Add high level wrappers for the most common use cases and frameworks

[DmitryScaletta]

In some cases people expect from an auth library some very opinionated decisions.
And sometimes they want very precise and low level of control.

I suggest to add wrappers for the most common use cases for different framework providers.
Basically just get the code from the docs/examples and create very simple and opinionated wrappers that handle:

• request origin validation
• hashing/verifying passwords
• login/callback/logout routes
• redirects
• status codes on errors
• framework specific things

I think it would be really helpful especially for small projects.
And if they need more precise control later, it's still possible to just use plain lucia v3 functions like before.

These wrappers can be added to a different package for example like @lucia-auth/wrappers or @lucia-auth/wrapper-express.

Of course it doesn't solve all problems like login throttling for example and won't fit to every use case.
A big warning about it can be added in the docs.

Examples how it may look like

Express

import express from "express";
import type { User, Session } from "lucia";
import {
  verifyRequestOriginMiddleware,
  sessionMiddleware,
  oAuthLoginRoute,
  oAuthCallbackRoute,
  logoutRoute,
} from '@lucia-auth/wrappers/express';

import { lucia, github } from "./lib/auth.js";
import { mainRouter } from "./routes/index.js";
import { loginRouter } from "./routes/login/index.js";

const app = express();

app.use(express.urlencoded());

app.use(verifyRequestOriginMiddleware(lucia));

app.use(sessionMiddleware(lucia));

app.use(mainRouter, loginRouter);

app.get("/login/github", oAuthLoginRoute(lucia, {
  provider: github,
  stateCookieName: 'github_oauth_state',
}));

app.get("/login/github/callback", oAuthCallbackRoute(lucia, {
  provider: github,
  stateCookieName: 'github_oauth_state',
  redirectsTo: '/',
  storeUser: async (tokens) => {
    const githubUserResponse = await fetch("https://api.github.com/user", {
      headers: {
        Authorization: `Bearer ${tokens.accessToken}`
      }
    });
    const githubUser: GitHubUser = await githubUserResponse.json();
    const existingUser = db.prepare("SELECT * FROM user WHERE github_id = ?").get(githubUser.id) as
      | DatabaseUser
      | undefined;

    if (existingUser) return existingUser;

    const userId = generateId(15);
    const user = await db.prepare("INSERT INTO user (id, github_id, username) VALUES (?, ?, ?)").run(
      userId,
      githubUser.id,
      githubUser.login
    );
    return user;
  },
}));

app.get("/logout", logoutRoute(lucia, { redirectsTo: '/login' }));

app.listen(3000);

console.log("Server running on port 3000");

declare global {
  namespace Express {
    interface Locals {
      user: User | null;
      session: Session | null;
    }
  }
}

Next.js App Router

app/login/github/route.ts

import { oAuthLoginRoute } from '@lucia-auth/wrappers/nextjs-app';
import { github, lucia } from "@/lib/auth";

export const GET = oAuthLoginRoute(lucia, {
  provider: github,
});

app/login/github/callback/route.ts

import { oAuthCallbackRoute } from '@lucia-auth/wrappers/nextjs-app';
import { github, lucia } from "@/lib/auth";

export const GET = oAuthCallbackRoute(lucia, {
  provider: github,
  redirectsTo: '/',
  storeUser: async (tokens) => {
    // ...
  },
});

And also validateRequest function like in the docs.