nuxt-auth-utils 0.5.25 → 0.5.27

package/README.md

@@ -156,11 +156,8 @@ const session = await requireUserSession(event)
 
 You can define the type for your user session by creating a type declaration file (for example, `auth.d.ts`) in your project to augment the `UserSession` type:
 
-> [!NOTE]
-> If you are using Nuxt >=4.0.0 or compatibility version 4 add the `auth.d.ts` file to the `shared` directory to get the correct types in server and client.
-
 ```ts
-// auth.d.ts
+// shared/types/auth.d.ts
 declare module '#auth-utils' {
   interface User {
     // Add your own fields
@@ -239,12 +236,14 @@ It can also be set using environment variables:
 - LinkedIn
 - LiveChat
 - Microsoft
+- OIDC / OpenID Connect (Generic)
 - Okta
 - Ory
 - PayPal
 - Polar
 - Salesforce
 - Seznam
+- Shopify Customer
 - Slack
 - Spotify
 - Steam
@@ -301,6 +300,17 @@ if (await verifyPassword(hashedPassword, 'user_password')) {
 }
 ```
 
+It also provides a `passwordNeedsRehash` function to check if a password needs to be rehashed. This is useful when the hash settings are changed, such as as increasing the scrypt cost parameters.
+
+```ts
+const needsRehash = await passwordNeedsRehash(hashedPassword)
+
+if (needsRehash) {
+  // Password needs to be rehashed
+  hashedPassword = await hashPassword('user_password')
+}
+```
+
 You can configure the scrypt options in your `nuxt.config.ts`:
 
 ```ts
@@ -411,7 +421,7 @@ export default defineWebAuthnRegisterEventHandler({
     // If he registers a new account with credentials
     return z.object({
       // we want the userName to be a valid email
-      userName: z.string().email() 
+      userName: z.string().email()
     }).parse(userBody)
   },
   async onSuccess(event, { credential, user }) {
@@ -600,7 +610,7 @@ This is because the user session is stored in a secure cookie and cannot be acce
 
 **This means that you should not rely on the user session during prerendering.**
 
-You may also choose to instruct Nuxt AUth Utils to fetch the user session only on the client side, with the `loadStrategy` option in your `nuxt.config.ts`:
+You may also choose to instruct Nuxt Auth Utils to fetch the user session only on the client side, with the `loadStrategy` option in your `nuxt.config.ts`:
 
 ```ts
 export default defineNuxtConfig({
@@ -612,6 +622,20 @@ export default defineNuxtConfig({
 
 When using the `client-only` load strategy, the user session can still be manually fetched on the server side by calling `fetch` from the `useUserSession` composable.
 
+### Disable session loading
+
+You may also choose to disable session loading entirely, with the `loadStrategy` option in your `nuxt.config.ts`:
+
+```ts
+export default defineNuxtConfig({
+  auth: {
+    loadStrategy: 'none'
+  }
+})
+```
+
+When using the `none` load strategy, the user session can still be manually fetched by calling `useUserSession().fetch()`.
+
 ### `<AuthState>` component
 
 You can use the `<AuthState>` component to safely display auth-related data in your components without worrying about the rendering mode.

package/dist/module.d.mts

@@ -1,4 +1,3 @@
-import * as _nuxt_schema from '@nuxt/schema';
 import { ScryptConfig } from '@adonisjs/hash/types';
 import { SessionConfig } from 'h3';
 
@@ -26,7 +25,7 @@ interface ModuleOptions {
      * Session load strategy
      * @default 'server-first'
      */
-    loadStrategy?: 'server-first' | 'client-only';
+    loadStrategy?: 'server-first' | 'client-only' | 'none';
 }
 declare module 'nuxt/schema' {
     interface RuntimeConfig {
@@ -40,11 +39,11 @@ declare module 'nuxt/schema' {
     }
     interface PublicRuntimeConfig {
         auth: {
-            loadStrategy: 'server-first' | 'client-only';
+            loadStrategy: 'server-first' | 'client-only' | 'none';
         };
     }
 }
-declare const _default: _nuxt_schema.NuxtModule<ModuleOptions, ModuleOptions, false>;
+declare const _default: any;
 
 export { _default as default };
 export type { ModuleOptions };

