@atlasauth/nextjs 0.4.0 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @atlasauth/nextjs changelog
 
+## 0.6.0 — 2026-10-24
+
+### Added
+
+- `betterAuthBridge` option: during a migration from Better Auth, turns each user's Better Auth session into an Atlas session on their next request (once), clears the old cookie, and sends users who still owe a second factor to sign-in. With `secretKey`, exchanges run server to server at a per-app limit suited to a bulk cutover.
+
+## 0.5.0 — 2026-10-24
+
+### Added
+
+- `@atlasauth/nextjs/compat`: server-side drop-in helpers for apps migrated from Auth.js (`getServerSessionCompat`, `nextAuthCompat`, server `signIn`/`signOut`), Auth0 (`getAuth0SessionCompat`, `withApiAuthRequiredCompat`, `withPageAuthRequiredCompat`, `handleAuthCompat`, `Auth0ClientCompat`), Supabase Auth (`getSupabaseUserCompat`, `getSupabaseSessionCompat`, `supabaseSignOutCompat`) and Better Auth (`createBetterAuthServerCompat`, `toNextJsHandlerCompat`, `getSessionCookieCompat`), and `createAtlasMiddleware()` built from the environment.
+- `withAccessToken` sets the `DPoP-Nonce` response header (on success and refusal) when the verifier is given `dpopNonces`.
+
 ## 0.4.0 — 2026-10-23
 
 ### Added

package/dist/access-token.js

@@ -20,10 +20,27 @@ function withAccessToken(options, handler) {
         if (!result.ok) {
             return new Response(JSON.stringify(result.error ? { error: result.error, error_description: result.description } : { error: 'unauthorized' }), {
                 status: result.status,
-                headers: { 'content-type': 'application/json', 'www-authenticate': result.wwwAuthenticate },
+                headers: {
+                    'content-type': 'application/json',
+                    'www-authenticate': result.wwwAuthenticate,
+                    ...(result.dpopNonce ? { 'dpop-nonce': result.dpopNonce } : {}),
+                },
             });
         }
-        return handler(request, { claims: result.claims, subject: result.subject, clientId: result.clientId, scopes: result.scopes }, ctx);
+        const response = await handler(request, { claims: result.claims, subject: result.subject, clientId: result.clientId, scopes: result.scopes }, ctx);
+        if (!result.dpopNonce)
+            return response;
+        // RFC 9449 §8 — the server nonce on success too. Some responses (e.g. a
+        // fetched one) have immutable headers; those are re-wrapped.
+        try {
+            response.headers.set('dpop-nonce', result.dpopNonce);
+            return response;
+        }
+        catch {
+            const headers = new Headers(response.headers);
+            headers.set('dpop-nonce', result.dpopNonce);
+            return new Response(response.body, { status: response.status, statusText: response.statusText, headers });
+        }
     };
 }
 //# sourceMappingURL=access-token.js.map

package/dist/access-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-token.js","sourceRoot":"","sources":["../src/access-token.ts"],"names":[],"mappings":";;;AA6BA,0CAwBC;AArDD,gDAI4B;AAE5B,8CAO4B;AAN1B,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,wHAAA,6BAA6B,OAAA;AAc/B;;;;;GAKG;AACH,SAAgB,eAAe,CAC7B,OAAmC,EACnC,OAAiG;IAEjG,MAAM,MAAM,GAAG,IAAA,mCAAyB,EAAC,OAAO,CAAC,CAAC;IAClD,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CACZ,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAC1G,EACD;gBACE,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,CAAC,eAAe,EAAE;aAC5F,CACF,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CACZ,OAAO,EACP,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EACpG,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"access-token.js","sourceRoot":"","sources":["../src/access-token.ts"],"names":[],"mappings":";;;AA6BA,0CAuCC;AApED,gDAI4B;AAE5B,8CAO4B;AAN1B,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,wHAAA,6BAA6B,OAAA;AAc/B;;;;;GAKG;AACH,SAAgB,eAAe,CAC7B,OAAmC,EACnC,OAAiG;IAEjG,MAAM,MAAM,GAAG,IAAA,mCAAyB,EAAC,OAAO,CAAC,CAAC;IAClD,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CACZ,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAC1G,EACD;gBACE,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,kBAAkB,EAAE,MAAM,CAAC,eAAe;oBAC1C,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChE;aACF,CACF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,OAAO,EACP,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EACpG,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,QAAQ,CAAC;QACvC,wEAAwE;QACxE,6DAA6D;QAC7D,IAAI,CAAC;YACH,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACrD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/compat.d.ts

