nuxt-auth-utils 0.0.17 → 0.0.18

package/dist/module.json

@@ -1,5 +1,5 @@
 {
   "name": "auth-utils",
   "configKey": "auth",
-  "version": "0.0.17"
+  "version": "0.0.18"
 }

package/dist/runtime/composables/session.d.ts

@@ -1,10 +1,2 @@
-export declare const useUserSession: () => {
-    loggedIn: any;
-    user: any;
-    session: any;
-    fetch: typeof fetch;
-    clear: typeof clear;
-};
-declare function fetch(): Promise<void>;
-declare function clear(): Promise<void>;
-export {};
+import type { UserSessionComposable } from '#auth-utils';
+export declare function useUserSession(): UserSessionComposable;

package/dist/runtime/composables/session.mjs

@@ -1,6 +1,6 @@
 import { useState, computed, useRequestFetch } from "#imports";
 const useSessionState = () => useState("nuxt-session", () => ({}));
-export const useUserSession = () => {
+export function useUserSession() {
   const sessionState = useSessionState();
   return {
     loggedIn: computed(() => Boolean(sessionState.value.user)),
@@ -9,7 +9,7 @@ export const useUserSession = () => {
     fetch,
     clear
   };
-};
+}
 async function fetch() {
   useSessionState().value = await useRequestFetch()("/api/_auth/session", {
     headers: {

package/dist/runtime/server/lib/oauth/auth0.d.ts

@@ -45,5 +45,11 @@ export interface OAuthAuth0Config {
      * @example 'github'
      */
     connection?: string;
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     * @see https://auth0.com/docs/api/authentication#social
+     * @example { display: 'popup' }
+     */
+    authorizationParams?: Record<string, string>;
 }
 export declare function auth0EventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAuth0Config>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/auth0.mjs

@@ -5,7 +5,9 @@ import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
 export function auth0EventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
-    config = defu(config, useRuntimeConfig(event).oauth?.auth0);
+    config = defu(config, useRuntimeConfig(event).oauth?.auth0, {
+      authorizationParams: {}
+    });
     const { code } = getQuery(event);
     if (!config.clientId || !config.clientSecret || !config.domain) {
       const error = createError({
@@ -33,7 +35,8 @@ export function auth0EventHandler({ config, onSuccess, onError }) {
           scope: config.scope.join(" "),
           audience: config.audience || "",
           max_age: config.maxAge || 0,
-          connection: config.connection || ""
+          connection: config.connection || "",
+          ...config.authorizationParams
         })
       );
     }

package/dist/runtime/server/lib/oauth/battledotnet.d.ts

@@ -34,5 +34,10 @@ export interface OAuthBattledotnetConfig {
      * @default 'https://oauth.battle.net/token'
      */
     tokenURL?: string;
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     * @see https://develop.battle.net/documentation/guides/using-oauth/authorization-code-flow
+     */
+    authorizationParams?: Record<string, string>;
 }
 export declare function battledotnetEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthBattledotnetConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/battledotnet.mjs

@@ -8,7 +8,8 @@ export function battledotnetEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.battledotnet, {
       authorizationURL: "https://oauth.battle.net/authorize",
-      tokenURL: "https://oauth.battle.net/token"
+      tokenURL: "https://oauth.battle.net/token",
+      authorizationParams: {}
     });
     const query = getQuery(event);
     const { code } = query;
@@ -47,7 +48,8 @@ export function battledotnetEventHandler({ config, onSuccess, onError }) {
           scope: config.scope.join(" "),
           state: randomUUID(),
           // Todo: handle PKCE flow
-          response_type: "code"
+          response_type: "code",
+          ...config.authorizationParams
         })
       );
     }

package/dist/runtime/server/lib/oauth/cognito.d.ts

@@ -25,5 +25,10 @@ export interface OAuthCognitoConfig {
      * @default []
      */
     scope?: string[];
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     * @see https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html
+     */
+    authorizationParams?: Record<string, string>;
 }
 export declare function cognitoEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthCognitoConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/cognito.mjs

