@atlasauth/nextjs 0.12.0 → 0.13.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +8 -0
- package/README.md +23 -0
- package/dist/index.d.ts +1 -0
- package/dist/index.js +1 -0
- package/dist/index.js.map +1 -1
- package/dist/mount.d.ts +2 -0
- package/dist/mount.js +3 -0
- package/dist/mount.js.map +1 -1
- package/dist/version.d.ts +2 -0
- package/dist/version.js +6 -0
- package/dist/version.js.map +1 -0
- package/dist/webhooks.d.ts +55 -0
- package/dist/webhooks.js +82 -0
- package/dist/webhooks.js.map +1 -0
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,13 @@
|
|
|
1
1
|
# @atlasauth/nextjs changelog
|
|
2
2
|
|
|
3
|
+
## 0.13.0 — 2026-11-11
|
|
4
|
+
|
|
5
|
+
### Added
|
|
6
|
+
- `createWebhookHandler({ secret, onEvent, store?, handleTest?, url? })`: a route handler that verifies the Atlas signature, skips repeated event ids, runs `onEvent`, and answers 500 (forgetting the id) when it throws so Atlas retries. Answers 503 without a secret and the test delivery with 200.
|
|
7
|
+
- `createBeforeUserCreateHandler({ secret, externalId })` for the `before_user_create` hook, including the test call.
|
|
8
|
+
- `memoryDedupeStore()`, `sqlDedupeStore({ query })` and the `WebhookDedupeStore` type.
|
|
9
|
+
- The mount handler reports `@atlasauth/nextjs` and its version to Atlas (`X-Atlas-SDK`) when the browser sent no SDK header of its own. Set `telemetry: false` to turn that off.
|
|
10
|
+
|
|
3
11
|
## 0.12.0 — 2026-11-06
|
|
4
12
|
|
|
5
13
|
### Added
|
package/README.md
CHANGED
|
@@ -141,6 +141,29 @@ Use a base path without a leading underscore, such as `/atlas`. The App Router t
|
|
|
141
141
|
|
|
142
142
|
The handler forwards the method, path, query and body. By default only the cookies `__session`, `__client` and `__atlas_*` and an allowlist of headers reach Atlas, so your app's own cookies and internal headers don't; `forwardCookies(name)` and `forwardHeaders(name)` replace those lists. It always drops any incoming `X-Atlas-*` (except `X-Atlas-SDK`), `X-Forwarded-*`, `Forwarded` and `X-Real-IP` headers, sets `X-Atlas-Forwarded-Host` and `X-Atlas-Proxy-Secret` itself, and returns every `Set-Cookie` and redirect unchanged. The client IP (`X-Atlas-Client-IP` and `X-Forwarded-For`) is the incoming `X-Forwarded-For` entry `trustedProxyHops` places from the right (default `1`: the entry your nearest proxy appended; entries further left are browser-controlled and ignored; `0` forwards none), or whatever `clientIp(request)` returns when you pass it; values that are not IP addresses are dropped. Without `ATLAS_UPSTREAM` or `ATLAS_PROXY_SECRET` the mount answers 503 and logs the missing variable once. Both handlers are also exported from `@atlasauth/nextjs`.
