mirror of https://github.com/nestriness/nestri.git synced 2026-11-03 14:12:39 +02:00

Files

T

Wanjohi 97459421f8 style(auth): white focus, and a dim button until the form can be sent

A focused field was ringed in the brand orange, which reads as an error
and competes with the wordmark. Focus is now grey while the value is
incomplete and white once it would pass, so the field says it is done.

The submit button is dimmed while any field in its form is invalid. It
uses the browser's own validity, so there is still no script, and the
code field gains a pattern so a partly typed code counts as invalid.
The button stays clickable, so pressing it early still gets the
browser's message saying what is missing.

2026-10-02 05:48:09 +03:00

script

refactor(auth): describe sign-in screens as data, draw them in one place

2026-09-18 00:16:33 +03:00

src

style(auth): white focus, and a dim button until the form can be sent

2026-10-02 05:48:09 +03:00

test

refactor(auth): describe sign-in screens as data, draw them in one place

2026-09-18 00:16:33 +03:00

bunfig.toml

feat: Sync to OSS repo

2026-08-06 22:13:51 +03:00

package.json

refactor(auth): describe sign-in screens as data, draw them in one place

2026-09-18 00:16:33 +03:00

README.md

chore: Update Readme

2026-08-06 22:32:33 +03:00

tsconfig.json

feat: Sync to OSS repo

2026-08-06 22:13:51 +03:00

README.md

packages/auth (`@nestri/auth`)

Framework-agnostic OpenAuth implementation for Nestri — the OAuth/OIDC issuer, client, subjects, and the login UI. A vendored/forked build of OpenAuth.

What it does

Everything needed to run your own authentication provider:

issuer.ts — the authorization server: routes for /authorize, /callback, /token, /userinfo, .well-known/*, plus the login UI (React renderer).
client.ts — createClient to verify JWTs against the issuer ("who is this token?").
subject.ts — typed JWT subjects (zod schemas for the token payload).
provider/* — drop-in OAuth/OIDC providers (steam, discord, github, google, apple, microsoft, slack, spotify, twitch, x, yahoo, facebook, linkedin, cognito, keycloak, jumpcloud, oauth2, oidc, password, ssh, code, arctic).
storage/* — persistence adapters for keys/sessions/codes: memory, cloudflare (KV), aws, dynamo.
ui/* — the login page components (forms, password, code, theme, CSS).
jwt.ts, keys.ts, pkce.ts, random.ts — signing, keypair management, PKCE, randomness.

Usage

Consumed by the apps/auth worker, e.g.:

import { issuer } from '@nestri/auth/index';
import { CloudflareStorage } from '@nestri/auth/storage/cloudflare';
import { SteamProvider } from '@nestri/auth/provider/steam';

The API uses createClient (from @openauth/openauth/client) or the bundled client.ts to verify tokens against the issuer URL.

Scripts

bun test      # run tests
bun run build # build (see script/build.ts)

Note

@openauthjs is the upstream project; this package's exports are meant to be API-compatible with a pinned preference toward tree-shaking-friendly imports. Prefer importing subpaths over the barrel (@nestri/auth/index).

README.md

packages/auth (@nestri/auth)

What it does

Usage

Scripts

Note

packages/auth (`@nestri/auth`)