nuxt-users 1.34.7 → 1.35.0

package/CHANGELOG.md

@@ -1,6 +1,51 @@
 # Changelog
 
 
+## v1.35.0
+
+[compare changes](https://github.com/rrd108/nuxt-users/compare/v1.34.7...v1.35.0)
+
+### 🚀 Enhancements
+
+- Implement google authentication ([e830872](https://github.com/rrd108/nuxt-users/commit/e830872))
+- Add google auth to the playground ([2b43ca0](https://github.com/rrd108/nuxt-users/commit/2b43ca0))
+- Add migration ([0280eca](https://github.com/rrd108/nuxt-users/commit/0280eca))
+- Unregistered user gets error message ([eefbdf5](https://github.com/rrd108/nuxt-users/commit/eefbdf5))
+
+### 🩹 Fixes
+
+- Prevents database connection issues during build ([8a3aa38](https://github.com/rrd108/nuxt-users/commit/8a3aa38))
+- Add api endpoints to public endpoints ([16aefa9](https://github.com/rrd108/nuxt-users/commit/16aefa9))
+- Completes Google OAuth user fetch on client ([6c95b94](https://github.com/rrd108/nuxt-users/commit/6c95b94))
+
+### 📖 Documentation
+
+- Fix github link ([28662ca](https://github.com/rrd108/nuxt-users/commit/28662ca))
+- Adds Google OAuth authentication ([463c19f](https://github.com/rrd108/nuxt-users/commit/463c19f))
+- Adds Google OAuth registration ([2e0eebf](https://github.com/rrd108/nuxt-users/commit/2e0eebf))
+
+### 🏡 Chore
+
+- Lint fix ([8d75930](https://github.com/rrd108/nuxt-users/commit/8d75930))
+- **release:** V1.34.7 ([b9d061c](https://github.com/rrd108/nuxt-users/commit/b9d061c))
+- Remove unused files ([8bd3e58](https://github.com/rrd108/nuxt-users/commit/8bd3e58))
+- Replace googleapis package with google-auth ([0e8e3d4](https://github.com/rrd108/nuxt-users/commit/0e8e3d4))
+- Fix lint errors ([3ed5bcc](https://github.com/rrd108/nuxt-users/commit/3ed5bcc))
+- Update lock ([8cd4a97](https://github.com/rrd108/nuxt-users/commit/8cd4a97))
+
+### ✅ Tests
+
+- Google OAuth authentication ([7d7bd68](https://github.com/rrd108/nuxt-users/commit/7d7bd68))
+- Add oauth flow test ([b805718](https://github.com/rrd108/nuxt-users/commit/b805718))
+- Fix db setup ([a097c4a](https://github.com/rrd108/nuxt-users/commit/a097c4a))
+- Replace smoke test with middleware test ([7ee1893](https://github.com/rrd108/nuxt-users/commit/7ee1893))
+- Add security checks ([a206962](https://github.com/rrd108/nuxt-users/commit/a206962))
+- Fix ts errors ([d7e6c61](https://github.com/rrd108/nuxt-users/commit/d7e6c61))
+
+### ❤️ Contributors
+
+- Rrd108 ([@rrd108](https://github.com/rrd108))
+
 ## v1.34.7
 
 [compare changes](https://github.com/rrd108/nuxt-users/compare/v1.34.6...v1.34.7)

package/dist/cli.mjs

@@ -7,6 +7,7 @@ import { defu } from 'defu';
 import { runMigrations, createUser as createUser$1, createUsersTable as createUsersTable$1, createPersonalAccessTokensTable as createPersonalAccessTokensTable$1, createPasswordResetTokensTable as createPasswordResetTokensTable$1, createMigrationsTable as createMigrationsTable$1 } from '../dist/runtime/server/utils/index.js';
 import { g as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.BnOQs2LI.mjs';
 import { addActiveToUsers as addActiveToUsers$1 } from '../dist/runtime/server/utils/add-active-to-users.js';
+import { useDb } from '../dist/runtime/server/utils/db.js';
 import '../dist/runtime/server/internal/index.js';
 
 const getOptionsFromEnv = () => {
@@ -245,6 +246,78 @@ const addActiveToUsers = defineCommand({
   }
 });
 
+const addGoogleOauthFields = defineCommand({
+  meta: {
+    name: "add-google-oauth-fields",
+    description: "Add Google OAuth fields (google_id, profile_picture) to existing users table"
+  },
+  async run() {
+    console.log("[Nuxt Users] Adding Google OAuth fields to users table...");
+    const options = await loadOptions();
+    const connectorName = options.connector.name;
+    const db = await useDb(options);
+    const tableName = options.tables.users;
+    console.log(`[Nuxt Users] DB:Migrate ${connectorName} Users Table Adding Google OAuth fields...`);
+    try {
+      if (connectorName === "sqlite") {
+        const tableInfo = await db.sql`PRAGMA table_info(${tableName})`;
+        const columnNames = tableInfo.rows.map((row) => row.name);
+        if (!columnNames.includes("google_id")) {
+          await db.sql`ALTER TABLE {${tableName}} ADD COLUMN google_id TEXT`;
+          console.log("[Nuxt Users] Added google_id column to SQLite users table \u2705");
+        }
+        if (!columnNames.includes("profile_picture")) {
+          await db.sql`ALTER TABLE {${tableName}} ADD COLUMN profile_picture TEXT`;
+          console.log("[Nuxt Users] Added profile_picture column to SQLite users table \u2705");
+        }
+        if (!columnNames.includes("last_login_at")) {
+          await db.sql`ALTER TABLE {${tableName}} ADD COLUMN last_login_at DATETIME`;
+          console.log("[Nuxt Users] Added last_login_at column to SQLite users table \u2705");
+        }
+      }
+      if (connectorName === "mysql") {
+        const checkColumns = await db.sql`
+          SELECT COLUMN_NAME 
+          FROM INFORMATION_SCHEMA.COLUMNS 
+          WHERE TABLE_SCHEMA = DATABASE() 
+          AND TABLE_NAME = ${tableName}
+          AND COLUMN_NAME IN ('google_id', 'profile_picture')
+        `;
+        const existingColumns = checkColumns.rows.map((row) => row.COLUMN_NAME);
+        if (!existingColumns.includes("google_id")) {
+          await db.sql`ALTER TABLE {${tableName}} ADD COLUMN google_id VARCHAR(255) UNIQUE`;
+          console.log("[Nuxt Users] Added google_id column to MySQL users table \u2705");
+        }
+        if (!existingColumns.includes("profile_picture")) {
+          await db.sql`ALTER TABLE {${tableName}} ADD COLUMN profile_picture TEXT`;
+          console.log("[Nuxt Users] Added profile_picture column to MySQL users table \u2705");
+        }
+      }
+      if (connectorName === "postgresql") {
+        const checkColumns = await db.sql`
+          SELECT column_name 
+          FROM information_schema.columns 
+          WHERE table_name = ${tableName}
+          AND column_name IN ('google_id', 'profile_picture')
+        `;
+        const existingColumns = checkColumns.rows.map((row) => row.column_name);
+        if (!existingColumns.includes("google_id")) {
+          await db.sql`ALTER TABLE {${tableName}} ADD COLUMN google_id VARCHAR(255) UNIQUE`;
+          console.log("[Nuxt Users] Added google_id column to PostgreSQL users table \u2705");
+        }
+        if (!existingColumns.includes("profile_picture")) {
+          await db.sql`ALTER TABLE {${tableName}} ADD COLUMN profile_picture TEXT`;
+          console.log("[Nuxt Users] Added profile_picture column to PostgreSQL users table \u2705");
+        }
+      }
+      console.log("[Nuxt Users] Google OAuth fields migration completed successfully! \u2705");
+    } catch (error) {
+      console.error("[Nuxt Users] DB:Migration Error:", error);
+      process.exit(1);
+    }
+  }
+});
+
 const projectInfo = defineCommand({
   meta: {
     name: "project-info",
@@ -304,6 +377,7 @@ const main = defineCommand({
     "create-password-reset-tokens-table": createPasswordResetTokensTable,
     "create-migrations-table": createMigrationsTable,
     "add-active-to-users": addActiveToUsers,
+    "add-google-oauth-fields": addGoogleOauthFields,
     "project-info": projectInfo
   }
 });

package/dist/module.d.mts

@@ -1,5 +1,5 @@
 import * as _nuxt_schema from '@nuxt/schema';
-import { R as RuntimeModuleOptions, M as ModuleOptions } from './shared/nuxt-users.BTVH9EyH.mjs';
+import { R as RuntimeModuleOptions, M as ModuleOptions } from './shared/nuxt-users.SXaMnaEL.mjs';
 export * from '../dist/runtime/server/internal/index.js';
 
 declare const defaultOptions: ModuleOptions;

package/dist/module.d.ts

@@ -1,5 +1,5 @@
 import * as _nuxt_schema from '@nuxt/schema';
-import { R as RuntimeModuleOptions, M as ModuleOptions } from './shared/nuxt-users.BTVH9EyH.js';
+import { R as RuntimeModuleOptions, M as ModuleOptions } from './shared/nuxt-users.SXaMnaEL.js';
 export * from '../dist/runtime/server/internal/index.js';
 
 declare const defaultOptions: ModuleOptions;

