nuxt-auth-utils 0.0.18 → 0.0.19

package/README.md

@@ -53,9 +53,10 @@ export default defineNuxtConfig({
 NUXT_SESSION_PASSWORD=password-with-at-least-32-characters
 ```
 
-Nuxt Auth Utils can generate one for you when running Nuxt in development the first time when no `NUXT_SESSION_PASSWORD` is set.
+Nuxt Auth Utils generates one for you when running Nuxt in development the first time if no `NUXT_SESSION_PASSWORD` is set.
+
+3. That's it! You can now add authentication to your Nuxt app ✨
 
-4. That's it! You can now add authentication to your Nuxt app ✨
 
 ## Vue Composables
 

package/dist/module.json

@@ -1,5 +1,5 @@
 {
   "name": "auth-utils",
   "configKey": "auth",
-  "version": "0.0.18"
+  "version": "0.0.19"
 }

package/dist/module.mjs

@@ -1,6 +1,8 @@
 import { defineNuxtModule, createResolver, addImportsDir, addPlugin, addServerHandler } from '@nuxt/kit';
-import { sha256 } from 'ohash';
+import { join } from 'pathe';
 import { defu } from 'defu';
+import { randomUUID } from 'uncrypto';
+import { readFile, writeFile } from 'node:fs/promises';
 
 const module = defineNuxtModule({
   meta: {
@@ -9,14 +11,8 @@ const module = defineNuxtModule({
   },
   // Default configuration options of the Nuxt module
   defaults: {},
-  setup(options, nuxt) {
+  async setup(options, nuxt) {
     const resolver = createResolver(import.meta.url);
-    if (!process.env.NUXT_SESSION_PASSWORD && !nuxt.options._prepare) {
-      const randomPassword = sha256(`${Date.now()}${Math.random()}`).slice(0, 32);
-      process.env.NUXT_SESSION_PASSWORD = randomPassword;
-      console.warn("No session password set, using a random password, please set NUXT_SESSION_PASSWORD in your .env file with at least 32 chars");
-      console.log(`NUXT_SESSION_PASSWORD=${randomPassword}`);
-    }
     nuxt.options.alias["#auth-utils"] = resolver.resolve("./runtime/types/index");
     addImportsDir(resolver.resolve("./runtime/composables"));
     addPlugin(resolver.resolve("./runtime/plugins/session.server"));
@@ -54,11 +50,21 @@ const module = defineNuxtModule({
     const runtimeConfig = nuxt.options.runtimeConfig;
     runtimeConfig.session = defu(runtimeConfig.session, {
       name: "nuxt-session",
-      password: "",
+      password: process.env.NUXT_SESSION_PASSWORD || "",
       cookie: {
         sameSite: "lax"
       }
     });
+    if (nuxt.options.dev && !runtimeConfig.session.password) {
+      runtimeConfig.session.password = randomUUID().replace(/-/g, "");
+      const envPath = join(nuxt.options.rootDir, ".env");
+      const envContent = await readFile(envPath, "utf-8").catch(() => "");
+      if (!envContent.includes("NUXT_SESSION_PASSWORD")) {
+        await writeFile(envPath, `${envContent ? envContent + "\n" : envContent}NUXT_SESSION_PASSWORD=${runtimeConfig.session.password}`, "utf-8");
+      }
+    } else if (!nuxt.options._prepare && !runtimeConfig.session.password) {
+      throw new Error("NUXT_SESSION_PASSWORD environment variable or runtimeConfig.session.password not set");
+    }
     runtimeConfig.oauth = defu(runtimeConfig.oauth, {});
     runtimeConfig.oauth.github = defu(runtimeConfig.oauth.github, {
       clientId: "",

package/dist/runtime/server/utils/session.mjs

@@ -33,10 +33,7 @@ export async function requireUserSession(event) {
   }
   return userSession;
 }
-let sessionConfig;
+const sessionConfig = useRuntimeConfig().session;
 function _useSession(event) {
-  if (!sessionConfig) {
-    sessionConfig = defu({ password: process.env.NUXT_SESSION_PASSWORD }, useRuntimeConfig(event).session);
-  }
   return useSession(event, sessionConfig);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-auth-utils",
-  "version": "0.0.18",
+  "version": "0.0.19",
   "description": "Minimalist Auth module for Nuxt with SSR",
   "repository": "Atinux/nuxt-auth-utils",
   "license": "MIT",
@@ -34,7 +34,9 @@
     "defu": "^6.1.4",
     "hookable": "^5.5.3",
     "ofetch": "^1.3.3",
-    "ohash": "^1.1.3"
+    "ohash": "^1.1.3",
+    "pathe": "^1.1.2",
+    "uncrypto": "^0.1.3"
   },
   "devDependencies": {
     "@iconify-json/simple-icons": "^1.1.91",