nuxt-auth-utils 0.2.0 → 0.3.0

package/README.md

@@ -21,6 +21,8 @@ Add Authentication to Nuxt applications with secured & sealed cookies sessions.
 - [`<AuthState>` component](#authstate-component)
 - [Extendable with hooks](#extend-session)
 
+It has few dependencies (only from [UnJS](https://github.com/unjs)), run on multiple JS environments (Node, Deno, Workers) and is fully typed with TypeScript.
+
 ## Requirements
 
 This module only works with a Nuxt server running as it uses server API routes (`nuxt build`).
@@ -56,7 +58,7 @@ Nuxt Auth Utils automatically adds some plugins to fetch the current user sessio
 
 ```vue
 <script setup>
-const { loggedIn, user, session, clear } = useUserSession()
+const { loggedIn, user, session, fetch, clear } = useUserSession()
 </script>
 
 <template>
@@ -72,6 +74,37 @@ const { loggedIn, user, session, clear } = useUserSession()
 </template>
 ```
 
+**TypeScript Signature:**
+
+```ts
+interface UserSessionComposable {
+  /**
+   * Computed indicating if the auth session is ready
+   */
+  ready: ComputedRef<boolean>
+  /**
+   * Computed indicating if the user is logged in.
+   */
+  loggedIn: ComputedRef<boolean>
+  /**
+   * The user object if logged in, null otherwise.
+   */
+  user: ComputedRef<User | null>
+  /**
+   * The session object.
+   */
+  session: Ref<UserSession>
+  /**
+   * Fetch the user session from the server.
+   */
+  fetch: () => Promise<void>
+  /**
+   * Clear the user session and remove the session cookie.
+   */
+  clear: () => Promise<void>
+}
+```
+
 ## Server Utils
 
 The following helpers are auto-imported in your `server/` directory.
@@ -122,9 +155,9 @@ export {}
 
 ### OAuth Event Handlers
 
-All helpers are exposed from the `oauth` global variable and can be used in your server routes or API routes.
+All handlers can be auto-imported and used in your server routes or API routes.
 
-The pattern is `oauth.<provider>EventHandler({ onSuccess, config?, onError? })`, example: `oauth.githubEventHandler`.
+The pattern is `oauth<Provider>EventHandler({ onSuccess, config?, onError? })`, example: `authGitHubEventHandler`.
 
 The helper returns an event handler that automatically redirects to the provider authorization page and then calls `onSuccess` or `onError` depending on the result.
 
@@ -134,6 +167,7 @@ The `config` can be defined directly from the `runtimeConfig` in your `nuxt.conf
 export default defineNuxtConfig({
   runtimeConfig: {
     oauth: {
+      // provider in lowercase (github, google, etc.)
       <provider>: {
         clientId: '...',
         clientSecret: '...'
@@ -148,6 +182,8 @@ It can also be set using environment variables:
 - `NUXT_OAUTH_<PROVIDER>_CLIENT_ID`
 - `NUXT_OAUTH_<PROVIDER>_CLIENT_SECRET`
 
+> Provider is in uppercase (GITHUB, GOOGLE, etc.)
+
 #### Supported OAuth Providers
 
 - Auth0
@@ -166,6 +202,7 @@ It can also be set using environment variables:
 - Twitch
 - X (Twitter)
 - XSUAA
+- Yandex
 
 You can add your favorite provider by creating a new file in [src/runtime/server/lib/oauth/](./src/runtime/server/lib/oauth/).
 
