@auditauth/next 0.2.0-beta.4 → 0.2.0-beta.6

package/dist/guard.cjs

@@ -25,47 +25,72 @@ __export(guard_exports, {
 module.exports = __toCommonJS(guard_exports);
 var import_jsx_runtime = require("react/jsx-runtime");
 var import_react = require("react");
+var import_navigation = require("next/navigation");
 var import_settings = require("./settings.cjs");
 const AuthContext = (0, import_react.createContext)(null);
 const useAuditAuth = () => {
   const ctx = (0, import_react.useContext)(AuthContext);
   if (!ctx) {
-    throw new Error("useAuditAuth must be used within AuditAuthProvider");
+    throw new Error("useAuditAuth must be used within AuditAuthGuard");
   }
   return ctx;
 };
-const AuditAuthGuard = (props) => {
-  const [user, setUser] = (0, import_react.useState)({});
+const defaultFallback = /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { children: "Verificando sesion..." });
+const AuditAuthGuard = ({
+  children,
+  fallback,
+  unauthenticatedFallback,
+  mode = "redirect"
+}) => {
+  const router = (0, import_navigation.useRouter)();
+  const [state, setState] = (0, import_react.useState)({
+    status: "loading",
+    user: null
+  });
   (0, import_react.useEffect)(() => {
-    let cancelled = false;
+    const controller = new AbortController();
     const checkSession = async () => {
       try {
         const response = await fetch(import_settings.SETTINGS.bff.paths.session, {
           credentials: "include",
-          cache: "no-store"
+          cache: "no-store",
+          signal: controller.signal
         });
-        if (cancelled) return;
         if (!response.ok) {
-          window.location.href = import_settings.SETTINGS.bff.paths.login;
+          setState({ status: "unauthenticated", user: null });
+          if (mode === "redirect") router.replace(import_settings.SETTINGS.bff.paths.login);
           return;
         }
         const data = await response.json();
-        setUser(data.user);
+        if (!data?.user || typeof data.user !== "object") {
+          setState({ status: "unauthenticated", user: null });
+          if (mode === "redirect") router.replace(import_settings.SETTINGS.bff.paths.login);
+          return;
+        }
+        setState({ status: "authenticated", user: data.user });
       } catch {
-        window.location.href = import_settings.SETTINGS.bff.paths.login;
+        if (controller.signal.aborted) return;
+        setState({ status: "unauthenticated", user: null });
+        if (mode === "redirect") router.replace(import_settings.SETTINGS.bff.paths.login);
         return;
       }
     };
     checkSession();
     return () => {
-      cancelled = true;
+      controller.abort();
     };
-  }, []);
-  const value = (0, import_react.useMemo)(() => ({
-    user
-  }), [user]);
-  if (!user.name) return null;
-  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(AuthContext.Provider, { value, children: props.children });
+  }, [mode, router]);
+  const value = (0, import_react.useMemo)(() => {
+    if (state.status !== "authenticated") return null;
+    return { user: state.user };
+  }, [state]);
+  if (!value) {
+    if (state.status === "unauthenticated") {
+      return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_jsx_runtime.Fragment, { children: unauthenticatedFallback ?? fallback ?? defaultFallback });
+    }
+    return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_jsx_runtime.Fragment, { children: fallback ?? defaultFallback });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(AuthContext.Provider, { value, children });
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/guard.d.cts

@@ -1,4 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
+import { ReactNode } from 'react';
 import { SessionUser } from '@auditauth/core';
 
 type AuthContextValue = {
@@ -6,8 +7,11 @@ type AuthContextValue = {
 };
 declare const useAuditAuth: () => AuthContextValue;
 type AuditAuthGuardProps = {
-    children: React.ReactNode;
+    children: ReactNode;
+    fallback?: ReactNode;
+    unauthenticatedFallback?: ReactNode;
+    mode?: 'redirect' | 'fallback';
 };
-declare const AuditAuthGuard: (props: AuditAuthGuardProps) => react_jsx_runtime.JSX.Element | null;
+declare const AuditAuthGuard: ({ children, fallback, unauthenticatedFallback, mode, }: AuditAuthGuardProps) => react_jsx_runtime.JSX.Element;
 
 export { AuditAuthGuard, useAuditAuth };

