or3-provider-basic-auth 0.0.10 → 0.0.11

package/README.md

@@ -69,6 +69,7 @@ Strict-mode behavior:
 - Canonical OR3 users/workspaces are still resolved by the selected `AuthWorkspaceStore`.
 - In `invite_only` mode, signed-token, expiry, persisted invite state/token hash, and normalized-email validation runs before Basic Auth creates an account or session.
 - The selected `AuthWorkspaceStore` must support atomic invite provisioning; internal user/auth mapping, membership, and invite consumption are committed together by that provider.
+- Invite links (`/?invite=TOKEN`, copied from Admin → Workspaces, or carried in the lock page's `next`) open registration for signed-out visitors with the token filled in. The token is removed from the address bar on first read and kept in memory for that page; only one mounted auth control (sidebar, mobile More sheet or lock page) opens registration per link. On mobile the account control lives in More, so registration opens when the visitor opens More. This invite-link handoff requires published `or3-provider-basic-auth@0.0.11` or later.
 - Basic Auth account and initial refresh-session rows are created in one local SQLite transaction.
 - Access JWTs are short-lived and validated by `basicAuthProvider.getSession(event)`.
 - Refresh tokens are rotated and hashed at rest; replay attempts revoke active sessions.

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "or3-provider-basic-auth",
   "configKey": "or3-provider-basic-auth",
-  "version": "0.0.10",
+  "version": "0.0.11",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/runtime/components/BasicAuthLockPage.client.vue

@@ -23,18 +23,25 @@
 
     <BasicAuthRegisterModal
       v-model="registerModalOpen"
+      :invite-token="inviteToken"
       @registered="handleRegistered"
     />
   </div>
 </template>
 
 <script setup>
-import { nextTick, ref } from "vue";
+import { nextTick, onMounted, ref } from "vue";
 import BasicAuthRegisterModal from "./BasicAuthRegisterModal.client.vue";
 import BasicAuthSignInModal from "./BasicAuthSignInModal.client.vue";
+import { claimInviteLinkAutoOpen, readInviteLinkToken } from "../lib/invite-link.client";
 const loginIcon = "i-lucide-log-in";
 const signInModalOpen = ref(false);
 const registerModalOpen = ref(false);
+const inviteToken = ref(null);
+onMounted(() => {
+  inviteToken.value = readInviteLinkToken();
+  if (claimInviteLinkAutoOpen()) registerModalOpen.value = true;
+});
 function notifyAuthSessionChanged() {
   if (typeof window === "undefined") return;
   window.dispatchEvent(new CustomEvent("or3:auth-session-changed"));

package/dist/runtime/components/BasicAuthRegisterModal.client.d.vue.ts

@@ -1,5 +1,7 @@
 type __VLS_Props = {
     modelValue: boolean;
+    /** Token from an invite link; filled in when the form opens. */
+    inviteToken?: string | null;
 };
 declare const _default: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {} & {
     "update:modelValue": (value: boolean) => any;

package/dist/runtime/components/BasicAuthRegisterModal.client.vue

@@ -73,7 +73,10 @@
             />
           </UFormField>
 
-          <UFormField label="Invite token (optional)" name="inviteToken">
+          <UFormField
+            :label="props.inviteToken ? 'Invite token (from your invite link)' : 'Invite token (optional)'"
+            name="inviteToken"
+          >
             <UInput
               v-model="state.inviteToken"
               type="text"
@@ -111,14 +114,15 @@
 </template>
 
