Skip to content

refactor(core): restructure core codebase - #277

Merged
halvaradop merged 9 commits into
masterfrom
refactor/re-structure-core-pkg
Oct 8, 2026
Merged

halvaradop merged 9 commits into
masterfrom
refactor/re-structure-core-pkg

Conversation

@halvaradop

@halvaradop halvaradop commented Oct 8, 2026 •

Copy link
Copy Markdown
Member

Description

This pull request refactors the core package by splitting logic into dedicated files and extracting shared functionality where appropriate.

The goal is to reduce files containing multiple unrelated responsibilities, improve code organization, and make the test suite easier to maintain by grouping related logic together.

Key Changes

  • Updated file naming conventions from camelCase to hyphen-case.
  • Added a dedicated config folder for initial configuration-related logic.
  • Moved error-related logic from shared into a dedicated errors folder.
  • Cleaned up oauth/index.ts and improved its organization.
  • General codebase cleanup and structural improvements.

@vercel

vercel Bot commented Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
auth Ready Ready Preview Oct 8, 2026 4:22pm UTC

@coderabbitai

coderabbitai Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Too many files!

This PR contains 190 files, which is 90 over the limit of 100.

To get a review, reduce the PR to 100 files or fewer by splitting it into smaller PRs or changing its base branch.

Upgrade to a paid plan to raise the limit.

This review couldn't start because sufficient usage credits or metered capacity aren't available. Add credits or update usage-based reviews in the billing tab, then retry.

⚙️ Run configuration
  • Configuration used: Repository UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: ef200c38-5ba4-42de-ad30-76c834a23131
📥 Commits