package/dist/guard.d.ts

@@ -1,4 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
+import { ReactNode } from 'react';
 import { SessionUser } from '@auditauth/core';
 
 type AuthContextValue = {
@@ -6,8 +7,11 @@ type AuthContextValue = {
 };
 declare const useAuditAuth: () => AuthContextValue;
 type AuditAuthGuardProps = {
-    children: React.ReactNode;
+    children: ReactNode;
+    fallback?: ReactNode;
+    unauthenticatedFallback?: ReactNode;
+    mode?: 'redirect' | 'fallback';
 };
-declare const AuditAuthGuard: (props: AuditAuthGuardProps) => react_jsx_runtime.JSX.Element | null;
+declare const AuditAuthGuard: ({ children, fallback, unauthenticatedFallback, mode, }: AuditAuthGuardProps) => react_jsx_runtime.JSX.Element;
 
 export { AuditAuthGuard, useAuditAuth };

package/dist/guard.js

@@ -1,47 +1,72 @@
 "use client";
-import { jsx } from "react/jsx-runtime";
+import { Fragment, jsx } from "react/jsx-runtime";
 import { createContext, useContext, useEffect, useMemo, useState } from "react";
+import { useRouter } from "next/navigation";
 import { SETTINGS } from "./settings.js";
 const AuthContext = createContext(null);
 const useAuditAuth = () => {
   const ctx = useContext(AuthContext);
   if (!ctx) {
-    throw new Error("useAuditAuth must be used within AuditAuthProvider");
+    throw new Error("useAuditAuth must be used within AuditAuthGuard");
   }
   return ctx;
 };
-const AuditAuthGuard = (props) => {
-  const [user, setUser] = useState({});
+const defaultFallback = /* @__PURE__ */ jsx("div", { children: "Verificando sesion..." });
+const AuditAuthGuard = ({
+  children,
+  fallback,
+  unauthenticatedFallback,
+  mode = "redirect"
+}) => {
+  const router = useRouter();
+  const [state, setState] = useState({
+    status: "loading",
+    user: null
+  });
   useEffect(() => {
-    let cancelled = false;
+    const controller = new AbortController();
     const checkSession = async () => {
       try {
         const response = await fetch(SETTINGS.bff.paths.session, {
           credentials: "include",
-          cache: "no-store"
+          cache: "no-store",
+          signal: controller.signal
         });
-        if (cancelled) return;
         if (!response.ok) {
-          window.location.href = SETTINGS.bff.paths.login;
+          setState({ status: "unauthenticated", user: null });
+          if (mode === "redirect") router.replace(SETTINGS.bff.paths.login);
           return;
         }
         const data = await response.json();
-        setUser(data.user);
+        if (!data?.user || typeof data.user !== "object") {
+          setState({ status: "unauthenticated", user: null });
+          if (mode === "redirect") router.replace(SETTINGS.bff.paths.login);
+          return;
+        }
+        setState({ status: "authenticated", user: data.user });
       } catch {
-        window.location.href = SETTINGS.bff.paths.login;
+        if (controller.signal.aborted) return;
+        setState({ status: "unauthenticated", user: null });
+        if (mode === "redirect") router.replace(SETTINGS.bff.paths.login);
         return;
       }
     };
     checkSession();
     return () => {
-      cancelled = true;
+      controller.abort();
     };
-  }, []);
-  const value = useMemo(() => ({
-    user
-  }), [user]);
-  if (!user.name) return null;
-  return /* @__PURE__ */ jsx(AuthContext.Provider, { value, children: props.children });
+  }, [mode, router]);
+  const value = useMemo(() => {
+    if (state.status !== "authenticated") return null;
+    return { user: state.user };
+  }, [state]);
+  if (!value) {
+    if (state.status === "unauthenticated") {
+      return /* @__PURE__ */ jsx(Fragment, { children: unauthenticatedFallback ?? fallback ?? defaultFallback });
+    }
+    return /* @__PURE__ */ jsx(Fragment, { children: fallback ?? defaultFallback });
+  }
+  return /* @__PURE__ */ jsx(AuthContext.Provider, { value, children });
 };
 export {
   AuditAuthGuard,

package/dist/index.d.cts

@@ -8,3 +8,4 @@ import 'next/server.js';
 import '@auditauth/core';
 import '@auditauth/node';
 import 'react/jsx-runtime';
+import 'react';