@@ -0,0 +1,220 @@
+/**
+ * `@atlasauth/nextjs/compat` — server-side drop-in helpers for Next.js apps moving
+ * to Atlas from Auth.js (NextAuth), Auth0 (nextjs-auth0), Supabase Auth and Better
+ * Auth. `atlas migrate code --from <vendor>` rewrites imports onto these so the
+ * migrated code keeps the shapes it was written against and runs on day one; move
+ * call sites to `auth()` / `currentUser()` from `@atlasauth/nextjs/server` later.
+ *
+ * Everything here reads the verified Atlas session (cookies / Authorization
+ * header) exactly as `auth()` does. Profile fields beyond the id (email, name)
+ * come from the session claims, so they are present when the instance includes
+ * the profile claims in its session token.
+ */
+import { type AtlasMiddlewareOptions, type CurrentUser, type EdgeRequest } from './middleware';
+import { type ServerAuth } from './server';
+/** Routes the migrated middleware leaves public by default: the Atlas pages. */
+export declare const COMPAT_PUBLIC_ROUTES: readonly string[];
+type NextLikeRequest = EdgeRequest & {
+    url?: string;
+};
+/**
+ * A ready-made Next.js `middleware` (14/15) built from the environment
+ * (`ATLAS_JWKS_URL`, `ATLAS_ISSUER`, `ATLAS_PUBLISHABLE_KEY`). Every route the
+ * middleware's `config.matcher` selects requires a session, except the Atlas
+ * sign-in and sign-up pages (and any `publicRoutes` you pass). The environment is
+ * read on the first request, not at import time.
+ */
+export declare function createAtlasMiddleware(options?: Partial<AtlasMiddlewareOptions>): (request: NextLikeRequest) => Promise<unknown>;
+/** The session `getServerSession()` / v5 `auth()` resolve to. */
+export interface NextAuthServerSession {
+    user: {
+        id: string;
+        name: string | null;
+        email: string | null;
+        image: string | null;
+    };
+    expires: string;
+}
+/** Pure projection, exported for tests and custom wiring. */
+export declare function nextAuthServerSessionFrom(user: CurrentUser | null, state: Pick<ServerAuth, 'claims'>): NextAuthServerSession | null;
+/**
+ * `getServerSession(authOptions)` (v4) and `auth()` (v5) on Atlas. Arguments are
+ * accepted and ignored, so existing call sites keep compiling.
+ */
+export declare function getServerSessionCompat(..._ignored: unknown[]): Promise<NextAuthServerSession | null>;
+/** Server-side `signIn()` (a v5 server action): redirects to the Atlas sign-in page. */
+export declare function nextAuthServerSignIn(_provider?: string, options?: {
+    redirectTo?: string;
+    callbackUrl?: string;
+    signInUrl?: string;
+}): Promise<never>;
+/** Server-side `signOut()` (a v5 server action): revokes the session, then redirects. */
+export declare function nextAuthServerSignOut(options?: {
+    redirectTo?: string;
+    redirect?: boolean;
+}): Promise<void>;
+/** `handlers` from v5 `NextAuth()`: the old `/api/auth/*` route now answers 404. */
+export declare const nextAuthHandlersCompat: {
+    GET: () => Promise<Response>;
+    POST: () => Promise<Response>;
+};
+/**
+ * `NextAuth(config)` on Atlas, for both shapes it is used in:
+ *
+ *  - v5 `auth.ts`: `export const { handlers, auth, signIn, signOut } = NextAuth(config)`
+ *    — the destructured members are the compat helpers above, so every
+ *    `import { auth } from '@/auth'` keeps working;
+ *  - v4 route: `const handler = NextAuth(authOptions); export { handler as GET, handler as POST }`
+ *    — the returned function answers the old `/api/auth/*` route with 404.
+ *
+ * The config is accepted and ignored: configure providers in the Atlas dashboard
+ * and port `callbacks` to Atlas Actions, then delete it.
+ */
+export declare function nextAuthCompat(..._ignored: unknown[]): (() => Promise<Response>) & {
+    handlers: {
+        GET: () => Promise<Response>;
+        POST: () => Promise<Response>;
+    };
+    auth: typeof getServerSessionCompat;
+    signIn: typeof nextAuthServerSignIn;
+    signOut: typeof nextAuthServerSignOut;
+    /** v5 `unstable_update`: Atlas sessions pick up profile changes on their own refresh. */
+    unstable_update: (..._args: unknown[]) => Promise<NextAuthServerSession | null>;
+};
+/** The OIDC profile nextjs-auth0 puts on `session.user`. */
+export interface Auth0ServerUser {
+    sub: string;
+    email?: string;
+    name?: string;
+    given_name?: string;
+    family_name?: string;
+    org_id?: string;
+    [claim: string]: unknown;
+}
+export interface Auth0ServerSession {
+    user: Auth0ServerUser;
+    /** Unix seconds the Atlas session token expires at. */
+    expiresAt?: number;
+}
+export declare function auth0SessionFrom(user: CurrentUser | null, state: Pick<ServerAuth, 'claims'>): Auth0ServerSession | null;
+/** `getSession()` from nextjs-auth0 (v3, App Router) on Atlas. */
+export declare function getAuth0SessionCompat(..._ignored: unknown[]): Promise<Auth0ServerSession | null>;
+/**
+ * `withApiAuthRequired(handler)`: an App Router route handler (or a Pages API
+ * route, detected by its `res`) answers 401 unless a user is signed in.
+ */
+export declare function withApiAuthRequiredCompat<A extends unknown[], R>(handler: (...args: A) => R | Promise<R>): (...args: A) => Promise<R | Response | undefined>;
+/**
+ * `withPageAuthRequired(Page, { returnTo })` for an App Router server component:
+ * renders the page for a signed-in user, else redirects to the sign-in page.
+ */
+export declare function withPageAuthRequiredCompat<P extends object, R>(page: (props: P) => R | Promise<R>, options?: {
+    returnTo?: string | ((props: P) => string | Promise<string>);
+    signInUrl?: string;
+}): (props: P) => Promise<R>;
+/** `handleAuth()` from nextjs-auth0 v3: the old `/api/auth/[auth0]` route now answers 404. */
+export declare function handleAuthCompat(..._ignored: unknown[]): () => Promise<Response>;
+/** `withMiddlewareAuthRequired()` from `@auth0/nextjs-auth0/edge`. */
+export declare function withMiddlewareAuthRequiredCompat(..._ignored: unknown[]): (request: NextLikeRequest) => Promise<unknown>;
+/**
+ * `new Auth0Client()` from `@auth0/nextjs-auth0/server` (v4) on Atlas:
+ * `getSession()`, `middleware(request)` and `getAccessToken()`.
+ */
+export declare class Auth0ClientCompat {
+    private readonly mw;
+    constructor(_options?: Record<string, unknown>);
+    getSession(..._ignored: unknown[]): Promise<Auth0ServerSession | null>;
+    middleware(request: NextLikeRequest): Promise<unknown>;
+    /**
+     * Atlas session tokens are verified by your own backend with the instance JWKS
+     * (`AtlasBackend` from `@atlasauth/backend`); there is no separate access token
+     * to fetch server-side. Read the session token from the request instead.
+     */
+    getAccessToken(): Promise<never>;
+}
+/** The `User` object `supabase.auth.getUser()` resolves to (the fields apps read). */
+export interface SupabaseServerUser {
+    id: string;
+    aud: 'authenticated';
+    role: 'authenticated';
+    email?: string;
+    user_metadata: Record<string, unknown>;
+    app_metadata: Record<string, unknown>;
+}
+export declare function supabaseServerUserFrom(user: CurrentUser | null): SupabaseServerUser | null;
+/** `supabase.auth.getUser()` in a server component, route handler or server action. */
+export declare function getSupabaseUserCompat(): Promise<{
+    data: {
+        user: SupabaseServerUser | null;
+    };
+    error: null;
+}>;
+/** `supabase.auth.getSession()` server-side. There is no raw token here; use getUser(). */
+export declare function getSupabaseSessionCompat(): Promise<{
+    data: {
+        session: {
+            user: SupabaseServerUser;
+            expires_at?: number;
+        } | null;
+    };
+    error: null;
+}>;
+/** `supabase.auth.signOut()` server-side: revokes the active session. */
+export declare function supabaseSignOutCompat(): Promise<{
+    error: null;
+}>;
+export interface BetterAuthServerSession {
+    user: {
+        id: string;
+        email: string | null;
+        name: string | null;
+        image: string | null;
+        emailVerified: boolean;
+    };
+    session: {
+        id: string;
+        userId: string;
+        expiresAt: Date;
+        activeOrganizationId: string | null;
+    };
+}
+export declare function betterAuthServerSessionFrom(user: CurrentUser | null, state: Pick<ServerAuth, 'claims' | 'sessionId'>): BetterAuthServerSession | null;
+/**
+ * `betterAuth({...})` on Atlas: the returned object keeps `auth.api.getSession()`,
+ * `auth.api.signOut()` and `auth.handler`, so `lib/auth.ts` importers keep working.
+ * The options are accepted and ignored: configure sign-in methods, providers and
+ * plugins in the Atlas dashboard instead.
+ */
+export declare function createBetterAuthServerCompat(_options?: Record<string, unknown>): {
+    /** Type-only, like Better Auth's `typeof auth.$Infer.Session`. */
+    $Infer: {
+        Session: BetterAuthServerSession;
+    };
+    api: {
+        getSession(_input?: {
+            headers?: unknown;
+        }): Promise<BetterAuthServerSession | null>;
+        signOut(_input?: {
+            headers?: unknown;
+        }): Promise<{
+            success: boolean;
+        }>;
+    };
+    handler: () => Promise<Response>;
+};
+/** `toNextJsHandler(auth)` from `better-auth/next-js`: the old route now answers 404. */
+export declare function toNextJsHandlerCompat(..._ignored: unknown[]): {
+    GET: () => Promise<Response>;
+    POST: () => Promise<Response>;
+    PATCH: () => Promise<Response>;
+    PUT: () => Promise<Response>;
+    DELETE: () => Promise<Response>;
+};
+/**
+ * `getSessionCookie(request)` from `better-auth/cookies`: a cheap, unverified
+ * "probably signed in" check for middleware. Returns a non-empty marker when the
+ * browser carries an Atlas session hint, else null. Never proof of identity; a
+ * page that needs the user calls `auth()`.
+ */
+export declare function getSessionCookieCompat(request: EdgeRequest, ..._ignored: unknown[]): string | null;
+export {};