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "auth-utils",
   "configKey": "auth",
-  "version": "0.5.25",
+  "version": "0.5.27",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -1,11 +1,11 @@
-import { readFile, writeFile } from 'node:fs/promises';
 import { defineNuxtModule, createResolver, addComponentsDir, addImports, addPlugin, addServerPlugin, addServerImportsDir, logger, addServerHandler } from '@nuxt/kit';
-import { join } from 'pathe';
 import { defu } from 'defu';
+import { readFile, writeFile } from 'node:fs/promises';
+import { join } from 'pathe';
 import { randomUUID } from 'uncrypto';
 import { atprotoProviders, atprotoProviderDefaultClientMetadata, getClientMetadataFilename } from '../dist/runtime/utils/atproto.js';
 
-const module = defineNuxtModule({
+const module$1 = defineNuxtModule({
   meta: {
     name: "auth-utils",
     configKey: "auth"
@@ -32,8 +32,10 @@ const module = defineNuxtModule({
     }
     addComponentsDir({ path: resolver.resolve("./runtime/app/components") });
     addImports(composables);
-    addPlugin(resolver.resolve("./runtime/app/plugins/session.server"));
-    addPlugin(resolver.resolve("./runtime/app/plugins/session.client"));
+    if (options.loadStrategy !== "none") {
+      addPlugin(resolver.resolve("./runtime/app/plugins/session.server"));
+      addPlugin(resolver.resolve("./runtime/app/plugins/session.client"));
+    }
     addServerPlugin(resolver.resolve("./runtime/server/plugins/oauth"));
     addServerImportsDir(resolver.resolve("./runtime/server/lib/oauth"));
     if (nuxt.options.nitro?.experimental?.websocket) {
@@ -385,7 +387,20 @@ const module = defineNuxtModule({
       tokenURL: "",
       userURL: ""
     });
+    runtimeConfig.oauth.shopifyCustomer = defu(runtimeConfig.oauth.shopifyCustomer, {
+      shopDomain: "",
+      clientId: "",
+      redirectURL: "",
+      scope: []
+    });
+    runtimeConfig.oauth.oidc = defu(runtimeConfig.oauth.oidc, {
+      clientId: "",
+      clientSecret: "",
+      openidConfig: "",
+      redirectURL: "",
+      scope: []
+    });
   }
 });
 
-export { module as default };
+export { module$1 as default };

package/dist/runtime/app/components/AuthState.vue.d.ts

@@ -1,16 +1,17 @@
 declare var __VLS_1: {
-    loggedIn: boolean;
-    user: import("../../types/index.js").User | null;
-    session: import("../../types/index.js").UserSession | null;
-    clear: () => Promise<void>;
+    loggedIn: any;
+    user: any;
+    session: any;
+    clear: any;
 }, __VLS_3: {};
 type __VLS_Slots = {} & {
     default?: (props: typeof __VLS_1) => any;
 } & {
     placeholder?: (props: typeof __VLS_3) => any;
 };
-declare const __VLS_component: import("vue-demi").DefineComponent<{}, {}, {}, {}, {}, import("vue-demi").ComponentOptionsMixin, import("vue-demi").ComponentOptionsMixin, {}, string, import("vue-demi").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue-demi").ComponentProvideOptions, true, {}, any>;
-declare const _default: __VLS_WithSlots<typeof __VLS_component, __VLS_Slots>;
+declare const __VLS_base: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const __VLS_export: __VLS_WithSlots<typeof __VLS_base, __VLS_Slots>;
+declare const _default: typeof __VLS_export;
 export default _default;
 type __VLS_WithSlots<T, S> = T & {
     new (): {

package/dist/runtime/server/api/session.get.d.ts

@@ -1,6 +1,2 @@
-declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
-    [key: string]: unknown;
-    id: string;
-    user?: import("../../types/index.js").User;
-}>>;
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<UserSession>>;
 export default _default;