package/dist/index.d.ts

@@ -8,3 +8,4 @@ import 'next/server.js';
 import '@auditauth/core';
 import '@auditauth/node';
 import 'react/jsx-runtime';
+import 'react';

package/dist/sdk.cjs

@@ -26,6 +26,9 @@ var import_server = require("next/server.js");
 var import_settings = require("./settings.cjs");
 var import_core = require("@auditauth/core");
 var import_node = require("@auditauth/node");
+const CALLBACK_CODE_COOKIE = "auditauth_last_code";
+const CALLBACK_CODE_TTL_SECONDS = 120;
+const callbackInFlight = /* @__PURE__ */ new Map();
 class AuditAuthNext {
   constructor(config, cookies) {
     if (!config.appId) throw new Error("Missing appId");
@@ -44,8 +47,32 @@ class AuditAuthNext {
       refresh: this.cookies.get(import_settings.SETTINGS.storage_keys.refresh)
     };
   }
+  isSecureCookie() {
+    return this.config.redirectUrl.startsWith("https://");
+  }
+  hasAuthCookies() {
+    const { access, refresh } = this.getCookieTokens();
+    return !!(access && refresh);
+  }
+  getLastAuthorizedCode() {
+    return this.cookies.get(CALLBACK_CODE_COOKIE);
+  }
+  setLastAuthorizedCode(code) {
+    this.cookies.set(CALLBACK_CODE_COOKIE, code, {
+      httpOnly: true,
+      sameSite: "lax",
+      secure: this.isSecureCookie(),
+      path: "/",
+      maxAge: CALLBACK_CODE_TTL_SECONDS
+    });
+  }
+  isDuplicateCodeError(error) {
+    if (!(error instanceof Error)) return false;
+    const message = error.message.toLowerCase();
+    return message.includes("code not found");
+  }
   setCookieTokens(params) {
-    const isSecure = this.config.redirectUrl.includes("https");
+    const isSecure = this.isSecureCookie();
     this.cookies.set(
       import_settings.SETTINGS.storage_keys.access,
       params.access_token,
@@ -102,36 +129,61 @@ class AuditAuthNext {
   }
   async callback(request) {
     const code = new URL(request.url).searchParams.get("code");
-    try {
-      const { data } = await (0, import_core.authorizeCode)({ code, client_type: "server" });
-      const session = {
-        user: data.user
-      };
-      const isSecure = this.config.redirectUrl.includes("http");
-      this.cookies.set(
-        import_settings.SETTINGS.storage_keys.session,
-        JSON.stringify(session),
-        {
-          httpOnly: true,
-          sameSite: "lax",
-          secure: isSecure,
-          path: "/",
-          maxAge: data.refresh_expires_seconds - 60
-        }
-      );
-      this.setCookieTokens({
-        access_token: data.access_token,
-        access_expires_seconds: data.access_expires_seconds,
-        refresh_token: data.refresh_token,
-        refresh_expires_seconds: data.refresh_expires_seconds
-      });
-      return { ok: true, url: this.config.redirectUrl };
-    } catch {
+    if (!code) {
       return {
         ok: false,
         url: `${import_settings.SETTINGS.domains.client}/auth/invalid?reason=wrong_config`
       };
     }
+    const lastAuthorizedCode = this.getLastAuthorizedCode();
+    if (lastAuthorizedCode === code && (this.hasSession() || this.hasAuthCookies())) {
+      return { ok: true, url: this.config.redirectUrl };
+    }
+    const inFlight = callbackInFlight.get(code);
+    if (inFlight) return inFlight;
+    const authorizeRequest = (async () => {
+      try {
+        const { data } = await (0, import_core.authorizeCode)({ code, client_type: "server" });
+        const session = {
+          user: data.user
+        };
+        const isSecure = this.isSecureCookie();
+        this.cookies.set(
+          import_settings.SETTINGS.storage_keys.session,
+          JSON.stringify(session),
+          {
+            httpOnly: true,
+            sameSite: "lax",
+            secure: isSecure,
+            path: "/",
+            maxAge: data.refresh_expires_seconds - 60
+          }
+        );
+        this.setCookieTokens({
+          access_token: data.access_token,
+          access_expires_seconds: data.access_expires_seconds,
+          refresh_token: data.refresh_token,
+          refresh_expires_seconds: data.refresh_expires_seconds
+        });
+        this.setLastAuthorizedCode(code);
+        return { ok: true, url: this.config.redirectUrl };
+      } catch (error) {
+        if (this.isDuplicateCodeError(error) && (this.hasSession() || this.hasAuthCookies() || this.getLastAuthorizedCode() === code)) {
+          this.setLastAuthorizedCode(code);
+          return { ok: true, url: this.config.redirectUrl };
+        }
+        return {
+          ok: false,
+          url: `${import_settings.SETTINGS.domains.client}/auth/invalid?reason=wrong_config`
+        };
+      }
+    })();
+    callbackInFlight.set(code, authorizeRequest);
+    try {
+      return await authorizeRequest;
+    } finally {
+      callbackInFlight.delete(code);
+    }
   }
   async logout() {
     const { access } = this.getCookieTokens();
@@ -246,15 +298,27 @@ class AuditAuthNext {
         switch (action) {
           case "login":
             {
-              const url = await (0, import_core.buildAuthUrl)({ apiKey: this.config.apiKey, redirectUrl: `${this.config.baseUrl}/api/auditauth/callback` });
-              return import_server.NextResponse.redirect(url);
+              try {
+                const url = await (0, import_core.buildAuthUrl)({
+                  apiKey: this.config.apiKey,
+                  redirectUrl: `${this.config.baseUrl}/api/auditauth/callback`,
+                  cancelUrl: this.config.baseUrl
+                });
+                return import_server.NextResponse.redirect(url);
+              } catch (err) {
+                return new Response("Invalid session", { status: 401 });
+              }
             }
             ;
           case "refresh":
             {
-              const { ok: ok2 } = await this.refresh();
-              if (ok2) return import_server.NextResponse.redirect(redirectUrl || this.config.redirectUrl);
-              const url = await (0, import_core.buildAuthUrl)({ apiKey: this.config.apiKey, redirectUrl: `${this.config.baseUrl}/api/auditauth/callback` });
+              const { ok } = await this.refresh();
+              if (ok) return import_server.NextResponse.redirect(redirectUrl || this.config.redirectUrl);
+              const url = await (0, import_core.buildAuthUrl)({
+                apiKey: this.config.apiKey,
+                redirectUrl: `${this.config.baseUrl}/api/auditauth/callback`,
+                cancelUrl: this.config.baseUrl
+              });
               return import_server.NextResponse.redirect(url);
             }
             ;
@@ -267,7 +331,7 @@ class AuditAuthNext {
           case "logout":
             {
               await this.logout();
-              return import_server.NextResponse.redirect(this.config.redirectUrl);
+              return import_server.NextResponse.redirect(this.config.baseUrl);
             }
             ;
           case "portal":
@@ -285,8 +349,30 @@ class AuditAuthNext {
           case "session":
             {
               const user = this.getSession();
-              if (!user) return new import_server.NextResponse(null, { status: 401 });
-              return import_server.NextResponse.json({ user });
+              if (user) return import_server.NextResponse.json({ user });
+              try {
+                const { access } = this.getCookieTokens();
+                if (!access) throw new Error("Not auth token");
+                const refreshedUser = await (0, import_core.getSessionUser)({ access_token: access });
+                const session = {
+                  user: refreshedUser
+                };
+                const isSecure = this.isSecureCookie();
+                this.cookies.set(
+                  import_settings.SETTINGS.storage_keys.session,
+                  JSON.stringify(session),
+                  {
+                    httpOnly: true,
+                    sameSite: "lax",
+                    secure: isSecure,
+                    path: "/",
+                    maxAge: 24 * 60 * 60 * 1e3 * 3
+                  }
+                );
+                return import_server.NextResponse.json({ user: refreshedUser });
+              } catch (err) {
+                return new import_server.NextResponse(null, { status: 401 });
+              }
             }
             ;
           default:
@@ -313,8 +399,8 @@ class AuditAuthNext {
           case "refresh":
             {
               const redirectUrl = req.nextUrl.searchParams.get("redirectUrl");
-              const { ok: ok2 } = await this.refresh();
-              if (ok2) return import_server.NextResponse.redirect(redirectUrl || this.config.redirectUrl);
+              const { ok } = await this.refresh();
+              if (ok) return import_server.NextResponse.redirect(redirectUrl || this.config.redirectUrl);
               return new Response("Session expired", { status: 401 });
             }
             ;

package/dist/sdk.d.cts

@@ -8,6 +8,11 @@ declare class AuditAuthNext {
     private cookies;
     constructor(config: AuditAuthConfig, cookies: CookieAdapter);
     private getCookieTokens;
+    private isSecureCookie;
+    private hasAuthCookies;
+    private getLastAuthorizedCode;
+    private setLastAuthorizedCode;
+    private isDuplicateCodeError;
     private setCookieTokens;
     private pushMetric;
     getSession(): SessionUser | null;

package/dist/sdk.d.ts

@@ -8,6 +8,11 @@ declare class AuditAuthNext {
     private cookies;
     constructor(config: AuditAuthConfig, cookies: CookieAdapter);
     private getCookieTokens;
+    private isSecureCookie;
+    private hasAuthCookies;
+    private getLastAuthorizedCode;
+    private setLastAuthorizedCode;
+    private isDuplicateCodeError;
     private setCookieTokens;
     private pushMetric;
     getSession(): SessionUser | null;

package/dist/sdk.js

@@ -7,9 +7,13 @@ import {
   revokeSession,
   buildPortalUrl,
   refreshTokens,
-  sendMetrics
+  sendMetrics,
+  getSessionUser
 } from "@auditauth/core";
 import { verifyRequest } from "@auditauth/node";
+const CALLBACK_CODE_COOKIE = "auditauth_last_code";
+const CALLBACK_CODE_TTL_SECONDS = 120;
+const callbackInFlight = /* @__PURE__ */ new Map();
 class AuditAuthNext {
   constructor(config, cookies) {
     if (!config.appId) throw new Error("Missing appId");
@@ -28,8 +32,32 @@ class AuditAuthNext {
       refresh: this.cookies.get(SETTINGS.storage_keys.refresh)
     };
   }
+  isSecureCookie() {
+    return this.config.redirectUrl.startsWith("https://");
+  }
+  hasAuthCookies() {
+    const { access, refresh } = this.getCookieTokens();
+    return !!(access && refresh);
+  }
+  getLastAuthorizedCode() {
+    return this.cookies.get(CALLBACK_CODE_COOKIE);
+  }
+  setLastAuthorizedCode(code) {
+    this.cookies.set(CALLBACK_CODE_COOKIE, code, {
+      httpOnly: true,
+      sameSite: "lax",
+      secure: this.isSecureCookie(),
+      path: "/",
+      maxAge: CALLBACK_CODE_TTL_SECONDS
+    });
+  }
+  isDuplicateCodeError(error) {
+    if (!(error instanceof Error)) return false;
+    const message = error.message.toLowerCase();
+    return message.includes("code not found");
+  }
   setCookieTokens(params) {
-    const isSecure = this.config.redirectUrl.includes("https");
+    const isSecure = this.isSecureCookie();
     this.cookies.set(
       SETTINGS.storage_keys.access,
       params.access_token,
@@ -86,36 +114,61 @@ class AuditAuthNext {
   }
   async callback(request) {
     const code = new URL(request.url).searchParams.get("code");
-    try {
-      const { data } = await authorizeCode({ code, client_type: "server" });
-      const session = {
-        user: data.user
-      };
-      const isSecure = this.config.redirectUrl.includes("http");
-      this.cookies.set(
-        SETTINGS.storage_keys.session,
-        JSON.stringify(session),
-        {
-          httpOnly: true,
-          sameSite: "lax",
-          secure: isSecure,
-          path: "/",
-          maxAge: data.refresh_expires_seconds - 60
-        }
-      );
-      this.setCookieTokens({
-        access_token: data.access_token,
-        access_expires_seconds: data.access_expires_seconds,
-        refresh_token: data.refresh_token,
-        refresh_expires_seconds: data.refresh_expires_seconds
-      });
-      return { ok: true, url: this.config.redirectUrl };
-    } catch {
+    if (!code) {
       return {
         ok: false,
         url: `${SETTINGS.domains.client}/auth/invalid?reason=wrong_config`
       };
     }
+    const lastAuthorizedCode = this.getLastAuthorizedCode();
+    if (lastAuthorizedCode === code && (this.hasSession() || this.hasAuthCookies())) {
+      return { ok: true, url: this.config.redirectUrl };
+    }
+    const inFlight = callbackInFlight.get(code);
+    if (inFlight) return inFlight;
+    const authorizeRequest = (async () => {
+      try {
+        const { data } = await authorizeCode({ code, client_type: "server" });
+        const session = {
+          user: data.user
+        };
+        const isSecure = this.isSecureCookie();
+        this.cookies.set(
+          SETTINGS.storage_keys.session,
+          JSON.stringify(session),
+          {
+            httpOnly: true,
+            sameSite: "lax",
+            secure: isSecure,
+            path: "/",
+            maxAge: data.refresh_expires_seconds - 60
+          }
+        );
+        this.setCookieTokens({
+          access_token: data.access_token,
+          access_expires_seconds: data.access_expires_seconds,
+          refresh_token: data.refresh_token,