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "nuxt-users",
   "configKey": "nuxtUsers",
-  "version": "1.34.7",
+  "version": "1.35.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -65,11 +65,14 @@ const module = defineNuxtModule({
     nuxt.options.runtimeConfig.nuxtUsers = {
       ...runtimeConfigOptions,
       auth: {
-        ...runtimeConfigOptions.auth,
+        tokenExpiration: runtimeConfigOptions.auth.tokenExpiration,
+        rememberMeExpiration: runtimeConfigOptions.auth.rememberMeExpiration,
+        permissions: runtimeConfigOptions.auth.permissions,
+        ...runtimeConfigOptions.auth.google && { google: runtimeConfigOptions.auth.google },
         whitelist: (() => {
           const combinedWhitelist = [...defaultOptions.auth?.whitelist || [], ...runtimeConfigOptions.auth?.whitelist || []];
+          const apiBasePath = runtimeConfigOptions.apiBasePath || defaultOptions.apiBasePath;
           if (combinedWhitelist.includes("/register")) {
-            const apiBasePath = runtimeConfigOptions.apiBasePath || defaultOptions.apiBasePath;
             const registrationEndpoints = [
               "/confirm-email",
               // Page route for email confirmation
@@ -84,6 +87,17 @@ const module = defineNuxtModule({
               }
             });
           }
+          if (runtimeConfigOptions.auth?.google) {
+            const googleOAuthEndpoints = [
+              `${apiBasePath}/auth/google/redirect`,
+              `${apiBasePath}/auth/google/callback`
+            ];
+            googleOAuthEndpoints.forEach((endpoint) => {
+              if (!combinedWhitelist.includes(endpoint)) {
+                combinedWhitelist.push(endpoint);
+              }
+            });
+          }
           return combinedWhitelist;
         })()
       }
@@ -94,8 +108,8 @@ const module = defineNuxtModule({
       auth: {
         whitelist: (() => {
           const combinedWhitelist = [...defaultOptions.auth?.whitelist || [], ...runtimeConfigOptions.auth?.whitelist || []];
+          const apiBasePath = runtimeConfigOptions.apiBasePath || defaultOptions.apiBasePath;
           if (combinedWhitelist.includes("/register")) {
-            const apiBasePath = runtimeConfigOptions.apiBasePath || defaultOptions.apiBasePath;
             const registrationEndpoints = [
               "/confirm-email",
               // Page route for email confirmation
@@ -110,6 +124,17 @@ const module = defineNuxtModule({
               }
             });
           }
+          if (runtimeConfigOptions.auth?.google) {
+            const googleOAuthEndpoints = [
+              `${apiBasePath}/auth/google/redirect`,
+              `${apiBasePath}/auth/google/callback`
+            ];
+            googleOAuthEndpoints.forEach((endpoint) => {
+              if (!combinedWhitelist.includes(endpoint)) {
+                combinedWhitelist.push(endpoint);
+              }
+            });
+          }
           return combinedWhitelist;
         })(),
         permissions: runtimeConfigOptions.auth?.permissions || defaultOptions.auth.permissions
@@ -177,6 +202,16 @@ const module = defineNuxtModule({
       method: "get",
       handler: resolver.resolve("./runtime/server/api/nuxt-users/confirm-email.get")
     });
+    addServerHandler({
+      route: `${base}/auth/google/redirect`,
+      method: "get",
+      handler: resolver.resolve("./runtime/server/api/nuxt-users/auth/google/redirect.get")
+    });
+    addServerHandler({
+      route: `${base}/auth/google/callback`,
+      method: "get",
+      handler: resolver.resolve("./runtime/server/api/nuxt-users/auth/google/callback.get")
+    });
     addServerHandler({
       route: `${base}`,
       method: "get",

