nuxt-auth-utils 0.5.34 → 0.6.1

package/dist/runtime/types/oauth-config.d.ts

@@ -1,12 +1,12 @@
-import type { H3Event, H3Error } from 'h3';
+import type { NuxtError, RequestEvent } from 'nuxt/server';
 export type ATProtoProvider = 'bluesky';
 export type OAuthProvider = ATProtoProvider | 'atlassian' | 'auth0' | 'authentik' | 'azureb2c' | 'battledotnet' | 'cloudflare' | 'cognito' | 'discord' | 'dropbox' | 'facebook' | 'gitea' | 'github' | 'gitlab' | 'google' | 'hubspot' | 'instagram' | 'kick' | 'keycloak' | 'line' | 'linear' | 'linkedin' | 'mastodon' | 'microsoft' | 'paypal' | 'polar' | 'spotify' | 'seznam' | 'steam' | 'strava' | 'tiktok' | 'twitch' | 'vk' | 'wechat' | 'workos' | 'x' | 'xsuaa' | 'yandex' | 'zitadel' | 'apple' | 'livechat' | 'salesforce' | 'slack' | 'heroku' | 'roblox' | 'okta' | 'ory' | 'shopifyCustomer' | 'oidc' | 'osu' | 'riotgames' | 'box' | 'zendesk' | (string & {});
-export type OnError = (event: H3Event, error: H3Error) => Promise<void> | void;
+export type OnError = (event: RequestEvent, error: NuxtError) => unknown;
 export interface OAuthConfig<TConfig, TResult = {
     user: any;
     tokens: any;
 }> {
     config?: TConfig;
-    onSuccess: (event: H3Event, result: TResult) => Promise<void> | void;
+    onSuccess: (event: RequestEvent, result: TResult) => unknown;
     onError?: OnError;
 }

package/dist/runtime/types/session.d.ts

@@ -1,4 +1,5 @@
 import type { ComputedRef, Ref } from 'vue';
+import type { OmitWithIndexSignature } from './utils.js';
 export interface User {
 }
 export interface SecureSessionData {
@@ -38,9 +39,11 @@ export interface UserSessionComposable {
      */
     user: ComputedRef<User | null>;
     /**
-     * The session object.
+     * The session object, without `id` for a visitor who has no session yet.
      */
-    session: Ref<UserSession | null>;
+    session: Ref<(OmitWithIndexSignature<UserSession, 'id'> & {
+        id?: string;
+    }) | null>;
     /**
      * Fetch the user session from the server.
      */