Reviewing files that changed from the base of the PR and between 66f23d2 and 914298e.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (190)
  • .gitignore
  • apps/tanstack-start/package.json
  • packages/core/src/@types/config.ts
  • packages/core/src/@types/index.ts
  • packages/core/src/@types/internal.ts
  • packages/core/src/actions/csrfToken/csrf-token.ts
  • packages/core/src/actions/index.ts
  • packages/core/src/actions/providers/connected.ts
  • packages/core/src/actions/providers/disconnect.ts
  • packages/core/src/actions/providers/tokens/revoke.ts
  • packages/core/src/actions/providers/tokens/tokens.ts
  • packages/core/src/actions/providers/user/refresh.ts
  • packages/core/src/actions/session/session.ts
  • packages/core/src/actions/session/update-session.ts
  • packages/core/src/actions/signIn/sign-in-credentials.ts
  • packages/core/src/actions/signIn/sign-in.ts
  • packages/core/src/actions/signOut/sign-out.ts
  • packages/core/src/actions/signUp/sign-up.ts
  • packages/core/src/api/create-api.ts
  • packages/core/src/api/disconnect-provider.ts
  • packages/core/src/api/get-access-token.ts
  • packages/core/src/api/get-provider-tokens.ts
  • packages/core/src/api/get-session.ts
  • packages/core/src/api/index.ts
  • packages/core/src/api/is-provider-connected.ts
  • packages/core/src/api/refresh-userInfo.ts
  • packages/core/src/api/revoke-token.ts
  • packages/core/src/api/sign-in-credentials.ts
  • packages/core/src/api/sign-in.ts
  • packages/core/src/api/sign-out.ts
  • packages/core/src/api/sign-up.ts
  • packages/core/src/api/update-session.ts
  • packages/core/src/client/client.ts
  • packages/core/src/config/context.ts
  • packages/core/src/config/cookies.ts
  • packages/core/src/config/get-base-path.ts
  • packages/core/src/config/get-base-url.ts
  • packages/core/src/config/get-identity.ts
  • packages/core/src/config/get-oauth.ts
  • packages/core/src/config/get-salt.ts
  • packages/core/src/config/get-secret.ts
  • packages/core/src/config/get-trusted-origins.ts
  • packages/core/src/config/get-trusted-proxy-headers.ts
  • packages/core/src/config/hooks.ts
  • packages/core/src/config/logger/catalog.ts
  • packages/core/src/config/logger/create-logger.ts
  • packages/core/src/config/router.ts
  • packages/core/src/createAuth.ts
  • packages/core/src/errors/aura-error.ts
  • packages/core/src/errors/catalog.ts
  • packages/core/src/identity/index.ts
  • packages/core/src/jose.ts
  • packages/core/src/oauth/index.ts
  • packages/core/src/router/context.ts
  • packages/core/src/session/cookie-manager.ts
  • packages/core/src/session/jose-manager.ts
  • packages/core/src/session/stateful/create-session.ts
  • packages/core/src/session/stateful/destroy-session.ts
  • packages/core/src/session/stateful/get-provider-tokens.ts
  • packages/core/src/session/stateful/get-session.ts
  • packages/core/src/session/stateful/index.ts
  • packages/core/src/session/stateful/is-provider-connected.ts
  • packages/core/src/session/stateful/oauth-callback.ts
  • packages/core/src/session/stateful/refresh-session.ts
  • packages/core/src/session/stateful/refresh-userInfo.ts
  • packages/core/src/session/stateful/revoke-session.ts
  • packages/core/src/session/stateful/revoke-token.ts
  • packages/core/src/session/stateful/sign-in-credentials.ts
  • packages/core/src/session/stateful/sign-in.ts
  • packages/core/src/session/stateful/sign-up.ts
  • packages/core/src/session/stateless/create-session.ts
  • packages/core/src/session/stateless/destroy-session.ts
  • packages/core/src/session/stateless/get-provider-tokens.ts
  • packages/core/src/session/stateless/get-session.ts
  • packages/core/src/session/stateless/index.ts
  • packages/core/src/session/stateless/is-provider-connected.ts
  • packages/core/src/session/stateless/oauth-callback.ts
  • packages/core/src/session/stateless/refresh-session.ts
  • packages/core/src/session/stateless/refresh-userInfo.ts
  • packages/core/src/session/stateless/revoke-token.ts
  • packages/core/src/session/stateless/sign-in-credentials.ts
  • packages/core/src/session/stateless/sign-in.ts
  • packages/core/src/session/stateless/sign-up.ts
  • packages/core/src/session/strategy.ts
  • packages/core/src/shared/assert.ts
  • packages/core/src/shared/crypto.ts
  • packages/core/src/shared/http/cookie.ts
  • packages/core/src/shared/http/fetch-async.ts
  • packages/core/src/shared/http/headers.ts
  • packages/core/src/shared/http/request-metadata.ts
  • packages/core/src/shared/http/secure-connection.ts
  • packages/core/src/shared/index.ts
  • packages/core/src/shared/oauth2/authorization.ts
  • packages/core/src/shared/oauth2/create-access-token.ts
  • packages/core/src/shared/oauth2/get-user-info.ts
  • packages/core/src/shared/oauth2/index.ts
  • packages/core/src/shared/oidc/authorization-url.ts
  • packages/core/src/shared/oidc/discovery.ts
  • packages/core/src/shared/oidc/id-token.ts
  • packages/core/src/shared/oidc/jwks.ts
  • packages/core/src/shared/oidc/resolve-provider.ts
  • packages/core/src/shared/rate-limiter.ts
  • packages/core/src/shared/utils.ts
  • packages/core/src/shared/utils/api.ts
  • packages/core/src/shared/utils/get-origin-url.ts
  • packages/core/src/shared/utils/params.ts
  • packages/core/src/shared/utils/proxy-headers-source.ts
  • packages/core/src/shared/utils/refresh-tokens.ts
  • packages/core/src/shared/utils/revoke-token.ts
  • packages/core/src/shared/utils/session-strategy.ts
  • packages/core/src/shared/utils/session.ts
  • packages/core/src/validator/registry.ts
  • packages/core/test/actions/callback/stateful.test.ts
  • packages/core/test/actions/callback/stateless.test.ts
  • packages/core/test/actions/csrfToken/stateless.test.ts
  • packages/core/test/actions/providers/connected/stateful.test.ts
  • packages/core/test/actions/providers/connected/stateless.test.ts
  • packages/core/test/actions/providers/tokens/revoke/stateful.test.ts
  • packages/core/test/actions/providers/tokens/revoke/stateless.test.ts
  • packages/core/test/actions/providers/tokens/tokens/stateful.test.ts
  • packages/core/test/actions/providers/tokens/tokens/stateless.test.ts
  • packages/core/test/actions/providers/user/refresh/stateful.test.ts
  • packages/core/test/actions/providers/user/refresh/stateless.test.ts
  • packages/core/test/actions/session/session/stateful.test.ts
  • packages/core/test/actions/session/session/stateless.test.ts
  • packages/core/test/actions/session/updateSession/stateless.test.ts
  • packages/core/test/actions/signIn/signIn/stateless.test.ts
  • packages/core/test/actions/signIn/signInCredentials/stateful.test.ts
  • packages/core/test/actions/signIn/signInCredentials/stateless.test.ts
  • packages/core/test/actions/signOut/stateless.test.ts
  • packages/core/test/actions/signUp/stateful.test.ts
  • packages/core/test/actions/signUp/stateless.test.ts
  • packages/core/test/api/stateful/getAccessToken.test.ts
  • packages/core/test/api/stateful/getProviderTokens.test.ts
  • packages/core/test/api/stateful/getSession.test.ts
  • packages/core/test/api/stateful/isProviderConnected.test.ts
  • packages/core/test/api/stateful/refreshUserInfo.test.ts
  • packages/core/test/api/stateful/revokeToken.test.ts
  • packages/core/test/api/stateful/signIn.test.ts
  • packages/core/test/api/stateful/signInCredentials.test.ts
  • packages/core/test/api/stateful/signOut.test.ts
  • packages/core/test/api/stateful/signUp.test.ts
  • packages/core/test/api/stateful/updateSession.test.ts
  • packages/core/test/api/stateless/getAccessToken.test.ts
  • packages/core/test/api/stateless/getProviderTokens.test.ts
  • packages/core/test/api/stateless/getSession.test.ts
  • packages/core/test/api/stateless/isProviderConnected.test.ts
  • packages/core/test/api/stateless/refreshUserInfo.test.ts
  • packages/core/test/api/stateless/revokeToken.test.ts
  • packages/core/test/api/stateless/signIn.test.ts
  • packages/core/test/api/stateless/signInCredentials.test.ts
  • packages/core/test/api/stateless/signOut.test.ts
  • packages/core/test/api/stateless/signUp.test.ts
  • packages/core/test/api/stateless/updateSession.test.ts
  • packages/core/test/client/client.test.ts
  • packages/core/test/config/base-path.test.ts
  • packages/core/test/config/logger.test.ts
  • packages/core/test/config/oauth.test-d.ts
  • packages/core/test/config/oauth.test.ts
  • packages/core/test/config/session.test.ts
  • packages/core/test/config/trusted-proxy-headers.test.ts
  • packages/core/test/instance.test-d.ts
  • packages/core/test/instance.test.ts
  • packages/core/test/jose.test.ts
  • packages/core/test/setup/presets.ts
  • packages/core/test/shared/assert.test.ts
  • packages/core/test/shared/crypto.test.ts
  • packages/core/test/shared/env.test.ts
  • packages/core/test/shared/http/cookie.test.ts
  • packages/core/test/shared/oauth2/access-token.test.ts
  • packages/core/test/shared/oauth2/authorization.test.ts
  • packages/core/test/shared/oauth2/discovery.test.ts
  • packages/core/test/shared/oauth2/id-token.test.ts
  • packages/core/test/shared/oauth2/jwks.test.ts
  • packages/core/test/shared/oauth2/resolve-provider.test.ts
  • packages/core/test/shared/oauth2/userinfo.test.ts
  • packages/core/test/shared/rate-limiter.test.ts
  • packages/core/test/shared/request.test.ts
  • packages/core/test/shared/set-dynamic-params.test.ts
  • packages/core/test/types.test-d.ts
  • packages/core/vitest.config.ts
  • packages/elysia/package.json
  • packages/express/package.json
  • packages/hono/package.json
  • packages/integration/package.json
  • packages/next/package.json
  • packages/oak/package.json
  • packages/rate-limiter/_tmp_12100_35d20a84
  • packages/react-router/package.json
  • packages/react/package.json