package/dist/runtime/assets/nuxt-users.css

@@ -1 +1 @@
-:root{--nu-color-primary:#3b82f6;--nu-color-primary-dark:#2563eb;--nu-color-primary-light:#60a5fa;--nu-color-white:#fff;--nu-color-gray-50:#f9fafb;--nu-color-gray-500:#6b7280;--nu-color-gray-600:#4b5563;--nu-color-gray-700:#374151;--nu-color-gray-900:#111827;--nu-color-success:#059669;--nu-color-success-light:#f0fdf4;--nu-color-success-border:#9ae6b4;--nu-color-error:#dc2626;--nu-color-error-light:#fef2f2;--nu-color-error-border:#fecaca;--nu-color-error-alt:#db5050;--nu-color-error-dark:#b91c1c;--nu-color-border:#e5e7eb;--nu-color-border-light:#d1d5db;--nu-color-border-dark:#ccc;--nu-color-bg-primary:#fff;--nu-color-bg-secondary:#f9fafb;--nu-color-bg-tertiary:#f3f4f6;--nu-color-text-primary:#000;--nu-color-text-secondary:#6b7280;--nu-color-strength-bg:#e9ecef;--nu-color-validation-passed:#28a745;--nu-color-validation-failed:#dc3545;--nu-color-validation-hint:#6c757d}.dark :root{--nu-color-primary:#60a5fa;--nu-color-primary-dark:#3b82f6;--nu-color-primary-light:#93c5fd;--nu-color-white:#000;--nu-color-gray-50:#111827;--nu-color-gray-500:#9ca3af;--nu-color-gray-600:#d1d5db;--nu-color-gray-700:#e5e7eb;--nu-color-gray-900:#f9fafb;--nu-color-success:#10b981;--nu-color-success-light:#064e3b;--nu-color-success-border:#065f46;--nu-color-error:#ef4444;--nu-color-error-light:#450a0a;--nu-color-error-border:#7f1d1d;--nu-color-error-alt:#f87171;--nu-color-error-dark:#dc2626;--nu-color-border:#374151;--nu-color-border-light:#4b5563;--nu-color-border-dark:#6b7280;--nu-color-bg-primary:#111827;--nu-color-bg-secondary:#1f2937;--nu-color-bg-tertiary:#374151;--nu-color-text-primary:#fff;--nu-color-text-secondary:#9ca3af;--nu-color-strength-bg:#374151;--nu-color-validation-passed:#22c55e;--nu-color-validation-failed:#ef4444;--nu-color-validation-hint:#9ca3af}.n-users-form-group{display:flex;flex-direction:column;gap:.5rem;margin-bottom:1rem;width:100%}.n-users-form-group.n-users-form-group-narrow{width:90%}.n-users-form-group label,.n-users-form-label{color:var(--nu-color-text-primary,#000);display:block;font-size:1rem;font-weight:500;margin-bottom:.5rem}.n-users-form-group input,.n-users-form-group select,.n-users-form-input{border:1px solid var(--nu-color-border,#ccc);border-radius:.25rem;font-size:1rem;padding:.5rem;transition:border-color .2s,box-shadow .2s;width:100%}.n-users-form-group input:focus,.n-users-form-group select:focus,.n-users-form-input:focus{border-color:var(--nu-color-primary);box-shadow:0 0 0 .1rem rgba(59,130,246,.1);outline:none}.n-users-form-group input:disabled,.n-users-form-input:disabled{background-color:var(--nu-color-bg-secondary,#f9fafb);cursor:not-allowed}.n-users-form-group input.error,.n-users-form-input.error{border-color:var(--nu-color-error,#dc3545)}.n-users-form-group input[type=email],.n-users-form-group input[type=password],.n-users-form-group input[type=text]{background-color:var(--nu-color-bg-secondary);border:1px solid var(--nu-color-border-light);border-radius:.5em;box-sizing:border-box;color:var(--nu-color-gray-700);font-size:.875rem;padding:.75em 1em;transition:all .2s ease-in-out;width:100%}.n-users-form-group input[type=email]:focus,.n-users-form-group input[type=password]:focus,.n-users-form-group input[type=text]:focus{background-color:var(--nu-color-bg-primary);border-color:var(--nu-color-primary);box-shadow:0 0 0 3px rgba(59,130,246,.1);outline:none}.n-users-form-group input[type=checkbox]{margin:0;width:auto}.n-users-btn,.n-users-cancel-btn,.n-users-delete-btn,.n-users-edit-btn,.n-users-submit-btn{align-self:flex-start;border:none;border-radius:.25rem;cursor:pointer;display:inline-block;font-size:1rem;font-weight:500;padding:.5rem 1rem;text-decoration:none;transition:background-color .2s,transform .1s}.n-users-btn:hover,.n-users-edit-btn:hover,.n-users-submit-btn:hover{background-color:var(--nu-color-primary-dark,#2563eb);transform:translateY(-1px)}.n-users-btn:disabled,.n-users-submit-btn:disabled{cursor:not-allowed;opacity:.6;transform:none}.n-users-btn-primary,.n-users-edit-btn,.n-users-submit-btn{background-color:var(--nu-color-primary,#3b82f6);color:#fff}.n-users-btn-secondary,.n-users-cancel-btn{background-color:var(--nu-color-gray-500,#6b7280);color:#fff}.n-users-cancel-btn:hover{background-color:var(--nu-color-gray-600,#4b5563)}.n-users-delete-btn{background-color:var(--nu-color-error,#ef4444);color:#fff}.n-users-delete-btn:hover{background-color:var(--nu-color-error-alt,#dc2626)}.n-users-login-section button[type=submit],.n-users-register-section button[type=submit],.n-users-reset-password-container button[type=submit],.n-users-user-form button[type=submit],form.n-users-form button[type=submit]{align-items:center;background-color:var(--nu-color-primary);border:1px solid var(--nu-color-primary);border-radius:.5em;color:var(--nu-color-white);cursor:pointer;display:flex;font-size:.875rem;font-weight:500;gap:.5rem;justify-content:center;min-height:44px;padding:.75em 1em;transition:all .2s ease-in-out;width:100%}.n-users-login-section button[type=submit]:hover:not(:disabled),.n-users-register-section button[type=submit]:hover:not(:disabled),.n-users-reset-password-container button[type=submit]:hover:not(:disabled),.n-users-user-form button[type=submit]:hover:not(:disabled),form.n-users-form button[type=submit]:hover:not(:disabled){background-color:var(--nu-color-primary-dark);border-color:var(--nu-color-primary-dark)}.n-users-login-section button[type=submit]:disabled,.n-users-register-section button[type=submit]:disabled,.n-users-reset-password-container button[type=submit]:disabled,.n-users-user-form button[type=submit]:disabled,form.n-users-form button[type=submit]:disabled{cursor:not-allowed;opacity:.6}.n-users-error-message,.n-users-error-text{background-color:var(--nu-color-error-light,#fef2f2);border:1px solid var(--nu-color-error-border,#fecaca);border-radius:.5rem;color:var(--nu-color-error,#dc3545);font-size:.875rem;margin-top:.5rem;padding:.75rem 1rem}.n-users-success-message{background-color:var(--nu-color-success-light,#f0fff4);border:1px solid var(--nu-color-success-border,#9ae6b4);border-radius:.5rem;color:var(--nu-color-success,#10b981);font-size:.875rem;margin-top:.5rem;padding:.75rem 1rem}.n-users-grid{display:grid;gap:1rem}.n-users-grid-2{grid-template-columns:1fr 5fr}.n-users-grid-auto{grid-template-columns:repeat(auto-fill,minmax(12em,1fr))}.n-users-form-actions{align-items:center;display:flex;gap:1rem;margin-top:1.5rem}.n-users-loading-spinner{animation:n-users-spin 1s linear infinite;border:2px solid var(--nu-color-white,#fff);border-radius:50%;border-top:2px solid transparent;height:16px;width:16px}@keyframes n-users-spin{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}.n-users-card{background-color:var(--nu-color-bg-primary,#fff);border:1px solid var(--nu-color-border,#e5e7eb);border-radius:.5rem;padding:1rem}.n-users-section{margin:0 auto;max-width:42em;padding:1em}.n-users-section-header{border-bottom:.1em solid var(--nu-color-border,#e5e7eb);margin-bottom:1rem;padding-bottom:.5rem}.n-users-form-help{color:var(--nu-color-text-secondary,#6b7280);font-size:.75rem;margin-top:.25rem}.n-users-strength-bar{background-color:var(--nu-color-strength-bg,#e9ecef);border-radius:2px;height:4px;margin-bottom:4px;overflow:hidden;width:100%}.n-users-strength-fill{height:100%;transition:width .3s ease,background-color .3s ease}.n-users-strength-text{font-size:.75rem;font-weight:500}.n-users-validation-container{background-color:#f8f9fa;border:1px solid #e9ecef;border-radius:4px;margin-top:12px;padding:12px}.n-users-container-title{color:#495057;font-size:.875rem;font-weight:600;margin-bottom:8px}.n-users-list-unstyled{list-style:none;margin:0;padding-left:0}.n-users-list-item{align-items:center;display:flex;font-size:.875rem;margin-bottom:6px;transition:color .2s ease}.n-users-list-item:last-child{margin-bottom:0}.n-users-icon{font-weight:700;margin-right:8px;min-width:16px;text-align:center}.n-users-text{flex:1}.n-users-list ul{list-style:none}.n-users-login-section form,.n-users-register-section form,.n-users-reset-password-container form,.n-users-user-form form,form.n-users-form{display:flex;flex-direction:column;gap:1.5rem}.n-users-login-section{background:linear-gradient(135deg,var(--nu-color-bg-primary) 0,var(--nu-color-bg-secondary) 100%);border:1px solid var(--nu-color-border);border-radius:.75em;box-shadow:0 4px 6px -1px rgba(0,0,0,.1),0 2px 4px -1px rgba(0,0,0,.06);max-width:25rem}.n-users-login-header{margin-bottom:1em;text-align:center}.n-users-login-title{color:var(--nu-color-gray-700);font-size:1.875rem;font-weight:700;line-height:1.2;margin:0 0 .5em}.n-users-login-subtitle{color:var(--nu-color-gray-700);font-size:.875rem;line-height:1.5;margin:0}.n-users-remember-me{align-items:center;display:flex;gap:.5rem}.n-users-remember-me label{color:var(--nu-color-gray-700);font-size:.875rem;margin:0}.n-users-login-footer{margin-top:1em;text-align:center}.n-users-forgot-password{margin:0}.n-users-forgot-link{align-items:center;color:var(--nu-color-primary);display:inline-flex;font-size:.875rem;gap:.5rem;text-decoration:none;transition:color .2s ease-in-out}.n-users-forgot-link:hover:not(.loading){color:var(--nu-color-primary-dark);text-decoration:underline}.n-users-forgot-link.loading{cursor:not-allowed;opacity:.6;pointer-events:none}.n-users-password-strength{margin-top:8px}.n-users-validation-rules{margin-top:12px}.n-users-rules-title{margin-bottom:8px}.n-users-rules-list{padding-left:0}.n-users-rule-item{margin-bottom:6px}.n-users-rule-item:last-child{margin-bottom:0}.n-users-rule-passed{color:var(--nu-color-validation-passed,#28a745)}.n-users-rule-failed{color:var(--nu-color-validation-failed,#dc3545)}.n-users-rule-icon{margin-right:8px}.n-users-rule-text{flex:1}.n-users-validation-errors{margin-top:8px}.n-users-error-text:last-child{margin-bottom:0}.n-users-password-hints{margin-top:8px}.n-users-hint-title{margin-bottom:8px}.n-users-hint-list{padding-left:16px}.n-users-hint-item{color:var(--nu-color-validation-hint,#6c757d);margin-bottom:4px}.n-users-hint-item:last-child{margin-bottom:0}.n-users-logout-link{background:var(--nu-color-error);border:2px solid transparent;border-color:var(--nu-color-error-dark);border-radius:.5em;color:#fff;padding:.5em 1em;text-decoration:none}.n-users-logout-link:hover{border-color:var(--nu-color-primary)}.n-users-user-card dd{margin:0}.n-users-user-card-actions{display:flex;gap:.5rem;margin-top:1rem}.n-users-user-form{margin:0 auto;max-width:500px}.n-users-form-group input.error{border-color:#dc3545}.n-users-profile-info{background-color:var(--nu-color-bg-primary);border-top-left-radius:.5em;border-top-right-radius:.5em}.n-users-profile-details{font-size:1rem;list-style:none;margin:0;padding:0}.n-users-reset-password-container{background-color:var(--nu-color-bg-primary);border-bottom-left-radius:.5em;border-bottom-right-radius:.5em}@media (max-width:480px){.n-users-login-title{font-size:1.5rem}}.n-users-list-enter-active,.n-users-list-leave-active,.n-users-list-move{transition:all .3s ease}.n-users-list-enter-from,.n-users-list-leave-to{opacity:0;transform:translateX(2rem)}.n-users-list-leave-active{position:absolute}.n-users-list-move{transition-timing-function:ease}