@@ -174,7 +211,7 @@ You can add your favorite provider by creating a new file in [src/runtime/server
 Example: `~/server/routes/auth/github.get.ts`
 
 ```ts
-export default oauth.githubEventHandler({
+export default oauthGitHubEventHandler({
   config: {
     emailRequired: true
   },

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "auth-utils",
   "configKey": "auth",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "builder": {
     "@nuxt/module-builder": "0.7.1",
     "unbuild": "2.0.0"

package/dist/module.mjs

@@ -19,6 +19,7 @@ const module = defineNuxtModule({
     addPlugin(resolver.resolve("./runtime/app/plugins/session.server"));
     addPlugin(resolver.resolve("./runtime/app/plugins/session.client"));
     addServerPlugin(resolver.resolve("./runtime/server/plugins/oauth"));
+    addServerImportsDir(resolver.resolve("./runtime/server/lib/oauth"));
     addServerImportsDir(resolver.resolve("./runtime/server/utils"));
     addServerHandler({
       handler: resolver.resolve("./runtime/server/api/session.delete"),
@@ -43,7 +44,11 @@ const module = defineNuxtModule({
       const envPath = join(nuxt.options.rootDir, ".env");
       const envContent = await readFile(envPath, "utf-8").catch(() => "");
       if (!envContent.includes("NUXT_SESSION_PASSWORD")) {
-        await writeFile(envPath, `${envContent ? envContent + "\n" : envContent}NUXT_SESSION_PASSWORD=${runtimeConfig.session.password}`, "utf-8");
+        await writeFile(
+          envPath,
+          `${envContent ? envContent + "\n" : envContent}NUXT_SESSION_PASSWORD=${runtimeConfig.session.password}`,
+          "utf-8"
+        );
       }
     }
     runtimeConfig.oauth = defu(runtimeConfig.oauth, {});
@@ -122,6 +127,10 @@ const module = defineNuxtModule({
       clientSecret: "",
       domain: ""
     });
+    runtimeConfig.oauth.yandex = defu(runtimeConfig.oauth.yandex, {
+      clientId: "",
+      clientSecret: ""
+    });
   }
 });
 

package/dist/runtime/app/components/AuthState.vue

@@ -1,14 +1,13 @@
-<script setup>
+<script lang="ts" setup>
 import { useUserSession } from '#imports'
 
-const userSession = useUserSession()
-const { ready } = userSession
+const { loggedIn, user, clear, ready } = useUserSession()
 </script>
 
 <template>
   <slot
     v-if="ready"
-    v-bind="userSession"
+    v-bind="{ loggedIn, user, clear }"
   />
   <slot
     v-else

package/dist/runtime/server/lib/oauth/auth0.d.ts

@@ -52,4 +52,4 @@ export interface OAuthAuth0Config {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function auth0EventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAuth0Config>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthAuth0EventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAuth0Config>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/auth0.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function auth0EventHandler({ config, onSuccess, onError }) {
+export function oauthAuth0EventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.auth0, {
       authorizationParams: {}

package/dist/runtime/server/lib/oauth/battledotnet.d.ts

@@ -40,4 +40,4 @@ export interface OAuthBattledotnetConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function battledotnetEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthBattledotnetConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthBattledotnetEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthBattledotnetConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/battledotnet.js

@@ -3,7 +3,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function battledotnetEventHandler({ config, onSuccess, onError }) {
+export function oauthBattledotnetEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.battledotnet, {
       authorizationURL: "https://oauth.battle.net/authorize",

package/dist/runtime/server/lib/oauth/cognito.d.ts

@@ -31,4 +31,4 @@ export interface OAuthCognitoConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function cognitoEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthCognitoConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthCognitoEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthCognitoConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/cognito.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function cognitoEventHandler({ config, onSuccess, onError }) {
+export function oauthCognitoEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.cognito, {
       authorizationParams: {}

package/dist/runtime/server/lib/oauth/discord.d.ts

