refactor: Migrate auth0 to separate plugin

.changeset/lazy-icons-design.md

@@ -0,0 +1,11 @@
+---
+'@halfdomelabs/baseplate-plugin-storage': patch
+'@halfdomelabs/project-builder-common': patch
+'@halfdomelabs/project-builder-server': patch
+'@halfdomelabs/baseplate-plugin-auth': patch
+'@halfdomelabs/project-builder-lib': patch
+'@halfdomelabs/project-builder-web': patch
+'@halfdomelabs/react-generators': patch
+---
+
+Split out auth0 functionality into separate plugin

package.json

@@ -36,7 +36,7 @@
     "typecheck": "turbo run typecheck --affected",
     "versions:check": "check-dependency-version-consistency .",
     "versions:fix": "check-dependency-version-consistency . --fix",
-    "watch": "turbo run watch"
+    "watch": "turbo run watch --concurrency 20"
   },
   "dependencies": {
     "@changesets/cli": "2.28.1",

packages/fastify-generators/src/constants/fastify-packages.ts

@@ -77,8 +77,6 @@ export const FASTIFY_PACKAGES = {
 
   // Auth
   '@node-rs/argon2': '2.0.2',
-  auth0: '4.0.2',
-  'fastify-auth0-verify': '3.0.0',
 
   // Postmark
   postmark: '4.0.2',

packages/fastify-generators/src/generators/index.ts

@@ -1,5 +1,4 @@
 export * from './auth/index.js';
-export * from './auth0/index.js';
 export * from './bull/index.js';
 export * from './core/index.js';
 export * from './email/index.js';

packages/project-builder-common/package.json

@@ -25,6 +25,7 @@
     "prettier:write": "prettier -w ."
   },
   "dependencies": {
+    "@halfdomelabs/baseplate-plugin-auth": "workspace:*",
     "@halfdomelabs/baseplate-plugin-storage": "workspace:*",
     "@halfdomelabs/project-builder-lib": "workspace:*",
     "@halfdomelabs/project-builder-server": "workspace:*",

packages/project-builder-lib/package.json

@@ -51,6 +51,7 @@
     "zustand": "5.0.3"
   },
   "devDependencies": {
+    "@faker-js/faker": "9.8.0",
     "@halfdomelabs/tools": "workspace:*",
     "@types/culori": "^2.1.1",
     "@types/node": "catalog:",
@@ -59,7 +60,7 @@
     "eslint": "catalog:",
     "prettier": "catalog:",
     "tsc-alias": "catalog:",
-    "type-fest": "4.32.0",
+    "type-fest": "4.41.0",
     "typescript": "catalog:",
     "vitest": "catalog:"
   },

packages/project-builder-lib/src/definition/feature/feature-utils.ts

@@ -92,6 +92,13 @@ function ensureFeatureByNameRecursively(
   return parentRef;
 }
 
+function getFeatureByName(
+  projectDefinition: ProjectDefinition,
+  name: string,
+): FeatureConfig | undefined {
+  return projectDefinition.features.find((f) => f.name === name);
+}
+
 export const FeatureUtils = {
   getRootFeatures,
   getFeatureById,
@@ -102,4 +109,5 @@ export const FeatureUtils = {
   getFeaturePathById,
   validateFeatureName,
   ensureFeatureByNameRecursively,
+  getFeatureByName,
 };

packages/project-builder-lib/src/definition/index.ts

@@ -6,3 +6,4 @@ export * from './model/model-transformer-utils.js';
 export * from './model/model-utils.js';
 export * from './plugins/index.js';
 export * from './project-definition-container.js';
+export * from './project-definition-container.test-helper.js';

packages/project-builder-lib/src/definition/model/model-utils.ts

@@ -1,3 +1,5 @@
+import { PASCAL_CASE_REGEX } from '@halfdomelabs/utils';
+
 import type {
   ModelConfig,
   ModelRelationFieldConfig,
@@ -62,10 +64,15 @@ function hasService(model: ModelConfig): boolean {
   return (
     !!model.service.create.enabled ||
     !!model.service.update.enabled ||
-    !!model.service.delete.enabled
+    !!model.service.delete.enabled ||
+    model.service.transformers.length > 0
   );
 }
 
