nuxt-auth-utils 0.5.12 → 0.5.14

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "auth-utils",
   "configKey": "auth",
-  "version": "0.5.12",
+  "version": "0.5.14",
   "builder": {
     "@nuxt/module-builder": "0.8.4",
     "unbuild": "2.0.0"

package/dist/module.mjs

@@ -3,26 +3,7 @@ import { defineNuxtModule, createResolver, addComponentsDir, addImports, addPlug
 import { join } from 'pathe';
 import { defu } from 'defu';
 import { randomUUID } from 'uncrypto';
-
-const atprotoProviders = ["bluesky"];
-const atprotoProviderDefaultClientMetadata = {
-  clientMetadataFilename: "",
-  clientName: "",
-  clientUri: "",
-  logoUri: "",
-  policyUri: "",
-  tosUri: "",
-  scope: ["atproto"],
-  grantTypes: ["authorization_code"],
-  responseTypes: ["code"],
-  applicationType: "web",
-  redirectUris: [],
-  dpopBoundAccessTokens: true,
-  tokenEndpointAuthMethod: "none"
-};
-function getClientMetadataFilename(provider, config) {
-  return config?.clientMetadataFilename || provider + "/client-metadata.json";
-}
+import { atprotoProviders, atprotoProviderDefaultClientMetadata, getClientMetadataFilename } from '../dist/runtime/utils/atproto.js';
 
 const module = defineNuxtModule({
   meta: {
@@ -203,7 +184,7 @@ const module = defineNuxtModule({
       }
       for (const provider of atprotoProviders) {
         addServerHandler({
-          handler: resolver.resolve("./runtime/server/routes/atproto/client-metadata.json.get.ts"),
+          handler: resolver.resolve("./runtime/server/routes/atproto/client-metadata.json.get"),
           route: "/" + getClientMetadataFilename(provider, runtimeConfig.oauth[provider]),
           method: "get"
         });

package/dist/runtime/server/api/session.get.d.ts

@@ -1,5 +1,5 @@
 declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
-    id: string;
+    id: any;
     user?: import("../../types").User;
 }>>;
 export default _default;

package/dist/runtime/server/lib/atproto/bluesky.d.ts

@@ -29,11 +29,9 @@ export declare class StateStore implements NodeSavedStateStore {
     del(): Promise<void>;
 }
 export declare class SessionStore implements NodeSavedSessionStore {
-    private event;
-    private readonly sessionKey;
-    constructor(event: H3Event);
-    get(): Promise<NodeSavedSession | undefined>;
+    private store;
+    get(key: string): Promise<NodeSavedSession | undefined>;
     set(key: string, val: NodeSavedSession): Promise<void>;
-    del(): Promise<void>;
+    del(key: string): Promise<void>;
 }
 export {};

package/dist/runtime/server/lib/atproto/bluesky.js

@@ -6,7 +6,7 @@ export function defineOAuthBlueskyEventHandler({ config, onSuccess, onError }) {
   return eventHandler(async (event) => {
     const clientMetadata = getAtprotoClientMetadata(event, "bluesky", config);
     const scopes = clientMetadata.scope?.split(" ") ?? [];
-    const sessionStore = new SessionStore(event);
+    const sessionStore = new SessionStore();
     const stateStore = new StateStore(event);
     const client = new NodeOAuthClient({
       stateStore,
@@ -47,9 +47,9 @@ export function defineOAuthBlueskyEventHandler({ config, onSuccess, onError }) {
     }
     try {
       const { session } = await client.callback(new URLSearchParams(query));
-      const sessionInfo = await sessionStore.get();
+      const sessionInfo = await sessionStore.get(session.did);
       const profile = scopes.includes("transition:generic") ? (await new Agent(session).getProfile({ actor: session.did })).data : null;
-      sessionStore.del();
+      sessionStore.del(session.did);
       return onSuccess(event, {
         user: profile ?? { did: session.did },
         tokens: sessionInfo.tokenSet
@@ -69,33 +69,33 @@ export class StateStore {
   constructor(event) {
     this.event = event;
   }
-  stateKey = "oauth:bluesky:stat";
+  stateKey = "oauth-bluesky-state";
   async get() {
     const result = getCookie(this.event, this.stateKey);
     if (!result) return;
     return JSON.parse(atob(result));
   }
   async set(key, val) {
-    setCookie(this.event, this.stateKey, btoa(JSON.stringify(val)));
+    setCookie(this.event, this.stateKey, btoa(JSON.stringify(val)), {
+      path: "/",
+      httpOnly: true,
+      secure: true,
+      sameSite: "lax"
+    });
   }
   async del() {
     deleteCookie(this.event, this.stateKey);
   }
 }
 export class SessionStore {
-  constructor(event) {
-    this.event = event;
-  }
-  sessionKey = "oauth:bluesky:session";
-  async get() {
-    const result = getCookie(this.event, this.sessionKey);
-    if (!result) return;
-    return JSON.parse(atob(result));
+  store = {};
+  async get(key) {
+    return this.store[key];
   }
   async set(key, val) {
-    setCookie(this.event, this.sessionKey, btoa(JSON.stringify(val)));
+    this.store[key] = val;
   }
-  async del() {
-    deleteCookie(this.event, this.sessionKey);
+  async del(key) {
+    delete this.store[key];
   }
 }