@@ -45,4 +45,4 @@ export interface OAuthDiscordConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function discordEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthDiscordConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthDiscordEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthDiscordConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/discord.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery, parseURL, stringifyParsedURL } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function discordEventHandler({ config, onSuccess, onError }) {
+export function oauthDiscordEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.discord, {
       authorizationURL: "https://discord.com/oauth2/authorize",

package/dist/runtime/server/lib/oauth/facebook.d.ts

@@ -40,4 +40,4 @@ export interface OAuthFacebookConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function facebookEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthFacebookConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthFacebookEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthFacebookConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/facebook.js

@@ -8,7 +8,7 @@ import {
 import { withQuery } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function facebookEventHandler({
+export function oauthFacebookEventHandler({
   config,
   onSuccess,
   onError

package/dist/runtime/server/lib/oauth/github.d.ts

@@ -39,4 +39,4 @@ export interface OAuthGitHubConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function githubEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthGitHubConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthGitHubEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthGitHubConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/github.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function githubEventHandler({ config, onSuccess, onError }) {
+export function oauthGitHubEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.github, {
       authorizationURL: "https://github.com/login/oauth/authorize",

package/dist/runtime/server/lib/oauth/google.d.ts

@@ -39,4 +39,4 @@ export interface OAuthGoogleConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function googleEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthGoogleConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthGoogleEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthGoogleConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/google.js

@@ -8,7 +8,7 @@ import {
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function googleEventHandler({
+export function oauthGoogleEventHandler({
   config,
   onSuccess,
   onError

package/dist/runtime/server/lib/oauth/keycloak.d.ts

@@ -33,4 +33,4 @@ export interface OAuthKeycloakConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function keycloakEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthKeycloakConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthKeycloakEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthKeycloakConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/keycloak.js

@@ -8,7 +8,7 @@ import {
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function keycloakEventHandler({
+export function oauthKeycloakEventHandler({
   config,
   onSuccess,
   onError

package/dist/runtime/server/lib/oauth/linkedin.d.ts

@@ -45,5 +45,5 @@ interface OAuthConfig {
     }) => Promise<void> | void;
     onError?: (event: H3Event, error: H3Error) => Promise<void> | void;
 }
-export declare function linkedinEventHandler({ config, onSuccess, onError }: OAuthConfig): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthLinkedInEventHandler({ config, onSuccess, onError }: OAuthConfig): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
 export {};

package/dist/runtime/server/lib/oauth/linkedin.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery, parseURL, stringifyParsedURL } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function linkedinEventHandler({ config, onSuccess, onError }) {
+export function oauthLinkedInEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.linkedin, {
       authorizationURL: "https://www.linkedin.com/oauth/v2/authorization",

package/dist/runtime/server/lib/oauth/microsoft.d.ts

@@ -59,5 +59,5 @@ interface OAuthConfig {
     }) => Promise<void> | void;
     onError?: (event: H3Event, error: H3Error) => Promise<void> | void;
 }
-export declare function microsoftEventHandler({ config, onSuccess, onError }: OAuthConfig): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthMicrosoftEventHandler({ config, onSuccess, onError }: OAuthConfig): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
 export {};