package/dist/runtime/server/lib/atproto/bluesky.d.ts

@@ -22,7 +22,7 @@ type BlueSkyTokens = NodeSavedSession['tokenSet'];
 export declare function defineOAuthBlueskyEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthBlueskyConfig, {
     user: BlueSkyUser;
     tokens: BlueSkyTokens;
-}>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+}>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;
 export declare class StateStore implements NodeSavedStateStore {
     private event;
     private readonly stateKey;

package/dist/runtime/server/lib/oauth/apple.d.ts

@@ -74,4 +74,4 @@ export declare function defineOAuthAppleEventHandler({ config, onSuccess, onErro
     user: OAuthAppleUser;
     payload: OAuthAppleTokens;
     tokens: any;
-}>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+}>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/atlassian.d.ts

@@ -91,5 +91,5 @@ export interface OAuthAtlassianConfig {
 export declare function defineOAuthAtlassianEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthAtlassianConfig, {
     user: AtlassianUser;
     tokens: AtlassianTokens;
-}>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+}>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;
 export {};

package/dist/runtime/server/lib/oauth/auth0.d.ts

@@ -57,4 +57,4 @@ export interface OAuthAuth0Config {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthAuth0EventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAuth0Config>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthAuth0EventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAuth0Config>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/authentik.d.ts

@@ -27,4 +27,4 @@ export interface OAuthAuthentikConfig {
      */
     scope?: string[];
 }
-export declare function defineOAuthAuthentikEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAuthentikConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthAuthentikEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAuthentikConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/azureb2c.d.ts

@@ -51,4 +51,4 @@ export interface OAuthAzureB2CConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthAzureB2CEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAzureB2CConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthAzureB2CEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthAzureB2CConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/azureb2c.js

@@ -37,7 +37,6 @@ export function defineOAuthAzureB2CEventHandler({ config, onSuccess, onError })
     if (query.state !== state) {
       return handleInvalidState(event, "azureb2c", onError);
     }
-    console.info("code verifier", verifier.code_verifier);
     const tokens = await requestAccessToken(tokenURL, {
       body: {
         grant_type: "authorization_code",

package/dist/runtime/server/lib/oauth/battledotnet.d.ts

@@ -45,4 +45,4 @@ export interface OAuthBattledotnetConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthBattledotnetEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthBattledotnetConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthBattledotnetEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthBattledotnetConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/cognito.d.ts

@@ -36,4 +36,4 @@ export interface OAuthCognitoConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthCognitoEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthCognitoConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthCognitoEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthCognitoConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/discord.d.ts

@@ -50,4 +50,4 @@ export interface OAuthDiscordConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthDiscordEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthDiscordConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthDiscordEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthDiscordConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/dropbox.d.ts

@@ -44,4 +44,4 @@ export interface OAuthDropboxConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthDropboxEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthDropboxConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthDropboxEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthDropboxConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/facebook.d.ts

@@ -45,4 +45,4 @@ export interface OAuthFacebookConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthFacebookEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthFacebookConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthFacebookEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthFacebookConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/gitea.d.ts

@@ -48,4 +48,4 @@ export interface OAuthGiteaConfig {
      */
     baseURL?: string;
 }
-export declare function defineOAuthGiteaEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthGiteaConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthGiteaEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthGiteaConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/github.d.ts

@@ -93,5 +93,5 @@ interface GitHubTokens {
 export declare function defineOAuthGitHubEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthGitHubConfig, {
     user: GitHubUser;
     tokens: GitHubTokens;
-}>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+}>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;
 export {};

package/dist/runtime/server/lib/oauth/gitlab.d.ts

@@ -49,4 +49,4 @@ export interface OAuthGitLabConfig {
      */
     baseURL?: string;
 }
-export declare function defineOAuthGitLabEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthGitLabConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthGitLabEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthGitLabConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/google.d.ts