@@ -5,7 +5,9 @@ import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
 export function cognitoEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
-    config = defu(config, useRuntimeConfig(event).oauth?.cognito);
+    config = defu(config, useRuntimeConfig(event).oauth?.cognito, {
+      authorizationParams: {}
+    });
     const { code } = getQuery(event);
     if (!config.clientId || !config.clientSecret || !config.userPoolId || !config.region) {
       const error = createError({
@@ -27,7 +29,8 @@ export function cognitoEventHandler({ config, onSuccess, onError }) {
           client_id: config.clientId,
           redirect_uri: redirectUrl,
           response_type: "code",
-          scope: config.scope.join(" ")
+          scope: config.scope.join(" "),
+          ...config.authorizationParams
         })
       );
     }

package/dist/runtime/server/lib/oauth/discord.d.ts

@@ -38,5 +38,11 @@ export interface OAuthDiscordConfig {
      * @default 'https://discord.com/api/oauth2/token'
      */
     tokenURL?: string;
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     * @see 'https://discord.com/developers/docs/topics/oauth2#authorization-code-grant'
+     * @example { allow_signup: 'true' }
+     */
+    authorizationParams?: Record<string, string>;
 }
 export declare function discordEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthDiscordConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/discord.mjs

@@ -8,7 +8,8 @@ export function discordEventHandler({ config, onSuccess, onError }) {
     config = defu(config, useRuntimeConfig(event).oauth?.discord, {
       authorizationURL: "https://discord.com/oauth2/authorize",
       tokenURL: "https://discord.com/api/oauth2/token",
-      profileRequired: true
+      profileRequired: true,
+      authorizationParams: {}
     });
     const { code } = getQuery(event);
     if (!config.clientId || !config.clientSecret) {
@@ -35,7 +36,8 @@ export function discordEventHandler({ config, onSuccess, onError }) {
           response_type: "code",
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join(" ")
+          scope: config.scope.join(" "),
+          ...config.authorizationParams
         })
       );
     }

package/dist/runtime/server/lib/oauth/github.d.ts

@@ -32,5 +32,11 @@ export interface OAuthGitHubConfig {
      * @default 'https://github.com/login/oauth/access_token'
      */
     tokenURL?: string;
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     * @see https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps#1-request-a-users-github-identity
+     * @example { allow_signup: 'true' }
+     */
+    authorizationParams?: Record<string, string>;
 }
 export declare function githubEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthGitHubConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/github.mjs

@@ -7,9 +7,20 @@ export function githubEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.github, {
       authorizationURL: "https://github.com/login/oauth/authorize",
-      tokenURL: "https://github.com/login/oauth/access_token"
+      tokenURL: "https://github.com/login/oauth/access_token",
+      authorizationParams: {}
     });
-    const { code } = getQuery(event);
+    const query = getQuery(event);
+    if (query.error) {
+      const error = createError({
+        statusCode: 401,
+        message: `GitHub login failed: ${query.error || "Unknown error"}`,
+        data: query
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
     if (!config.clientId || !config.clientSecret) {
       const error = createError({
         statusCode: 500,
@@ -19,7 +30,7 @@ export function githubEventHandler({ config, onSuccess, onError }) {
         throw error;
       return onError(event, error);
     }
-    if (!code) {
+    if (!query.code) {
       config.scope = config.scope || [];
       if (config.emailRequired && !config.scope.includes("user:email")) {
         config.scope.push("user:email");
@@ -30,7 +41,8 @@ export function githubEventHandler({ config, onSuccess, onError }) {
         withQuery(config.authorizationURL, {
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join(" ")
+          scope: config.scope.join(" "),
+          ...config.authorizationParams
         })
       );
     }
@@ -41,7 +53,7 @@ export function githubEventHandler({ config, onSuccess, onError }) {
         body: {
           client_id: config.clientId,
           client_secret: config.clientSecret,
-          code
+          code: query.code
         }
       }
     );

package/dist/runtime/server/lib/oauth/google.d.ts

@@ -27,5 +27,11 @@ export interface OAuthGoogleConfig {
      * @default 'https://oauth2.googleapis.com/token'
      */
     tokenURL?: string;
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     * @see https://developers.google.com/identity/protocols/oauth2/web-server#httprest_3
+     * @example { access_type: 'offline' }
+     */
+    authorizationParams?: Record<string, string>;
 }
 export declare function googleEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthGoogleConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/google.mjs

@@ -17,7 +17,8 @@ export function googleEventHandler({
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.google, {
       authorizationURL: "https://accounts.google.com/o/oauth2/v2/auth",
-      tokenURL: "https://oauth2.googleapis.com/token"
+      tokenURL: "https://oauth2.googleapis.com/token",
+      authorizationParams: {}
     });
     const { code } = getQuery(event);
     if (!config.clientId) {
@@ -38,7 +39,8 @@ export function googleEventHandler({
           response_type: "code",
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join(" ")
+          scope: config.scope.join(" "),
+          ...config.authorizationParams
         })
       );
     }

package/dist/runtime/server/lib/oauth/keycloak.d.ts

@@ -28,5 +28,9 @@ export interface OAuthKeycloakConfig {
      * @example ['openid']
      */
     scope?: string[];
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     */
+    authorizationParams?: Record<string, string>;
 }
 export declare function keycloakEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthKeycloakConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/keycloak.mjs