+function validateModelName(name: string): boolean {
+  return PASCAL_CASE_REGEX.test(name);
+}
+
 export const ModelUtils = {
   byId,
   byIdOrThrow,
@@ -74,4 +81,5 @@ export const ModelUtils = {
   getModelsForFeature,
   getModelIdFields,
   hasService,
+  validateModelName,
 };

packages/project-builder-lib/src/definition/project-definition-container.test-helper.ts

@@ -0,0 +1,51 @@
+import { getLatestMigrationVersion } from '@src/migrations/index.js';
+import {
+  PluginImplementationStore,
+  zPluginWrapper,
+} from '@src/plugins/index.js';
+import { deserializeSchemaWithReferences } from '@src/references/deserialize-schema.js';
+import {
+  type ProjectDefinition,
+  projectDefinitionSchema,
+} from '@src/schema/project-definition.js';
+
+import { ProjectDefinitionContainer } from './project-definition-container.js';
+
+export function createTestProjectDefinition(
+  input: Partial<ProjectDefinition> = {},
+): ProjectDefinition {
+  return {
+    name: 'test-project',
+    features: [],
+    version: '1.0.0',
+    cliVersion: '1.0.0',
+    portOffset: 3000,
+    apps: [],
+    models: [],
+    isInitialized: true,
+    schemaVersion: getLatestMigrationVersion(),
+    ...input,
+  };
+}
+
+export function createTestProjectDefinitionContainer(
+  input: Partial<ProjectDefinition> = {},
+): ProjectDefinitionContainer {
+  const pluginStore = {
+    availablePlugins: [],
+  };
+  const pluginImplementationStore = new PluginImplementationStore({});
+  const schemaWithPlugins = zPluginWrapper(
+    projectDefinitionSchema,
+    pluginImplementationStore,
+  );
+  const resolvedRefPayload = deserializeSchemaWithReferences(
+    schemaWithPlugins,
+    createTestProjectDefinition(input),
+  );
+  return new ProjectDefinitionContainer(
+    resolvedRefPayload,
+    { pluginStore },
+    pluginImplementationStore,
+  );
+}

packages/project-builder-lib/src/migrations/index.ts

@@ -8,7 +8,7 @@ import { migration008AnonymousPublicRole } from './migration-008-anonymous-publi
 import { migration009RenameRefs } from './migration-009-rename-refs.js';
 import { migration010HexToOklch } from './migration-010-hex-to-oklch.js';
 import { migration011PluginId } from './migration-011-plugin-id.js';
-
+import { migration012MigrateAuthConfig } from './migration-012-migrate-auth-config.js';
 export const SCHEMA_MIGRATIONS: SchemaMigration[] = [
   migration005PrimaryUniqueRefs,
   migration006IndividualServiceControllers,
@@ -17,6 +17,7 @@ export const SCHEMA_MIGRATIONS: SchemaMigration[] = [
   migration009RenameRefs,
   migration010HexToOklch,
   migration011PluginId,
+  migration012MigrateAuthConfig,
 ];
 