package/dist/compat.js

@@ -0,0 +1,352 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Auth0ClientCompat = exports.nextAuthHandlersCompat = exports.COMPAT_PUBLIC_ROUTES = void 0;
+exports.createAtlasMiddleware = createAtlasMiddleware;
+exports.nextAuthServerSessionFrom = nextAuthServerSessionFrom;
+exports.getServerSessionCompat = getServerSessionCompat;
+exports.nextAuthServerSignIn = nextAuthServerSignIn;
+exports.nextAuthServerSignOut = nextAuthServerSignOut;
+exports.nextAuthCompat = nextAuthCompat;
+exports.auth0SessionFrom = auth0SessionFrom;
+exports.getAuth0SessionCompat = getAuth0SessionCompat;
+exports.withApiAuthRequiredCompat = withApiAuthRequiredCompat;
+exports.withPageAuthRequiredCompat = withPageAuthRequiredCompat;
+exports.handleAuthCompat = handleAuthCompat;
+exports.withMiddlewareAuthRequiredCompat = withMiddlewareAuthRequiredCompat;
+exports.supabaseServerUserFrom = supabaseServerUserFrom;
+exports.getSupabaseUserCompat = getSupabaseUserCompat;
+exports.getSupabaseSessionCompat = getSupabaseSessionCompat;
+exports.supabaseSignOutCompat = supabaseSignOutCompat;
+exports.betterAuthServerSessionFrom = betterAuthServerSessionFrom;
+exports.createBetterAuthServerCompat = createBetterAuthServerCompat;
+exports.toNextJsHandlerCompat = toNextJsHandlerCompat;
+exports.getSessionCookieCompat = getSessionCookieCompat;
+/**
+ * `@atlasauth/nextjs/compat` — server-side drop-in helpers for Next.js apps moving
+ * to Atlas from Auth.js (NextAuth), Auth0 (nextjs-auth0), Supabase Auth and Better
+ * Auth. `atlas migrate code --from <vendor>` rewrites imports onto these so the
+ * migrated code keeps the shapes it was written against and runs on day one; move
+ * call sites to `auth()` / `currentUser()` from `@atlasauth/nextjs/server` later.
+ *
+ * Everything here reads the verified Atlas session (cookies / Authorization
+ * header) exactly as `auth()` does. Profile fields beyond the id (email, name)
+ * come from the session claims, so they are present when the instance includes
+ * the profile claims in its session token.
+ */
+const middleware_1 = require("./middleware");
+const matcher_1 = require("./matcher");
+const server_1 = require("./server");
+/** Routes the migrated middleware leaves public by default: the Atlas pages. */
+exports.COMPAT_PUBLIC_ROUTES = ['/sign-in(.*)', '/sign-up(.*)'];
+/**
+ * A ready-made Next.js `middleware` (14/15) built from the environment
+ * (`ATLAS_JWKS_URL`, `ATLAS_ISSUER`, `ATLAS_PUBLISHABLE_KEY`). Every route the
+ * middleware's `config.matcher` selects requires a session, except the Atlas
+ * sign-in and sign-up pages (and any `publicRoutes` you pass). The environment is
+ * read on the first request, not at import time.
+ */
+function createAtlasMiddleware(options = {}) {
+    let middleware;
+    return async (request) => {
+        if (!middleware) {
+            const publicRoutes = [...exports.COMPAT_PUBLIC_ROUTES, ...(options.publicRoutes ?? [])];
+            middleware = (0, middleware_1.atlasMiddleware)({ ...(0, server_1.configFromEnv)(), ...options, publicRoutes });
+        }
+        const { NextResponse } = await Promise.resolve().then(() => __importStar(require('next/server')));
+        return middleware(request, NextResponse);
+    };
+}
+function withRedirect(url, redirectUrl) {
+    if (!redirectUrl)
+        return url;
+    return `${url}${url.includes('?') ? '&' : '?'}redirect_url=${encodeURIComponent(redirectUrl)}`;
+}
+async function nextRedirect(url) {
+    const { redirect } = await Promise.resolve().then(() => __importStar(require('next/navigation')));
+    return redirect(url);
+}
+function expiresIso(state) {
+    const exp = typeof state.claims?.exp === 'number' ? state.claims.exp * 1000 : Date.now() + 60_000;
+    return new Date(exp).toISOString();
+}
+function fullName(user) {
+    return user.name ?? ([user.firstName, user.lastName].filter(Boolean).join(' ') || null);
+}
+/** Revoke the active session server-side (needs `ATLAS_SECRET_KEY`). */
+async function revokeActiveSession() {
+    const state = await (0, server_1.auth)();
+    if (state.sessionId)
+        await (0, server_1.atlasClient)().sessions.revoke(state.sessionId);
+}
+function notFoundHandler(vendor) {
+    return async () => new Response(JSON.stringify({
+        errors: [
+            {
+                code: 'MIGRATED_TO_ATLAS',
+                message: `This ${vendor} auth route is no longer used: sign-in, sign-out and callbacks are handled by Atlas. Delete this route.`,
+            },
+        ],
+    }), { status: 404, headers: { 'content-type': 'application/json' } });
+}
+/** Pure projection, exported for tests and custom wiring. */
+function nextAuthServerSessionFrom(user, state) {
+    if (!user)
+        return null;
+    return { user: { id: user.id, name: fullName(user), email: user.email, image: null }, expires: expiresIso(state) };
+}
+/**
+ * `getServerSession(authOptions)` (v4) and `auth()` (v5) on Atlas. Arguments are
+ * accepted and ignored, so existing call sites keep compiling.
+ */
+async function getServerSessionCompat(..._ignored) {
+    const [user, state] = await Promise.all([(0, server_1.currentUser)(), (0, server_1.auth)()]);
+    return nextAuthServerSessionFrom(user, state);
+}
+/** Server-side `signIn()` (a v5 server action): redirects to the Atlas sign-in page. */
+async function nextAuthServerSignIn(_provider, options = {}) {
+    return nextRedirect(withRedirect(options.signInUrl ?? matcher_1.DEFAULT_SIGN_IN_URL, options.redirectTo ?? options.callbackUrl));
+}
+/** Server-side `signOut()` (a v5 server action): revokes the session, then redirects. */
+async function nextAuthServerSignOut(options = {}) {
+    await revokeActiveSession();
+    if (options.redirect !== false)
+        await nextRedirect(options.redirectTo ?? '/');
+}
+/** `handlers` from v5 `NextAuth()`: the old `/api/auth/*` route now answers 404. */
+exports.nextAuthHandlersCompat = {
+    GET: notFoundHandler('Auth.js'),
+    POST: notFoundHandler('Auth.js'),
+};
+/**
+ * `NextAuth(config)` on Atlas, for both shapes it is used in:
+ *
+ *  - v5 `auth.ts`: `export const { handlers, auth, signIn, signOut } = NextAuth(config)`
+ *    — the destructured members are the compat helpers above, so every
+ *    `import { auth } from '@/auth'` keeps working;
+ *  - v4 route: `const handler = NextAuth(authOptions); export { handler as GET, handler as POST }`
+ *    — the returned function answers the old `/api/auth/*` route with 404.
+ *
+ * The config is accepted and ignored: configure providers in the Atlas dashboard
+ * and port `callbacks` to Atlas Actions, then delete it.
+ */
+function nextAuthCompat(..._ignored) {
+    const handler = notFoundHandler('Auth.js');
+    return Object.assign(handler, {
+        handlers: exports.nextAuthHandlersCompat,
+        auth: getServerSessionCompat,
+        signIn: nextAuthServerSignIn,
+        signOut: nextAuthServerSignOut,
+        /** v5 `unstable_update`: Atlas sessions pick up profile changes on their own refresh. */
+        unstable_update: async (..._args) => getServerSessionCompat(),
+    });
+}
+function auth0SessionFrom(user, state) {
+    if (!user)