@@ -15,11 +15,9 @@ export function keycloakEventHandler({
   onError
 }) {
   return eventHandler(async (event) => {
-    config = defu(
-      config,
-      // @ts-ignore
-      useRuntimeConfig(event).oauth?.keycloak
-    );
+    config = defu(config, useRuntimeConfig(event).oauth?.keycloak, {
+      authorizationParams: {}
+    });
     const query = getQuery(event);
     const { code } = query;
     if (query.error) {
@@ -53,7 +51,8 @@ export function keycloakEventHandler({
           client_id: config.clientId,
           redirect_uri: redirectUrl,
           scope: config.scope.join(" "),
-          response_type: "code"
+          response_type: "code",
+          ...config.authorizationParams
         })
       );
     }

package/dist/runtime/server/lib/oauth/linkedin.d.ts

@@ -31,6 +31,11 @@ export interface OAuthLinkedInConfig {
      * @default 'https://www.linkedin.com/oauth/v2/accessToken'
      */
     tokenURL?: string;
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     * @see https://docs.microsoft.com/en-us/linkedin/shared/authentication/authorization-code-flow?context=linkedin/context
+     */
+    authorizationParams?: Record<string, string>;
 }
 interface OAuthConfig {
     config?: OAuthLinkedInConfig;

package/dist/runtime/server/lib/oauth/linkedin.mjs

@@ -7,7 +7,8 @@ export function linkedinEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.linkedin, {
       authorizationURL: "https://www.linkedin.com/oauth/v2/authorization",
-      tokenURL: "https://www.linkedin.com/oauth/v2/accessToken"
+      tokenURL: "https://www.linkedin.com/oauth/v2/accessToken",
+      authorizationParams: {}
     });
     const { code } = getQuery(event);
     if (!config.clientId || !config.clientSecret) {
@@ -34,7 +35,8 @@ export function linkedinEventHandler({ config, onSuccess, onError }) {
           response_type: "code",
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join(" ")
+          scope: config.scope.join(" "),
+          ...config.authorizationParams
         })
       );
     }

package/dist/runtime/server/lib/oauth/microsoft.d.ts

@@ -23,22 +23,27 @@ export interface OAuthMicrosoftConfig {
     scope?: string[];
     /**
      * Microsoft OAuth Authorization URL
-     * @default https://login.microsoftonline.com/${tenant}/oauth2/v2.0/authorize
+     * @default 'https://login.microsoftonline.com/${tenant}/oauth2/v2.0/authorize'
      * @see https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow
      */
     authorizationURL?: string;
     /**
      * Microsoft OAuth Token URL
-     * @default https://login.microsoftonline.com/${tenant}/oauth2/v2.0/token
+     * @default 'https://login.microsoftonline.com/${tenant}/oauth2/v2.0/token'
      * @see https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow
      */
     tokenURL?: string;
     /**
      * Microsoft OAuth User URL
-     * @default https://graph.microsoft.com/v1.0/me
+     * @default 'https://graph.microsoft.com/v1.0/me'
      * @see https://docs.microsoft.com/en-us/graph/api/user-get?view=graph-rest-1.0&tabs=http
      */
     userURL?: string;
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     * @see https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow
+     */
+    authorizationParams?: Record<string, string>;
 }
 interface OAuthConfig {
     config?: OAuthMicrosoftConfig;

package/dist/runtime/server/lib/oauth/microsoft.mjs

@@ -5,7 +5,9 @@ import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
 export function microsoftEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
-    config = defu(config, useRuntimeConfig(event).oauth?.microsoft);
+    config = defu(config, useRuntimeConfig(event).oauth?.microsoft, {
+      authorizationParams: {}
+    });
     const { code } = getQuery(event);
     if (!config.clientId || !config.clientSecret || !config.tenant) {
       const error = createError({
@@ -27,7 +29,8 @@ export function microsoftEventHandler({ config, onSuccess, onError }) {
           client_id: config.clientId,
           response_type: "code",
           redirect_uri: redirectUrl,
-          scope: scope.join(" ")
+          scope: scope.join(" "),
+          ...config.authorizationParams
         })
       );
     }

package/dist/runtime/server/lib/oauth/spotify.d.ts

@@ -32,5 +32,11 @@ export interface OAuthSpotifyConfig {
      * @default 'https://accounts.spotify.com/api/token'
      */
     tokenURL?: string;
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     * @see 'https://developer.spotify.com/documentation/web-api/tutorials/code-flow'
+     * @example { show_dialog: 'true' }
+     */
+    authorizationParams?: Record<string, string>;
 }
 export declare function spotifyEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthSpotifyConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/spotify.mjs