 export function isMigrateableProjectDefinition(

packages/project-builder-lib/src/migrations/migration-012-migrate-auth-config.ts

@@ -0,0 +1,90 @@
+import { createSchemaMigration } from './types.js';
+
+interface OldConfig {
+  auth?: {
+    userModelRef: string;
+    userRoleModelRef: string;
+    useAuth0: boolean;
+    authFeatureRef: string;
+    accountsFeatureRef: string;
+    passwordProvider?: boolean;
+    roles: {
+      id: string;
+      name: string;
+      comment: string;
+      builtIn: boolean;
+    }[];
+  };
+  plugins?: {
+    id: string;
+    name: string;
+    packageName: string;
+    version: string;
+    config?: unknown;
+  }[];
+}
+
+interface NewConfig {
+  auth?: undefined;
+  plugins?: {
+    id: string;
+    name: string;
+    packageName: string;
+    version: string;
+    config?: unknown;
+  }[];
+}
+
+export const migration012MigrateAuthConfig = createSchemaMigration<
+  OldConfig,
+  NewConfig
+>({
+  version: 12,
+  name: 'migrateAuthConfig',
+  description: 'Migrate auth config to auth0 plugin config',
+  migrate: (config) => {
+    if (!config.auth?.useAuth0) {
+      return {
+        ...config,
+        auth: undefined,
+      };
+    }
+
+    const auth0PluginId = 'plugin:halfdomelabs_baseplate-plugin-auth_auth0';
+
+    const auth0Config = {
+      userAccountModelRef: config.auth.userModelRef,
+      authFeatureRef: config.auth.authFeatureRef,
+      roles: config.auth.roles.map((role) => ({
+        id: role.id,
+        name: role.name,
+        comment: role.comment,
+        builtIn: role.builtIn,
+      })),
+    };
+
+    const plugins = config.plugins ?? [];
+    const pluginIndex = plugins.findIndex((p) => p.id === auth0PluginId);
+
+    if (pluginIndex === -1) {
+      plugins.push({
+        id: auth0PluginId,
+        name: 'auth0',
+        packageName: '@halfdomelabs/baseplate-plugin-auth',
+        version: '0.1.0',
+        config: auth0Config,
+      });
+    } else {
+      plugins[pluginIndex] = {
+        ...plugins[pluginIndex],
+        config: auth0Config,
+      };
+    }
+
+    return {
+      ...config,
+      auth: undefined,
+      plugins,
+    };
+  },
+});

packages/project-builder-lib/src/plugins/schema/store.ts

@@ -16,4 +16,10 @@ export class PluginImplementationStore {
 
     return implementation;
   }
+
+  getPluginSpecOptional<TImplementation>(
+    spec: PluginSpec<TImplementation>,
+  ): TImplementation | undefined {
+    return this.implementations[spec.name] as TImplementation | undefined;
+  }
 }

packages/project-builder-lib/src/plugins/spec/auth-config-spec.ts

@@ -0,0 +1,25 @@
+import type { AuthRole } from '@src/schema/index.js';
+import type { ProjectDefinition } from '@src/schema/project-definition.js';
+
+import type { PluginSpecImplementation } from './types.js';
+
+import { createPluginSpec } from './types.js';
+
+type UserAccountModelGetter = (definition: ProjectDefinition) => string;
+type AuthRolesGetter = (definition: ProjectDefinition) => AuthRole[];
+
+/**
+ * Spec for allowing plugins to declare standard auth configurations
+ */
+export interface AuthConfigSpec extends PluginSpecImplementation {
+  getUserAccountModel: UserAccountModelGetter;
+  getAuthRoles: AuthRolesGetter;
+}
+
+/**
+ * Spec for adding config component for plugin
+ */
+export const authConfigSpec = createPluginSpec<AuthConfigSpec>(
+  'core/auth-config',
+  {},
+);

packages/project-builder-lib/src/plugins/spec/index.ts

@@ -1,3 +1,4 @@
+export * from './auth-config-spec.js';
 export * from './config-spec.js';
 export * from './types.js';
 export * from './web-config-spec.js';

packages/project-builder-lib/src/schema/apps/admin/app.ts

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 
 import { zRef, zRefBuilder } from '@src/references/index.js';
-import { authRoleEntityType } from '@src/schema/auth/types.js';
+import { authRoleEntityType } from '@src/schema/auth/index.js';
 
 import type { AdminCrudSectionConfig } from './sections/index.js';
 

packages/project-builder-lib/src/schema/apps/web/index.ts

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 
 import { zRef } from '@src/references/index.js';
-import { authRoleEntityType } from '@src/schema/auth/types.js';
+import { authRoleEntityType } from '@src/schema/auth/index.js';
 
 import { baseAppValidators } from '../base.js';
 import { createAppEntryType } from '../types.js';