package/dist/runtime/server/lib/oauth/microsoft.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function microsoftEventHandler({ config, onSuccess, onError }) {
+export function oauthMicrosoftEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.microsoft, {
       authorizationParams: {}

package/dist/runtime/server/lib/oauth/paypal.d.ts

@@ -44,4 +44,4 @@ export interface OAuthPaypalConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function paypalEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthPaypalConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthPaypalEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthPaypalConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/paypal.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function paypalEventHandler({ config, onSuccess, onError }) {
+export function oauthPaypalEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.paypal, {
       sandbox: import.meta.dev,

package/dist/runtime/server/lib/oauth/spotify.d.ts

@@ -39,4 +39,4 @@ export interface OAuthSpotifyConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function spotifyEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthSpotifyConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthSpotifyEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthSpotifyConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/spotify.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function spotifyEventHandler({ config, onSuccess, onError }) {
+export function oauthSpotifyEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.spotify, {
       authorizationURL: "https://accounts.spotify.com/authorize",

package/dist/runtime/server/lib/oauth/steam.d.ts

@@ -12,4 +12,4 @@ export interface OAuthSteamConfig {
      */
     authorizationURL?: string;
 }
-export declare function steamEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthSteamConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthSteamEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthSteamConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/steam.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function steamEventHandler({ config, onSuccess, onError }) {
+export function oauthSteamEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.steam, {
       authorizationURL: "https://steamcommunity.com/openid/login"

package/dist/runtime/server/lib/oauth/twitch.d.ts

@@ -39,4 +39,4 @@ export interface OAuthTwitchConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function twitchEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthTwitchConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthTwitchEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthTwitchConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/twitch.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function twitchEventHandler({ config, onSuccess, onError }) {
+export function oauthTwitchEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.twitch, {
       authorizationURL: "https://id.twitch.tv/oauth2/authorize",

package/dist/runtime/server/lib/oauth/x.d.ts

@@ -14,9 +14,14 @@ export interface OAuthXConfig {
      * X OAuth Scope
      * @default []
      * @see https://developer.x.com/en/docs/authentication/oauth-2-0/user-access-token
-     * @example [ 'tweet.read','users.read','offline.access ],
+     * @example ['tweet.read', 'users.read', 'offline.access'],
      */
     scope?: string[];
+    /**
+     * Require email from user
+     * @default false
+     */
+    emailRequired?: boolean;
     /**
      * X OAuth Authorization URL
      * @default 'https://twitter.com/i/oauth2/authorize'
@@ -38,4 +43,4 @@ export interface OAuthXConfig {
      */
     authorizationParams: Record<string, string>;
 }
-export declare function xEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthXConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthXEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthXConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/x.js

@@ -9,7 +9,7 @@ import {
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function xEventHandler({
+export function oauthXEventHandler({
   config,
   onSuccess,
   onError
@@ -90,6 +90,30 @@ export function xEventHandler({
     ).catch((error) => {
       return error;
     });
+    if (config.emailRequired) {
+      const emailData = await $fetch("https://api.twitter.com/1.1/account/verify_credentials.json", {
+        headers: {
+          Authorization: `Bearer ${accessToken}`
+        },
+        query: {
+          include_email: "true",
+          skip_status: "true"
+        }
+      }).catch((error) => {
+        return error;
+      });
