@glinr/theauth-nuxt

@glinr/theauth-nuxt

npm · Source · Docs · All packages

Nuxt adapter for theAuth.

Part of theAuth, open-source auth for AI agents and humans. Docs: docs.theauth.dev.

Install

pnpm add @glinr/theauth @glinr/theauth-nuxt

Usage

Create server/api/theauth/[...].ts:

import { createTheAuth } from '@glinr/theauth';
import { theAuthNuxt } from '@glinr/theauth-nuxt';

const theauth = createTheAuth({
  database: { provider: 'sqlite', url: 'theauth.db' },
});

export default theAuthNuxt(theauth, { authenticate });

This handles the full theAuth REST API under /api/theauth: agent CRUD, authorization, delegations, audit logs, and dashboard stats.

With MCP OAuth 2.1

import { createMcpModule } from '@glinr/theauth/mcp';
import { theAuthNuxt } from '@glinr/theauth-nuxt';

const mcp = createMcpModule({
  issuer: 'https://your-app.com',
  // ...
});

export default theAuthNuxt(theauth, { mcp, authenticate });

When mcp is provided, the OAuth 2.1 endpoints are enabled:

• GET /.well-known/oauth-authorization-server
• GET /.well-known/oauth-protected-resource
• POST /mcp/register
• GET /mcp/authorize
• POST /mcp/token

Management routes and client IP

With the default session guard, a signed-in user only acts on their own agents, delegations and audit rows. A custom authenticate resolver is a trust decision and sees everything.

The adapter does not read forwarded headers for the client IP. Behind a proxy, set trustedProxy with trustedProxyCount or trustedHeader, or ipAllowlist constraints cannot match.

export default theAuthNuxt(theauth, { authenticate, trustedProxy: { trustedProxyCount: 1 } });

On Cloudflare use trustedHeader: "cf-connecting-ip". Only trust a header your edge overwrites.

API surface

theAuthNuxt(theauth, options?) returns an H3 EventHandler for use as a Nuxt server route.

For full docs on agent identity, permissions, delegation, and audit, see the main @glinr/theauth package.

Links

• Documentation
• GitHub

License

MIT

Learn more

• nuxt adapter guide
• All adapters
• All packages
• GitHub Discussions for questions
• Report a security issue