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

…vtools, @tanstack/react-router-ssr-query, @tanstack/react-start, @tanstack/router-plugin to ^1.170.41, ^1.167.0, ^1.167.3, ^1.168.60, ^1.168.42
Comment thread packages/core/test/shared/oauth2/authorization.test.ts Dismissed
headers: { Referer: "https://app.example.com/dashboard" },
})
const redirectTo = await createRedirectTo(request, undefined, {
trustedOrigins: ["https://*.example.com"],
test("with trusted origins that are not same origin", async () => {
const request = new Request("https://example.com/auth/signIn/github")
const redirectTo = await createRedirectTo(request, "https://api.example.com/redirect", {
trustedOrigins: ["https://api.example.com"],
test("with wildcard pattern and subdomain and valid origin", async () => {
const request = new Request("https://app.example.com/auth/signIn/github")
const redirectTo = await createRedirectTo(request, "https://app.example.com/dashboard", {
trustedOrigins: ["https://*.example.com"],
test("with wildcard pattern and subdomain with invalid redirect value", async () => {
const request = new Request("https://app.example.com/auth/signIn/github")
const redirectTo = await createRedirectTo(request, "https://malicious.com/phishing", {
trustedOrigins: ["https://*.example.com"],
Comment thread packages/core/test/shared/oauth2/authorization.test.ts Dismissed
Comment thread packages/core/test/shared/oauth2/authorization.test.ts Dismissed
},
})
const redirectTo = await createRedirectTo(request, "https://evil.app.example.com/dashboard", {
trustedOrigins: ["https://*.example.com"],
},
})
const redirectTo = await createRedirectTo(request, "https://evil.example.com/dashboard", {
trustedOrigins: ["https://*.example.com"],
},
})
const redirectTo = await createRedirectTo(request, "https://evil.example.com/dashboard", {
trustedOrigins: ["https://*.example.com"],
@halvaradop
halvaradop merged commit 8571e2e into master Oct 8, 2026
6 of 7 checks passed
@halvaradop
halvaradop deleted the refactor/re-structure-core-pkg branch October 8, 2026 16:22

This branch was successfully deployed

1 active deployment
Preview — 914298e6 Deployed Oct 8, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants