{
"$schema": "https://ui.shadcn.com/schema/registry-item.json",
"name": "provider-vercel-tanstack",
"title": "Vercel Provider (TanStack Form)",
"description": "A self-contained form component that emits an OidcPolicy for a Vercel caller: team, project, and environment scoping with derived issuer, plus custom audiences via Vercel's OIDC token exchange. Built with TanStack Form.",
"dependencies": [
"@tanstack/react-form"
],
"registryDependencies": [
"https://ui.shadcn.com/oidc/r/policy.json",
"https://ui.shadcn.com/oidc/r/claims.json",
"button",
"field",
"input",
"alert"
],
"files": [
{
"path": "registry/oidc/flavors/tanstack-none/provider-vercel.tsx",
"content": "\"use client\"\n\nimport * as React from \"react\"\nimport { useForm, useStore } from \"@tanstack/react-form\"\n\nimport { cn } from \"@/lib/utils\"\nimport { Button } from \"@/components/ui/button\"\nimport { Field, FieldDescription, FieldLabel } from \"@/components/ui/field\"\nimport { Input } from \"@/components/ui/input\"\nimport { Alert, AlertTitle } from \"@/components/ui/alert\"\nimport {\n ClaimChip,\n ClaimsList,\n claimRowsFromPolicy,\n claimsListValid,\n mergeClaimRows,\n type ClaimRow,\n} from \"@/components/oidc/claims\"\nimport type { OidcPolicy } from \"@/lib/oidc/policy\"\n\nfunction VercelIcon({ ...props }: React.ComponentProps<\"svg\">) {\n return (\n \n )\n}\n\ntype Fields = {\n teamSlug: string\n ownerId: string\n projectId: string\n environment: string\n audience: string\n extraClaims: ClaimRow[]\n}\n\nconst DEFAULTS: Fields = {\n teamSlug: \"\",\n ownerId: \"\",\n projectId: \"\",\n environment: \"\",\n audience: \"\",\n extraClaims: [],\n}\n\nconst FIRST_CLASS_CLAIMS = [\"aud\", \"owner_id\", \"project_id\", \"environment\"]\n\nconst GLOBAL_ISSUER = \"https://oidc.vercel.com\"\n\nfunction defaultAudience(teamSlug: string) {\n return teamSlug ? `https://vercel.com/${teamSlug}` : \"\"\n}\n\nfunction compile(fields: Fields) {\n const claims: Record = {}\n if (fields.audience) {\n claims.aud = [fields.audience]\n }\n if (fields.ownerId) {\n claims.owner_id = [fields.ownerId]\n }\n if (fields.projectId) {\n claims.project_id = [fields.projectId]\n }\n if (fields.environment) {\n claims.environment = [fields.environment]\n }\n mergeClaimRows(claims, fields.extraClaims, FIRST_CLASS_CLAIMS)\n return {\n issuer: fields.teamSlug ? `${GLOBAL_ISSUER}/${fields.teamSlug}` : \"\",\n claims,\n }\n}\n\nfunction parse(policy: OidcPolicy) {\n if (!policy.issuer.startsWith(`${GLOBAL_ISSUER}/`)) {\n return null\n }\n const teamSlug = policy.issuer.slice(`${GLOBAL_ISSUER}/`.length)\n if (!/^[\\w-]+$/.test(teamSlug)) {\n return null\n }\n\n if (\n FIRST_CLASS_CLAIMS.some((name) => (policy.claims[name]?.length ?? 0) > 1)\n ) {\n return null\n }\n const extraClaims = claimRowsFromPolicy(policy.claims, FIRST_CLASS_CLAIMS)\n if (extraClaims === null) {\n return null\n }\n\n const [aud = \"\"] = policy.claims.aud ?? []\n\n return {\n teamSlug,\n ownerId: policy.claims.owner_id?.[0] ?? \"\",\n projectId: policy.claims.project_id?.[0] ?? \"\",\n environment: policy.claims.environment?.[0] ?? \"\",\n audience: aud,\n extraClaims,\n }\n}\n\n/** True when this form can represent the policy — for routing an edit. */\nfunction matchesVercelPolicy(policy: OidcPolicy) {\n return parse(policy) !== null\n}\n\nfunction VercelPolicyForm({\n defaultValue,\n onChange,\n onSubmit,\n className,\n}: {\n defaultValue?: OidcPolicy\n onChange?: (policy: OidcPolicy) => void\n onSubmit: (policy: OidcPolicy) => void\n className?: string\n}) {\n const form = useForm({\n defaultValues: (defaultValue\n ? (parse(defaultValue) ?? DEFAULTS)\n : DEFAULTS) as Fields,\n onSubmit: ({ value: fields }) => {\n if (!(\n Boolean(fields.teamSlug && fields.ownerId && fields.audience) &&\n claimsListValid(fields.extraClaims)\n )) {\n return\n }\n const policy = compile(fields)\n onSubmit(\n defaultValue?.label ? { ...policy, label: defaultValue.label } : policy\n )\n },\n })\n const values = {\n teamSlug: useStore(form.store, (state) => state.values.teamSlug),\n environment: useStore(form.store, (state) => state.values.environment),\n }\n\n const onChangeRef = React.useRef(onChange)\n React.useEffect(() => {\n onChangeRef.current = onChange\n }, [onChange])\n\n React.useEffect(() => {\n let previousValues = form.store.state.values\n const subscription = form.store.subscribe(() => {\n const { values } = form.store.state\n if (values === previousValues) {\n return\n }\n previousValues = values\n const policy = compile(values)\n onChangeRef.current?.(\n defaultValue?.label ? { ...policy, label: defaultValue.label } : policy\n )\n })\n return () => subscription.unsubscribe()\n }, [form, defaultValue?.label])\n\n return (\n {\n event.preventDefault()\n event.stopPropagation()\n void form.handleSubmit()\n }}\n >\n \n {(field) => (\n \n \n Team slug iss\n \n \n field.handleChange(event.target.value.trim())\n }\n />\n \n The team URL segment: vercel.com/acme.\n \n \n )}\n \n \n {(field) => (\n \n \n Team ID owner_id\n \n \n field.handleChange(event.target.value.trim())\n }\n />\n \n Team settings → General → Team ID.\n \n \n )}\n \n \n {(field) => (\n \n \n Project ID project_id\n \n \n field.handleChange(event.target.value.trim())\n }\n />\n \n Project settings → General → Project ID. Leave empty to trust the\n whole team.\n \n \n )}\n \n \n {(field) => (\n \n \n Environment environment\n \n \n field.handleChange(event.target.value.trim())\n }\n />\n \n Optional: production, preview, or development.\n \n \n )}\n \n \n {(field) => (\n \n \n Audience aud\n \n \n field.handleChange(event.target.value.trim())\n }\n />\n \n The team URL is the default tokens carry; deployments can request\n a custom audience via Vercel's token exchange.\n \n \n )}\n \n {values.teamSlug ? (\n \n Issuer derived automatically:{\" \"}\n \n {GLOBAL_ISSUER}/{values.teamSlug}\n \n \n ) : null}\n {values.teamSlug && !values.environment ? (\n \n \n Without an environment, preview deployments get the same access as\n production.\n \n \n ) : null}\n \n {(field) => (\n \n )}\n \n \n \n )\n}\n\nexport { VercelIcon, VercelPolicyForm, matchesVercelPolicy }\n",
"type": "registry:component",
"target": "@components/oidc/provider-vercel.tsx"
}
],
"meta": {
"tagline": "Trust deployments from a team or project"
},
"categories": [
"auth",
"forms"
],
"type": "registry:component"
}