|
|
143
143
|
|
|
144
|
+
## Webhooks and the `before_user_create` hook
|
|
145
|
+
|
|
146
|
+
```ts
|
|
147
|
+
// app/api/atlas/webhooks/route.ts
|
|
148
|
+
import { createWebhookHandler, sqlDedupeStore } from '@atlasauth/nextjs';
|
|
149
|
+
export const POST = createWebhookHandler({
|
|
150
|
+
secret: process.env.ATLAS_WEBHOOK_SECRET,
|
|
151
|
+
store: sqlDedupeStore(pool), // or memoryDedupeStore() for one process; any { setIfAbsent, delete } works
|
|
152
|
+
onEvent: async (event) => { /* mirror the change */ },
|
|
153
|
+
});
|
|
154
|
+
|
|
155
|
+
// app/api/atlas/hooks/before-user-create/route.ts
|
|
156
|
+
import { createBeforeUserCreateHandler } from '@atlasauth/nextjs';
|
|
157
|
+
export const POST = createBeforeUserCreateHandler({
|
|
158
|
+
secret: process.env.ATLAS_HOOK_SECRET,
|
|
159
|
+
externalId: () => crypto.randomUUID(),
|
|
160
|
+
});
|
|
161
|
+
```
|
|
162
|
+
|
|
163
|
+
The webhook handler answers 503 when `secret` is missing, 400 for a delivery that does not verify, skips an event id it has already seen, and answers Atlas's `webhook.test` delivery with 200 without calling `onEvent` (pass `handleTest: true` to receive it). If `onEvent` throws, the id is forgotten and the handler answers 500, so Atlas retries. `sqlDedupeStore` needs `create table atlas_webhook_seen (key text primary key, expires_at timestamptz not null)`.
|
|
164
|
+
|
|
165
|
+
The hook handler verifies the signed call, answers `{ external_id }`, and answers Atlas's test call (`test: true`) without calling `externalId`.
|
|
166
|
+
|
|
144
167
|
## Routing rules
|
|
145
168
|
|
|
146
169
|
- Routes are protected unless they match `publicRoutes`. `protectedRoutes` wins over `publicRoutes`.
|
package/dist/index.d.ts
CHANGED
package/dist/index.js
CHANGED
|
@@ -19,4 +19,5 @@ __exportStar(require("./middleware"), exports);
|
|
|
19
19
|
__exportStar(require("./proxy"), exports);
|
|
20
20
|
__exportStar(require("./access-token"), exports);
|
|
21
21
|
__exportStar(require("./mount"), exports);
|
|
22
|
+
__exportStar(require("./webhooks"), exports);
|
|
22
23
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,+CAA6B;AAC7B,0CAAwB;AACxB,iDAA+B;AAC/B,0CAAwB"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,+CAA6B;AAC7B,0CAAwB;AACxB,iDAA+B;AAC/B,0CAAwB;AACxB,6CAA2B"}
|
package/dist/mount.d.ts
CHANGED
|
@@ -54,6 +54,8 @@ export interface AtlasMountOptions {
|
|
|
54
54
|
*/
|
|
55
55
|
forwardHeaders?: (name: string) => boolean;
|
|
56
56
|
fetchImpl?: typeof fetch;
|
|
57
|
+
/** Report this package's name and version to Atlas (`X-Atlas-SDK`) when the browser sent none. Default true; `false` opts out. */
|
|
58
|
+
telemetry?: boolean;
|
|
57
59
|
}
|
|
58
60
|
type Handler = (request: Request) => Promise<Response>;
|
|
59
61
|
export interface AtlasMountHandlers {
|
package/dist/mount.js
CHANGED
|
@@ -23,6 +23,7 @@
|
|
|
23
23
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
24
24
|
exports.createMountHandler = createMountHandler;
|
|
25
25
|
exports.createVerifyHandler = createVerifyHandler;
|
|
26
|
+
const version_1 = require("./version");
|
|
26
27
|
function readEnv() {
|
|
27
28
|
return globalThis.process?.env ?? {};
|
|
28
29
|
}
|
|
@@ -153,6 +154,8 @@ function createMountHandler(options = {}) {
|
|
|
153
154
|
if (kept !== undefined)
|
|
154
155
|
headers.set(key, kept);
|
|
155
156
|
});
|
|
157
|
+
if (options.telemetry !== false && !headers.has('x-atlas-sdk'))
|
|
158
|
+
headers.set('x-atlas-sdk', `@atlasauth/nextjs/${version_1.ATLAS_NEXTJS_VERSION}`);
|
|
156
159
|
headers.set('x-atlas-forwarded-host', request.headers.get('host') ?? url.host);
|
|
157
160
|
headers.set('x-atlas-proxy-secret', proxySecret);
|
|
158
161
|
const ip = clientIp(request, options);
|
package/dist/mount.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"mount.js","sourceRoot":"","sources":["../src/mount.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;
|
|
1
|
+