@@ -44,4 +44,4 @@ export interface OAuthGoogleConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthGoogleEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthGoogleConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthGoogleEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthGoogleConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/heroku.d.ts

@@ -38,4 +38,4 @@ export interface OAuthHerokuConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthHerokuEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthHerokuConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthHerokuEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthHerokuConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/hubspot.d.ts

@@ -23,4 +23,4 @@ export interface OAuthHubspotConfig {
      */
     scope?: string[];
 }
-export declare function defineOAuthHubspotEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthHubspotConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthHubspotEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthHubspotConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/instagram.d.ts

@@ -45,4 +45,4 @@ export interface OAuthInstagramConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthInstagramEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthInstagramConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthInstagramEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthInstagramConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/keycloak.d.ts

@@ -45,4 +45,4 @@ export interface OAuthKeycloakConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthKeycloakEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthKeycloakConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthKeycloakEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthKeycloakConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/kick.d.ts

@@ -35,4 +35,4 @@ export interface OAuthKickConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthKickEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthKickConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthKickEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthKickConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/line.d.ts

@@ -42,4 +42,4 @@ export interface OAuthLineConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthLineEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthLineConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthLineEventHandler({ config, onSuccess, onError, }: OAuthConfig<OAuthLineConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/linear.d.ts

@@ -38,4 +38,4 @@ export interface OAuthLinearConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthLinearEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthLinearConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthLinearEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthLinearConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/linkedin.d.ts

@@ -42,4 +42,4 @@ export interface OAuthLinkedInConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthLinkedInEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthLinkedInConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthLinkedInEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthLinkedInConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/livechat.d.ts

@@ -60,8 +60,7 @@ export interface LiveChatConfig {
      */
     userURL?: string;
     /**
-     * LiveChat OAuth Scope. accounts--my:ro is always applied to get user profile.
-     * @default ['accounts--my:ro']
+     * LiveChat OAuth Scope. If not provided, the default scope from LiveChat will be used.
      * @example ['accounts--my:ro', 'chats--my:ro']
      */
     scope?: string[];
@@ -71,4 +70,4 @@ export interface LiveChatConfig {
      */
     authorizationParams?: Record<string, string>;
 }
-export declare function defineOAuthLiveChatEventHandler({ config, onSuccess, onError, }: OAuthConfig<LiveChatConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthLiveChatEventHandler({ config, onSuccess, onError, }: OAuthConfig<LiveChatConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;

package/dist/runtime/server/lib/oauth/livechat.js

@@ -19,7 +19,6 @@ export function defineOAuthLiveChatEventHandler({
       authorizationURL: "https://accounts.livechat.com",
       tokenURL: "https://accounts.livechat.com/v2/token",
       userURL: "https://accounts.livechat.com/v2/accounts/me",
-      scope: [],
       authorizationParams: {
         state: randomUUID()
       }
@@ -34,7 +33,6 @@ export function defineOAuthLiveChatEventHandler({
     }
     const query = getQuery(event);
     const redirectURL = config.redirectURL || getOAuthRedirectURL(event);
-    const scope = [.../* @__PURE__ */ new Set([...config.scope, "accounts--my:ro"])].join(" ");
     if (!query.code) {
       return sendRedirect(
         event,
@@ -42,7 +40,7 @@ export function defineOAuthLiveChatEventHandler({
           client_id: config.clientId,
           redirect_uri: redirectURL,
           response_type: "code",
-          scope,
+          scope: config.scope?.length ? config.scope.join(" ") : void 0,
           ...config.authorizationParams
         })
       );

package/dist/runtime/server/lib/oauth/microsoft.d.ts

@@ -51,4 +51,4 @@ export interface OAuthMicrosoftConfig {
      */
     redirectURL?: string;
 }
-export declare function defineOAuthMicrosoftEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthMicrosoftConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export declare function defineOAuthMicrosoftEventHandler({ config, onSuccess, onError }: OAuthConfig<OAuthMicrosoftConfig>): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;