 <script setup>
-import { computed, reactive, ref } from "vue";
+import { computed, reactive, ref, watch } from "vue";
 import { newPasswordFitsBcrypt } from "../password-policy";
 const modalUi = {
   overlay: "basic-auth-modal-overlay",
   content: "basic-auth-modal-content sm:max-w-[420px]"
 };
 const props = defineProps({
-  modelValue: { type: Boolean, required: true }
+  modelValue: { type: Boolean, required: true },
+  inviteToken: { type: [String, null], required: false }
 });
 const emit = defineEmits(["update:modelValue", "registered"]);
 const state = reactive({
@@ -136,6 +140,9 @@ const isOpen = computed({
     emit("update:modelValue", value);
   }
 });
+watch(() => [props.modelValue, props.inviteToken], ([open, token]) => {
+  if (open && token && !state.inviteToken.trim()) state.inviteToken = token;
+}, { immediate: true });
 function close() {
   errorMessage.value = "";
   emit("update:modelValue", false);

package/dist/runtime/components/BasicAuthRegisterModal.client.vue.d.ts

@@ -1,5 +1,7 @@
 type __VLS_Props = {
     modelValue: boolean;
+    /** Token from an invite link; filled in when the form opens. */
+    inviteToken?: string | null;
 };
 declare const _default: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {} & {
     "update:modelValue": (value: boolean) => any;

package/dist/runtime/components/SidebarAuthButtonBasic.client.vue

@@ -57,6 +57,7 @@
 
     <BasicAuthRegisterModal
       v-model="registerModalOpen"
+      :invite-token="inviteToken"
       @registered="onRegistered"
     />
 
@@ -76,6 +77,7 @@ import {
   AUTH_UI_LAYOUT_KEY
 } from "../lib/auth-ui-layout";
 import { silentRefreshOnce } from "../lib/silent-refresh.client";
+import { claimInviteLinkAutoOpen, readInviteLinkToken } from "../lib/invite-link.client";
 import BasicAuthSignInModal from "./BasicAuthSignInModal.client.vue";
 import BasicAuthRegisterModal from "./BasicAuthRegisterModal.client.vue";
 import BasicAuthUserMenu from "./BasicAuthUserMenu.client.vue";
@@ -171,8 +173,13 @@ async function onRegistered() {
   await refreshSession({ allowSilentRefresh: false });
   notifyAuthSessionChanged();
 }
-onMounted(() => {
-  void refreshSession();
+const inviteToken = ref(null);
+onMounted(async () => {
+  inviteToken.value = readInviteLinkToken();
+  await refreshSession();
+  if (!isSignedIn.value && isBasicAuthProvider.value && claimInviteLinkAutoOpen()) {
+    registerModalOpen.value = true;
+  }
 });
 </script>
 

package/dist/runtime/lib/invite-link.client.d.ts

@@ -0,0 +1,4 @@
+export declare function readInviteLinkToken(): string | null;
+/** True for the one caller that should open registration for this link. */
+export declare function claimInviteLinkAutoOpen(): boolean;
+export declare function resetInviteLinkForTests(): void;

package/dist/runtime/lib/invite-link.client.js

@@ -0,0 +1,39 @@
+let token;
+let autoOpenClaimed = false;
+function takeInvite(url) {
+  const direct = url.searchParams.get("invite")?.trim();
+  if (direct) {
+    url.searchParams.delete("invite");
+    return direct;
+  }
+  const next = url.searchParams.get("next");
+  if (!next) return null;
+  const target = new URL(next, url.origin);
+  const carried = target.searchParams.get("invite")?.trim();
+  if (!carried) return null;
+  target.searchParams.delete("invite");
+  url.searchParams.set("next", target.pathname + target.search + target.hash);
+  return carried;
+}
+export function readInviteLinkToken() {
+  if (token !== void 0) return token;
+  token = null;
+  if (typeof window === "undefined") return token;
+  try {
+    const url = new URL(window.location.href);
+    token = takeInvite(url);
+    if (token) window.history.replaceState(window.history.state, "", url.pathname + url.search + url.hash);
+  } catch {
+    token = null;
+  }
+  return token;
+}
+export function claimInviteLinkAutoOpen() {
+  if (!readInviteLinkToken() || autoOpenClaimed) return false;
+  autoOpenClaimed = true;
+  return true;
+}
+export function resetInviteLinkForTests() {
+  token = void 0;
+  autoOpenClaimed = false;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "or3-provider-basic-auth",
-  "version": "0.0.10",
+  "version": "0.0.11",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Saluana/or3-provider-basic-auth.git"