+      if (emailData && emailData.email) {
+        user.email = emailData.email;
+      } else {
+        const error = createError({
+          statusCode: 401,
+          message: "Twitter login failed: no user email found"
+        });
+        if (!onError)
+          throw error;
+        return onError(event, error);
+      }
+    }
     return onSuccess(event, {
       tokens,
       user: user?.data

package/dist/runtime/server/lib/oauth/xsuaa.d.ts

@@ -23,4 +23,4 @@ export interface OAuthXSUAAConfig {
      */
     scope?: string[];
 }
-export declare function xsuaaEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthXSUAAConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function oauthXSUAAEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthXSUAAConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/xsuaa.js

@@ -2,7 +2,7 @@ import { eventHandler, createError, getQuery, getRequestURL, sendRedirect } from
 import { withQuery, parsePath } from "ufo";
 import { defu } from "defu";
 import { useRuntimeConfig } from "#imports";
-export function xsuaaEventHandler({ config, onSuccess, onError }) {
+export function oauthXSUAAEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     config = defu(config, useRuntimeConfig(event).oauth?.xsuaa);
     const { code } = getQuery(event);

package/dist/runtime/server/lib/oauth/yandex.d.ts

@@ -0,0 +1,41 @@
+import type { OAuthConfig } from '#auth-utils';
+export interface OAuthYandexConfig {
+    /**
+     * Yandex OAuth Client ID
+     * @default process.env.NUXT_OAUTH_YANDEX_CLIENT_ID
+     */
+    clientId?: string;
+    /**
+     * Yandex OAuth Client Secret
+     * @default process.env.NUXT_OAUTH_YANDEX_CLIENT_SECRET
+     */
+    clientSecret?: string;
+    /**
+     * Yandex OAuth Scope
+     * @default []
+     * @see https://yandex.ru/dev/id/doc/en/codes/code-url#optional
+     * @example ["login:avatar", "login:birthday", "login:email", "login:info", "login:default_phone"]
+     */
+    scope?: string[];
+    /**
+     * Require email from user, adds the ['login:email'] scope if not present
+     * @default false
+     */
+    emailRequired?: boolean;
+    /**
+     * Yandex OAuth Authorization URL
+     * @default 'https://oauth.yandex.ru/authorize'
+     */
+    authorizationURL?: string;
+    /**
+     * Yandex OAuth Token URL
+     * @default 'https://oauth.yandex.ru/token'
+     */
+    tokenURL?: string;
+    /**
+     * Yandex OAuth User URL
+     * @default 'https://login.yandex.ru/info'
+     */
+    userURL?: string;
+}
+export declare function oauthYandexEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthYandexConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;

package/dist/runtime/server/lib/oauth/yandex.js

@@ -0,0 +1,84 @@
+import {
+  eventHandler,
+  createError,
+  getQuery,
+  getRequestURL,
+  sendRedirect
+} from "h3";
+import { withQuery, parseURL, stringifyParsedURL } from "ufo";
+import { defu } from "defu";
+import { useRuntimeConfig } from "#imports";
+export function oauthYandexEventHandler({
+  config,
+  onSuccess,
+  onError
+}) {
+  return eventHandler(async (event) => {
+    config = defu(config, useRuntimeConfig(event).oauth?.yandex, {
+      authorizationURL: "https://oauth.yandex.ru/authorize",
+      tokenURL: "https://oauth.yandex.ru/token",
+      userURL: "https://login.yandex.ru/info"
+    });
+    const { code } = getQuery(event);
+    if (!config.clientId || !config.clientSecret) {
+      const error = createError({
+        statusCode: 500,
+        message: "Missing NUXT_OAUTH_YANDEX_CLIENT_ID or NUXT_OAUTH_YANDEX_CLIENT_SECRET env variables."
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
+    const redirectUrl = getRequestURL(event).href;
+    if (!code) {
+      config.scope = config.scope || [];
+      if (config.emailRequired && !config.scope.includes("login:email")) {
+        config.scope.push("login:email");
+      }
+      return sendRedirect(
+        event,
+        withQuery(config.authorizationURL, {
+          response_type: "code",
+          client_id: config.clientId,
+          redirect_uri: redirectUrl,
+          scope: config.scope.join(" ")
+        })
+      );
+    }
+    const tokens = await $fetch(config.tokenURL, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded"
+      },
+      body: new URLSearchParams({
+        client_id: config.clientId,
+        client_secret: config.clientSecret,
+        grant_type: "authorization_code",
+        redirect_uri: stringifyParsedURL(parseURL(redirectUrl)),
+        code
+      }).toString()
+    }).catch((error) => {
+      return { error };
+    });
+    if (tokens.error) {