+          refresh_expires_seconds: data.refresh_expires_seconds
+        });
+        this.setLastAuthorizedCode(code);
+        return { ok: true, url: this.config.redirectUrl };
+      } catch (error) {
+        if (this.isDuplicateCodeError(error) && (this.hasSession() || this.hasAuthCookies() || this.getLastAuthorizedCode() === code)) {
+          this.setLastAuthorizedCode(code);
+          return { ok: true, url: this.config.redirectUrl };
+        }
+        return {
+          ok: false,
+          url: `${SETTINGS.domains.client}/auth/invalid?reason=wrong_config`
+        };
+      }
+    })();
+    callbackInFlight.set(code, authorizeRequest);
+    try {
+      return await authorizeRequest;
+    } finally {
+      callbackInFlight.delete(code);
+    }
   }
   async logout() {
     const { access } = this.getCookieTokens();
@@ -230,15 +283,27 @@ class AuditAuthNext {
         switch (action) {
           case "login":
             {
-              const url = await buildAuthUrl({ apiKey: this.config.apiKey, redirectUrl: `${this.config.baseUrl}/api/auditauth/callback` });
-              return NextResponse.redirect(url);
+              try {
+                const url = await buildAuthUrl({
+                  apiKey: this.config.apiKey,
+                  redirectUrl: `${this.config.baseUrl}/api/auditauth/callback`,
+                  cancelUrl: this.config.baseUrl
+                });
+                return NextResponse.redirect(url);
+              } catch (err) {
+                return new Response("Invalid session", { status: 401 });
+              }
             }
             ;
           case "refresh":
             {
-              const { ok: ok2 } = await this.refresh();
-              if (ok2) return NextResponse.redirect(redirectUrl || this.config.redirectUrl);
-              const url = await buildAuthUrl({ apiKey: this.config.apiKey, redirectUrl: `${this.config.baseUrl}/api/auditauth/callback` });
+              const { ok } = await this.refresh();
+              if (ok) return NextResponse.redirect(redirectUrl || this.config.redirectUrl);
+              const url = await buildAuthUrl({
+                apiKey: this.config.apiKey,
+                redirectUrl: `${this.config.baseUrl}/api/auditauth/callback`,
+                cancelUrl: this.config.baseUrl
+              });
               return NextResponse.redirect(url);
             }
             ;
@@ -251,7 +316,7 @@ class AuditAuthNext {
           case "logout":
             {
               await this.logout();
-              return NextResponse.redirect(this.config.redirectUrl);
+              return NextResponse.redirect(this.config.baseUrl);
             }
             ;
           case "portal":
@@ -269,8 +334,30 @@ class AuditAuthNext {
           case "session":
             {
               const user = this.getSession();
-              if (!user) return new NextResponse(null, { status: 401 });
-              return NextResponse.json({ user });
+              if (user) return NextResponse.json({ user });
+              try {
+                const { access } = this.getCookieTokens();
+                if (!access) throw new Error("Not auth token");
+                const refreshedUser = await getSessionUser({ access_token: access });
+                const session = {
+                  user: refreshedUser
+                };
+                const isSecure = this.isSecureCookie();
+                this.cookies.set(
+                  SETTINGS.storage_keys.session,
+                  JSON.stringify(session),
+                  {
+                    httpOnly: true,
+                    sameSite: "lax",
+                    secure: isSecure,
+                    path: "/",
+                    maxAge: 24 * 60 * 60 * 1e3 * 3
+                  }
+                );
+                return NextResponse.json({ user: refreshedUser });
+              } catch (err) {
+                return new NextResponse(null, { status: 401 });
+              }
             }
             ;
           default:
@@ -297,8 +384,8 @@ class AuditAuthNext {
           case "refresh":
             {
               const redirectUrl = req.nextUrl.searchParams.get("redirectUrl");
-              const { ok: ok2 } = await this.refresh();
-              if (ok2) return NextResponse.redirect(redirectUrl || this.config.redirectUrl);
+              const { ok } = await this.refresh();
+              if (ok) return NextResponse.redirect(redirectUrl || this.config.redirectUrl);
               return new Response("Session expired", { status: 401 });
             }
             ;