{"version":3,"file":"mount.js","sourceRoot":"","sources":["../src/mount.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AA0JH,gDAoEC;AASD,kDAcC;AAnPD,uCAAiD;AAIjD,SAAS,OAAO;IACd,OAAQ,UAA0C,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;AACxE,CAAC;AAqDD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACpI,yIAAyI;AACzI,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAE,EAAE,CAC1C,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;IACpB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IACzB,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,qBAAqB,CAAC;IACzF,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;IAC/B,CAAC,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACtH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,QAAQ,EAAE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY;IAC/J,UAAU,EAAE,mBAAmB,EAAE,eAAe,EAAE,UAAU,EAAE,qBAAqB;IACnF,0BAA0B;IAC1B,mBAAmB,EAAE,aAAa,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,iBAAiB;IACjG,uEAAuE;IACvE,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,YAAY,EAAE,yBAAyB,EAAE,sBAAsB;CACzK,CAAC,CAAC;AACH,MAAM,sBAAsB,GAAG,CAAC,IAAY,EAAE,EAAE,CAC9C,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACzK,0IAA0I;AAC1I,MAAM,sBAAsB,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC5H,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAC;AACjK,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEvD,SAAS,UAAU,CAAC,OAAgB;IAClC,MAAM,CAAC,GAAG,OAAsD,CAAC;IACjE,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,YAAY,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChC,CAAC;AAED,mGAAmG;AACnG,SAAS,WAAW,CAAC,GAAuB;IAC1C,IAAI,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,SAAS;QAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;SAC5B,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,wDAAwD;QACnF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,OAAgB,EAAE,OAA0B;IAC5D,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACzE,OAAO,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B,kEAAkE;AAClE,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC;IACxD,IAAI,IAAI,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yFAAyF;AACzF,SAAS,aAAa,CAAC,MAAc,EAAE,KAAgC;IACrE,MAAM,IAAI,GAAG,MAAM;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,kBAAkB,CAAC,UAA6B,EAAE;IAChE,MAAM,MAAM,GAAY,KAAK,EAAE,OAAO,EAAE,EAAE;QACxC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,cAAc,CAAC;QACxD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,kBAAkB,CAAC;QAClE,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,eAAe,GAAG,IAAI,CAAC;gBACvB,OAAO,CAAC,KAAK,CACX,CAAC,QAAQ;oBACP,CAAC,CAAC,oFAAoF;oBACtF,CAAC,CAAC,gGAAgG,CACrG,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,yBAAyB,EAAE;gBAC7C,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,eAAe,EAAE,UAAU,EAAE;aACtF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;YAClE,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjG,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAEvD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,IAAI,sBAAsB,CAAC;QACvE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAC/B,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC7D,MAAM,IAAI,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAChH,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,qBAAqB,8BAAoB,EAAE,CAAC,CAAC;QACxI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,+GAA+G;QAC/G,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAEhH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC;QAC/E,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE;YACrD,MAAM;YACN,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACxC,QAAQ,EAAE,QAAQ;YAClB,8CAA8C;YAC9C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxB,CAAC,CAAC;QAElB,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACjC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,KAAK,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACrF,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAClH,CAAC;AAID;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,UAAkD,EAAE;IAGtF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO;YACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC,kBAAkB,CAAC;YACrE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,KAAK,GACT,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;gBACxD,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACvF,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACrI,CAAC;KACF,CAAC;AACJ,CAAC"}
|
package/dist/version.js
ADDED
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.ATLAS_NEXTJS_VERSION = void 0;
|
|
4
|
+
/** This package's version, sent as `X-Atlas-SDK`. Kept in step with package.json by version.test.ts. */
|
|
5
|
+
exports.ATLAS_NEXTJS_VERSION = '0.13.0';
|
|
6
|
+
//# sourceMappingURL=version.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":";;;AAAA,wGAAwG;AAC3F,QAAA,oBAAoB,GAAG,QAAQ,CAAC"}
|
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Route handlers for Atlas webhooks and the `before_user_create` hook, for the
|
|
3
|
+
* App Router (web-standard `Request` / `Response`; Node and Edge runtimes).
