Add low-level auth lib + nextjs integration

packages/auth-core/src/core.ts

@@ -1,9 +1,9 @@
 import jwtDecode from "jwt-decode";
 import * as edgedb from "edgedb";
 import { ResolvedConnectConfig } from "edgedb/dist/conUtils";
 
 import * as pkce from "./pkce";
 import { BuiltinOAuthProviderNames } from "./consts";
 
 export interface TokenData {
   auth_token: string;
@@ -25,7 +25,7 @@
 
   static async create(client: edgedb.Client) {
     const connectConfig: ResolvedConnectConfig = (
       await (client as any).pool._getNormalizedConnectConfig()
     ).connectionParams;
 
     const [host, port] = connectConfig.address;
@@ -37,7 +37,7 @@
   }
 
   /** @internal */
   public async _get<T extends any = unknown>(path: string): Promise<T> {
     const res = await fetch(new URL(path, this.baseUrl), {
       method: "get",
     });
@@ -47,13 +47,13 @@
     if (res.headers.get("content-type")?.startsWith("application/json")) {
       return res.json();
     }
     return null as any;
   }
 
   /** @internal */
   public async _post<T extends any = unknown>(
     path: string,
     body?: any
   ): Promise<T> {
     const res = await fetch(new URL(path, this.baseUrl), {
       method: "post",
@@ -70,7 +70,7 @@
     if (res.headers.get("content-type")?.startsWith("application/json")) {
       return res.json();
     }
     return null as any;
   }
 
   createPKCESession() {
@@ -175,39 +175,27 @@
 
   async getProvidersInfo() {
     // TODO: cache this data when we have a way to invalidate on config update
-    let providers: {
-      _typename: string;
-      name: string;
-      display_name: string | null;
-    }[];
     try {
-      providers = await this.client.query(`
-      with module ext::auth
-      select cfg::Config.extensions[is AuthConfig].providers {
-        _typename := .__type__.name,
-        name,
-        [is OAuthProviderConfig].display_name,
+      return await this.client.queryRequiredSingle<{
+        oauth: { name: string; display_name: string }[];
+        emailPassword: boolean;
+      }>(`
+      with
+        module ext::auth,
+        providers := (select cfg::Config.extensions[is AuthConfig].providers)
+      select {
+        oauth := providers[is OAuthProviderConfig] {
+          name,
+          display_name
+        },
+        emailPassword := exists providers[is EmailPasswordProviderConfig]
       }`);
     } catch (err) {
       if (err instanceof edgedb.InvalidReferenceError) {
         throw new Error("auth extension is not enabled");
       }
       throw err;
     }
-
-    const emailPasswordProvider = providers.find(
-      (p) => p.name === "builtin::local_emailpassword"
-    );
-
-    return {
-      oauth: providers
-        .filter((p) => p.name.startsWith("builtin::oauth_"))
-        .map((p) => ({
-          name: p.name,
-          display_name: p.display_name!,
-        })),
-      emailPassword: emailPasswordProvider != null,
-    };
   }
 }