feat(auth0-server-js): Add MCD support

packages/auth0-auth-js/README.md

@@ -39,7 +39,7 @@ const authClient = new AuthClient({
 });
 ```
 
-The `AUTH0_DOMAIN`, `AUTH0_CLIENT_ID`, and `AUTH0_CLIENT_SECRET` can be obtained from the [Auth0 Dashboard](https://manage.auth0.com) once you've created an application. 
+The `AUTH0_DOMAIN`, `AUTH0_CLIENT_ID`, and `AUTH0_CLIENT_SECRET` can be obtained from the [Auth0 Dashboard](https://manage.auth0.com) once you've created an application.
 
 ### 3. Build the Authorization URL
 

packages/auth0-server-js/README.md

@@ -49,7 +49,8 @@ const auth0 = new ServerClient<StoreOptions>({
 ```
 
 The `AUTH0_DOMAIN`, `AUTH0_CLIENT_ID`, and `AUTH0_CLIENT_SECRET` can be obtained from the [Auth0 Dashboard](https://manage.auth0.com) once you've created an application. **This application must be a `Regular Web Application`**.
-The `AUTH0_REDIRECT_URI` is needed to tell Auth0 what URL to redirect back to after successfull authentication, e.g. `http://localhost:3000/auth/callback`. (note, your application needs to handle this endpoint and call the SDK's `completeInteractiveLogin(url: string)` to finish the authentication process. See below for more information)
+The `AUTH0_REDIRECT_URI` is needed to tell Auth0 what URL to redirect back to after successful authentication, e.g. `http://localhost:3000/auth/callback`. Your application needs to handle this endpoint and call the SDK's `completeInteractiveLogin(url: string)` to finish the authentication process. See below for more information.
+
 
 ### 3. Configuring the Store
 
@@ -200,6 +201,10 @@ const auth0 = new ServerClient<StoreOptions>({
 });
 ```
 
+The `redirect_uri` must be an absolute URL.
+
+If you need to compute an absolute redirect URI per request (for example, in multi-domain deployments), pass `authorizationParams.redirect_uri` to `startInteractiveLogin` to override the configured default.
+
 > [!IMPORTANT]  
 > You will need to register the `AUTH0_REDIRECT_URI` in your Auth0 Application as an **Allowed Callback URLs** via the [Auth0 Dashboard](https://manage.auth0.com):
 

packages/auth0-server-js/src/errors.spec.ts

@@ -0,0 +1,12 @@
+import { describe, expect, test } from 'vitest';
+import { StartLinkUserError } from './errors.js';
+
+describe('StartLinkUserError', () => {
+  test('sets name and code', () => {
+    const error = new StartLinkUserError('link failed');
+
+    expect(error.message).toBe('link failed');
+    expect(error.name).toBe('StartLinkUserError');
+    expect(error.code).toBe('start_link_user_error');
+  });
+});

packages/auth0-server-js/src/errors.ts

@@ -69,4 +69,16 @@ export class InvalidConfigurationError extends Error {
     super(message);
     this.name = 'InvalidConfigurationError';
   }
-}
+}
+
+/**
+ * Error thrown when the issuer validation fails.
+ */
+export class IssuerValidationError extends Error {
+  public code: string = 'issuer_validation_error';
+
+  constructor(message: string) {
+    super(message);
+    this.name = 'IssuerValidationError';
+  }
+}