+:root{--nu-color-primary:#3b82f6;--nu-color-primary-dark:#2563eb;--nu-color-primary-light:#60a5fa;--nu-color-white:#fff;--nu-color-gray-50:#f9fafb;--nu-color-gray-500:#6b7280;--nu-color-gray-600:#4b5563;--nu-color-gray-700:#374151;--nu-color-gray-900:#111827;--nu-color-success:#059669;--nu-color-success-light:#f0fdf4;--nu-color-success-border:#9ae6b4;--nu-color-error:#dc2626;--nu-color-error-light:#fef2f2;--nu-color-error-border:#fecaca;--nu-color-error-alt:#db5050;--nu-color-error-dark:#b91c1c;--nu-color-border:#e5e7eb;--nu-color-border-light:#d1d5db;--nu-color-border-dark:#ccc;--nu-color-bg-primary:#fff;--nu-color-bg-secondary:#f9fafb;--nu-color-bg-tertiary:#f3f4f6;--nu-color-text-primary:#000;--nu-color-text-secondary:#6b7280;--nu-color-strength-bg:#e9ecef;--nu-color-validation-passed:#28a745;--nu-color-validation-failed:#dc3545;--nu-color-validation-hint:#6c757d}.dark :root{--nu-color-primary:#60a5fa;--nu-color-primary-dark:#3b82f6;--nu-color-primary-light:#93c5fd;--nu-color-white:#000;--nu-color-gray-50:#111827;--nu-color-gray-500:#9ca3af;--nu-color-gray-600:#d1d5db;--nu-color-gray-700:#e5e7eb;--nu-color-gray-900:#f9fafb;--nu-color-success:#10b981;--nu-color-success-light:#064e3b;--nu-color-success-border:#065f46;--nu-color-error:#ef4444;--nu-color-error-light:#450a0a;--nu-color-error-border:#7f1d1d;--nu-color-error-alt:#f87171;--nu-color-error-dark:#dc2626;--nu-color-border:#374151;--nu-color-border-light:#4b5563;--nu-color-border-dark:#6b7280;--nu-color-bg-primary:#111827;--nu-color-bg-secondary:#1f2937;--nu-color-bg-tertiary:#374151;--nu-color-text-primary:#fff;--nu-color-text-secondary:#9ca3af;--nu-color-strength-bg:#374151;--nu-color-validation-passed:#22c55e;--nu-color-validation-failed:#ef4444;--nu-color-validation-hint:#9ca3af}.n-users-form-group{display:flex;flex-direction:column;gap:.5rem;margin-bottom:1rem;width:100%}.n-users-form-group.n-users-form-group-narrow{width:90%}.n-users-form-group label,.n-users-form-label{color:var(--nu-color-text-primary,#000);display:block;font-size:1rem;font-weight:500;margin-bottom:.5rem}.n-users-form-group input,.n-users-form-group select,.n-users-form-input{border:1px solid var(--nu-color-border,#ccc);border-radius:.25rem;font-size:1rem;padding:.5rem;transition:border-color .2s,box-shadow .2s;width:100%}.n-users-form-group input:focus,.n-users-form-group select:focus,.n-users-form-input:focus{border-color:var(--nu-color-primary);box-shadow:0 0 0 .1rem rgba(59,130,246,.1);outline:none}.n-users-form-group input:disabled,.n-users-form-input:disabled{background-color:var(--nu-color-bg-secondary,#f9fafb);cursor:not-allowed}.n-users-form-group input.error,.n-users-form-input.error{border-color:var(--nu-color-error,#dc3545)}.n-users-form-group input[type=email],.n-users-form-group input[type=password],.n-users-form-group input[type=text]{background-color:var(--nu-color-bg-secondary);border:1px solid var(--nu-color-border-light);border-radius:.5em;box-sizing:border-box;color:var(--nu-color-gray-700);font-size:.875rem;padding:.75em 1em;transition:all .2s ease-in-out;width:100%}.n-users-form-group input[type=email]:focus,.n-users-form-group input[type=password]:focus,.n-users-form-group input[type=text]:focus{background-color:var(--nu-color-bg-primary);border-color:var(--nu-color-primary);box-shadow:0 0 0 3px rgba(59,130,246,.1);outline:none}.n-users-form-group input[type=checkbox]{margin:0;width:auto}.n-users-google-btn{align-items:center;display:inline-flex;gap:8px;justify-content:center}.n-users-google-logo{flex-shrink:0}.n-users-btn,.n-users-cancel-btn,.n-users-delete-btn,.n-users-edit-btn,.n-users-google-btn,.n-users-submit-btn{align-self:flex-start;border:none;border-radius:.25rem;cursor:pointer;display:inline-block;font-size:1rem;font-weight:500;padding:.5rem 1rem;text-decoration:none;transition:background-color .2s,transform .1s}.n-users-btn:hover,.n-users-edit-btn:hover,.n-users-submit-btn:hover{background-color:var(--nu-color-primary-dark,#2563eb);transform:translateY(-1px)}.n-users-btn:disabled,.n-users-submit-btn:disabled{cursor:not-allowed;opacity:.6;transform:none}.n-users-btn-primary,.n-users-edit-btn,.n-users-submit-btn{background-color:var(--nu-color-primary,#3b82f6);color:#fff}.n-users-btn-secondary,.n-users-cancel-btn{background-color:var(--nu-color-gray-500,#6b7280);color:#fff}.n-users-cancel-btn:hover{background-color:var(--nu-color-gray-600,#4b5563)}.n-users-delete-btn{background-color:var(--nu-color-error,#ef4444);color:#fff}.n-users-delete-btn:hover{background-color:var(--nu-color-error-alt,#dc2626)}.n-users-login-section button[type=submit],.n-users-register-section button[type=submit],.n-users-reset-password-container button[type=submit],.n-users-user-form button[type=submit],form.n-users-form button[type=submit]{align-items:center;background-color:var(--nu-color-primary);border:1px solid var(--nu-color-primary);border-radius:.5em;color:var(--nu-color-white);cursor:pointer;display:flex;font-size:.875rem;font-weight:500;gap:.5rem;justify-content:center;min-height:44px;padding:.75em 1em;transition:all .2s ease-in-out;width:100%}.n-users-login-section button[type=submit]:hover:not(:disabled),.n-users-register-section button[type=submit]:hover:not(:disabled),.n-users-reset-password-container button[type=submit]:hover:not(:disabled),.n-users-user-form button[type=submit]:hover:not(:disabled),form.n-users-form button[type=submit]:hover:not(:disabled){background-color:var(--nu-color-primary-dark);border-color:var(--nu-color-primary-dark)}.n-users-login-section button[type=submit]:disabled,.n-users-register-section button[type=submit]:disabled,.n-users-reset-password-container button[type=submit]:disabled,.n-users-user-form button[type=submit]:disabled,form.n-users-form button[type=submit]:disabled{cursor:not-allowed;opacity:.6}.n-users-error-message,.n-users-error-text{background-color:var(--nu-color-error-light,#fef2f2);border:1px solid var(--nu-color-error-border,#fecaca);border-radius:.5rem;color:var(--nu-color-error,#dc3545);font-size:.875rem;margin-top:.5rem;padding:.75rem 1rem}.n-users-success-message{background-color:var(--nu-color-success-light,#f0fff4);border:1px solid var(--nu-color-success-border,#9ae6b4);border-radius:.5rem;color:var(--nu-color-success,#10b981);font-size:.875rem;margin-top:.5rem;padding:.75rem 1rem}.n-users-grid{display:grid;gap:1rem}.n-users-grid-2{grid-template-columns:1fr 5fr}.n-users-grid-auto{grid-template-columns:repeat(auto-fill,minmax(12em,1fr))}.n-users-form-actions{align-items:center;display:flex;gap:1rem;margin-top:1.5rem}.n-users-loading-spinner{animation:n-users-spin 1s linear infinite;border:2px solid var(--nu-color-white,#fff);border-radius:50%;border-top:2px solid transparent;height:16px;width:16px}@keyframes n-users-spin{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}.n-users-card{background-color:var(--nu-color-bg-primary,#fff);border:1px solid var(--nu-color-border,#e5e7eb);border-radius:.5rem;padding:1rem}.n-users-section{margin:0 auto;max-width:42em;padding:1em}.n-users-section-header{border-bottom:.1em solid var(--nu-color-border,#e5e7eb);margin-bottom:1rem;padding-bottom:.5rem}.n-users-form-help{color:var(--nu-color-text-secondary,#6b7280);font-size:.75rem;margin-top:.25rem}.n-users-strength-bar{background-color:var(--nu-color-strength-bg,#e9ecef);border-radius:2px;height:4px;margin-bottom:4px;overflow:hidden;width:100%}.n-users-strength-fill{height:100%;transition:width .3s ease,background-color .3s ease}.n-users-strength-text{font-size:.75rem;font-weight:500}.n-users-validation-container{background-color:#f8f9fa;border:1px solid #e9ecef;border-radius:4px;margin-top:12px;padding:12px}.n-users-container-title{color:#495057;font-size:.875rem;font-weight:600;margin-bottom:8px}.n-users-list-unstyled{list-style:none;margin:0;padding-left:0}.n-users-list-item{align-items:center;display:flex;font-size:.875rem;margin-bottom:6px;transition:color .2s ease}.n-users-list-item:last-child{margin-bottom:0}.n-users-icon{font-weight:700;margin-right:8px;min-width:16px;text-align:center}.n-users-text{flex:1}.n-users-list ul{list-style:none}.n-users-login-section form,.n-users-register-section form,.n-users-reset-password-container form,.n-users-user-form form,form.n-users-form{display:flex;flex-direction:column;gap:1.5rem}.n-users-login-section{background:linear-gradient(135deg,var(--nu-color-bg-primary) 0,var(--nu-color-bg-secondary) 100%);border:1px solid var(--nu-color-border);border-radius:.75em;box-shadow:0 4px 6px -1px rgba(0,0,0,.1),0 2px 4px -1px rgba(0,0,0,.06);max-width:25rem}.n-users-login-header{margin-bottom:1em;text-align:center}.n-users-login-title{color:var(--nu-color-gray-700);font-size:1.875rem;font-weight:700;line-height:1.2;margin:0 0 .5em}.n-users-login-subtitle{color:var(--nu-color-gray-700);font-size:.875rem;line-height:1.5;margin:0}.n-users-remember-me{align-items:center;display:flex;gap:.5rem}.n-users-remember-me label{color:var(--nu-color-gray-700);font-size:.875rem;margin:0}.n-users-login-footer{margin-top:1em;text-align:center}.n-users-forgot-password{margin:0}.n-users-forgot-link{align-items:center;color:var(--nu-color-primary);display:inline-flex;font-size:.875rem;gap:.5rem;text-decoration:none;transition:color .2s ease-in-out}.n-users-forgot-link:hover:not(.loading){color:var(--nu-color-primary-dark);text-decoration:underline}.n-users-forgot-link.loading{cursor:not-allowed;opacity:.6;pointer-events:none}.n-users-password-strength{margin-top:8px}.n-users-validation-rules{margin-top:12px}.n-users-rules-title{margin-bottom:8px}.n-users-rules-list{padding-left:0}.n-users-rule-item{margin-bottom:6px}.n-users-rule-item:last-child{margin-bottom:0}.n-users-rule-passed{color:var(--nu-color-validation-passed,#28a745)}.n-users-rule-failed{color:var(--nu-color-validation-failed,#dc3545)}.n-users-rule-icon{margin-right:8px}.n-users-rule-text{flex:1}.n-users-validation-errors{margin-top:8px}.n-users-error-text:last-child{margin-bottom:0}.n-users-password-hints{margin-top:8px}.n-users-hint-title{margin-bottom:8px}.n-users-hint-list{padding-left:16px}.n-users-hint-item{color:var(--nu-color-validation-hint,#6c757d);margin-bottom:4px}.n-users-hint-item:last-child{margin-bottom:0}.n-users-logout-link{background:var(--nu-color-error);border:2px solid transparent;border-color:var(--nu-color-error-dark);border-radius:.5em;color:#fff;padding:.5em 1em;text-decoration:none}.n-users-logout-link:hover{border-color:var(--nu-color-primary)}.n-users-user-card dd{margin:0}.n-users-user-card-actions{display:flex;gap:.5rem;margin-top:1rem}.n-users-user-form{margin:0 auto;max-width:500px}.n-users-form-group input.error{border-color:#dc3545}.n-users-profile-info{background-color:var(--nu-color-bg-primary);border-top-left-radius:.5em;border-top-right-radius:.5em}.n-users-profile-details{font-size:1rem;list-style:none;margin:0;padding:0}.n-users-reset-password-container{background-color:var(--nu-color-bg-primary);border-bottom-left-radius:.5em;border-bottom-right-radius:.5em}@media (max-width:480px){.n-users-login-title{font-size:1.5rem}}.n-users-list-enter-active,.n-users-list-leave-active,.n-users-list-move{transition:all .3s ease}.n-users-list-enter-from,.n-users-list-leave-to{opacity:0;transform:translateX(2rem)}.n-users-list-leave-active{position:absolute}.n-users-list-move{transition-timing-function:ease}