+        return null;
+    const out = { sub: user.id };
+    const name = fullName(user);
+    if (user.email)
+        out.email = user.email;
+    if (name)
+        out.name = name;
+    if (user.firstName)
+        out.given_name = user.firstName;
+    if (user.lastName)
+        out.family_name = user.lastName;
+    if (user.orgId)
+        out.org_id = user.orgId;
+    return { user: out, ...(typeof state.claims?.exp === 'number' ? { expiresAt: state.claims.exp } : {}) };
+}
+/** `getSession()` from nextjs-auth0 (v3, App Router) on Atlas. */
+async function getAuth0SessionCompat(..._ignored) {
+    const [user, state] = await Promise.all([(0, server_1.currentUser)(), (0, server_1.auth)()]);
+    return auth0SessionFrom(user, state);
+}
+const UNAUTHORIZED = { error: 'not_authenticated', description: 'The user does not have an active session or is not authenticated' };
+/**
+ * `withApiAuthRequired(handler)`: an App Router route handler (or a Pages API
+ * route, detected by its `res`) answers 401 unless a user is signed in.
+ */
+function withApiAuthRequiredCompat(handler) {
+    return async (...args) => {
+        const state = await (0, server_1.auth)();
+        if (state.userId)
+            return handler(...args);
+        const res = args[1];
+        if (res && typeof res.status === 'function') {
+            res.status(401).json(UNAUTHORIZED);
+            return undefined;
+        }
+        return new Response(JSON.stringify(UNAUTHORIZED), { status: 401, headers: { 'content-type': 'application/json' } });
+    };
+}
+/**
+ * `withPageAuthRequired(Page, { returnTo })` for an App Router server component:
+ * renders the page for a signed-in user, else redirects to the sign-in page.
+ */
+function withPageAuthRequiredCompat(page, options = {}) {
+    return async (props) => {
+        const state = await (0, server_1.auth)();
+        if (state.userId)
+            return page(props);
+        const returnTo = typeof options.returnTo === 'function' ? await options.returnTo(props) : options.returnTo;
+        return nextRedirect(withRedirect(options.signInUrl ?? matcher_1.DEFAULT_SIGN_IN_URL, returnTo));
+    };
+}
+/** `handleAuth()` from nextjs-auth0 v3: the old `/api/auth/[auth0]` route now answers 404. */
+function handleAuthCompat(..._ignored) {
+    return notFoundHandler('Auth0');
+}
+/** `withMiddlewareAuthRequired()` from `@auth0/nextjs-auth0/edge`. */
+function withMiddlewareAuthRequiredCompat(..._ignored) {
+    return createAtlasMiddleware();
+}
+/**
+ * `new Auth0Client()` from `@auth0/nextjs-auth0/server` (v4) on Atlas:
+ * `getSession()`, `middleware(request)` and `getAccessToken()`.
+ */
+class Auth0ClientCompat {
+    mw = createAtlasMiddleware();
+    constructor(_options = {}) { }
+    getSession(..._ignored) {
+        return getAuth0SessionCompat();
+    }
+    middleware(request) {
+        return this.mw(request);
+    }
+    /**
+     * Atlas session tokens are verified by your own backend with the instance JWKS
+     * (`AtlasBackend` from `@atlasauth/backend`); there is no separate access token
+     * to fetch server-side. Read the session token from the request instead.
+     */
+    async getAccessToken() {
+        throw new Error('Auth0ClientCompat.getAccessToken(): Atlas has no server-side access-token exchange. Send the session token (getToken() in the browser) to your API and verify it with @atlasauth/backend.');
+    }
+}
+exports.Auth0ClientCompat = Auth0ClientCompat;
+function supabaseServerUserFrom(user) {
+    if (!user)
+        return null;
+    const name = fullName(user);
+    return {
+        id: user.id,
+        aud: 'authenticated',
+        role: 'authenticated',
+        ...(user.email ? { email: user.email } : {}),
+        user_metadata: name ? { full_name: name, name } : {},
+        app_metadata: user.orgId ? { org_id: user.orgId, org_role: user.orgRole } : {},
+    };
+}
+/** `supabase.auth.getUser()` in a server component, route handler or server action. */
+async function getSupabaseUserCompat() {
+    return { data: { user: supabaseServerUserFrom(await (0, server_1.currentUser)()) }, error: null };
+}
+/** `supabase.auth.getSession()` server-side. There is no raw token here; use getUser(). */
+async function getSupabaseSessionCompat() {
+    const [user, state] = await Promise.all([(0, server_1.currentUser)(), (0, server_1.auth)()]);
+    const mapped = supabaseServerUserFrom(user);
+    return {
+        data: {
+            session: mapped
+                ? { user: mapped, ...(typeof state.claims?.exp === 'number' ? { expires_at: state.claims.exp } : {}) }
+                : null,
+        },
+        error: null,
+    };
+}
+/** `supabase.auth.signOut()` server-side: revokes the active session. */
+async function supabaseSignOutCompat() {
+    await revokeActiveSession();
+    return { error: null };
+}
+function betterAuthServerSessionFrom(user, state) {
+    if (!user)
+        return null;
+    return {
+        user: {
+            id: user.id,
+            email: user.email,
+            name: fullName(user),
+            image: null,
+            // Present when the instance includes `email_verified` in its session claims.
+            emailVerified: state.claims?.email_verified === true,
+        },
+        session: {
+            id: state.sessionId ?? '',
+            userId: user.id,
+            expiresAt: new Date(expiresIso(state)),
+            activeOrganizationId: user.orgId,
+        },
+    };
+}
+/**
+ * `betterAuth({...})` on Atlas: the returned object keeps `auth.api.getSession()`,
+ * `auth.api.signOut()` and `auth.handler`, so `lib/auth.ts` importers keep working.
+ * The options are accepted and ignored: configure sign-in methods, providers and
+ * plugins in the Atlas dashboard instead.
+ */
+function createBetterAuthServerCompat(_options = {}) {
+    return {
+        /** Type-only, like Better Auth's `typeof auth.$Infer.Session`. */
+        $Infer: {},
+        api: {
+            async getSession(_input) {
+                const [user, state] = await Promise.all([(0, server_1.currentUser)(), (0, server_1.auth)()]);
+                return betterAuthServerSessionFrom(user, state);
+            },
+            async signOut(_input) {
+                await revokeActiveSession();
+                return { success: true };
+            },
+        },
+        handler: notFoundHandler('Better Auth'),
+    };
+}
+/** `toNextJsHandler(auth)` from `better-auth/next-js`: the old route now answers 404. */
+function toNextJsHandlerCompat(..._ignored) {
+    const handler = notFoundHandler('Better Auth');
+    return { GET: handler, POST: handler, PATCH: handler, PUT: handler, DELETE: handler };
+}
+/**
+ * `getSessionCookie(request)` from `better-auth/cookies`: a cheap, unverified
+ * "probably signed in" check for middleware. Returns a non-empty marker when the
+ * browser carries an Atlas session hint, else null. Never proof of identity; a
+ * page that needs the user calls `auth()`.
+ */
+function getSessionCookieCompat(request, ..._ignored) {
+    return (0, middleware_1.hasSignedInHint)(request) ? 'atlas' : null;
+}
+//# sourceMappingURL=compat.js.map

