@artatol-acp/auth-nextjs 0.3.8 → 0.4.1

package/dist/client/index.d.ts

@@ -3,17 +3,29 @@ import { type ReactNode } from 'react';
 export type ACPAuthContextValue = {
     user: User | null;
     isLoading: boolean;
-    login: (email: string, password: string) => Promise<void>;
+    login: (email: string, password: string) => Promise<{
+        requiresTwoFactor?: boolean;
+        tempToken?: string;
+    }>;
+    verify2FA: (tempToken: string, code: string) => Promise<void>;
     logout: () => Promise<void>;
     refresh: () => Promise<boolean>;
     resendVerification: (email: string) => Promise<void>;
 };
 export type ACPAuthProviderProps = {
     children: ReactNode;
-    baseUrl: string;
+    /**
+     * Base path for auth API routes in your app.
+     * @default "/api/auth"
+     */
+    apiBasePath?: string;
+    /**
+     * Initial user data from server-side rendering.
+     * If provided, skips initial client-side session fetch.
+     */
+    initialUser?: User | null;
 };
-export declare function ACPAuthProvider({ children, baseUrl }: ACPAuthProviderProps): import("react/jsx-runtime").JSX.Element;
+export declare function ACPAuthProvider({ children, apiBasePath, initialUser, }: ACPAuthProviderProps): import("react/jsx-runtime").JSX.Element;
 export declare function useAuth(): ACPAuthContextValue;
-export { ACPAuthClient } from '@artatol-acp/auth-js';
-export type * from '@artatol-acp/auth-js';
+export type { User } from '@artatol-acp/auth-js';
 //# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAiB,KAAK,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAuE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAE5G,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD,CAAC;AAIF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,SAAS,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAgB,eAAe,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,oBAAoB,2CAuF1E;AAED,wBAAgB,OAAO,IAAI,mBAAmB,CAM7C;AAGD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,mBAAmB,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAuE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAE5G,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzG,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD,CAAC;AAIF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,SAAS,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CAC3B,CAAC;AA6BF,wBAAgB,eAAe,CAAC,EAC9B,QAAQ,EACR,WAAyB,EACzB,WAAW,GACZ,EAAE,oBAAoB,2CAmHtB;AAED,wBAAgB,OAAO,IAAI,mBAAmB,CAM7C;AAGD,YAAY,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/client/index.js

@@ -1,19 +1,28 @@
 /** @jsxImportSource react */
 'use client';
 import { jsx as _jsx } from "react/jsx-runtime";
-import { ACPAuthClient } from '@artatol-acp/auth-js';
 import { createContext, useContext, useState, useEffect, useRef, useCallback } from 'react';
 const ACPAuthContext = createContext(null);
-export function ACPAuthProvider({ children, baseUrl }) {
-    const [user, setUser] = useState(null);
-    const [isLoading, setIsLoading] = useState(true);
-    const clientRef = useRef(new ACPAuthClient({
-        baseUrl,
-        apiKey: '',
-        autoRefresh: true,
-        refreshThresholdSeconds: 60
-    }));
+async function authFetch(path, options = {}) {
+    const response = await fetch(path, {
+        ...options,
+        headers: {
+            'Content-Type': 'application/json',
+            ...options.headers,
+        },
+        credentials: 'include',
+    });
+    const data = await response.json();
+    if (!data.success) {
+        throw new Error(data.error.message);
+    }
+    return data.data;
+}
+export function ACPAuthProvider({ children, apiBasePath = '/api/auth', initialUser, }) {
+    const [user, setUser] = useState(initialUser ?? null);
+    const [isLoading, setIsLoading] = useState(initialUser === undefined);
     const intervalRef = useRef(null);
+    const apiBase = apiBasePath.replace(/\/$/, '');
     const clearRefreshInterval = useCallback(() => {
         if (intervalRef.current) {
             clearInterval(intervalRef.current);
@@ -22,43 +31,60 @@ export function ACPAuthProvider({ children, baseUrl }) {
     }, []);
     const refresh = useCallback(async () => {
         try {
-            await clientRef.current.refresh();
-            const userData = await clientRef.current.me();
-            setUser(userData);
+            const result = await authFetch(`${apiBase}/session`, {
+                method: 'POST',
+            });
+            setUser(result.user);
             return true;
         }
         catch {
+            setUser(null);
             return false;
         }
-    }, []);
+    }, [apiBase]);
     const login = useCallback(async (email, password) => {
-        const result = await clientRef.current.login({ email, password });
-        if ('requiresTwoFactor' in result) {
-            throw new Error('2FA_REQUIRED');
+        const result = await authFetch(`${apiBase}/login`, {
+            method: 'POST',
+            body: JSON.stringify({ email, password }),
+        });
+        if (result.requiresTwoFactor) {