|
|
4
|
+
*
|
|
5
|
+
* ```ts
|
|
6
|
+
* // app/api/atlas/webhooks/route.ts
|
|
7
|
+
* import { createWebhookHandler, memoryDedupeStore } from '@atlasauth/nextjs';
|
|
8
|
+
* export const POST = createWebhookHandler({
|
|
9
|
+
* secret: process.env.ATLAS_WEBHOOK_SECRET,
|
|
10
|
+
* store: memoryDedupeStore(),
|
|
11
|
+
* onEvent: async (event) => { ... },
|
|
12
|
+
* });
|
|
13
|
+
*
|
|
14
|
+
* // app/api/atlas/hooks/before-user-create/route.ts
|
|
15
|
+
* export const POST = createBeforeUserCreateHandler({
|
|
16
|
+
* secret: process.env.ATLAS_HOOK_SECRET,
|
|
17
|
+
* externalId: () => crypto.randomUUID(),
|
|
18
|
+
* });
|
|
19
|
+
* ```
|
|
20
|
+
*/
|
|
21
|
+
import { memoryWebhookStore, sqlWebhookDedupeStore, type WebhookDedupeStore } from '@atlasauth/backend';
|
|
22
|
+
export { memoryWebhookStore as memoryDedupeStore, sqlWebhookDedupeStore as sqlDedupeStore };
|
|
23
|
+
export type { WebhookDedupeStore };
|
|
24
|
+
export interface WebhookEnvelope {
|
|
25
|
+
id: string;
|
|
26
|
+
type: string;
|
|
27
|
+
timestamp: number;
|
|
28
|
+
instance_id: string;
|
|
29
|
+
data: any;
|
|
30
|
+
[key: string]: unknown;
|
|
31
|
+
}
|
|
32
|
+
export interface WebhookHandlerOptions {
|
|
33
|
+
/** The endpoint's signing secret. Missing or empty answers 503 (never accepts unsigned input). */
|
|
34
|
+
secret: string | undefined;
|
|
35
|
+
/** Called once per event. Throwing releases the dedupe entry and answers 500 so Atlas retries. */
|
|
36
|
+
onEvent: (event: WebhookEnvelope, ctx: {
|
|
37
|
+
deliveryId: string;
|
|
38
|
+
}) => void | Promise<void>;
|
|
39
|
+
/** Remembers delivery ids. Default: in-process memory; use `sqlDedupeStore` or your own when you run several instances. */
|
|
40
|
+
store?: WebhookDedupeStore;
|
|
41
|
+
/** Also call `onEvent` for Atlas's `webhook.test` delivery. Default false: it is answered with 200 and not passed on. */
|
|
42
|
+
handleTest?: boolean;
|
|
43
|
+
/** The exact URL Atlas posts to; also checks `v2` signatures. */
|
|
44
|
+
url?: string;
|
|
45
|
+
}
|
|
46
|
+
/** A `POST` route handler that verifies, dedupes by event id and runs `onEvent`. */
|
|
47
|
+
export declare function createWebhookHandler(options: WebhookHandlerOptions): (request: Request) => Promise<Response>;
|
|
48
|
+
export interface BeforeUserCreateHandlerOptions {
|
|
49
|
+
/** The hook's signing secret. Missing or empty answers 503. */
|
|
50
|
+
secret: string | undefined;
|
|
51
|
+
/** Your own id for the new user. Not called for Atlas's test call. Throwing answers 500 (Atlas then lets the sign-up through unless the hook is `fail_closed`). */
|
|
52
|
+
externalId: () => string | Promise<string>;
|
|
53
|
+
}
|
|
54
|
+
/** A `POST` route handler for the `before_user_create` hook, answering `{ external_id }`. */
|
|
55
|
+
export declare function createBeforeUserCreateHandler(options: BeforeUserCreateHandlerOptions): (request: Request) => Promise<Response>;
|
package/dist/webhooks.js
ADDED
|
@@ -0,0 +1,82 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.sqlDedupeStore = exports.memoryDedupeStore = void 0;
|
|
4
|
+
exports.createWebhookHandler = createWebhookHandler;
|
|
5
|
+
exports.createBeforeUserCreateHandler = createBeforeUserCreateHandler;
|
|
6
|
+
/**
|
|
7
|
+
* Route handlers for Atlas webhooks and the `before_user_create` hook, for the
|
|
8
|
+
* App Router (web-standard `Request` / `Response`; Node and Edge runtimes).