package/dist/compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat.js","sourceRoot":"","sources":["../src/compat.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,sDAYC;AAmDD,8DAMC;AAMD,wDAGC;AAGD,oDAKC;AAGD,sDAKC;AAoBD,wCAUC;AAqBD,4CAUC;AAGD,sDAGC;AAQD,8DAWC;AAMD,gEAUC;AAGD,4CAEC;AAGD,4EAEC;AA2CD,wDAWC;AAGD,sDAEC;AAGD,4DAcC;AAGD,sDAGC;AASD,kEAqBC;AAQD,oEAgBC;AAGD,sDAGC;AAQD,wDAEC;AAlYD;;;;;;;;;;;GAWG;AACH,6CAAiI;AACjI,uCAAgD;AAChD,qCAA0F;AAE1F,gFAAgF;AACnE,QAAA,oBAAoB,GAAsB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;AAIxF;;;;;;GAMG;AACH,SAAgB,qBAAqB,CACnC,UAA2C,EAAE;IAE7C,IAAI,UAA0D,CAAC;IAC/D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,CAAC,GAAG,4BAAoB,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;YAChF,UAAU,GAAG,IAAA,4BAAe,EAAC,EAAE,GAAG,IAAA,sBAAa,GAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,aAAa,GAAC,CAAC;QACrD,OAAO,UAAU,CAAC,OAAO,EAAE,YAAqB,CAAC,CAAC;IACpD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,WAAoB;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,GAAG,CAAC;IAC7B,OAAO,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,gBAAgB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAW;IACrC,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,iBAAiB,GAAC,CAAC;IACrD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,KAAiC;IACnD,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IAClG,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAiB;IACjC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,wEAAwE;AACxE,KAAK,UAAU,mBAAmB;IAChC,MAAM,KAAK,GAAG,MAAM,IAAA,aAAI,GAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,SAAS;QAAE,MAAM,IAAA,oBAAW,GAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,KAAK,IAAI,EAAE,CAChB,IAAI,QAAQ,CACV,IAAI,CAAC,SAAS,CAAC;QACb,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,QAAQ,MAAM,yGAAyG;aACjI;SACF;KACF,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;AACN,CAAC;AAUD,6DAA6D;AAC7D,SAAgB,yBAAyB,CACvC,IAAwB,EACxB,KAAiC;IAEjC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;AACrH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,sBAAsB,CAAC,GAAG,QAAmB;IACjE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAA,oBAAW,GAAE,EAAE,IAAA,aAAI,GAAE,CAAC,CAAC,CAAC;IACjE,OAAO,yBAAyB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,wFAAwF;AACjF,KAAK,UAAU,oBAAoB,CACxC,SAAkB,EAClB,UAA6E,EAAE;IAE/E,OAAO,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,IAAI,6BAAmB,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;AACzH,CAAC;AAED,yFAAyF;AAClF,KAAK,UAAU,qBAAqB,CACzC,UAAuD,EAAE;IAEzD,MAAM,mBAAmB,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;QAAE,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;AAChF,CAAC;AAED,oFAAoF;AACvE,QAAA,sBAAsB,GAAG;IACpC,GAAG,EAAE,eAAe,CAAC,SAAS,CAAC;IAC/B,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC;CACjC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,SAAgB,cAAc,CAAC,GAAG,QAAmB;IACnD,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QAC5B,QAAQ,EAAE,8BAAsB;QAChC,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,oBAAoB;QAC5B,OAAO,EAAE,qBAAqB;QAC9B,yFAAyF;QACzF,eAAe,EAAE,KAAK,EAAE,GAAG,KAAgB,EAAE,EAAE,CAAC,sBAAsB,EAAE;KACzE,CAAC,CAAC;AACL,CAAC;AAqBD,SAAgB,gBAAgB,CAAC,IAAwB,EAAE,KAAiC;IAC1F,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAoB,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvC,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAC1B,IAAI,IAAI,CAAC,SAAS;QAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,CAAC,QAAQ;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC;IACnD,IAAI,IAAI,CAAC,KAAK;QAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,kEAAkE;AAC3D,KAAK,UAAU,qBAAqB,CAAC,GAAG,QAAmB;IAChE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAA,oBAAW,GAAE,EAAE,IAAA,aAAI,GAAE,CAAC,CAAC,CAAC;IACjE,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,YAAY,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,kEAAkE,EAAE,CAAC;AAErI;;;GAGG;AACH,SAAgB,yBAAyB,CAAyB,OAAuC;IACvG,OAAO,KAAK,EAAE,GAAG,IAAO,EAAqC,EAAE;QAC7D,MAAM,KAAK,GAAG,MAAM,IAAA,aAAI,GAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAiF,CAAC;QACpG,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,0BAA0B,CACxC,IAAkC,EAClC,UAAgG,EAAE;IAElG,OAAO,KAAK,EAAE,KAAQ,EAAc,EAAE;QACpC,MAAM,KAAK,GAAG,MAAM,IAAA,aAAI,GAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3G,OAAO,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,IAAI,6BAAmB,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAgB,gBAAgB,CAAC,GAAG,QAAmB;IACrD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,sEAAsE;AACtE,SAAgB,gCAAgC,CAAC,GAAG,QAAmB;IACrE,OAAO,qBAAqB,EAAE,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAa,iBAAiB;IACX,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAE9C,YAAY,WAAoC,EAAE,IAAG,CAAC;IAEtD,UAAU,CAAC,GAAG,QAAmB;QAC/B,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAED,UAAU,CAAC,OAAwB;QACjC,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,KAAK,CACb,2LAA2L,CAC5L,CAAC;IACJ,CAAC;CACF;AAvBD,8CAuBC;AAcD,SAAgB,sBAAsB,CAAC,IAAwB;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,GAAG,EAAE,eAAe;QACpB,IAAI,EAAE,eAAe;QACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QACpD,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;KAC/E,CAAC;AACJ,CAAC;AAED,uFAAuF;AAChF,KAAK,UAAU,qBAAqB;IACzC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,sBAAsB,CAAC,MAAM,IAAA,oBAAW,GAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACtF,CAAC;AAED,2FAA2F;AACpF,KAAK,UAAU,wBAAwB;IAI5C,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAA,oBAAW,GAAE,EAAE,IAAA,aAAI,GAAE,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACtG,CAAC,CAAC,IAAI;SACT;QACD,KAAK,EAAE,IAAI;KACZ,CAAC;AACJ,CAAC;AAED,yEAAyE;AAClE,KAAK,UAAU,qBAAqB;IACzC,MAAM,mBAAmB,EAAE,CAAC;IAC5B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AASD,SAAgB,2BAA2B,CACzC,IAAwB,EACxB,KAA+C;IAE/C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO;QACL,IAAI,EAAE;YACJ,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;YACpB,KAAK,EAAE,IAAI;YACX,6EAA6E;YAC7E,aAAa,EAAG,KAAK,CAAC,MAA8C,EAAE,cAAc,KAAK,IAAI;SAC9F;QACD,OAAO,EAAE;YACP,EAAE,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACtC,oBAAoB,EAAE,IAAI,CAAC,KAAK;SACjC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,4BAA4B,CAAC,WAAoC,EAAE;IACjF,OAAO;QACL,kEAAkE;QAClE,MAAM,EAAE,EAA0C;QAClD,GAAG,EAAE;YACH,KAAK,CAAC,UAAU,CAAC,MAA8B;gBAC7C,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAA,oBAAW,GAAE,EAAE,IAAA,aAAI,GAAE,CAAC,CAAC,CAAC;gBACjE,OAAO,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,MAA8B;gBAC1C,MAAM,mBAAmB,EAAE,CAAC;gBAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;SACF;QACD,OAAO,EAAE,eAAe,CAAC,aAAa,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAgB,qBAAqB,CAAC,GAAG,QAAmB;IAC1D,MAAM,OAAO,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAC/C,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CAAC,OAAoB,EAAE,GAAG,QAAmB;IACjF,OAAO,IAAA,4BAAe,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC"}