+            return { requiresTwoFactor: true, tempToken: result.tempToken };
+        }
+        if (result.user) {
+            setUser(result.user);
         }
-        // User logged in successfully, token is automatically set in client
+        return {};
+    }, [apiBase]);
+    const verify2FA = useCallback(async (tempToken, code) => {
+        const result = await authFetch(`${apiBase}/verify-2fa`, {
+            method: 'POST',
+            body: JSON.stringify({ tempToken, code }),
+        });
         setUser(result.user);
-    }, []);
+    }, [apiBase]);
     const logout = useCallback(async () => {
-        // First clear the interval to prevent race conditions
         clearRefreshInterval();
-        // Then clear user state
         setUser(null);
-        // Finally call logout API
         try {
-            await clientRef.current.logout();
+            await authFetch(`${apiBase}/logout`, { method: 'POST' });
         }
         catch {
-            // Ignore logout errors, user is already logged out locally
+            // Ignore logout errors
         }
-    }, [clearRefreshInterval]);
+    }, [apiBase, clearRefreshInterval]);
     const resendVerification = useCallback(async (email) => {
-        await clientRef.current.resendVerificationEmail({ email });
-    }, []);
-    // Initial session restore
+        await authFetch(`${apiBase}/resend-verification`, {
+            method: 'POST',
+            body: JSON.stringify({ email }),
+        });
+    }, [apiBase]);
+    // Initial session restore (skip if initialUser was provided)
     useEffect(() => {
+        if (initialUser !== undefined) {
+            return;
+        }
         refresh().finally(() => setIsLoading(false));
-    }, [refresh]);
+    }, [refresh, initialUser]);
     // Auto-refresh interval
     useEffect(() => {
         if (!user) {
@@ -76,7 +102,15 @@ export function ACPAuthProvider({ children, baseUrl }) {
         }, REFRESH_INTERVAL);
         return clearRefreshInterval;
     }, [user, refresh, clearRefreshInterval]);
-    return (_jsx(ACPAuthContext.Provider, { value: { user, isLoading, login, logout, refresh, resendVerification }, children: children }));
+    return (_jsx(ACPAuthContext.Provider, { value: {
+            user,
+            isLoading,
+            login,
+            verify2FA,
+            logout,
+            refresh,
+            resendVerification,
+        }, children: children }));
 }
 export function useAuth() {
     const context = useContext(ACPAuthContext);
@@ -85,6 +119,4 @@ export function useAuth() {
     }
     return context;
 }
-// Re-export client for direct use
-export { ACPAuthClient } from '@artatol-acp/auth-js';
 //# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.tsx"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,YAAY,CAAC;;AAEb,OAAO,EAAE,aAAa,EAAa,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAkB,MAAM,OAAO,CAAC;AAW5G,MAAM,cAAc,GAAG,aAAa,CAA6B,IAAI,CAAC,CAAC;AAOvE,MAAM,UAAU,eAAe,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAwB;IACzE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAc,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,aAAa,CAAC;QACzC,OAAO;QACP,MAAM,EAAE,EAAE;QACV,WAAW,EAAE,IAAI;QACjB,uBAAuB,EAAE,EAAE;KAC5B,CAAC,CAAC,CAAC;IACJ,MAAM,WAAW,GAAG,MAAM,CAAwB,IAAI,CAAC,CAAC;IAExD,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5C,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACxB,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACnC,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAsB,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAC9C,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,KAAa,EAAE,QAAgB,EAAE,EAAE;QAClE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAElE,IAAI,mBAAmB,IAAI,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QAED,oEAAoE;QACpE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,sDAAsD;QACtD,oBAAoB,EAAE,CAAC;QACvB,wBAAwB;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,0BAA0B;QAC1B,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAE3B,MAAM,kBAAkB,GAAG,WAAW,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAC7D,MAAM,SAAS,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,0BAA0B;IAC1B,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,wBAAwB;IACxB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oBAAoB,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;QACpD,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBACvB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,oBAAoB,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAErB,OAAO,oBAAoB,CAAC;IAC9B,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAE1C,OAAO,CACL,KAAC,cAAc,CAAC,QAAQ,IAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,YAC5F,QAAQ,GACe,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,MAAM,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kCAAkC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.tsx"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,YAAY,CAAC;;AAGb,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAkB,MAAM,OAAO,CAAC;AAY5G,MAAM,cAAc,GAAG