package/dist/settings.d.cts

@@ -14,11 +14,11 @@ declare const SETTINGS: {
     readonly jwt_public_key: "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2EYs4Q9OyjNuAEPqb4j\nIzc52JdfVcNvEbG43Xp8B2kI9QxwRyX7rtFSwKowj3W1BlCLaTIMK3TafWOf9QwH\nfemuL9Ni37PFcGptzpyuoCYYA650EuD82PENcO49lsObvty2cuXxQszbPPvAecm4\nJ/XG70td/W1UwbjAJcdmp8ktZGYR0JXM37hYA9Xq/aKwu7d0FTL6WdKTvt3L5VxL\nF6WNyLs65ZSbu+j8UEkwmoJ9h9Y0mLQmFtmkoh/HWOFyFDnBNiJX0vRb++RhJw6w\ncrSbqpbTu7z4vIep5lgSOut39P273SVTQZ3cGQIS+605Ur5wjkkSzzaJV1QLBBR9\nAQIDAQAB\n-----END PUBLIC KEY-----\n";
     readonly jwt_issuer: "https://api.auditauth.com";
     readonly domains: {
-        readonly api: "http://localhost:4000/v1";
-        readonly client: "http://localhost:3000";
-    } | {
         readonly api: "https://api.auditauth.com/v1";
         readonly client: "https://auditauth.com";
+    } | {
+        readonly api: "http://localhost:4000/v1";
+        readonly client: "https://localhost:3000";
     };
     readonly storage_keys: {
         readonly access: "auditauth_access";

package/dist/settings.d.ts

@@ -14,11 +14,11 @@ declare const SETTINGS: {
     readonly jwt_public_key: "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2EYs4Q9OyjNuAEPqb4j\nIzc52JdfVcNvEbG43Xp8B2kI9QxwRyX7rtFSwKowj3W1BlCLaTIMK3TafWOf9QwH\nfemuL9Ni37PFcGptzpyuoCYYA650EuD82PENcO49lsObvty2cuXxQszbPPvAecm4\nJ/XG70td/W1UwbjAJcdmp8ktZGYR0JXM37hYA9Xq/aKwu7d0FTL6WdKTvt3L5VxL\nF6WNyLs65ZSbu+j8UEkwmoJ9h9Y0mLQmFtmkoh/HWOFyFDnBNiJX0vRb++RhJw6w\ncrSbqpbTu7z4vIep5lgSOut39P273SVTQZ3cGQIS+605Ur5wjkkSzzaJV1QLBBR9\nAQIDAQAB\n-----END PUBLIC KEY-----\n";
     readonly jwt_issuer: "https://api.auditauth.com";
     readonly domains: {
-        readonly api: "http://localhost:4000/v1";
-        readonly client: "http://localhost:3000";
-    } | {
         readonly api: "https://api.auditauth.com/v1";
         readonly client: "https://auditauth.com";
+    } | {
+        readonly api: "http://localhost:4000/v1";
+        readonly client: "https://localhost:3000";
     };
     readonly storage_keys: {
         readonly access: "auditauth_access";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auditauth/next",
-  "version": "0.2.0-beta.4",
+  "version": "0.2.0-beta.6",
   "description": "AuditAuth NextJS SDK",
   "license": "MIT",
   "author": "Nimibyte",
@@ -53,8 +53,8 @@
     "react-dom": ">=18"
   },
   "dependencies": {
-    "@auditauth/core": "^0.2.0-beta.4",
-    "@auditauth/node": "^0.2.0-beta.4"
+    "@auditauth/core": "^0.2.0-beta.6",
+    "@auditauth/node": "^0.2.0-beta.6"
   },
   "devDependencies": {
     "typescript": "^5.9.0",