6231424e88
* feat: add personal access tokens * feat: replace MCP tokens with OAuth foundation * fix: keep OAuth constants private in auth foundation * fix: clean up mcp oauth branch scope * fix: expose oauth metadata endpoints * fix: trim mcp oauth config to non-default options Drop OIDC scopes, the org-id JWT claim, and the openid-configuration metadata endpoint since the MCP integration is OAuth-only and the org gets resolved server-side. Also remove options that just duplicated better-auth defaults. * fix: drop redundant oauth metadata helpers Remove `session.storeSessionInDatabase: true` since better-auth only enforces it when secondaryStorage is configured. Inline the `getHostedBaseUrlForOAuthMetadata` alias and skip the async `getOAuthServerConfig()` call in the protected-resource metadata handler — the issuer is just `baseURL` without a custom jwt.issuer override. * docs: explain cache headers on mcp metadata response * Use escaped file routes for OAuth metadata * save
34 lines
1.0 KiB
TypeScript
34 lines
1.0 KiB
TypeScript
import { createAuthClient } from "better-auth/react";
|
|
import {
|
|
inferAdditionalFields,
|
|
organizationClient,
|
|
} from "better-auth/client/plugins";
|
|
import { oauthProviderClient } from "@better-auth/oauth-provider/client";
|
|
import { captureClientEvent, resetAnalyticsUser } from "@/client/lib/posthog";
|
|
import { userAdditionalFields } from "@/lib/auth-options";
|
|
import { getSignInHrefForLocation } from "@/lib/auth-redirect";
|
|
|
|
export const authClient = createAuthClient({
|
|
baseURL: typeof window !== "undefined" ? window.location.origin : "",
|
|
plugins: [
|
|
organizationClient(),
|
|
oauthProviderClient(),
|
|
inferAdditionalFields({ user: userAdditionalFields }),
|
|
],
|
|
});
|
|
|
|
export const { useSession } = authClient;
|
|
|
|
export function signOutAndRedirect() {
|
|
const signInHref = getSignInHrefForLocation(window.location);
|
|
captureClientEvent("auth:sign_out");
|
|
resetAnalyticsUser();
|
|
void authClient.signOut({
|
|
fetchOptions: {
|
|
onSuccess: () => {
|
|
window.location.assign(signInHref);
|
|
},
|
|
},
|
|
});
|
|
}
|