,aAAa,CAA6B,IAAI,CAAC,CAAC;AAwBvE,KAAK,UAAU,SAAS,CAAI,IAAY,EAAE,UAAuB,EAAE;IACjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE;QACjC,GAAG,OAAO;QACV,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,GAAG,OAAO,CAAC,OAAO;SACnB;QACD,WAAW,EAAE,SAAS;KACvB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAmB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEnD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAC9B,QAAQ,EACR,WAAW,GAAG,WAAW,EACzB,WAAW,GACU;IACrB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAc,WAAW,IAAI,IAAI,CAAC,CAAC;IACnE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,MAAM,CAAwC,IAAI,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE/C,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5C,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACxB,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACnC,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAsB,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAiB,GAAG,OAAO,UAAU,EAAE;gBACnE,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,KAAa,EAAE,QAAgB,EAAE,EAAE;QAClE,MAAM,MAAM,GAAG,MAAM,SAAS,CAI3B,GAAG,OAAO,QAAQ,EAAE;YACrB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;SAC1C,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC7B,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAClE,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,SAAiB,EAAE,IAAY,EAAE,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAiB,GAAG,OAAO,aAAa,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,oBAAoB,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC;QAEd,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,GAAG,OAAO,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAEpC,MAAM,kBAAkB,GAAG,WAAW,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAC7D,MAAM,SAAS,CAAC,GAAG,OAAO,sBAAsB,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;SAChC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,6DAA6D;IAC7D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IAE3B,wBAAwB;IACxB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oBAAoB,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;QACpD,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBACvB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,oBAAoB,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAErB,OAAO,oBAAoB,CAAC;IAC9B,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAE1C,OAAO,CACL,KAAC,cAAc,CAAC,QAAQ,IAAC,KAAK,EAAE;YAC9B,IAAI;YACJ,SAAS;YACT,KAAK;YACL,SAAS;YACT,MAAM;YACN,OAAO;YACP,kBAAkB;SACnB,YACE,QAAQ,GACe,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,MAAM,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/handlers/index.d.ts

@@ -0,0 +1,88 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { ACPAuthClient, type User, type FetchFunction } from '@artatol-acp/auth-js';
+export type ACPAuthHandlerOptions = {
+    baseUrl: string;
+    apiKey?: string;
+    /**
+     * Cookie configuration
+     */
+    cookies?: {
+        /**
+         * Cookie path
+         * @default "/"
+         */
+        path?: string;
+        /**
+         * Whether to use secure cookies (HTTPS only)
+         * @default process.env.NODE_ENV === "production"
+         */
+        secure?: boolean;
+        /**
+         * SameSite cookie attribute
+         * @default "lax"
+         */
+        sameSite?: 'strict' | 'lax' | 'none';
+    };
+};
+type ApiSuccess<T> = {
+    success: true;
+    data: T;
+};
+type ApiError = {
+    success: false;
+    error: {
+        message: string;
+        code?: string;
+    };
+};
+export declare function createAuthHandlers(options: ACPAuthHandlerOptions): {
+    authHandler: (request: NextRequest, context: {
+        params: Promise<{
+            action: string;
+        }>;
+    }) => Promise<NextResponse<ApiError> | NextResponse<ApiSuccess<{
+        requiresTwoFactor: boolean;
+        tempToken: string;
+    }>> | NextResponse<ApiSuccess<{
+        user: User;
+    }>> | NextResponse<ApiSuccess<{
+        message: string;
+    }>>>;
+    loginHandler: (request: NextRequest) => Promise<NextResponse<ApiError> | NextResponse<ApiSuccess<{
+        requiresTwoFactor: boolean;
+        tempToken: string;
+    }>> | NextResponse<ApiSuccess<{
+        user: User;
+    }>>>;
+    verify2FAHandler: (request: NextRequest) => Promise<NextResponse<ApiError> | NextResponse<ApiSuccess<{
+        user: User;
+    }>>>;
+    logoutHandler: (_request: NextRequest) => Promise<NextResponse<ApiSuccess<{
+        message: string;
+    }>>>;
+    sessionHandler: (_request: NextRequest) => Promise<NextResponse<ApiError> | NextResponse<ApiSuccess<{
+        user: User;
+    }>>>;
+    registerHandler: (request: NextRequest) => Promise<NextResponse<ApiError> | NextResponse<ApiSuccess<{
+        user: User;
+    }>>>;
+    resendVerificationHandler: (request: NextRequest) => Promise<NextResponse<ApiError> | NextResponse<ApiSuccess<{
+        message: string;
+    }>>>;
+    forgotPasswordHandler: (request: NextRequest) => Promise<NextResponse<ApiError> | NextResponse<ApiSuccess<{
+        message: string;
+    }>>>;
+    resetPasswordHandler: (request: NextRequest) => Promise<NextResponse<ApiError> | NextResponse<ApiSuccess<{
+        message: string;
+    }>>>;
+    setAuthCookies: (accessToken: string, refreshToken?: string) => Promise<void>;
+    clearAuthCookies: () => Promise<void>;
+    getStoredTokens: () => Promise<{
+        accessToken: string | undefined;
+        refreshToken: string | undefined;
+    }>;
+    createClient: (customFetch?: FetchFunction) => ACPAuthClient;
+};
+export type AuthHandlers = ReturnType<typeof createAuthHandlers>;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/handlers/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,aAAa,EAAgB,KAAK,IAAI,EAAE,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAElG,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,OAAO,CAAC,EAAE;QACR;;;WAGG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd;;;WAGG;QACH,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB;;;WAGG;QACH,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;KACtC,CAAC;CACH,CAAC;AAEF,KAAK,UAAU,CAAC,CAAC,IAAI;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC;AAChD,KAAK,QAAQ,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAc9E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB;2BAwWpD,WAAW,WACX;QAAE,MAAM,EAAE,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;;;;;;;;4BApQb,WAAW;;;;;;gCAsCP,WAAW;;;8BA8Bb,WAAW;;;+BAqCV,WAAW;;;+BAsDX,WAAW;;;yCAyBD,WAAW;;;qCAyBf,WAAW;;;oCAyBZ,WAAW;;;kCAlRb,MAAM,iBAAiB,MAAM;;;;;;iCAhDpC,aAAa;EAwYlD;AAGD,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/handlers/index.js

@@ -0,0 +1,359 @@
+import { cookies } from 'next/headers';
+import { NextResponse } from 'next/server';
+import { ACPAuthClient, ACPAuthError } from '@artatol-acp/auth-js';
+function jsonResponse(data, status = 200) {
+    return NextResponse.json({ success: true, data }, { status });
+}
+function errorResponse(message, status = 400, code) {
+    return NextResponse.json({ success: false, error: { message, code } }, { status });
+}
+export function createAuthHandlers(options) {
+    const { baseUrl, apiKey = '', cookies: cookieConfig = {}, } = options;
+    const { path: cookiePath = '/', secure = process.env.NODE_ENV === 'production', sameSite = 'lax', } = cookieConfig;
+    function createClient(customFetch) {
+        return new ACPAuthClient({
+            baseUrl,
+            apiKey,
+            fetch: customFetch,
+            autoRefresh: false,
+        });
+    }
+    /**
+     * Extract refresh_token from Set-Cookie header
+     */
+    function extractRefreshTokenFromCookies(response) {
+        const setCookieHeader = response.headers.get('set-cookie');
+        if (!setCookieHeader)
+            return null;
+        // Parse refresh_token from Set-Cookie header
+        const match = setCookieHeader.match(/refresh_token=([^;]+)/);
+        return match ? match[1] : null;
+    }
+    /**
+     * Custom fetch that captures the refresh token from Set-Cookie header
+     */
+    function createCapturingFetch() {
+        let capturedRefreshToken = null;
+        const capturingFetch = async (url, init) => {
+            const response = await fetch(url, init);
+            // Try to extract refresh token from response
+            const refreshToken = extractRefreshTokenFromCookies(response);
+            if (refreshToken) {
+                capturedRefreshToken = refreshToken;
+            }
+            return response;
+        };
+        return {
+            fetch: capturingFetch,
+            getRefreshToken: () => capturedRefreshToken,
+        };
+    }
+    async function setAuthCookies(accessToken, refreshToken) {
+        const cookieStore = await cookies();
+        cookieStore.set('access_token', accessToken, {
+            httpOnly: true,
+            secure,
+            sameSite,
+            path: cookiePath,
+            maxAge: 60 * 5, // 5 minutes
+        });
+        if (refreshToken) {
+            cookieStore.set('refresh_token', refreshToken, {
+                httpOnly: true,
+                secure,
+                sameSite,
+                path: cookiePath,
+                maxAge: 60 * 60 * 24 * 30, // 30 days
+            });
+        }
+    }
+    async function clearAuthCookies() {
+        const cookieStore = await cookies();
+        cookieStore.delete('access_token');
+        cookieStore.delete('refresh_token');
+    }
+    async function getStoredTokens() {
+        const cookieStore = await cookies();
+        return {
+            accessToken: cookieStore.get('access_token')?.value,
+            refreshToken: cookieStore.get('refresh_token')?.value,
+        };
+    }
+    /**
+     * POST /api/auth/login
+     * Body: { email: string, password: string }
+     */
+    async function loginHandler(request) {
+        try {
+            const body = await request.json();
+            const { email, password } = body;
+            if (!email || !password) {
+                return errorResponse('Email and password are required', 400);
+            }
+            // Use capturing fetch to extract refresh_token from Set-Cookie header
+            const { fetch: capturingFetch, getRefreshToken } = createCapturingFetch();
+            const client = createClient(capturingFetch);
+            const result = await client.login({ email, password });
+            if ('requiresTwoFactor' in result) {
+                return jsonResponse({
+                    requiresTwoFactor: true,
+                    tempToken: result.tempToken,
+                });
+            }
+            // Get refresh token from Set-Cookie header (auth server doesn't return it in JSON body)
+            const refreshToken = getRefreshToken();
+            await setAuthCookies(result.accessToken, refreshToken ?? undefined);
+            return jsonResponse({ user: result.user });
+        }
+        catch (error) {
+            if (error instanceof ACPAuthError) {
+                return errorResponse(error.message, error.statusCode, error.code);
+            }
+            return errorResponse('Login failed', 500);
+        }
+    }
+    /**
+     * POST /api/auth/verify-2fa
+     * Body: { tempToken: string, code: string }
+     */
+    async function verify2FAHandler(request) {
+        try {
+            const body = await request.json();
+            const { tempToken, code } = body;
+            if (!tempToken || !code) {
+                return errorResponse('Temp token and code are required', 400);
+            }
+            // Use capturing fetch to extract refresh_token from Set-Cookie header
+            const { fetch: capturingFetch, getRefreshToken } = createCapturingFetch();
+            const client = createClient(capturingFetch);
+            const result = await client.verify2FALogin({ tempToken, code });
+            // Get refresh token from Set-Cookie header
+            const refreshToken = getRefreshToken();
+            await setAuthCookies(result.accessToken, refreshToken ?? undefined);
+            return jsonResponse({ user: result.user });
+        }
+        catch (error) {
+            if (error instanceof ACPAuthError) {
+                return errorResponse(error.message, error.statusCode, error.code);
+            }
+            return errorResponse('2FA verification failed', 500);
+        }
+    }
+    /**
+     * POST /api/auth/logout
+     */
+    async function logoutHandler(_request) {
+        try {
+            const { refreshToken } = await getStoredTokens();
+            if (refreshToken) {
+                // Create a custom fetch that includes the refresh token cookie
+                const customFetch = async (url, init) => {
+                    return fetch(url, {
+                        ...init,
+                        headers: {
+                            ...init?.headers,
+                            Cookie: `refresh_token=${refreshToken}`,
+                        },
+                    });
+                };
+                const client = createClient(customFetch);
+                try {
+                    await client.logout();
+                }
+                catch {
+                    // Ignore logout API errors
+                }
+            }
+            await clearAuthCookies();
+            return jsonResponse({ message: 'Logged out' });
+        }
+        catch {
+            await clearAuthCookies();
+            return jsonResponse({ message: 'Logged out' });
+        }
+    }
+    /**
+     * POST /api/auth/session
+     * Refreshes the session and returns current user
+     */
+    async function sessionHandler(_request) {
+        try {
+            const { accessToken, refreshToken } = await getStoredTokens();
+            if (!accessToken && !refreshToken) {
+                return errorResponse('No session', 401);
+            }
+            const customFetch = async (url, init) => {
+                return fetch(url, {
+                    ...init,
+                    headers: {
+                        ...init?.headers,
+                        Cookie: `refresh_token=${refreshToken}`,
+                    },
+                });
+            };
+            const client = createClient(customFetch);
+            // Try to refresh the token
+            try {
+                const refreshResult = await client.refresh();
+                await setAuthCookies(refreshResult.accessToken);
+                // Get user data with new token
+                const user = await client.me(refreshResult.accessToken);
+                return jsonResponse({ user });
+            }
+            catch {
+                // Refresh failed, try to use existing access token
+                if (accessToken) {
+                    try {
+                        const user = await client.me(accessToken);
+                        return jsonResponse({ user });
+                    }
+                    catch {
+                        await clearAuthCookies();
+                        return errorResponse('Session expired', 401);
+                    }
+                }
+                await clearAuthCookies();
+                return errorResponse('Session expired', 401);