package/dist/runtime/server/routes/atproto/client-metadata.json.get.js

@@ -1,6 +1,6 @@
 import { defineEventHandler, createError } from "h3";
 import { getAtprotoClientMetadata } from "../../utils/atproto.js";
-import { atprotoProviders, getClientMetadataFilename } from "../../../../utils/atproto";
+import { atprotoProviders, getClientMetadataFilename } from "../../../utils/atproto.js";
 import { useRuntimeConfig } from "#imports";
 export default defineEventHandler((event) => {
   const path = event.path.slice(1);

package/dist/runtime/server/utils/atproto.d.ts

@@ -1,5 +1,5 @@
 import type { H3Event } from 'h3';
 import type { OAuthClientMetadataInput } from '@atproto/oauth-client-node';
-import type { OAuthBlueskyConfig } from '../lib/oauth/bluesky.js';
+import type { OAuthBlueskyConfig } from '../lib/atproto/bluesky.js';
 import type { ATProtoProvider, OAuthConfig } from '#auth-utils';
 export declare function getAtprotoClientMetadata(event: H3Event, provider: ATProtoProvider, config?: OAuthConfig<OAuthBlueskyConfig>['config']): OAuthClientMetadataInput;

package/dist/runtime/server/utils/atproto.js

@@ -1,5 +1,5 @@
 import { getOAuthRedirectURL } from "../lib/utils.js";
-import { getClientMetadataFilename } from "../../../utils/atproto";
+import { getClientMetadataFilename } from "../../utils/atproto.js";
 import { getRequestURL, useRuntimeConfig } from "#imports";
 export function getAtprotoClientMetadata(event, provider, config) {
   const providerRuntimeConfig = useRuntimeConfig(event).oauth[provider];

package/dist/runtime/server/utils/session.d.ts

@@ -21,7 +21,7 @@ export declare const sessionHooks: import("hookable").Hookable<SessionHooks, imp
  * @returns The user session
  */
 export declare function getUserSession(event: UseSessionEvent): Promise<{
-    id: string;
+    id: any;
     user?: import("#auth-utils").User;
     secure?: import("#auth-utils").SecureSessionData;
 }>;

package/dist/runtime/types/session.d.ts

@@ -7,7 +7,7 @@ export interface UserSession {
     /**
      * Session ID
      */
-    id: string;
+    id?: string;
     /**
      * User session data, available on client and server
      */
@@ -22,6 +22,7 @@ export interface UserSession {
     [key: string]: unknown;
 }
 export interface UserSessionRequired extends UserSession {
+    id: string;
     user: User;
 }
 export interface UserSessionComposable {

package/dist/runtime/utils/atproto.d.ts

@@ -0,0 +1,5 @@
+import type { OAuthProvider } from '../types/index.js';
+import type { AtprotoProviderClientMetadata } from '../types/atproto.js';
+export declare const atprotoProviders: "bluesky"[];
+export declare const atprotoProviderDefaultClientMetadata: AtprotoProviderClientMetadata;
+export declare function getClientMetadataFilename(provider: OAuthProvider, config?: AtprotoProviderClientMetadata): string;

package/dist/runtime/utils/atproto.js

@@ -0,0 +1,19 @@
+export const atprotoProviders = ["bluesky"];
+export const atprotoProviderDefaultClientMetadata = {
+  clientMetadataFilename: "",
+  clientName: "",
+  clientUri: "",
+  logoUri: "",
+  policyUri: "",
+  tosUri: "",
+  scope: ["atproto"],
+  grantTypes: ["authorization_code"],
+  responseTypes: ["code"],
+  applicationType: "web",
+  redirectUris: [],
+  dpopBoundAccessTokens: true,
+  tokenEndpointAuthMethod: "none"
+};
+export function getClientMetadataFilename(provider, config) {
+  return config?.clientMetadataFilename || provider + "/client-metadata.json";
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-auth-utils",
-  "version": "0.5.12",
+  "version": "0.5.14",
   "description": "Add Authentication to Nuxt applications with secured & sealed cookies sessions.",
   "repository": {
     "type": "git",