+      const error = createError({
+        statusCode: 401,
+        message: `Yandex login failed: ${tokens.error?.data?.error_description || "Unknown error"}`,
+        data: tokens
+      });
+      if (!onError)
+        throw error;
+      return onError(event, error);
+    }
+    const accessToken = tokens.access_token;
+    const user = await $fetch(config.userURL, {
+      headers: {
+        Authorization: `OAuth ${accessToken}`
+      }
+    });
+    return onSuccess(event, {
+      tokens,
+      user
+    });
+  });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-auth-utils",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Minimalist Auth module for Nuxt with SSR",
   "repository": "Atinux/nuxt-auth-utils",
   "license": "MIT",
@@ -25,6 +25,7 @@
     "dev:prepare": "nuxt-module-build build --stub && nuxt-module-build prepare && nuxi prepare playground",
     "release": "npm run lint && npm run test && npm run prepack && changelogen --release && npm publish && git push --follow-tags",
     "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
     "test": "vitest run",
     "test:types": "vue-tsc --noEmit",
     "test:types:playground": "cd playground && vue-tsc --noEmit",

package/dist/runtime/server/utils/oauth.d.ts

@@ -1,34 +0,0 @@
-import { githubEventHandler } from '../lib/oauth/github.js';
-import { googleEventHandler } from '../lib/oauth/google.js';
-import { spotifyEventHandler } from '../lib/oauth/spotify.js';
-import { twitchEventHandler } from '../lib/oauth/twitch.js';
-import { auth0EventHandler } from '../lib/oauth/auth0.js';
-import { microsoftEventHandler } from '../lib/oauth/microsoft.js';
-import { discordEventHandler } from '../lib/oauth/discord.js';
-import { battledotnetEventHandler } from '../lib/oauth/battledotnet.js';
-import { keycloakEventHandler } from '../lib/oauth/keycloak.js';
-import { linkedinEventHandler } from '../lib/oauth/linkedin.js';
-import { cognitoEventHandler } from '../lib/oauth/cognito.js';
-import { facebookEventHandler } from '../lib/oauth/facebook.js';
-import { paypalEventHandler } from '../lib/oauth/paypal.js';
-import { steamEventHandler } from '../lib/oauth/steam.js';
-import { xEventHandler } from '../lib/oauth/x.js';
-import { xsuaaEventHandler } from '../lib/oauth/xsuaa.js';
-export declare const oauth: {
-    githubEventHandler: typeof githubEventHandler;
-    spotifyEventHandler: typeof spotifyEventHandler;
-    googleEventHandler: typeof googleEventHandler;
-    twitchEventHandler: typeof twitchEventHandler;
-    auth0EventHandler: typeof auth0EventHandler;
-    microsoftEventHandler: typeof microsoftEventHandler;
-    discordEventHandler: typeof discordEventHandler;
-    battledotnetEventHandler: typeof battledotnetEventHandler;
-    keycloakEventHandler: typeof keycloakEventHandler;
-    linkedinEventHandler: typeof linkedinEventHandler;
-    cognitoEventHandler: typeof cognitoEventHandler;
-    facebookEventHandler: typeof facebookEventHandler;
-    paypalEventHandler: typeof paypalEventHandler;
-    steamEventHandler: typeof steamEventHandler;
-    xEventHandler: typeof xEventHandler;
-    xsuaaEventHandler: typeof xsuaaEventHandler;
-};

package/dist/runtime/server/utils/oauth.js

@@ -1,34 +0,0 @@
-import { githubEventHandler } from "../lib/oauth/github.js";
-import { googleEventHandler } from "../lib/oauth/google.js";
-import { spotifyEventHandler } from "../lib/oauth/spotify.js";
-import { twitchEventHandler } from "../lib/oauth/twitch.js";
-import { auth0EventHandler } from "../lib/oauth/auth0.js";
-import { microsoftEventHandler } from "../lib/oauth/microsoft.js";
-import { discordEventHandler } from "../lib/oauth/discord.js";
-import { battledotnetEventHandler } from "../lib/oauth/battledotnet.js";
-import { keycloakEventHandler } from "../lib/oauth/keycloak.js";
-import { linkedinEventHandler } from "../lib/oauth/linkedin.js";
-import { cognitoEventHandler } from "../lib/oauth/cognito.js";
-import { facebookEventHandler } from "../lib/oauth/facebook.js";
-import { paypalEventHandler } from "../lib/oauth/paypal.js";
-import { steamEventHandler } from "../lib/oauth/steam.js";
-import { xEventHandler } from "../lib/oauth/x.js";
-import { xsuaaEventHandler } from "../lib/oauth/xsuaa.js";
-export const oauth = {
-  githubEventHandler,
-  spotifyEventHandler,
-  googleEventHandler,
-  twitchEventHandler,
-  auth0EventHandler,
-  microsoftEventHandler,
-  discordEventHandler,
-  battledotnetEventHandler,
-  keycloakEventHandler,
-  linkedinEventHandler,
-  cognitoEventHandler,
-  facebookEventHandler,
-  paypalEventHandler,
-  steamEventHandler,
-  xEventHandler,
-  xsuaaEventHandler
-};