@@ -7,7 +7,8 @@ export function spotifyEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.spotify, {
       authorizationURL: "https://accounts.spotify.com/authorize",
-      tokenURL: "https://accounts.spotify.com/api/token"
+      tokenURL: "https://accounts.spotify.com/api/token",
+      authorizationParams: {}
     });
     const { code } = getQuery(event);
     if (!config.clientId || !config.clientSecret) {
@@ -31,7 +32,8 @@ export function spotifyEventHandler({ config, onSuccess, onError }) {
           response_type: "code",
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join(" ")
+          scope: config.scope.join(" "),
+          ...config.authorizationParams
         })
       );
     }

package/dist/runtime/server/lib/oauth/twitch.d.ts

@@ -32,5 +32,11 @@ export interface OAuthTwitchConfig {
      * @default 'https://id.twitch.tv/oauth2/token'
      */
     tokenURL?: string;
+    /**
+     * Extra authorization parameters to provide to the authorization URL
+     * @see https://dev.twitch.tv/docs/authentication/getting-tokens-oauth/#authorization-code-grant-flow
+     * @example { force_verify: 'true' }
+     */
+    authorizationParams?: Record<string, string>;
 }
 export declare function twitchEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthTwitchConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/twitch.mjs

@@ -7,7 +7,8 @@ export function twitchEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.twitch, {
       authorizationURL: "https://id.twitch.tv/oauth2/authorize",
-      tokenURL: "https://id.twitch.tv/oauth2/token"
+      tokenURL: "https://id.twitch.tv/oauth2/token",
+      authorizationParams: {}
     });
     const { code } = getQuery(event);
     if (!config.clientId) {
@@ -31,7 +32,8 @@ export function twitchEventHandler({ config, onSuccess, onError }) {
           response_type: "code",
           client_id: config.clientId,
           redirect_uri: redirectUrl,
-          scope: config.scope.join(" ")
+          scope: config.scope.join(" "),
+          ...config.authorizationParams
         })
       );
     }

package/dist/runtime/server/utils/session.d.ts

@@ -1,5 +1,5 @@
 import type { H3Event } from 'h3';
-import type { UserSession } from '#auth-utils';
+import type { User, UserSession } from '#auth-utils';
 export interface SessionHooks {
     /**
      * Called when fetching the session from the API
@@ -27,4 +27,6 @@ export declare function setUserSession(event: H3Event, data: UserSession): Promi
  */
 export declare function replaceUserSession(event: H3Event, data: UserSession): Promise<UserSession>;
 export declare function clearUserSession(event: H3Event): Promise<boolean>;
-export declare function requireUserSession(event: H3Event): Promise<any>;
+export declare function requireUserSession(event: H3Event): Promise<UserSession & {
+    user: User;
+}>;

package/dist/runtime/types/index.d.ts

@@ -1,2 +1,2 @@
-export type { UserSession, User } from './session';
+export type { User, UserSession, UserSessionComposable } from './session';
 export type { OAuthConfig } from './oauth-config';

package/dist/runtime/types/oauth-config.d.ts

@@ -1,6 +1,5 @@
 import type { H3Event, H3Error } from 'h3';
-import type { UserSession } from '#auth-utils';
-export interface OAuthConfig<TConfig, TUser = UserSession, TTokens = any> {
+export interface OAuthConfig<TConfig, TUser = any, TTokens = any> {
     config?: TConfig;
     onSuccess: (event: H3Event, result: {
         user: TUser;

package/dist/runtime/types/session.d.ts

@@ -1,5 +1,13 @@
+import type { ComputedRef, Ref } from 'vue';
 export interface User {
 }
 export interface UserSession {
     user?: User;
 }
+export interface UserSessionComposable {
+    loggedIn: ComputedRef<boolean>;
+    user: ComputedRef<User | null>;
+    session: Ref<UserSession>;
+    fetch: () => Promise<void>;
+    clear: () => Promise<void>;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-auth-utils",
-  "version": "0.0.17",
+  "version": "0.0.18",
   "description": "Minimalist Auth module for Nuxt with SSR",
   "repository": "Atinux/nuxt-auth-utils",
   "license": "MIT",