package/dist/middleware.d.ts

@@ -31,6 +31,38 @@ export interface AtlasMiddlewareOptions extends MiddlewareConfig {
     /** Origin of the Atlas Frontend API (where `/v1/client/handshake` lives).
      *  Defaults to the origin of `jwksUrl`. */
     fapiOrigin?: string;
+    /**
+     * Moving from Better Auth: a visitor who still carries a Better Auth session
+     * cookie (and no Atlas session) is exchanged ONCE for an Atlas session — read
+     * server-side (the cookie is HttpOnly), Atlas cookies set, Better Auth cookies
+     * cleared — so the switch signs nobody out. Runs on page navigations (GET /
+     * HEAD), which re-enter on the same URL with the new session. A user who still
+     * owes a second factor is sent to `signInUrl` (default: the same URL) carrying
+     * the sign-in attempt, which the Atlas components continue. Requires
+     * `publishableKey` and the bridge being enabled for the instance.
+     */
+    betterAuthBridge?: boolean | BetterAuthBridgeConfig;
+}
+/** Options for {@link AtlasMiddlewareOptions.betterAuthBridge}. */
+export interface BetterAuthBridgeConfig {
+    /** Better Auth's `advanced.cookiePrefix` (default `better-auth`). */
+    cookiePrefix?: string;
+    /** The session cookie's full name, when the old app overrode it. */
+    cookieName?: string;
+    /** The domain the Better Auth cookies were set on (its cross-subdomain domain), so they clear. */
+    cookieDomain?: string;
+    /** Where a user who still owes a second factor finishes signing in. Default: the requested URL. */
+    signInUrl?: string;
+    /**
+     * The instance secret key (e.g. `process.env.ATLAS_SECRET_KEY`). Recommended:
+     * the exchange then goes through the Backend API, limited per instance with a
+     * ceiling sized for a bulk cutover, instead of the per-IP Frontend API limit
+     * your server would share across every user. The user's IP (`x-forwarded-for`
+     * as your platform sets it) and user agent are forwarded.
+     */
+    secretKey?: string;
+    /** Backend API origin for the secret-key path. Default `https://api.atlasauth.net`. */
+    bapiBaseUrl?: string;
 }
 /** Minimal shapes, so this package does not depend on Next.js at build time. */
 export interface EdgeRequest {
@@ -38,6 +70,8 @@ export interface EdgeRequest {
         pathname: string;
         search?: string;
     };
+    /** The HTTP method (NextRequest has it). Absent is treated as GET. */
+    method?: string;
     headers: {
         get(name: string): string | null;
     };
@@ -101,6 +135,7 @@ export interface AtlasCookie {
     value: string;
     options: {
         path?: string;
+        domain?: string;
         httpOnly?: boolean;
         sameSite?: 'lax' | 'strict' | 'none';
         secure?: boolean;

package/dist/middleware.js

@@ -92,7 +92,50 @@ function createAtlasDecider(options) {
         authorizedParties: options.authorizedParties,
         fetchImpl: options.fetchImpl,
     });
+    const bridgeConfig = options.betterAuthBridge
+        ? options.betterAuthBridge === true
+            ? {}
+            : options.betterAuthBridge
+        : null;
+    if (bridgeConfig && !options.publishableKey) {
+        throw new Error('atlasMiddleware: `betterAuthBridge` needs `publishableKey`.');
+    }
+    const betterAuthBridge = bridgeConfig
+        ? (0, backend_1.createBetterAuthBridge)({
+            fapiOrigin: options.fapiOrigin ?? new URL(options.jwksUrl).origin,
+            publishableKey: options.publishableKey,
+            cookiePrefix: bridgeConfig.cookiePrefix,
+            cookieName: bridgeConfig.cookieName,
+            betterAuthCookieDomain: bridgeConfig.cookieDomain,
+            secretKey: bridgeConfig.secretKey,
+            bapiBaseUrl: bridgeConfig.bapiBaseUrl,
+            fetchImpl: options.fetchImpl,
+        })
+        : null;
     return async function decide(request) {
+        /**
+         * Better Auth session bridge. Only on a page navigation: the exchange is a
+         * one-time server-to-server call, and re-entering on the same URL is what
+         * lets every downstream reader (auth(), server components) see the new
+         * session. A non-GET request is left alone — the next navigation exchanges.
+         * A Better Auth session Atlas will never accept (invalid, expired, already
+         * exchanged) has its cookies cleared; one Atlas could not judge (bridge off,
+         * rate limited, unreachable) is kept for a later attempt.
+         */
+        const method = (request.method ?? 'GET').toUpperCase();
+        if (betterAuthBridge && request.url && (method === 'GET' || method === 'HEAD')) {
+            const outcome = await betterAuthBridge(request);
+            if (outcome.action === 'signed_in') {
+                return { kind: 'redirect', location: request.url, auth: exports.SIGNED_OUT, cookies: outcome.cookies };
+            }
+            if (outcome.action === 'needs_mfa') {
+                const target = bridgeConfig?.signInUrl ? new URL(bridgeConfig.signInUrl, request.url).toString() : request.url;
+                return { kind: 'redirect', location: outcome.continuationUrl(target), auth: exports.SIGNED_OUT, cookies: outcome.cookies };
+            }
+            if (outcome.action === 'refused' && outcome.cookies.length > 0) {
+                return { kind: 'redirect', location: request.url, auth: exports.SIGNED_OUT, cookies: outcome.cookies };
+            }
+        }
         /**
          * Cross-domain satellite RETURN: the handshake endpoint bounced the browser
          * back with `?__atlas_hs=ok&__atlas_hu=<userId>&__atlas_hn=<nonce>`. Exchange