package/dist/runtime/types/webauthn.d.ts

@@ -1,9 +1,6 @@
 import type { Ref } from 'vue';
-import type { H3Event, H3Error, ValidateResult } from 'h3';
-import type { GenerateAuthenticationOptionsOpts, GenerateRegistrationOptionsOpts, VerifiedAuthenticationResponse, VerifiedRegistrationResponse, verifyAuthenticationResponse, verifyRegistrationResponse } from '@simplewebauthn/server';
-type RegistrationResponseJSON = Parameters<typeof verifyRegistrationResponse>[0]['response'];
-type AuthenticationResponseJSON = Parameters<typeof verifyAuthenticationResponse>[0]['response'];
-type AuthenticatorTransportFuture = NonNullable<Parameters<typeof verifyAuthenticationResponse>[0]['credential']['transports']>[number];
+import type { NuxtError, RequestEvent, ValidateResult } from 'nuxt/server';
+import type { AuthenticationResponseJSON, AuthenticatorTransportFuture, GenerateAuthenticationOptionsOpts, GenerateRegistrationOptionsOpts, RegistrationResponseJSON, VerifiedAuthenticationResponse, VerifiedRegistrationResponse } from '@simplewebauthn/server';
 export interface WebAuthnCredential {
     id: string;
     publicKey: string;
@@ -20,15 +17,15 @@ export interface WebAuthnUser {
 }
 type CredentialsList = NonNullable<GenerateAuthenticationOptionsOpts['allowCredentials']>;
 type WebAuthnEventHandlerBase<T extends Record<PropertyKey, unknown>> = {
-    storeChallenge: (event: H3Event, challenge: string, attemptId: string) => void | Promise<void>;
-    getChallenge: (event: H3Event, attemptId: string) => string | Promise<string>;
-    onSuccess: (event: H3Event, data: T) => void | Promise<void>;
-    onError?: (event: H3Event, error: H3Error) => void | Promise<void>;
+    storeChallenge: (event: RequestEvent, challenge: string, attemptId: string) => void | Promise<void>;
+    getChallenge: (event: RequestEvent, attemptId: string) => string | Promise<string>;
+    onSuccess: (event: RequestEvent, data: T) => unknown;
+    onError?: (event: RequestEvent, error: NuxtError) => unknown;
 } | {
     storeChallenge?: undefined;
     getChallenge?: undefined;
-    onSuccess: (event: H3Event, data: T) => void | Promise<void>;
-    onError?: (event: H3Event, error: H3Error) => void | Promise<void>;
+    onSuccess: (event: RequestEvent, data: T) => unknown;
+    onError?: (event: RequestEvent, error: NuxtError) => unknown;
 };
 export type RegistrationBody<T extends WebAuthnUser> = {
     user: T;
@@ -39,15 +36,15 @@ export type RegistrationBody<T extends WebAuthnUser> = {
     attemptId: string;
     response: RegistrationResponseJSON;
 };
-export type ValidateUserFunction<T> = (userBody: WebAuthnUser, event: H3Event) => ValidateResult<T> | Promise<ValidateResult<T>>;
+export type ValidateUserFunction<T> = (userBody: WebAuthnUser, event: RequestEvent) => ValidateResult<T> | Promise<ValidateResult<T>>;
 export type WebAuthnRegisterEventHandlerOptions<T extends WebAuthnUser> = WebAuthnEventHandlerBase<{
     user: T;
     credential: WebAuthnCredential;
     registrationInfo: Exclude<VerifiedRegistrationResponse['registrationInfo'], undefined>;
 }> & {
-    getOptions?: (event: H3Event, body: RegistrationBody<T>) => Partial<GenerateRegistrationOptionsOpts> | Promise<Partial<GenerateRegistrationOptionsOpts>>;
+    getOptions?: (event: RequestEvent, body: RegistrationBody<T>) => Partial<GenerateRegistrationOptionsOpts> | Promise<Partial<GenerateRegistrationOptionsOpts>>;
     validateUser?: ValidateUserFunction<T>;
-    excludeCredentials?: (event: H3Event, userName: string) => CredentialsList | Promise<CredentialsList>;
+    excludeCredentials?: (event: RequestEvent, userName: string) => CredentialsList | Promise<CredentialsList>;
 };
 export type AuthenticationBody = {
     verify: false;
@@ -62,9 +59,9 @@ export type WebAuthnAuthenticateEventHandlerOptions<T extends WebAuthnCredential
     credential: T;
     authenticationInfo: Exclude<VerifiedAuthenticationResponse['authenticationInfo'], undefined>;
 }> & {
-    getOptions?: (event: H3Event, body: AuthenticationBody) => Partial<GenerateAuthenticationOptionsOpts> | Promise<Partial<GenerateAuthenticationOptionsOpts>>;
-    getCredential: (event: H3Event, credentialID: string) => T | Promise<T>;
-    allowCredentials?: (event: H3Event, userName: string) => CredentialsList | Promise<CredentialsList>;
+    getOptions?: (event: RequestEvent, body: AuthenticationBody) => Partial<GenerateAuthenticationOptionsOpts> | Promise<Partial<GenerateAuthenticationOptionsOpts>>;
+    getCredential: (event: RequestEvent, credentialID: string) => T | Promise<T>;
+    allowCredentials?: (event: RequestEvent, userName: string) => CredentialsList | Promise<CredentialsList>;
 };
 export interface WebAuthnComposable {
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-auth-utils",
-  "version": "0.5.34",
+  "version": "0.6.1",
   "description": "Add Authentication to Nuxt applications with secured & sealed cookies sessions.",
   "repository": {
     "type": "git",
@@ -25,25 +25,27 @@
   "files": [
     "dist"
   ],
+  "engines": {
+    "node": "^22.22.3 || ^24.15.0 || >=26.0.0"
+  },
   "dependencies": {
     "@adonisjs/hash": "^9.1.1",
-    "@nuxt/kit": "^4.3.1",
+    "@nuxt/kit": "^4.6.0",
     "@nuxt/schema": "^4.6.0",
     "defu": "^6.1.5",
-    "h3": "^1.15.9",
     "hookable": "^6.0.1",
     "jose": "^6.1.3",
     "ofetch": "^1.5.1",
     "openid-client": "^6.8.2",
-    "pathe": "^2.0.3",
     "scule": "^1.3.0",
+    "ufo": "^1.6.4",
     "uncrypto": "^0.1.3"
   },
   "peerDependencies": {
     "@atproto/api": "^0.13.15",
     "@atproto/oauth-client-node": "^0.2.0",
-    "@simplewebauthn/browser": "^11.0.0 || ^13.0.0",
-    "@simplewebauthn/server": "^11.0.0 || ^13.3.2"
+    "@simplewebauthn/browser": "^13.0.0",
+    "@simplewebauthn/server": "^13.3.2"
   },
   "peerDependenciesMeta": {
     "@simplewebauthn/browser": {
@@ -77,6 +79,8 @@
     "dev": "nuxi dev playground",
     "dev:build": "nuxi build playground",
     "dev:prepare": "nuxt-module-build build --stub && nuxt-module-build prepare && nuxi prepare playground",
+    "dev:v5": "pnpm install:nuxt5 && nuxt-module-build build --stub && nuxt-module-build prepare && nuxi prepare playground && nuxi dev playground",
+    "install:nuxt5": "pnpm install --config.pnpmfile=scripts/nuxt-nightly.cjs --config.lockfile=false --config.minimum-release-age-exclude=*-nightly",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "test": "vitest run",