|
|
9
|
+
*
|
|
10
|
+
* ```ts
|
|
11
|
+
* // app/api/atlas/webhooks/route.ts
|
|
12
|
+
* import { createWebhookHandler, memoryDedupeStore } from '@atlasauth/nextjs';
|
|
13
|
+
* export const POST = createWebhookHandler({
|
|
14
|
+
* secret: process.env.ATLAS_WEBHOOK_SECRET,
|
|
15
|
+
* store: memoryDedupeStore(),
|
|
16
|
+
* onEvent: async (event) => { ... },
|
|
17
|
+
* });
|
|
18
|
+
*
|
|
19
|
+
* // app/api/atlas/hooks/before-user-create/route.ts
|
|
20
|
+
* export const POST = createBeforeUserCreateHandler({
|
|
21
|
+
* secret: process.env.ATLAS_HOOK_SECRET,
|
|
22
|
+
* externalId: () => crypto.randomUUID(),
|
|
23
|
+
* });
|
|
24
|
+
* ```
|
|
25
|
+
*/
|
|
26
|
+
const backend_1 = require("@atlasauth/backend");
|
|
27
|
+
Object.defineProperty(exports, "memoryDedupeStore", { enumerable: true, get: function () { return backend_1.memoryWebhookStore; } });
|
|
28
|
+
Object.defineProperty(exports, "sqlDedupeStore", { enumerable: true, get: function () { return backend_1.sqlWebhookDedupeStore; } });
|
|
29
|
+
const json = (status, body) => new Response(JSON.stringify(body), { status, headers: { 'content-type': 'application/json', 'cache-control': 'no-store' } });
|
|
30
|
+
const missingSecret = (name) => json(503, { error: 'webhook_secret_missing', message: `${name} has no signing secret configured; set \`secret\` (the endpoint's signing secret from Atlas).` });
|
|
31
|
+
/** A `POST` route handler that verifies, dedupes by event id and runs `onEvent`. */
|
|
32
|
+
function createWebhookHandler(options) {
|
|
33
|
+
const store = options.store ?? (0, backend_1.memoryWebhookStore)();
|
|
34
|
+
return async (request) => {
|
|
35
|
+
if (!options.secret)
|
|
36
|
+
return missingSecret('createWebhookHandler');
|
|
37
|
+
let result;
|
|
38
|
+
try {
|
|
39
|
+
result = await (0, backend_1.verifyAndDedupe)(request, { secret: options.secret, store, url: options.url });
|
|
40
|
+
}
|
|
41
|
+
catch (e) {
|
|
42
|
+
if (e instanceof backend_1.WebhookVerificationError)
|
|
43
|
+
return json(400, { error: 'invalid_webhook', reason: e.reason });
|
|
44
|
+
return json(500, { error: 'webhook_store_failed' });
|
|
45
|
+
}
|
|
46
|
+
const { event, duplicate, deliveryId, release } = result;
|
|
47
|
+
if (duplicate)
|
|
48
|
+
return json(200, { received: true, duplicate: true });
|
|
49
|
+
if (event.type === 'webhook.test' && !options.handleTest)
|
|
50
|
+
return json(200, { received: true, test: true });
|
|
51
|
+
try {
|
|
52
|
+
await options.onEvent(event, { deliveryId });
|
|
53
|
+
}
|
|
54
|
+
catch {
|
|
55
|
+
await release().catch(() => { });
|
|
56
|
+
return json(500, { error: 'handler_failed' });
|
|
57
|
+
}
|
|
58
|
+
return json(200, { received: true });
|
|
59
|
+
};
|
|
60
|
+
}
|
|
61
|
+
/** A `POST` route handler for the `before_user_create` hook, answering `{ external_id }`. */
|
|
62