package/dist/middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":";;;AAgHA,0CAMC;AAUD,kCAkBC;AA+BD,gDA+JC;AAKD,0CAmBC;AASD,4CAsCC;AA6BD,0DAqBC;AAzcD,gDAS4B;AAC5B,uCAA6E;AAicpE,6FAjca,sBAAY,OAicb;AA/XR,QAAA,UAAU,GAAc;IACnC,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE,IAAI;IACf,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,SAAS,UAAU,CAAC,MAAqB,EAAE,IAAY;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,eAAe,CAAC,OAAoB;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,2EAA2E;IAC3E,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,WAAW,CAAC,OAAqB,EAAE,OAAoB;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;IAEtE,MAAM,KAAK,GAAG,MAAM,IAAI,MAAM,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAU,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,kBAAU,CAAC;IAElC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;QACzB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;QAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI;QACnC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AA0BD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,OAA+B;IAChE,MAAM,OAAO,GAAG,IAAI,sBAAY,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEH,OAAO,KAAK,UAAU,MAAM,CAAC,OAAoB;QAC/C;;;;;;;;;;WAUG;QACH,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,EAAE,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;gBACnC,uEAAuE;gBACvE,wEAAwE;gBACxE,uEAAuE;gBACvE,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;gBAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;gBACzE,MAAM,OAAO,GAAG,YAAY;oBAC1B,CAAC,CAAC,MAAM,IAAA,yBAAe,EAAC;wBACpB,UAAU;wBACV,cAAc,EAAE,OAAO,CAAC,cAAc;wBACtC,MAAM;wBACN,KAAK;wBACL,YAAY;wBACZ,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAC;oBACJ,CAAC,CAAC,IAAI,CAAC;gBAET,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACtC,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC;oBAAE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAEzF,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;wBACL,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;wBAC1B,IAAI,EAAE,kBAAU;wBAChB,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;4BAChG;gCACE,IAAI,EAAE,YAAY;gCAClB,KAAK,EAAE,OAAO,CAAC,YAAY;gCAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;6BACtE;4BACD,kEAAkE;4BAClE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE;yBACrE;qBACF,CAAC;gBACJ,CAAC;gBAED,wEAAwE;gBACxE,0EAA0E;gBAC1E,0EAA0E;gBAC1E,yEAAyE;gBACzE,mEAAmE;gBACnE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;gBAC/C,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;oBAC1B,IAAI,EAAE,kBAAU;oBAChB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;iBAChF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,IAAA,qBAAW,EAAC;YAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;YAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI;YAC9B,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;SACzD,CAAC,CAAC;QAEH,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC;YACZ,KAAK,OAAO;gBACV,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAEpC,KAAK,cAAc;gBACjB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YAExC,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB;;;;;;;;;mBASG;gBACH,IAAI,eAAe,CAAC,OAAO,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBAChE;;;;;;;;mBAQG;gBACH,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;oBAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACrC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;wBAC5C,gEAAgE;wBAChE,6DAA6D;wBAC7D,iEAAiE;wBACjE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,wBAAc,GAAE,CAAC;wBACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;wBACzE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;wBACvD,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;wBAC/D,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;wBACxD,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;wBACjD,OAAO;4BACL,IAAI,EAAE,UAAU;4BAChB,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;4BACvB,IAAI;4BACJ,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,YAAY;oCAClB,KAAK,EAAE,QAAQ;oCACf,OAAO,EAAE;wCACP,IAAI,EAAE,GAAG;wCACT,QAAQ,EAAE,IAAI;wCACd,QAAQ,EAAE,KAAK;wCACf,MAAM,EAAE,IAAI;wCACZ,MAAM,EAAE,GAAG,EAAE,oDAAoD;qCAClE;iCACF;6BACF;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD;;;;;mBAKG;gBACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACpF,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AAC1D,QAAA,oBAAoB,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAW,CAAC;AAEvF,SAAgB,eAAe,CAAC,OAA+B;IAC7D,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE3C,OAAO,KAAK,UAAU,UAAU,CAAC,OAAoB,EAAE,QAAsB;QAC3E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,UAAU;gBACb,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,cAAc;gBACjB,OAAO,QAAQ,CAAC,IAAI,CAAC,4BAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9D,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,OAA+B;IAC9D,MAAM,OAAO,GAAG,IAAI,sBAAY,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEH,OAAO,KAAK,UAAU,IAAI,CAAC,OAAoB;QAiB7C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAElD,OAAO;YACL,GAAG,KAAK;YACR,GAAG,CAAC,SAAS,GAAG,EAAE;gBAChB,OAAO,IAAA,uBAAa,EAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,CAAC,YAA8B,EAAE;gBACtC,MAAM,OAAO,GAAG,IAAA,kBAAQ,EAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAClD,IAAI,CAAC,OAAO,CAAC,OAAO;oBAAE,MAAM,IAAI,wBAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC5E,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACU,QAAA,cAAc,GAAG,eAAe,CAAC;AAe9C;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,OAA+B;IACrE,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,KAAK,UAAU,WAAW,CAAC,OAAoB;QACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,CAAC,GAAG,KAAK,CAAC,MAKf,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,MAAM;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;YACpB,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;YAC/B,QAAQ,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;SAChC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":";;;AAoJA,0CAMC;AAUD,kCAkBC;AAgCD,gDA4MC;AAKD,0CAmBC;AASD,4CAsCC;AA6BD,0DAqBC;AA3hBD,gDAU4B;AAC5B,uCAA6E;AAkhBpE,6FAlhBa,sBAAY,OAkhBb;AA7aR,QAAA,UAAU,GAAc;IACnC,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE,IAAI;IACf,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,SAAS,UAAU,CAAC,MAAqB,EAAE,IAAY;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,eAAe,CAAC,OAAoB;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,2EAA2E;IAC3E,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,WAAW,CAAC,OAAqB,EAAE,OAAoB;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;IAEtE,MAAM,KAAK,GAAG,MAAM,IAAI,MAAM,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAU,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,kBAAU,CAAC;IAElC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;QACzB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;QAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI;QACnC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AA2BD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,OAA+B;IAChE,MAAM,OAAO,GAAG,IAAI,sBAAY,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEH,MAAM,YAAY,GAAkC,OAAO,CAAC,gBAAgB;QAC1E,CAAC,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI;YACjC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC5B,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,YAAY,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,gBAAgB,GAAG,YAAY;QACnC,CAAC,CAAC,IAAA,gCAAsB,EAAC;YACrB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM;YACjE,cAAc,EAAE,OAAO,CAAC,cAAe;YACvC,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,sBAAsB,EAAE,YAAY,CAAC,YAAY;YACjD,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,KAAK,UAAU,MAAM,CAAC,OAAoB;QAC/C;;;;;;;;WAQG;QACH,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,gBAAgB,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YAC/E,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACnC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,kBAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACjG,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;gBAC/G,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kBAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACrH,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,kBAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACjG,CAAC;QACH,CAAC;QAED;;;;;;;;;;WAUG;QACH,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,EAAE,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;gBACnC,uEAAuE;gBACvE,wEAAwE;gBACxE,uEAAuE;gBACvE,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;gBAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;gBACzE,MAAM,OAAO,GAAG,YAAY;oBAC1B,CAAC,CAAC,MAAM,IAAA,yBAAe,EAAC;wBACpB,UAAU;wBACV,cAAc,EAAE,OAAO,CAAC,cAAc;wBACtC,MAAM;wBACN,KAAK;wBACL,YAAY;wBACZ,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAC;oBACJ,CAAC,CAAC,IAAI,CAAC;gBAET,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACtC,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC;oBAAE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAEzF,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;wBACL,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;wBAC1B,IAAI,EAAE,kBAAU;wBAChB,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;4BAChG;gCACE,IAAI,EAAE,YAAY;gCAClB,KAAK,EAAE,OAAO,CAAC,YAAY;gCAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;6BACtE;4BACD,kEAAkE;4BAClE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE;yBACrE;qBACF,CAAC;gBACJ,CAAC;gBAED,wEAAwE;gBACxE,0EAA0E;gBAC1E,0EAA0E;gBAC1E,yEAAyE;gBACzE,mEAAmE;gBACnE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;gBAC/C,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;oBAC1B,IAAI,EAAE,kBAAU;oBAChB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;iBAChF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,IAAA,qBAAW,EAAC;YAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;YAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI;YAC9B,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;SACzD,CAAC,CAAC;QAEH,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC;YACZ,KAAK,OAAO;gBACV,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAEpC,KAAK,cAAc;gBACjB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YAExC,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB;;;;;;;;;mBASG;gBACH,IAAI,eAAe,CAAC,OAAO,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBAChE;;;;;;;;mBAQG;gBACH,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;oBAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACrC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;wBAC5C,gEAAgE;wBAChE,6DAA6D;wBAC7D,iEAAiE;wBACjE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,wBAAc,GAAE,CAAC;wBACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;wBACzE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;wBACvD,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;wBAC/D,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;wBACxD,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;wBACjD,OAAO;4BACL,IAAI,EAAE,UAAU;4BAChB,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;4BACvB,IAAI;4BACJ,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,YAAY;oCAClB,KAAK,EAAE,QAAQ;oCACf,OAAO,EAAE;wCACP,IAAI,EAAE,GAAG;wCACT,QAAQ,EAAE,IAAI;wCACd,QAAQ,EAAE,KAAK;wCACf,MAAM,EAAE,IAAI;wCACZ,MAAM,EAAE,GAAG,EAAE,oDAAoD;qCAClE;iCACF;6BACF;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD;;;;;mBAKG;gBACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACpF,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AAC1D,QAAA,oBAAoB,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAW,CAAC;AAEvF,SAAgB,eAAe,CAAC,OAA+B;IAC7D,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE3C,OAAO,KAAK,UAAU,UAAU,CAAC,OAAoB,EAAE,QAAsB;QAC3E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,UAAU;gBACb,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,cAAc;gBACjB,OAAO,QAAQ,CAAC,IAAI,CAAC,4BAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9D,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,OAA+B;IAC9D,MAAM,OAAO,GAAG,IAAI,sBAAY,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEH,OAAO,KAAK,UAAU,IAAI,CAAC,OAAoB;QAiB7C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAElD,OAAO;YACL,GAAG,KAAK;YACR,GAAG,CAAC,SAAS,GAAG,EAAE;gBAChB,OAAO,IAAA,uBAAa,EAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,CAAC,YAA8B,EAAE;gBACtC,MAAM,OAAO,GAAG,IAAA,kBAAQ,EAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAClD,IAAI,CAAC,OAAO,CAAC,OAAO;oBAAE,MAAM,IAAI,wBAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC5E,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACU,QAAA,cAAc,GAAG,eAAe,CAAC;AAe9C;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,OAA+B;IACrE,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,KAAK,UAAU,WAAW,CAAC,OAAoB;QACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,CAAC,GAAG,KAAK,CAAC,MAKf,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,MAAM;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;YACpB,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;YAC/B,QAAQ,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;SAChC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/proxy.js