package/dist/runtime/components/NUsersGoogleLoginButton.vue

@@ -0,0 +1,75 @@
+<script setup>
+import { ref, computed } from "vue";
+import { useRuntimeConfig, navigateTo } from "#imports";
+const props = defineProps({
+  redirectEndpoint: { type: String, required: false },
+  buttonText: { type: String, required: false, default: "Continue with Google" },
+  showLogo: { type: Boolean, required: false, default: true },
+  class: { type: String, required: false }
+});
+const emit = defineEmits(["click"]);
+const { public: { nuxtUsers } } = useRuntimeConfig();
+const { apiBasePath } = nuxtUsers;
+const isLoading = ref(false);
+const redirectEndpoint = computed(
+  () => props.redirectEndpoint || `${apiBasePath}/auth/google/redirect`
+);
+const handleGoogleLogin = async () => {
+  isLoading.value = true;
+  emit("click");
+  try {
+    await navigateTo(redirectEndpoint.value, { external: true });
+  } catch (error) {
+    console.error("[Nuxt Users] Google OAuth redirect failed:", error);
+  } finally {
+    isLoading.value = false;
+  }
+};
+</script>
+
+<template>
+  <button
+    type="button"
+    class="n-users-google-btn"
+    :class="[{ loading: isLoading }, props.class]"
+    :disabled="isLoading"
+    @click="handleGoogleLogin"
+  >
+    <!-- Loading spinner -->
+    <span
+      v-if="isLoading"
+      class="n-users-loading-spinner"
+    />
+
+    <!-- Google logo SVG -->
+    <svg
+      v-if="showLogo && !isLoading"
+      class="n-users-google-logo"
+      viewBox="0 0 24 24"
+      width="18"
+      height="18"
+    >
+      <path
+        fill="#4285F4"
+        d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z"
+      />
+      <path
+        fill="#34A853"
+        d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z"
+      />
+      <path
+        fill="#FBBC05"
+        d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z"
+      />
+      <path
+        fill="#EA4335"
+        d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z"
+      />
+    </svg>
+
+    <!-- Button text -->
+    <span class="n-users-google-text">
+      {{ isLoading ? "Redirecting..." : buttonText }}
+    </span>
+  </button>
+</template>

package/dist/runtime/components/NUsersGoogleLoginButton.vue.d.ts

@@ -0,0 +1,30 @@
+interface Props {
+    /**
+     * Custom redirect endpoint for Google OAuth
+     * @default '/api/nuxt-users/auth/google/redirect'
+     */
+    redirectEndpoint?: string;
+    /**
+     * Button text
+     * @default 'Continue with Google'
+     */
+    buttonText?: string;
+    /**
+     * Show Google logo in button
+     * @default true
+     */
+    showLogo?: boolean;
+    /**
+     * Custom CSS class for button
+     */
+    class?: string;
+}
+declare const _default: import("vue").DefineComponent<Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {} & {
+    click: () => any;
+}, string, import("vue").PublicProps, Readonly<Props> & Readonly<{
+    onClick?: (() => any) | undefined;
+}>, {
+    buttonText: string;
+    showLogo: boolean;
+}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+export default _default;

package/dist/runtime/composables/useAuthentication.d.ts

@@ -4,6 +4,6 @@ export declare const useAuthentication: () => {
     isAuthenticated: import("vue").ComputedRef<boolean>;
     login: (userData: User, rememberMe?: boolean) => void;
     logout: () => Promise<void>;
-    fetchUser: () => Promise<any>;
+    fetchUser: (useSSR?: boolean) => Promise<any>;
     initializeUser: () => Promise<void>;
 };

package/dist/runtime/composables/useAuthentication.js

@@ -1,4 +1,4 @@
-import { useState, useRuntimeConfig } from "#app";
+import { useState, useRuntimeConfig, useFetch } from "#app";
 import { computed, readonly } from "vue";
 let initializationPromise = null;
 export const useAuthentication = () => {
@@ -36,22 +36,40 @@ export const useAuthentication = () => {
       }
     }
   };
-  const fetchUser = async () => {
+  const fetchUser = async (useSSR = false) => {
     try {
-      const response = await $fetch(`${apiBasePath}/me`, { method: "GET" });
-      user.value = response.user;
+      let userData = null;
+      if (useSSR) {
+        const { data, error } = await useFetch(`${apiBasePath}/me`, {
+          server: true,
+          lazy: false
+        });
+        if (error.value) {
+          throw new Error(error.value.message || "Failed to fetch user");
+        }
+        userData = data.value?.user || null;
+      } else {
+        const response = await $fetch(`${apiBasePath}/me`, {
+          method: "GET"
+        });
+        userData = response.user;
+      }
+      if (!userData) {
+        throw new Error("No user data received");
+      }
+      user.value = userData;
       if (import.meta.client) {
         const wasInLocalStorage = localStorage.getItem("user") !== null;
         const wasInSessionStorage = sessionStorage.getItem("user") !== null;
         if (wasInLocalStorage) {
-          localStorage.setItem("user", JSON.stringify(response.user));
+          localStorage.setItem("user", JSON.stringify(userData));
         } else if (wasInSessionStorage) {
-          sessionStorage.setItem("user", JSON.stringify(response.user));
+          sessionStorage.setItem("user", JSON.stringify(userData));
         } else {
-          sessionStorage.setItem("user", JSON.stringify(response.user));
+          sessionStorage.setItem("user", JSON.stringify(userData));
         }
       }
-      return response.user;
+      return userData;
     } catch (error) {
       console.error("Failed to fetch user:", error);
       user.value = null;

