLIENT_ID
+     */
+    clientId?: string;
+    /**
+     * AWS Cognito App Client Secret
+     * @default process.env.NUXT_OAUTH_COGNITO_CLIENT_SECRET
+     */
+    clientSecret?: string;
+    /**
+     * AWS Cognito User Pool ID
+     * @default process.env.NUXT_OAUTH_COGNITO_USER_POOL_ID
+     */
+    userPoolId?: string;
+    /**
+     * AWS Cognito Region
+     * @default process.env.NUXT_OAUTH_COGNITO_REGION
+     */
+    region?: string;
+    /**
+     * AWS Cognito Scope
+     * @default []
+     */
+    scope?: string[];
+}
+export declare function cognitoEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthCognitoConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/cognito.mjs

@@ -0,0 +1,68 @@
+import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from "h3";
+import { withQuery, parsePath } from "ufo";
+import { ofetch } from "ofetch";
+import { defu } from "defu";
+import { useRuntimeConfig } from "#imports";
+export function cognitoEventHandler({ config, onSuccess, onError }) {
+  return eventHandler(async (event) => {
+    config = defu(config, useRuntimeConfig(event).oauth?.cognito);
+    const { code } = getQuery(event);
+    if (!config.clientId || !config.clientSecret || !config.userPoolId || !config.region) {
+      const error = createError({
+        statusCode: 500,
+        message: "Missing NUXT_OAUTH_COGNITO_CLIENT_ID, NUXT_OAUTH_COGNITO_CLIENT_SECRET, NUXT_OAUTH_COGNITO_USER_POOL_ID, or NUXT_OAUTH_COGNITO_REGION env variables."
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
+    const authorizationURL = `https://${config.userPoolId}.auth.${config.region}.amazoncognito.com/oauth2/authorize`;
+    const tokenURL = `https://${config.userPoolId}.auth.${config.region}.amazoncognito.com/oauth2/token`;
+    const redirectUrl = getRequestURL(event).href;
+    if (!code) {
+      config.scope = config.scope || ["openid", "profile"];
+      return sendRedirect(
+        event,
+        withQuery(authorizationURL, {
+          client_id: config.clientId,
+          redirect_uri: redirectUrl,
+          response_type: "code",
+          scope: config.scope.join(" ")
+        })
+      );
+    }
+    const tokens = await ofetch(
+      tokenURL,
+      {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: `grant_type=authorization_code&client_id=${config.clientId}&client_secret=${config.clientSecret}&redirect_uri=${parsePath(redirectUrl).pathname}&code=${code}`
+      }
+    ).catch((error) => {
+      return { error };
+    });
+    if (tokens.error) {
+      const error = createError({
+        statusCode: 401,
+        message: `Cognito login failed: ${tokens.error_description || "Unknown error"}`,
+        data: tokens
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
+    const tokenType = tokens.token_type;
+    const accessToken = tokens.access_token;
+    const user = await ofetch(`https://${config.userPoolId}.auth.${config.region}.amazoncognito.com/oauth2/userInfo`, {
+      headers: {
+        Authorization: `${tokenType} ${accessToken}`
+      }
+    });
+    return onSuccess(event, {
+      tokens,
+      user
+    });
+  });
+}

package/dist/runtime/server/lib/oauth/github.mjs

@@ -30,7 +30,7 @@ export function githubEventHandler({ config, onSuccess, onError }) {
         withQuery(config.authorizationURL, {
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join("%20")
+          scope: config.scope.join(" ")
         })
       );
     }

package/dist/runtime/server/lib/oauth/google.d.ts

@@ -27,10 +27,5 @@ export interface OAuthGoogleConfig {
      * @default 'https://oauth2.googleapis.com/token'
      */
     tokenURL?: string;
-    /**
-     * Redirect URL post authenticating via google
-     * @default '/auth/google'
-     */
-    redirectUrl: '/auth/google';
 }
 export declare function googleEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthGoogleConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/microsoft.mjs

@@ -27,7 +27,7 @@ export function microsoftEventHandler({ config, onSuccess, onError }) {
           client_id: config.clientId,
           response_type: "code",
           redirect_uri: redirectUrl,
-          scope: scope.join("%20")
+          scope: scope.join(" ")
         })
       );
     }

package/dist/runtime/server/lib/oauth/spotify.mjs

@@ -31,7 +31,7 @@ export function spotifyEventHandler({ config, onSuccess, onError }) {
           response_type: "code",
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join("%20")
+          scope: config.scope.join(" ")
         })
       );
     }

package/dist/runtime/server/lib/oauth/twitch.mjs

@@ -31,7 +31,7 @@ export function twitchEventHandler({ config, onSuccess, onError }) {
           response_type: "code",
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join("%20")
+          scope: config.scope.join(" ")
         })
       );
     }