package/dist/runtime/server/plugins/oauth.d.ts

@@ -1,2 +0,0 @@
-declare const _default: import("nitropack/types").NitroAppPlugin;
-export default _default;

package/dist/runtime/server/plugins/oauth.js

@@ -1,16 +0,0 @@
-import { defineNitroPlugin } from "nitropack/runtime";
-export default defineNitroPlugin((nitroApp) => {
-  if (process.env.NUXT_OAUTH_FACEBOOK_CLIENT_ID && process.env.NUXT_OAUTH_FACEBOOK_CLIENT_SECRET || process.env.NUXT_OAUTH_INSTAGRAM_CLIENT_ID && process.env.NUXT_OAUTH_INSTAGRAM_CLIENT_SECRET) {
-    nitroApp.hooks.hook("render:html", (html) => {
-      html.head.unshift(`
-      <script>
-        if (window.location.hash === "#_=_"){
-          history.replaceState
-              ? history.replaceState(null, null, window.location.href.split("#")[0])
-              : window.location.hash = "";
-        }
-      <\/script>
-    `);
-    });
-  }
-});

package/dist/runtime/server/plugins/ws.d.ts

@@ -1,2 +0,0 @@
-declare const _default: import("nitropack").NitroAppPlugin;
-export default _default;

package/dist/runtime/server/plugins/ws.js

@@ -1,7 +0,0 @@
-import { defineNitroPlugin } from "nitropack/runtime";
-import { getUserSession } from "../utils/session.js";
-export default defineNitroPlugin((nitroApp) => {
-  nitroApp.hooks.hook("request", async (event) => {
-    await getUserSession(event);
-  });
-});