package/dist/runtime/middleware/authorization.client.js

@@ -2,7 +2,7 @@ import { defineNuxtRouteMiddleware, navigateTo, useRuntimeConfig } from "#app";
 import { useAuthentication } from "../composables/useAuthentication.js";
 import { hasPermission, isWhitelisted } from "../utils/permissions.js";
 import { NO_AUTH_PATHS, NO_AUTH_API_PATHS } from "../constants.js";
-export default defineNuxtRouteMiddleware((to) => {
+export default defineNuxtRouteMiddleware(async (to) => {
   const { public: { nuxtUsers: publicNuxtUsers } } = useRuntimeConfig();
   const publicOptions = publicNuxtUsers;
   const base = publicOptions.apiBasePath || "/api/nuxt-users";
@@ -18,7 +18,14 @@ export default defineNuxtRouteMiddleware((to) => {
     console.log(`[Nuxt Users] client.middleware.auth.global: Whitelisted: ${to.path}`);
     return;
   }
-  const { isAuthenticated, user } = useAuthentication();
+  const { isAuthenticated, user, fetchUser } = useAuthentication();
+  if (!isAuthenticated.value && to.query?.oauth_success === "true") {
+    try {
+      await fetchUser(true);
+    } catch (error) {
+      console.error("[Nuxt Users] Failed to fetch user after OAuth:", error);
+    }
+  }
   if (!isAuthenticated.value) {
     console.log(`[Nuxt Users] client.middleware.auth.global: Unauthenticated ${to.path}, redirecting to /login`);
     return navigateTo("/login");
@@ -27,9 +34,4 @@ export default defineNuxtRouteMiddleware((to) => {
     console.log(`[Nuxt Users] client.middleware.auth.global: User with role ${user.value?.role} denied access to ${to.path}`);
     return navigateTo("/login");
   }
-  console.log("[Nuxt Users] client.middleware.auth.global", {
-    isAuthenticated: isAuthenticated.value,
-    userRole: user.value?.role,
-    to: to.path
-  });
 });

package/dist/runtime/server/api/nuxt-users/auth/google/callback.get.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export default _default;

package/dist/runtime/server/api/nuxt-users/auth/google/callback.get.js

@@ -0,0 +1,68 @@
+import { defineEventHandler, sendRedirect, getQuery, setCookie } from "h3";
+import { useRuntimeConfig } from "#imports";
+import {
+  createGoogleOAuth2Client,
+  getGoogleUserFromCode,
+  findOrCreateGoogleUser,
+  createAuthTokenForUser
+} from "../../../../utils/google-oauth.js";
+export default defineEventHandler(async (event) => {
+  const { nuxtUsers } = useRuntimeConfig();
+  const options = nuxtUsers;
+  const query = getQuery(event);
+  if (!options.auth.google) {
+    return sendRedirect(event, "/login?error=oauth_not_configured");
+  }
+  if (query.error) {
+    console.error("[Nuxt Users] Google OAuth error:", query.error);
+    const errorRedirect = options.auth.google.errorRedirect || "/login?error=oauth_failed";
+    return sendRedirect(event, errorRedirect);
+  }
+  if (!query.code || typeof query.code !== "string") {
+    console.error("[Nuxt Users] Missing authorization code in OAuth callback");
+    const errorRedirect = options.auth.google.errorRedirect || "/login?error=oauth_failed";
+    return sendRedirect(event, errorRedirect);
+  }
+  try {
+    const baseUrl = getRequestURL(event).origin;
+    const callbackPath = options.auth.google.callbackUrl || `${options.apiBasePath}/auth/google/callback`;
+    const callbackUrl = `${baseUrl}${callbackPath}`;
+    const oauth2Client = createGoogleOAuth2Client(options.auth.google, callbackUrl);
+    const googleUser = await getGoogleUserFromCode(oauth2Client, query.code);
+    const user = await findOrCreateGoogleUser(googleUser, options);
+    if (!user) {
+      console.warn(`[Nuxt Users] User not registered attempted Google OAuth login: ${googleUser.email}`);
+      const errorRedirect = options.auth.google.errorRedirect || "/login?error=user_not_registered";
+      return sendRedirect(event, errorRedirect);
+    }
+    if (!user.active) {
+      console.warn(`[Nuxt Users] Inactive user attempted Google OAuth login: ${user.email}`);
+      const errorRedirect = options.auth.google.errorRedirect || "/login?error=account_inactive";
+      return sendRedirect(event, errorRedirect);
+    }
+    const token = await createAuthTokenForUser(user, options, true);
+    const cookieOptions = {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "lax",
+      path: "/",
+      maxAge: 60 * 60 * 24 * (options.auth.rememberMeExpiration || 30)
+      // 30 days default
+    };
+    setCookie(event, "auth_token", token, cookieOptions);
+    console.log(`[Nuxt Users] Google OAuth login successful for user: ${user.email}`);
+    const successRedirect = options.auth.google.successRedirect || "/";
+    const redirectUrl = successRedirect.includes("?") ? `${successRedirect}&oauth_success=true` : `${successRedirect}?oauth_success=true`;
+    return sendRedirect(event, redirectUrl);
+  } catch (error) {
+    console.error("[Nuxt Users] Google OAuth callback error:", error);
+    const errorRedirect = options.auth.google?.errorRedirect || "/login?error=oauth_failed";
+    return sendRedirect(event, errorRedirect);
+  }
+});
+const getRequestURL = (event) => {
+  const headers = event.node.req.headers;
+  const host = headers.host || headers[":authority"];
+  const protocol = headers["x-forwarded-proto"] || "https";
+  return new URL(`${protocol}://${host}`);
+};

package/dist/runtime/server/api/nuxt-users/auth/google/redirect.get.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export default _default;

package/dist/runtime/server/api/nuxt-users/auth/google/redirect.get.js

@@ -0,0 +1,39 @@
+import { defineEventHandler, sendRedirect, createError } from "h3";
+import { useRuntimeConfig } from "#imports";
+import { createGoogleOAuth2Client, getGoogleAuthUrl } from "../../../../utils/google-oauth.js";
+export default defineEventHandler(async (event) => {
+  const { nuxtUsers } = useRuntimeConfig();
+  const options = nuxtUsers;
+  if (!options.auth.google) {
+    throw createError({
+      statusCode: 500,
+      statusMessage: "Google OAuth is not configured"
+    });
+  }
+  if (!options.auth.google.clientId || !options.auth.google.clientSecret) {
+    throw createError({
+      statusCode: 500,
+      statusMessage: "Google OAuth client ID and secret are required"
+    });
+  }
+  try {
+    const baseUrl = getRequestURL(event).origin;
+    const callbackPath = options.auth.google.callbackUrl || `${options.apiBasePath}/auth/google/callback`;
+    const callbackUrl = `${baseUrl}${callbackPath}`;
+    const oauth2Client = createGoogleOAuth2Client(options.auth.google, callbackUrl);
+    const authUrl = getGoogleAuthUrl(oauth2Client, options.auth.google);
+    return sendRedirect(event, authUrl);
+  } catch (error) {
+    console.error("[Nuxt Users] Google OAuth redirect error:", error);
+    throw createError({
+      statusCode: 500,
+      statusMessage: "Failed to initiate Google OAuth"
+    });
+  }
+});
+const getRequestURL = (event) => {
+  const headers = event.node.req.headers;
+  const host = headers.host || headers[":authority"];
+  const protocol = headers["x-forwarded-proto"];
+  return new URL(`${protocol}://${host}`);
+};

package/dist/runtime/server/utils/add-google-oauth-fields.d.ts

@@ -0,0 +1,2 @@
+import type { ModuleOptions } from 'nuxt-users/utils';
+export declare const addGoogleOauthFields: (options: ModuleOptions) => Promise<void>;

package/dist/runtime/server/utils/add-google-oauth-fields.js

@@ -0,0 +1,22 @@
+import { useDb } from "./db.js";
+export const addGoogleOauthFields = async (options) => {
+  const connectorName = options.connector.name;
+  const db = await useDb(options);
+  const tableName = options.tables.users;
+  console.log(`[Nuxt Users] DB:Add Google OAuth fields to ${connectorName} Users Table in ${tableName}...`);
+  if (connectorName === "sqlite" || connectorName === "mysql" || connectorName === "postgresql") {
+    try {
+      await db.sql`ALTER TABLE {${tableName}} ADD COLUMN google_id TEXT`;
+      console.log("[Nuxt Users] Added google_id column \u2705");
+    } catch (error) {
+      console.error("[Nuxt Users] google_id column might already exist", error);
+    }
+    try {
+      await db.sql`ALTER TABLE {${tableName}} ADD COLUMN profile_picture TEXT`;
+      console.log("[Nuxt Users] Added profile_picture column \u2705");
+    } catch (error) {
+      console.error("[Nuxt Users] profile_picture column might already exist", error);
+    }
+  }
+  console.log(`[Nuxt Users] DB:Add Google OAuth fields to ${connectorName} Users Table \u2705`);
+};

