{
"$schema": "https://ui.shadcn.com/schema/registry-item.json",
"name": "provider-custom-rhf",
"title": "Custom OIDC Provider (React Hook Form)",
"description": "The escape hatch for any OIDC issuer without a dedicated provider: issuer, audience, optional subject, and free-form optional claims, with a warning when a rule would trust an entire issuer. List it last in the providers array — it matches broadly. Built with React Hook Form.",
"dependencies": [
"react-hook-form"
],
"registryDependencies": [
"https://ui.shadcn.com/oidc/r/policy.json",
"https://ui.shadcn.com/oidc/r/claims.json",
"button",
"field",
"input",
"alert"
],
"files": [
{
"path": "registry/oidc/flavors/rhf-none/provider-custom.tsx",
"content": "\"use client\"\n\nimport * as React from \"react\"\nimport { Controller, useForm, useWatch } from \"react-hook-form\"\n\nimport { cn } from \"@/lib/utils\"\nimport { Button } from \"@/components/ui/button\"\nimport { Field, FieldDescription, FieldLabel } from \"@/components/ui/field\"\nimport { Input } from \"@/components/ui/input\"\nimport { Alert, AlertTitle } from \"@/components/ui/alert\"\nimport {\n ClaimChip,\n ClaimsList,\n claimRowsFromPolicy,\n claimsListValid,\n mergeClaimRows,\n type ClaimRow,\n} from \"@/components/oidc/claims\"\nimport type { OidcPolicy } from \"@/lib/oidc/policy\"\n\nfunction CustomOidcIcon({ ...props }: React.ComponentProps<\"svg\">) {\n return (\n \n )\n}\n\ntype Fields = {\n issuer: string\n audience: string\n subject: string\n extraClaims: ClaimRow[]\n}\n\nconst DEFAULTS: Fields = {\n issuer: \"\",\n audience: \"\",\n subject: \"\",\n extraClaims: [],\n}\n\nconst FIRST_CLASS_CLAIMS = [\"aud\", \"sub\"]\n\nfunction parsePastedIssuer(text: string) {\n const match = text\n .trim()\n .match(/^(https:\\/\\/[^?#\\s]+?)\\/\\.well-known\\/openid-configuration\\/?$/)\n return match ? { issuer: match[1] } : null\n}\n\n// The escape hatch: any OIDC issuer. Matches broadly, so list it LAST in the\n// providers array — edit-routing tries providers in order.\nfunction compile(fields: Fields) {\n const claims: Record = {}\n if (fields.audience) {\n claims.aud = [fields.audience]\n }\n if (fields.subject) {\n claims.sub = [fields.subject]\n }\n mergeClaimRows(claims, fields.extraClaims, FIRST_CLASS_CLAIMS)\n return { issuer: fields.issuer, claims }\n}\n\nfunction parse(policy: OidcPolicy) {\n if (!policy.issuer.startsWith(\"https://\")) {\n return null\n }\n if ((policy.claims.aud?.length ?? 0) > 1) {\n return null\n }\n if ((policy.claims.sub?.length ?? 0) > 1) {\n return null\n }\n\n const extraClaims = claimRowsFromPolicy(policy.claims, FIRST_CLASS_CLAIMS)\n if (extraClaims === null) {\n return null\n }\n\n return {\n issuer: policy.issuer,\n audience: policy.claims.aud?.[0] ?? \"\",\n subject: policy.claims.sub?.[0] ?? \"\",\n extraClaims,\n }\n}\n\n/** True when this form can represent the policy — for routing an edit. */\nfunction matchesCustomPolicy(policy: OidcPolicy) {\n return parse(policy) !== null\n}\n\nfunction CustomPolicyForm({\n defaultValue,\n onChange,\n onSubmit,\n className,\n}: {\n defaultValue?: OidcPolicy\n onChange?: (policy: OidcPolicy) => void\n onSubmit: (policy: OidcPolicy) => void\n className?: string\n}) {\n const form = useForm({\n mode: \"onChange\",\n defaultValues: defaultValue ? (parse(defaultValue) ?? DEFAULTS) : DEFAULTS,\n })\n const watched = {\n issuer: useWatch({ control: form.control, name: \"issuer\" }),\n audience: useWatch({ control: form.control, name: \"audience\" }),\n subject: useWatch({ control: form.control, name: \"subject\" }),\n }\n\n const onChangeRef = React.useRef(onChange)\n React.useEffect(() => {\n onChangeRef.current = onChange\n }, [onChange])\n\n React.useEffect(() => {\n return form.subscribe({\n formState: { values: true },\n callback: ({ values }) => {\n const policy = compile(values)\n onChangeRef.current?.(\n defaultValue?.label\n ? { ...policy, label: defaultValue.label }\n : policy\n )\n },\n })\n }, [form, defaultValue?.label])\n\n return (\n {\n if (!claimsListValid(fields.extraClaims, FIRST_CLASS_CLAIMS)) {\n return\n }\n const policy = compile(fields)\n onSubmit(\n defaultValue?.label\n ? { ...policy, label: defaultValue.label }\n : policy\n )\n })}\n >\n (\n \n \n Issuer iss\n \n field.onChange(event.target.value.trim())}\n onPaste={(event) => {\n const patch = parsePastedIssuer(\n event.clipboardData.getData(\"text\")\n )\n if (!patch) {\n return\n }\n event.preventDefault()\n form.reset(\n { ...form.getValues(), ...patch },\n { keepDefaultValues: true }\n )\n }}\n />\n \n The issuer's OIDC discovery root — pasting a discovery URL\n works too.\n \n \n )}\n />\n (\n \n \n Audience aud\n \n field.onChange(event.target.value.trim())}\n />\n \n The audience the caller requests its token for. Pick a value\n unique to your app.\n \n \n )}\n />\n (\n \n \n Subject sub\n \n field.onChange(event.target.value.trim())}\n />\n \n Optional: the issuer's primary identifier for the caller.\n \n \n )}\n />\n (\n \n )}\n />\n {watched.issuer && watched.audience && !watched.subject ? (\n \n \n Without a subject, every workload this issuer signs tokens for is\n trusted.\n \n \n ) : null}\n \n \n )\n}\n\nexport { CustomOidcIcon, CustomPolicyForm, matchesCustomPolicy }\n",
"type": "registry:component",
"target": "@components/oidc/provider-custom.tsx"
}
],
"meta": {
"tagline": "Any OIDC issuer"
},
"categories": [
"auth",
"forms"
],
"type": "registry:component"
}