added create token function for m2m auth

Author: jakobevangelista

.changeset/dull-melons-move.md

@@ -0,0 +1,5 @@
+---
+'@clerk/dev-cli': patch
+---
+
+Add support for pnpm and workspace dependencies

.changeset/nine-pumas-type.md

@@ -0,0 +1,7 @@
+---
+"@clerk/backend": minor
+---
+
+feat(backend): Introduce Machine-to-machine Auth
+
+Adding backend function to create machine tokens

packages/backend/src/api/endpoints/MachineTokensApi.ts

@@ -0,0 +1,24 @@
+import type { MachineToken } from '../resources';
+import { AbstractAPI } from './AbstractApi';
+
+interface MachineTokensClaims {
+  [k: string]: unknown;
+}
+
+type CreateMachineTokensParams = {
+  machineId: string;
+  claims?: MachineTokensClaims;
+  expiresInSeconds?: number;
+  allowedClockSkew?: number;
+};
+
+const basePath = '/machine_tokens';
+export class MachineTokensAPI extends AbstractAPI {
+  public async create(params: CreateMachineTokensParams) {
+    return this.request<MachineToken>({
+      method: 'POST',
+      path: basePath,
+      bodyParams: params,
+    });
+  }
+}

packages/backend/src/api/endpoints/index.ts

@@ -5,6 +5,7 @@ export * from './ClientApi';
 export * from './DomainApi';
 export * from './EmailAddressApi';
 export * from './InvitationApi';
+export * from './MachineTokensApi';
 export * from './OrganizationApi';
 export * from './PhoneNumberApi';
 export * from './RedirectUrlApi';

packages/backend/src/api/factory.ts

@@ -5,6 +5,7 @@ import {
   DomainAPI,
   EmailAddressAPI,
   InvitationAPI,
+  MachineTokensAPI,
   OrganizationAPI,
   PhoneNumberAPI,
   RedirectUrlAPI,
@@ -31,6 +32,7 @@ export function createBackendApiClient(options: CreateBackendApiOptions) {
     clients: new ClientAPI(request),
     emailAddresses: new EmailAddressAPI(request),
     invitations: new InvitationAPI(request),
+    machineTokens: new MachineTokensAPI(request),
     organizations: new OrganizationAPI(request),
     phoneNumbers: new PhoneNumberAPI(request),
     redirectUrls: new RedirectUrlAPI(request),

packages/backend/src/api/resources/JSON.ts

@@ -16,6 +16,7 @@ export const ObjectType = {
   FacebookAccount: 'facebook_account',
   GoogleAccount: 'google_account',
   Invitation: 'invitation',
+  MachineToken: 'machine_token',
   OauthAccessToken: 'oauth_access_token',
   Organization: 'organization',
   OrganizationInvitation: 'organization_invitation',
@@ -113,6 +114,11 @@ export interface ExternalAccountJSON extends ClerkResourceJSON {
   verification: VerificationJSON | null;
 }
 
+export interface MachineTokenJSON {
+  object: typeof ObjectType.MachineToken;
+  jwt: string;
+}
+
 export interface SamlAccountJSON extends ClerkResourceJSON {
   object: typeof ObjectType.SamlAccount;
   provider: string;

packages/backend/src/api/resources/MachineToken.ts

@@ -0,0 +1,9 @@
+import type { MachineTokenJSON } from './JSON';
+
+export class MachineToken {
+  constructor(readonly token: string) {}
+
+  static fromJSON(data: MachineTokenJSON): MachineToken {
+    return new MachineToken(data.jwt);
+  }
+}

packages/backend/src/api/resources/index.ts

@@ -19,6 +19,7 @@ export * from './ExternalAccount';
 export * from './IdentificationLink';
 export * from './Invitation';
 export * from './JSON';
+export * from './MachineToken';
 export * from './OauthAccessToken';
 export * from './Organization';
 export * from './OrganizationInvitation';

packages/dev-cli/src/commands/setup.js

@@ -113,6 +113,49 @@ async function mergeEnvFiles(filename, config) {
   );
 }
 
+/**
+ * Checks if the current working directory contains a lockfile that can be imported with `pnpm import`
+ * @returns {boolean}
+ */
+function hasSupportedLockfile() {
+  const SUPPORTED_LOCKFILES = ['package-lock.json', 'yarn.lock'];
+  for (const lockfile of SUPPORTED_LOCKFILES) {
+    if (existsSync(join(process.cwd(), lockfile))) {
+      return true;
+    }
+  }
+
+  return false;
+}
+
+/**
+ * Imports a compatible lockfile with `pnpm import` if present.
+ * @returns {Promise<void>}
+ */
+async function importPackageLock() {
+  return new Promise((resolve, reject) => {
+    if (!hasSupportedLockfile()) {
+      resolve();
+    }
+    console.log('Supported non-pnpm lockfile detected, importing with `pnpm import`...');
+
+    const child = spawn('pnpm', ['import'], {
+      stdio: 'inherit',
+      env: {
+        ...process.env,
+      },
+    });
+
+    child.on('close', code => {
+      if (code !== 0) {
+        reject();
+        return;
+      }
+      resolve();
+    });
+  });
+}
+
 /**
  * Installs the monorepo versions of the Clerk dependencies listed in the `package.json` file of the cwd.
  * @returns {Promise<void>}
@@ -128,15 +171,13 @@ async function linkDependencies() {
     .filter(dep => dep in clerkPackages)
     .map(clerkDep => clerkPackages[clerkDep]);
 
-  const args = ['install', '--no-audit', '--no-fund', ...dependenciesToBeInstalled];
+  const args = ['add', ...dependenciesToBeInstalled];
 
   return new Promise((resolve, reject) => {
-    const child = spawn('npm', args, {
+    const child = spawn('pnpm', args, {
       stdio: 'inherit',
       env: {
         ...process.env,
-        ADBLOCK: '1',
-        DISABLE_OPENCOLLECTIVE: '1',
       },
     });
 
@@ -160,6 +201,7 @@ async function linkDependencies() {
 export async function setup({ js = true, skipInstall = false }) {
   if (!skipInstall) {
     console.log('Installing monorepo versions of Clerk packages from package.json...');
+    await importPackageLock();
     await linkDependencies();
   }