package/dist/runtime/server/utils/create-users-table.js

@@ -12,6 +12,8 @@ export const createUsersTable = async (options) => {
       name TEXT NOT NULL,
       password TEXT NOT NULL,
       role TEXT NOT NULL DEFAULT 'user',
+      google_id TEXT UNIQUE,
+      profile_picture TEXT,
       created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
       updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
     )
@@ -25,6 +27,8 @@ export const createUsersTable = async (options) => {
         name VARCHAR(255) NOT NULL,
         password VARCHAR(255) NOT NULL,
         role VARCHAR(32) NOT NULL DEFAULT 'user',
+        google_id VARCHAR(255) UNIQUE,
+        profile_picture TEXT,
         created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
         updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
       )
@@ -38,10 +42,12 @@ export const createUsersTable = async (options) => {
         name VARCHAR(255) NOT NULL,
         password VARCHAR(255) NOT NULL,
         role VARCHAR(32) NOT NULL DEFAULT 'user',
+        google_id VARCHAR(255) UNIQUE,
+        profile_picture TEXT,
         created_at TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
         updated_at TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP
       )
     `;
   }
-  console.log(`[Nuxt Users] DB:Create ${connectorName} Users Table Fields: id, email, name, password, role, created_at, updated_at \u2705`);
+  console.log(`[Nuxt Users] DB:Create ${connectorName} Users Table Fields: id, email, name, password, role, google_id, profile_picture, created_at, updated_at \u2705`);
 };

package/dist/runtime/server/utils/google-oauth.d.ts

@@ -0,0 +1,33 @@
+import { OAuth2Client } from 'google-auth-library';
+import type { ModuleOptions, User, GoogleOAuthOptions } from 'nuxt-users/utils';
+export interface GoogleUserInfo {
+    id: string;
+    email: string;
+    name: string;
+    picture?: string;
+    verified_email: boolean;
+}
+/**
+ * Create Google OAuth2 client
+ */
+export declare function createGoogleOAuth2Client(options: GoogleOAuthOptions, callbackUrl: string): OAuth2Client;
+/**
+ * Generate authorization URL for Google OAuth
+ */
+export declare function getGoogleAuthUrl(oauth2Client: OAuth2Client, options: GoogleOAuthOptions): string;
+/**
+ * Exchange authorization code for tokens and get user info
+ */
+export declare function getGoogleUserFromCode(oauth2Client: OAuth2Client, code: string): Promise<GoogleUserInfo>;
+/**
+ * Generate a secure random password for OAuth users
+ */
+export declare function generateSecurePassword(): Promise<string>;
+/**
+ * Find or create user from Google OAuth data
+ */
+export declare function findOrCreateGoogleUser(googleUser: GoogleUserInfo, moduleOptions: ModuleOptions): Promise<User | null>;
+/**
+ * Create authentication token for user (reusing existing logic)
+ */
+export declare function createAuthTokenForUser(user: User, moduleOptions: ModuleOptions, rememberMe?: boolean): Promise<string>;

package/dist/runtime/server/utils/google-oauth.js

@@ -0,0 +1,136 @@
+import { OAuth2Client } from "google-auth-library";
+import crypto from "node:crypto";
+import bcrypt from "bcrypt";
+import { useDb } from "./db.js";
+export function createGoogleOAuth2Client(options, callbackUrl) {
+  return new OAuth2Client(
+    options.clientId,
+    options.clientSecret,
+    callbackUrl
+  );
+}
+export function getGoogleAuthUrl(oauth2Client, options) {
+  const scopes = options.scopes || ["openid", "profile", "email"];
+  return oauth2Client.generateAuthUrl({
+    access_type: "offline",
+    scope: scopes,
+    include_granted_scopes: true
+  });
+}
+export async function getGoogleUserFromCode(oauth2Client, code) {
+  const { tokens } = await oauth2Client.getToken(code);
+  oauth2Client.setCredentials(tokens);
+  const response = await fetch("https://www.googleapis.com/oauth2/v2/userinfo", {
+    headers: {
+      Authorization: `Bearer ${tokens.access_token}`
+    }
+  });
+  if (!response.ok) {
+    throw new Error(`Failed to fetch user info: ${response.statusText}`);
+  }
+  const data = await response.json();
+  if (!data.email || !data.verified_email) {
+    throw new Error("Google account email not verified");
+  }
+  return {
+    id: data.id,
+    email: data.email,
+    name: data.name || data.email.split("@")[0],
+    picture: data.picture || void 0,
+    verified_email: data.verified_email
+  };
+}
+export async function generateSecurePassword() {
+  const randomBytes = crypto.randomBytes(32).toString("hex");
+  return await bcrypt.hash(`OAUTH_${randomBytes}`, 10);
+}
+export async function findOrCreateGoogleUser(googleUser, moduleOptions) {
+  const db = await useDb(moduleOptions);
+  const usersTable = moduleOptions.tables.users;
+  const allowAutoRegistration = moduleOptions.auth.google?.allowAutoRegistration ?? false;
+  let userResult = await db.sql`
+    SELECT * FROM {${usersTable}} 
+    WHERE google_id = ${googleUser.id}
+  `;
+  if (userResult.rows.length > 0) {
+    const user = userResult.rows[0];
+    if (user.profile_picture !== googleUser.picture) {
+      await db.sql`
+        UPDATE {${usersTable}} 
+        SET profile_picture = ${googleUser.picture}, updated_at = CURRENT_TIMESTAMP
+        WHERE id = ${user.id}
+      `;
+      user.profile_picture = googleUser.picture;
+    }
+    return user;
+  }
+  userResult = await db.sql`
+    SELECT * FROM {${usersTable}} 
+    WHERE email = ${googleUser.email}
+  `;
+  if (userResult.rows.length > 0) {
+    const user = userResult.rows[0];
+    await db.sql`
+      UPDATE {${usersTable}} 
+      SET google_id = ${googleUser.id}, 
+          profile_picture = ${googleUser.picture},
+          updated_at = CURRENT_TIMESTAMP
+      WHERE id = ${user.id}
+    `;
+    user.google_id = googleUser.id;
+    user.profile_picture = googleUser.picture;
+    return user;
+  }
+  if (!allowAutoRegistration) {
+    return null;
+  }
+  const securePassword = await generateSecurePassword();
+  await db.sql`
+    INSERT INTO {${usersTable}} (
+      email, name, password, role, google_id, profile_picture, 
+      active, created_at, updated_at
+    ) VALUES (
+      ${googleUser.email}, 
+      ${googleUser.name}, 
+      ${securePassword},
+      'user',
+      ${googleUser.id},
+      ${googleUser.picture || null},
+      true,
+      CURRENT_TIMESTAMP,
+      CURRENT_TIMESTAMP
+    )
+  `;
+  const createdUserResult = await db.sql`
+    SELECT * FROM {${usersTable}} 
+    WHERE google_id = ${googleUser.id}
+  `;
+  return createdUserResult.rows[0];
+}
+export async function createAuthTokenForUser(user, moduleOptions, rememberMe = false) {
+  const db = await useDb(moduleOptions);
+  const personalAccessTokensTable = moduleOptions.tables.personalAccessTokens;
+  const token = crypto.randomBytes(64).toString("hex");
+  const tokenName = "oauth_auth_token";
+  const expiresAt = /* @__PURE__ */ new Date();
+  if (rememberMe) {
+    const longTermDays = moduleOptions.auth.rememberMeExpiration || 30;
+    expiresAt.setDate(expiresAt.getDate() + longTermDays);
+  } else {
+    expiresAt.setMinutes(expiresAt.getMinutes() + moduleOptions.auth.tokenExpiration);
+  }
+  await db.sql`
+    INSERT INTO {${personalAccessTokensTable}} (
+      tokenable_type, tokenable_id, name, token, expires_at, created_at, updated_at
+    ) VALUES (
+      'user', 
+      ${user.id}, 
+      ${tokenName}, 
+      ${token}, 
+      ${expiresAt.toISOString().slice(0, 19).replace("T", " ")}, 
+      CURRENT_TIMESTAMP, 
+      CURRENT_TIMESTAMP
+    )
+  `;
+  return token;
+}

package/dist/runtime/server/utils/index.d.ts

@@ -6,3 +6,4 @@ export { createPersonalAccessTokensTable } from './create-personal-access-tokens
 export { createPasswordResetTokensTable } from './create-password-reset-tokens-table.js';
 export { createMigrationsTable } from './create-migrations-table.js';
 export { runMigrations } from './migrate.js';
+export { createGoogleOAuth2Client, getGoogleAuthUrl, getGoogleUserFromCode, findOrCreateGoogleUser, createAuthTokenForUser, generateSecurePassword } from './google-oauth.js';

package/dist/runtime/server/utils/index.js

@@ -6,3 +6,4 @@ export { createPersonalAccessTokensTable } from "./create-personal-access-tokens
 export { createPasswordResetTokensTable } from "./create-password-reset-tokens-table.js";
 export { createMigrationsTable } from "./create-migrations-table.js";
 export { runMigrations } from "./migrate.js";
+export { createGoogleOAuth2Client, getGoogleAuthUrl, getGoogleUserFromCode, findOrCreateGoogleUser, createAuthTokenForUser, generateSecurePassword } from "./google-oauth.js";

package/dist/runtime/server/utils/migrate.js

@@ -4,6 +4,7 @@ import { createPersonalAccessTokensTable } from "./create-personal-access-tokens
 import { createPasswordResetTokensTable } from "./create-password-reset-tokens-table.js";
 import { createMigrationsTable } from "./create-migrations-table.js";
 import { addActiveToUsers } from "./add-active-to-users.js";
+import { addGoogleOauthFields } from "./add-google-oauth-fields.js";
 const migrations = [
   {
     name: "create_migrations_table",
@@ -24,6 +25,10 @@ const migrations = [
   {
     name: "add_active_to_users",
     run: addActiveToUsers
+  },
+  {
+    name: "add_google_oauth_fields",
+    run: addGoogleOauthFields
   }
 ];
 export const getAppliedMigrations = async (options) => {