+            }
+        }
+        catch (error) {
+            if (error instanceof ACPAuthError) {
+                return errorResponse(error.message, error.statusCode, error.code);
+            }
+            return errorResponse('Session check failed', 500);
+        }
+    }
+    /**
+     * POST /api/auth/register
+     * Body: { email: string, password: string }
+     */
+    async function registerHandler(request) {
+        try {
+            const body = await request.json();
+            const { email, password } = body;
+            if (!email || !password) {
+                return errorResponse('Email and password are required', 400);
+            }
+            const client = createClient();
+            const user = await client.register({ email, password });
+            return jsonResponse({ user });
+        }
+        catch (error) {
+            if (error instanceof ACPAuthError) {
+                return errorResponse(error.message, error.statusCode, error.code);
+            }
+            return errorResponse('Registration failed', 500);
+        }
+    }
+    /**
+     * POST /api/auth/resend-verification
+     * Body: { email: string }
+     */
+    async function resendVerificationHandler(request) {
+        try {
+            const body = await request.json();
+            const { email } = body;
+            if (!email) {
+                return errorResponse('Email is required', 400);
+            }
+            const client = createClient();
+            await client.resendVerificationEmail({ email });
+            return jsonResponse({ message: 'Verification email sent' });
+        }
+        catch (error) {
+            if (error instanceof ACPAuthError) {
+                return errorResponse(error.message, error.statusCode, error.code);
+            }
+            return errorResponse('Failed to send verification email', 500);
+        }
+    }
+    /**
+     * POST /api/auth/forgot-password
+     * Body: { email: string }
+     */
+    async function forgotPasswordHandler(request) {
+        try {
+            const body = await request.json();
+            const { email } = body;
+            if (!email) {
+                return errorResponse('Email is required', 400);
+            }
+            const client = createClient();
+            await client.forgotPassword({ email });
+            return jsonResponse({ message: 'Password reset email sent' });
+        }
+        catch (error) {
+            if (error instanceof ACPAuthError) {
+                return errorResponse(error.message, error.statusCode, error.code);
+            }
+            return errorResponse('Failed to send reset email', 500);
+        }
+    }
+    /**
+     * POST /api/auth/reset-password
+     * Body: { token: string, newPassword: string }
+     */
+    async function resetPasswordHandler(request) {
+        try {
+            const body = await request.json();
+            const { token, newPassword } = body;
+            if (!token || !newPassword) {
+                return errorResponse('Token and new password are required', 400);
+            }
+            const client = createClient();
+            await client.resetPassword({ token, newPassword });
+            return jsonResponse({ message: 'Password reset successful' });
+        }
+        catch (error) {
+            if (error instanceof ACPAuthError) {
+                return errorResponse(error.message, error.statusCode, error.code);
+            }
+            return errorResponse('Password reset failed', 500);
+        }
+    }
+    /**
+     * Main route handler that dispatches to individual handlers
+     */
+    async function authHandler(request, context) {
+        const { action } = await context.params;
+        switch (action) {
+            case 'login':
+                return loginHandler(request);
+            case 'verify-2fa':
+                return verify2FAHandler(request);
+            case 'logout':
+                return logoutHandler(request);
+            case 'session':
+                return sessionHandler(request);
+            case 'register':
+                return registerHandler(request);
+            case 'resend-verification':
+                return resendVerificationHandler(request);
+            case 'forgot-password':
+                return forgotPasswordHandler(request);
+            case 'reset-password':
+                return resetPasswordHandler(request);
+            default:
+                return errorResponse('Not found', 404);
+        }
+    }
+    return {
+        // Main combined handler
+        authHandler,
+        // Individual handlers for custom routing
+        loginHandler,
+        verify2FAHandler,
+        logoutHandler,
+        sessionHandler,
+        registerHandler,
+        resendVerificationHandler,
+        forgotPasswordHandler,
+        resetPasswordHandler,
+        // Utility functions
+        setAuthCookies,
+        clearAuthCookies,
+        getStoredTokens,
+        createClient,
+    };
+}
+//# sourceMappingURL=index.js.map