Basis DevConnect

Basis DevConnect is an authenticated Nuxt portal for browsing and registering Basis Auth OpenID Connect clients.

Application registry

• Signed-in users see only applications where they are listed in metadata.owners.
• A new application's creator is stored as its first role.ADMIN owner.
• Registration accepts only a name and creates a public client with no redirects or secret.
• Members can view Authentication, Branding, Permissions, and Secrets sections; only administrators can edit them or delete the application.
• Administrators manage redirect URIs, branding, member roles, client type, and explicit secret generation, rotation, and revocation. At least one administrator is always required.
• Plaintext secrets are returned once from Generate or Rotate and never exposed by application detail responses.
• Directory search merges enabled local Basis Auth users with Microsoft Graph results from Basis API. Graph-only people must sign in to DevConnect before they can be added.

The portal talks directly to the Basis Auth PostgreSQL database using NUXT_BASIS_AUTH_DATABASE_URL. It calls Basis API through NUXT_BASIS_API_URL with the signed-in user's delegated access token. Access and rotating refresh tokens stay in encrypted server session data; existing sessions must sign in again after this rollout.

Shared response, error, typed client, claims, and permission primitives come from @basis/schema.

Development

bun install
bun run dev

The development server listens on port 3006. Copy .env.example to .env and configure the Basis Auth OIDC client, session password, and database URL before signing in.

Verification

bun run test
bun run typecheck
bun run lint
bun run build

Set TEST_BASIS_AUTH_DATABASE_URL to a disposable Basis Auth PostgreSQL database to enable the schema integration test. Its writes run inside a transaction that is always rolled back.