feat: add H3 adapter (#36)

* feat: add H3 adapter

* feat: add handler overload to H3 adapter for Nuxt file routes

* chore: reinstall and dedupe

* refactor: use defineHandler middleware composition for per-route auth

* test: sensible secret key mock

Author: wobsoriano

README.md

@@ -252,6 +252,56 @@ export default { fetch: app.fetch }
 
 The adapter does not handle CORS — use `hono/cors` for that. Per-route auth works naturally by applying the middleware to specific routes.
 
+### H3 / Nuxt
+
+```ts
+import { H3 } from 'h3'
+import { withSupabase } from '@supabase/server/adapters/h3'
+
+const app = new H3()
+
+// Protected — withSupabase validates the JWT before the handler runs
+app.use(withSupabase({ allow: 'user' }))
+
+app.get('/games', async (event) => {
+  const { supabase } = event.context.supabaseContext
+  const { data: myGames } = await supabase.from('favorite_games').select()
+  return myGames
+})
+
+// Public — no middleware means no auth
+app.get('/health', () => ({ status: 'ok' }))
+
+export default { fetch: app.fetch }
+```
+
+For **Nuxt**, use `defineHandler` for file routes:
+
+```ts
+// server/api/games.get.ts
+import { defineHandler } from 'h3'
+import { withSupabase } from '@supabase/server/adapters/h3'
+
+export default defineHandler({
+  middleware: [withSupabase({ allow: 'user' })],
+  handler: async (event) => {
+    const { supabase } = event.context.supabaseContext
+    return supabase.from('favorite_games').select()
+  },
+})
+```
+
+For app-wide auth, register it as a server middleware:
+
+```ts
+// server/middleware/supabase.ts
+import { withSupabase } from '@supabase/server/adapters/h3'
+
+export default withSupabase({ allow: 'user' })
+```
+
+The adapter does not handle CORS — use H3's CORS utilities for that.
+
 ## Primitives
 
 For when you need more control than `withSupabase` provides — multiple routes with different auth, custom response headers, or building your own wrapper.
@@ -377,9 +427,10 @@ For other environments, pass overrides via the `env` config option or `resolveEn
 
 - **Supabase Edge Functions** — environment variables are auto-injected. Zero config.
 - **Deno / Bun** — works out of the box with the `export default { fetch }` pattern.
-- **Node.js** — use the [Hono adapter](#hono) or [core primitives](#primitives) with your framework of choice.
+- **Node.js** — use the [Hono adapter](#hono), [H3 adapter](#h3--nuxt), or [core primitives](#primitives) with your framework of choice.
 - **Cloudflare Workers** — enable `nodejs_compat` in `wrangler.toml` or pass env overrides via the `env` config option.
-- **Next.js / Nuxt / SvelteKit / Remix** — use core primitives to build a cookie-based auth adapter. See [`docs/ssr-frameworks.md`](docs/ssr-frameworks.md).
+- **Nuxt** — use the [H3 adapter](#h3--nuxt) directly as a server middleware.
+- **Next.js / SvelteKit / Remix** — use core primitives to build a cookie-based auth adapter. See [`docs/ssr-frameworks.md`](docs/ssr-frameworks.md).
 
 ## Exports
 
@@ -388,6 +439,7 @@ For other environments, pass overrides via the `env` config option or `resolveEn
 | `@supabase/server`               | `withSupabase`, `createSupabaseContext`                                                                           |
 | `@supabase/server/core`          | `verifyAuth`, `verifyCredentials`, `extractCredentials`, `createContextClient`, `createAdminClient`, `resolveEnv` |
 | `@supabase/server/adapters/hono` | `withSupabase` (Hono middleware)                                                                                  |
+| `@supabase/server/adapters/h3`   | `withSupabase` (H3 / Nuxt middleware)                                                                             |
 
 ## Documentation
 

package.json

@@ -34,6 +34,11 @@
       "import": "./dist/adapters/hono/index.mjs",
       "require": "./dist/adapters/hono/index.cjs"
     },
+    "./adapters/h3": {
+      "types": "./dist/adapters/h3/index.d.mts",
+      "import": "./dist/adapters/h3/index.mjs",
+      "require": "./dist/adapters/h3/index.cjs"
+    },
     "./package.json": "./package.json"
   },
   "main": "./dist/index.cjs",
@@ -69,9 +74,13 @@
   },
   "peerDependencies": {
     "@supabase/supabase-js": "^2.0.0",
-    "hono": "^4.0.0"
+    "hono": "^4.0.0",
+    "h3": "^2.0.0"
   },
   "peerDependenciesMeta": {
+    "h3": {
+      "optional": true
+    },
     "hono": {
       "optional": true
     }
@@ -81,6 +90,7 @@
     "@commitlint/config-conventional": "^20.4.2",
     "@supabase/supabase-js": "^2.98.0",
     "eslint": "^10.0.2",
+    "h3": "2.0.1-rc.20",
     "hono": "^4.12.5",
     "prettier": "3.8.1",
     "pretty-quick": "^4.2.2",

pnpm-lock.yaml

@@ -0,0 +1,7 @@
+/**
+ * H3 framework adapter for `@supabase/server`.
+ *
+ * @packageDocumentation
+ */
+
+export { withSupabase } from './middleware.js'