package/dist/runtime/server/tsconfig.json

@@ -0,0 +1,3 @@
+{
+  "extends": "../../../.nuxt/tsconfig.server.json"
+}

package/dist/runtime/server/utils/oauth.d.ts

@@ -8,6 +8,7 @@ import { discordEventHandler } from '../lib/oauth/discord';
 import { battledotnetEventHandler } from '../lib/oauth/battledotnet';
 import { keycloakEventHandler } from '../lib/oauth/keycloak';
 import { linkedinEventHandler } from '../lib/oauth/linkedin';
+import { cognitoEventHandler } from '../lib/oauth/cognito';
 export declare const oauth: {
     githubEventHandler: typeof githubEventHandler;
     spotifyEventHandler: typeof spotifyEventHandler;
@@ -19,4 +20,5 @@ export declare const oauth: {
     battledotnetEventHandler: typeof battledotnetEventHandler;
     keycloakEventHandler: typeof keycloakEventHandler;
     linkedinEventHandler: typeof linkedinEventHandler;
+    cognitoEventHandler: typeof cognitoEventHandler;
 };

package/dist/runtime/server/utils/oauth.mjs

@@ -8,6 +8,7 @@ import { discordEventHandler } from "../lib/oauth/discord.mjs";
 import { battledotnetEventHandler } from "../lib/oauth/battledotnet.mjs";
 import { keycloakEventHandler } from "../lib/oauth/keycloak.mjs";
 import { linkedinEventHandler } from "../lib/oauth/linkedin.mjs";
+import { cognitoEventHandler } from "../lib/oauth/cognito.mjs";
 export const oauth = {
   githubEventHandler,
   spotifyEventHandler,
@@ -18,5 +19,6 @@ export const oauth = {
   discordEventHandler,
   battledotnetEventHandler,
   keycloakEventHandler,
-  linkedinEventHandler
+  linkedinEventHandler,
+  cognitoEventHandler
 };

package/dist/runtime/server/utils/session.d.ts

@@ -20,5 +20,11 @@ export declare function getUserSession(event: H3Event): Promise<UserSession>;
  * @param data User session data, please only store public information since it can be decoded with API calls
  */
 export declare function setUserSession(event: H3Event, data: UserSession): Promise<UserSession>;
+/**
+ * Replace a user session
+ * @param event
+ * @param data User session data, please only store public information since it can be decoded with API calls
+ */
+export declare function replaceUserSession(event: H3Event, data: UserSession): Promise<UserSession>;
 export declare function clearUserSession(event: H3Event): Promise<boolean>;
 export declare function requireUserSession(event: H3Event): Promise<UserSession>;

package/dist/runtime/server/utils/session.mjs

@@ -11,6 +11,12 @@ export async function setUserSession(event, data) {
   await session.update(defu(data, session.data));
   return session.data;
 }
+export async function replaceUserSession(event, data) {
+  const session = await _useSession(event);
+  await session.clear();
+  await session.update(data);
+  return session.data;
+}
 export async function clearUserSession(event) {
   const session = await _useSession(event);
   await sessionHooks.callHookParallel("clear", session.data, event);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-auth-utils",
-  "version": "0.0.14",
+  "version": "0.0.16",
   "description": "Minimalist Auth module for Nuxt with SSR",
   "repository": "Atinux/nuxt-auth-utils",
   "license": "MIT",
@@ -30,27 +30,27 @@
     "test:watch": "vitest watch"
   },
   "dependencies": {
-    "@nuxt/kit": "^3.9.0",
-    "defu": "^6.1.3",
+    "@nuxt/kit": "^3.10.1",
+    "defu": "^6.1.4",
     "hookable": "^5.5.3",
     "ofetch": "^1.3.3",
     "ohash": "^1.1.3"
   },
   "devDependencies": {
-    "@iconify-json/simple-icons": "^1.1.86",
+    "@iconify-json/simple-icons": "^1.1.91",
     "@nuxt/devtools": "latest",
     "@nuxt/eslint-config": "^0.2.0",
     "@nuxt/module-builder": "^0.5.5",
-    "@nuxt/schema": "^3.9.0",
-    "@nuxt/test-utils": "^3.9.0",
-    "@nuxt/ui": "^2.11.1",
-    "@nuxt/ui-pro": "^0.6.1",
-    "@types/node": "^20.10.6",
+    "@nuxt/schema": "^3.10.1",
+    "@nuxt/test-utils": "^3.11.0",
+    "@nuxt/ui": "^2.13.0",
+    "@nuxt/ui-pro": "^0.7.5",
+    "@types/node": "^20.11.17",
     "changelogen": "^0.5.5",
     "eslint": "^8.56.0",
-    "nuxt": "^3.9.0",
+    "nuxt": "^3.10.1",
     "typescript": "^5.3.3",
-    "vitest": "^1.1.3",
+    "vitest": "^1.2.2",
     "vue-tsc": "^1.8.27"
   }
 }