feat: remove react from next-auth, move to vue

.github/workflows/issue-labeler.yml

@@ -11,7 +11,7 @@ jobs:
     name: Triage
     runs-on: ubuntu-latest
     steps:
-      - uses: github/issue-labeler@v2.5
+      - uses: github/issue-labeler@v3.4
         with:
           repo-token: "${{ secrets.GITHUB_TOKEN }}"
           configuration-path: ".github/issue-labeler.yml"

.github/workflows/issue-validator.yml

@@ -7,11 +7,11 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
-          node-version: 18
+          node-version: 24
       - name: 'Run issue validator'
         run: node ./.github/actions/issue-validator/index.mjs
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pkg.pr.new.yml

@@ -8,13 +8,12 @@ on:
   pull_request:
 
 env:
-  # NODE_VER: 24.14
-  NODE_VER: 18.20
+  NODE_VER: 24.14
   WORKING_DIR: packages/next-auth
 
 defaults:
   run:
-    working-directory: ${{ env.WORKING_DIR }}
+    working-directory: packages/next-auth
 
 jobs:
   build:
@@ -27,20 +26,20 @@ jobs:
         name: Install pnpm
         with:
           run_install: false
-          # cache-dependency-path: ${{ env.WORKING_DIR }}/pnpm-lock.yaml
+          cache_dependency_path: ${{ env.WORKING_DIR }}/pnpm-lock.yaml
 
       - name: Use Node.js ${{ env.NODE_VER }}
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
         with:
           node-version: ${{ env.NODE_VER }}
           cache: pnpm
-          # cache-dependency-path: ${{ env.WORKING_DIR }}/pnpm-lock.yaml
+          cache-dependency-path: ${{ env.WORKING_DIR }}/pnpm-lock.yaml
 
-      - name: Install deps
-        run: pnpm i
+      - name: Install dependencies
+        run: pnpm i --frozen-lockfile
 
-      # - name: Build and pack
-      #   run: pnpm prepack
+      - name: Build and pack
+        run: pnpm build
 
-      # - name: Publish package preview
-      #   run: pnpx pkg-pr-new publish --compact
+      - name: Publish package preview
+        run: pnpm exec pkg-pr-new publish --compact --packageManager=npm,pnpm,yarn

.github/workflows/pr-labeler.yml

@@ -10,7 +10,7 @@ jobs:
     name: Triage
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@v4
+      - uses: actions/labeler@v6
         with:
           repo-token: "${{ secrets.GITHUB_TOKEN }}"
           configuration-path: ".github/pr-labeler.yml"

.github/workflows/release.yml

@@ -1,33 +1,77 @@
-name: Release
+name: Release on NPM
 
 on:
-  push:
-    branches:
-      - "main"
-      - "beta"
-      - "next"
-      - "3.x"
-      - "v4"
-  pull_request:
-  workflow_dispatch:
+  release:
+    types: [published] # runs when a GitHub Release is published
+
+permissions:
+  contents: read
+  id-token: write # required for npm provenance
+
+env:
+  NODE_VER: 24.14
+  CI: true
+
+defaults:
+  run:
+    working-directory: packages/next-auth
 
 jobs:
-  test:
-    name: Test
+  publish:
+    name: Publish package from release tag
+    # Run only when tag is in the format `vX.Y.Z` produced by `npm version`
+    if: startsWith(github.event.release.tag_name, 'v')
     runs-on: ubuntu-latest
+
     steps:
-      - name: Init
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - name: Check out the tag referenced by this release
+        uses: actions/checkout@v5
         with:
-          fetch-depth: 2
+          ref: ${{ github.event.release.tag_name }}
+          fetch-depth: 0
+
       - name: Install pnpm
-        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320
-      - name: Setup Node
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
+        uses: pnpm/action-setup@v4
+        with:
+          run_install: false
+
+      - name: Setup Node.js and pnpm
+        uses: actions/setup-node@v4
         with:
-          node-version: 18
-          cache: pnpm
-      - name: Install dependencies
-        run: pnpm install
-      - name: Build
-        run: pnpm build
+          node-version: ${{ env.NODE_VER }}
+          cache: 'pnpm'
+          # This is required for `setup-node` to generate the registry URL into .npmrc
+          # See https://github.com/actions/setup-node/blob/5e2628c959b9ade56971c0afcebbe5332d44b398/action.yml#L17-L18
+          registry-url: 'https://registry.npmjs.org/'
+
+      - name: Verify tag matches package.json version
+        run: |
+          TAG="${{ github.event.release.tag_name }}"
+          PKG_VERSION=$(node -p "require('./package.json').version")
+          if [ "v$PKG_VERSION" != "$TAG" ]; then
+            echo "::error ::Tag ($TAG) does not match package.json version (v$PKG_VERSION)"
+            exit 1
+          fi
+
+      - name: Install deps
+        run: |
+          pnpm --version
+          pnpm install --frozen-lockfile
+
+      # Note: no build step because npm publish would run `prepublishOnly` script which builds the package
+
+      - name: Publish to npm with provenance
+        run: |
+          TAG="${{ github.event.release.tag_name }}"
+
+          # Stable release (vX.Y.Z)
+          if echo "$TAG" | grep -Eq '^v[0-9]+\.[0-9]+\.[0-9]+$'; then
+            npm publish --provenance --access public
+
+          # Pre-release (vX.Y.Z-*)
+          elif echo "$TAG" | grep -Eq '^v[0-9]+\.[0-9]+\.[0-9]+-'; then
+            npm publish --provenance --access public --tag next
+
+          else
+            echo "Not a valid release tag ($TAG), skipping publish."
+          fi