@@ -50,6 +50,8 @@ function serializeCookie({ name, value, options }) {
     const parts = [`${name}=${encodeURIComponent(value)}`];
     if (options.path)
         parts.push(`Path=${options.path}`);
+    if (options.domain)
+        parts.push(`Domain=${options.domain}`);
     if (options.maxAge !== undefined)
         parts.push(`Max-Age=${options.maxAge}`);
     if (options.httpOnly)

package/dist/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":";;;AAwFA,gCA0BC;AAOD,8BAEC;AA+BD,4CAyCC;AAiBD,4CAUC;AA9ND,6CAQsB;AAEtB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;iDACiD;AACpC,QAAA,kBAAkB,GAAG;IAChC,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,iBAAiB;IACzB,SAAS,EAAE,oBAAoB;IAC/B,KAAK,EAAE,gBAAgB;IACvB,OAAO,EAAE,kBAAkB;CACnB,CAAC;AAEX,MAAM,mBAAmB,GAAG,UAAU,CAAC;AACvC,MAAM,aAAa,GAAG,+BAA+B,CAAC;AACtD,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAmBhD;6EAC6E;AAC7E,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAqB,CAAC;AAElD,SAAS,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAe;IAC5D,yEAAyE;IACzE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,OAA+B;IACxD,MAAM,MAAM,GAAG,IAAA,+BAAkB,EAAC,OAAO,CAAC,CAAC;IAE3C,OAAO,KAAK,UAAU,KAAK,CAAC,OAAO;QACjC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAErC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC;YAEd,KAAK,cAAc;gBACjB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,iCAAoB,CAAC,EAAE;oBACxD,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAC;YAEL,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,mEAAmE;gBACnE,oEAAoE;gBACpE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC7D,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO;oBAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC7F,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,OAAe;IACvC,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,uBAAU,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAe;IACvC,MAAM,MAAM,GAA4B;QACtC,CAAC,0BAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;KACtE,CAAC;IACF,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,0BAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,IAAI,IAAI,CAAC,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,0BAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,0BAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,0BAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,gBAAgB,CAC9B,OAAqB,EACrB,QAAW,EACX,OAAkB,SAAS,CAAC,OAAO,CAAC;IAEpC,MAAM,SAAS,GACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC5F,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAEhC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,yEAAyE;QACzE,wDAAwD;QACxD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACzC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,8DAA8D;QAC9D,gFAAgF;QAChF,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;gBAAE,OAAO;YACjD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,eAAe,GAAG,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,eAAe,GAAG,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAWD;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,OAA6C;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,MAAM,CAAC,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3F,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAChC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;QACtE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9D,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;KACnE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":";;;AAyFA,gCA0BC;AAOD,8BAEC;AA+BD,4CAyCC;AAiBD,4CAUC;AA/ND,6CAQsB;AAEtB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;iDACiD;AACpC,QAAA,kBAAkB,GAAG;IAChC,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,iBAAiB;IACzB,SAAS,EAAE,oBAAoB;IAC/B,KAAK,EAAE,gBAAgB;IACvB,OAAO,EAAE,kBAAkB;CACnB,CAAC;AAEX,MAAM,mBAAmB,GAAG,UAAU,CAAC;AACvC,MAAM,aAAa,GAAG,+BAA+B,CAAC;AACtD,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAmBhD;6EAC6E;AAC7E,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAqB,CAAC;AAElD,SAAS,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAe;IAC5D,yEAAyE;IACzE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,OAA+B;IACxD,MAAM,MAAM,GAAG,IAAA,+BAAkB,EAAC,OAAO,CAAC,CAAC;IAE3C,OAAO,KAAK,UAAU,KAAK,CAAC,OAAO;QACjC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAErC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC;YAEd,KAAK,cAAc;gBACjB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,iCAAoB,CAAC,EAAE;oBACxD,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAC;YAEL,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,mEAAmE;gBACnE,oEAAoE;gBACpE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC7D,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO;oBAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC7F,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,OAAe;IACvC,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,uBAAU,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAe;IACvC,MAAM,MAAM,GAA4B;QACtC,CAAC,0BAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;KACtE,CAAC;IACF,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,0BAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,IAAI,IAAI,CAAC,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,0BAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,0BAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,0BAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,gBAAgB,CAC9B,OAAqB,EACrB,QAAW,EACX,OAAkB,SAAS,CAAC,OAAO,CAAC;IAEpC,MAAM,SAAS,GACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC5F,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAEhC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,yEAAyE;QACzE,wDAAwD;QACxD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACzC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,eAAe,GAAG,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,8DAA8D;QAC9D,gFAAgF;QAChF,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;gBAAE,OAAO;YACjD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,eAAe,GAAG,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,eAAe,GAAG,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAWD;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,OAA6C;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,MAAM,CAAC,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3F,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAChC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;QACtE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9D,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;KACnE,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/nextjs",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -12,10 +12,14 @@
       "types": "./dist/server.d.ts",
       "default": "./dist/server.js"
     },
+    "./compat": {
+      "types": "./dist/compat.d.ts",
+      "default": "./dist/compat.js"
+    },
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@atlasauth/backend": "0.15.0"
+    "@atlasauth/backend": "0.17.0"
   },
   "peerDependencies": {
     "next": ">=13.4"