package/dist/shared/{nuxt-users.BTVH9EyH.d.mts → nuxt-users.SXaMnaEL.d.mts}

@@ -12,6 +12,42 @@ type DatabaseConfig = {
     password?: string;
     database?: string;
 };
+interface GoogleOAuthOptions {
+    /**
+     * Google OAuth client ID from Google Cloud Console
+     */
+    clientId: string;
+    /**
+     * Google OAuth client secret from Google Cloud Console
+     */
+    clientSecret: string;
+    /**
+     * Callback URL for Google OAuth (must match what's configured in Google Cloud Console)
+     * @default '/api/nuxt-users/auth/google/callback'
+     */
+    callbackUrl?: string;
+    /**
+     * Redirect URL after successful authentication
+     * @default '/'
+     */
+    successRedirect?: string;
+    /**
+     * Redirect URL after failed authentication
+     * @default '/login?error=oauth_failed'
+     */
+    errorRedirect?: string;
+    /**
+     * Google OAuth scopes to request
+     * @default ['openid', 'profile', 'email']
+     */
+    scopes?: string[];
+    /**
+     * Allow automatic user registration when logging in with Google for the first time
+     * If false, only existing users with matching email can log in with Google
+     * @default false
+     */
+    allowAutoRegistration?: boolean;
+}
 interface RuntimeModuleOptions {
     connector?: {
         name: DatabaseType;
@@ -75,6 +111,11 @@ interface RuntimeModuleOptions {
          * }
          */
         permissions?: Record<string, (string | Permission)[]>;
+        /**
+         * Google OAuth configuration
+         * Enable Google OAuth login/registration
+         */
+        google?: GoogleOAuthOptions;
     };
     /**
      * Password validation configuration
@@ -139,6 +180,7 @@ interface ModuleOptions {
         tokenExpiration: number;
         rememberMeExpiration: number;
         permissions: Record<string, (string | Permission)[]>;
+        google?: GoogleOAuthOptions;
     };
     passwordValidation: {
         minLength: number;
@@ -169,6 +211,8 @@ interface User {
     password: string;
     role: string;
     active: boolean;
+    google_id?: string;
+    profile_picture?: string;
     created_at: string;
     updated_at: string;
     last_login_at?: string;
@@ -225,4 +269,4 @@ declare const defaultFieldLabels: {
 };
 
 export { defaultDisplayFields as h, defaultFieldLabels as i };
-export type { DisplayFieldsProps as D, LoginFormData as L, ModuleOptions as M, PersonalAccessToken as P, RuntimeModuleOptions as R, User as U, UserWithoutPassword as a, PasswordResetToken as b, LoginFormProps as c, ResetPasswordFormProps as d, Permission as e, DatabaseType as f, DatabaseConfig as g };
+export type { DisplayFieldsProps as D, GoogleOAuthOptions as G, LoginFormData as L, ModuleOptions as M, PersonalAccessToken as P, RuntimeModuleOptions as R, User as U, UserWithoutPassword as a, PasswordResetToken as b, LoginFormProps as c, ResetPasswordFormProps as d, Permission as e, DatabaseType as f, DatabaseConfig as g };

package/dist/shared/{nuxt-users.BTVH9EyH.d.ts → nuxt-users.SXaMnaEL.d.ts}

@@ -12,6 +12,42 @@ type DatabaseConfig = {
     password?: string;
     database?: string;
 };
+interface GoogleOAuthOptions {
+    /**
+     * Google OAuth client ID from Google Cloud Console
+     */
+    clientId: string;
+    /**
+     * Google OAuth client secret from Google Cloud Console
+     */
+    clientSecret: string;
+    /**
+     * Callback URL for Google OAuth (must match what's configured in Google Cloud Console)
+     * @default '/api/nuxt-users/auth/google/callback'
+     */
+    callbackUrl?: string;
+    /**
+     * Redirect URL after successful authentication
+     * @default '/'
+     */
+    successRedirect?: string;
+    /**
+     * Redirect URL after failed authentication
+     * @default '/login?error=oauth_failed'
+     */
+    errorRedirect?: string;
+    /**
+     * Google OAuth scopes to request
+     * @default ['openid', 'profile', 'email']
+     */
+    scopes?: string[];
+    /**
+     * Allow automatic user registration when logging in with Google for the first time
+     * If false, only existing users with matching email can log in with Google
+     * @default false
+     */
+    allowAutoRegistration?: boolean;
+}
 interface RuntimeModuleOptions {
     connector?: {
         name: DatabaseType;
@@ -75,6 +111,11 @@ interface RuntimeModuleOptions {
          * }
          */
         permissions?: Record<string, (string | Permission)[]>;
+        /**
+         * Google OAuth configuration
+         * Enable Google OAuth login/registration
+         */
+        google?: GoogleOAuthOptions;
     };
     /**
      * Password validation configuration
@@ -139,6 +180,7 @@ interface ModuleOptions {
         tokenExpiration: number;
         rememberMeExpiration: number;
         permissions: Record<string, (string | Permission)[]>;
+        google?: GoogleOAuthOptions;
     };
     passwordValidation: {
         minLength: number;
@@ -169,6 +211,8 @@ interface User {
     password: string;
     role: string;
     active: boolean;
+    google_id?: string;
+    profile_picture?: string;
     created_at: string;
     updated_at: string;
     last_login_at?: string;
@@ -225,4 +269,4 @@ declare const defaultFieldLabels: {
 };
 
 export { defaultDisplayFields as h, defaultFieldLabels as i };
-export type { DisplayFieldsProps as D, LoginFormData as L, ModuleOptions as M, PersonalAccessToken as P, RuntimeModuleOptions as R, User as U, UserWithoutPassword as a, PasswordResetToken as b, LoginFormProps as c, ResetPasswordFormProps as d, Permission as e, DatabaseType as f, DatabaseConfig as g };
+export type { DisplayFieldsProps as D, GoogleOAuthOptions as G, LoginFormData as L, ModuleOptions as M, PersonalAccessToken as P, RuntimeModuleOptions as R, User as U, UserWithoutPassword as a, PasswordResetToken as b, LoginFormProps as c, ResetPasswordFormProps as d, Permission as e, DatabaseType as f, DatabaseConfig as g };

package/dist/utils.d.mts

@@ -1,4 +1,4 @@
-export { g as DatabaseConfig, f as DatabaseType, D as DisplayFieldsProps, L as LoginFormData, c as LoginFormProps, M as ModuleOptions, b as PasswordResetToken, e as Permission, P as PersonalAccessToken, d as ResetPasswordFormProps, R as RuntimeModuleOptions, U as User, a as UserWithoutPassword, h as defaultDisplayFields, i as defaultFieldLabels } from './shared/nuxt-users.BTVH9EyH.mjs';
+export { g as DatabaseConfig, f as DatabaseType, D as DisplayFieldsProps, G as GoogleOAuthOptions, L as LoginFormData, c as LoginFormProps, M as ModuleOptions, b as PasswordResetToken, e as Permission, P as PersonalAccessToken, d as ResetPasswordFormProps, R as RuntimeModuleOptions, U as User, a as UserWithoutPassword, h as defaultDisplayFields, i as defaultFieldLabels } from './shared/nuxt-users.SXaMnaEL.mjs';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/dist/utils.d.ts

@@ -1,4 +1,4 @@
-export { g as DatabaseConfig, f as DatabaseType, D as DisplayFieldsProps, L as LoginFormData, c as LoginFormProps, M as ModuleOptions, b as PasswordResetToken, e as Permission, P as PersonalAccessToken, d as ResetPasswordFormProps, R as RuntimeModuleOptions, U as User, a as UserWithoutPassword, h as defaultDisplayFields, i as defaultFieldLabels } from './shared/nuxt-users.BTVH9EyH.js';
+export { g as DatabaseConfig, f as DatabaseType, D as DisplayFieldsProps, G as GoogleOAuthOptions, L as LoginFormData, c as LoginFormProps, M as ModuleOptions, b as PasswordResetToken, e as Permission, P as PersonalAccessToken, d as ResetPasswordFormProps, R as RuntimeModuleOptions, U as User, a as UserWithoutPassword, h as defaultDisplayFields, i as defaultFieldLabels } from './shared/nuxt-users.SXaMnaEL.js';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-users",
-  "version": "1.34.7",
+  "version": "1.35.0",
   "description": "A comprehensive user management module for Nuxt 3 and Nuxt 4 applications with authentication, authorization, database support, and CLI tools",
   "keywords": [
     "nuxt",
@@ -92,6 +92,7 @@
     "bcrypt": "^6.0.0",
     "citty": "^0.1.6",
     "defu": "^6.1.4",
+    "google-auth-library": "^10.4.0",
     "nodemailer": "^7.0.5"
   },
   "optionalDependencies": {