.gitignore

@@ -26,17 +26,17 @@ dist
 # Generated files
 .docusaurus
 .cache-loader
-packages/next-auth/providers
-packages/next-auth/src/providers/oauth-types.ts
-packages/next-auth/client
-packages/next-auth/css
-packages/next-auth/utils
-packages/next-auth/core
-packages/next-auth/jwt
-packages/next-auth/react
-packages/next-auth/*.d.ts*
-packages/next-auth/*.js
-packages/next-auth/next
+/packages/next-auth/providers/**
+/packages/next-auth/src/providers/oauth-types.ts
+/packages/next-auth/client/**
+/packages/next-auth/css/**
+/packages/next-auth/utils/**
+/packages/next-auth/core/**
+/packages/next-auth/jwt/**
+/packages/next-auth/react/**
+/packages/next-auth/*.d.ts*
+/packages/next-auth/*.js
+/packages/next-auth/next/**
 
 # Development app
 apps/dev/src/css

package.json

@@ -60,7 +60,7 @@
       }
     ]
   },
-  "packageManager": "pnpm@7.13.3",
+  "packageManager": "pnpm@10.32.1",
   "pnpm": {
     "overrides": {
       "undici": "5.11.0"

packages/next-auth/README.md

@@ -1,3 +1,23 @@
+> [!WARNING]
+> This package is a Nuxt-focused fork of `next-auth` for use with `@sidebase/nuxt-auth`.
+> It is not intended to be a general Next.js drop-in replacement.
+>
+> Key differences from upstream `next-auth`:
+>
+> - The package is published as `@sidebase/fork-authjs` and is meant to be installed as a `next-auth` alias, for example `next-auth@npm:@sidebase/fork-authjs`.
+> - Removed Next.js and React entrypoints such as `next-auth/react`, `next-auth/next`, and `next-auth/middleware`.
+> - Provider imports should use the default export directly, for example `GithubProvider(...)`, not `GithubProvider.default(...)`.
+> - This fork targets Nuxt/Vite bundler usage through `@sidebase/nuxt-auth`; native Node ESM imports are not the primary compatibility target.
+> - Nodemailer support is limited to patched peer versions declared by this package.
+>
+> Install as a `next-auth` alias:
+>
+> ```sh
+> npm install next-auth@npm:@sidebase/fork-authjs
+> pnpm add next-auth@npm:@sidebase/fork-authjs
+> yarn add next-auth@npm:@sidebase/fork-authjs
+> ```
+
 <p align="center">
    <br/>
    <a href="https://next-auth.js.org" target="_blank"><img width="150px" src="https://next-auth.js.org/img/logo/logo-sm.png" /></a>

packages/next-auth/config/jest-setup.js

@@ -1,3 +1 @@
-import "regenerator-runtime/runtime"
 import "@testing-library/jest-dom"
-import "whatwg-fetch"

packages/next-auth/config/wrap-css.js

@@ -12,6 +12,6 @@ const pathToCss = path.join(__dirname, "../css/index.css")
 const css = fs.readFileSync(pathToCss, "utf8")
 const cssWithEscapedQuotes = css.replace(/"/gm, '\\"')
 
-const js = `module.exports = function() { return "${cssWithEscapedQuotes}" }`
+const js = `export default function css() { return "${cssWithEscapedQuotes}" }`
 const pathToCssJs = path.join(__dirname, "../css/index.js")
 fs.writeFileSync(pathToCssJs, js)