|
+
function createBeforeUserCreateHandler(options) {
|
|
63
|
+
return async (request) => {
|
|
64
|
+
if (!options.secret)
|
|
65
|
+
return missingSecret('createBeforeUserCreateHandler');
|
|
66
|
+
const res = await (0, backend_1.verifyAtlasWebhookRequest)(request, { secret: options.secret });
|
|
67
|
+
if (!res.verified || !res.event)
|
|
68
|
+
return json(401, { error: 'invalid_signature', reason: res.reason ?? 'invalid_body' });
|
|
69
|
+
// A test call (`test: true` / `atlas-test` header) reserves nothing: answer a valid, empty decision.
|
|
70
|
+
if (res.event.test === true || request.headers.get('atlas-test'))
|
|
71
|
+
return json(200, {});
|
|
72
|
+
let external_id;
|
|
73
|
+
try {
|
|
74
|
+
external_id = await options.externalId();
|
|
75
|
+
}
|
|
76
|
+
catch {
|
|
77
|
+
return json(500, { error: 'external_id_failed' });
|
|
78
|
+
}
|
|
79
|
+
return json(200, { external_id });
|
|
80
|
+
};
|
|
81
|
+
}
|
|
82
|
+
//# sourceMappingURL=webhooks.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":";;;AA6DA,oDAsBC;AAUD,sEAeC;AA5GD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,gDAO4B;AAEG,kGAP7B,4BAAkB,OAO4B;AAA2B,+FANzE,+BAAqB,OAMkE;AAGzF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAa,EAAE,EAAE,CAC7C,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;AAE/H,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CACrC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,GAAG,IAAI,+FAA+F,EAAE,CAAC,CAAC;AAwBlK,oFAAoF;AACpF,SAAgB,oBAAoB,CAAC,OAA8B;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAA,4BAAkB,GAAE,CAAC;IACpD,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,aAAa,CAAC,sBAAsB,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,yBAAe,EAAkB,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,kCAAwB;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5G,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QACzD,IAAI,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC;AACJ,CAAC;AASD,6FAA6F;AAC7F,SAAgB,6BAA6B,CAAC,OAAuC;IACnF,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,aAAa,CAAC,+BAA+B,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,IAAA,mCAAyB,EAAoC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACpH,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC;QACxH,qGAAqG;QACrG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvF,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@atlasauth/nextjs",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.13.0",
|
|
4
4
|
"main": "./dist/index.js",
|
|
5
5
|
"types": "./dist/index.d.ts",
|
|
6
6
|
"exports": {
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
"./package.json": "./package.json"
|
|
20
20
|
},
|
|
21
21
|
"dependencies": {
|
|
22
|
-
"@atlasauth/backend": "0.
|
|
22
|
+
"@atlasauth/backend": "0.40.0"
|
|
23
23
|
},
|
|
24
24
|
"peerDependencies": {
|
|
25
25
|
"next": ">=13.4"
|