@authon/nextjs 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (14) hide show
  1. package/README.md +118 -0
  2. package/dist/index.cjs +79 -0
  3. package/dist/index.cjs.map +1 -0
  4. package/dist/index.d.cts +12 -0
  5. package/dist/index.d.ts +12 -0
  6. package/dist/index.js +55 -0
  7. package/dist/index.js.map +1 -0
  8. package/dist/server.cjs +84 -0
  9. package/dist/server.cjs.map +1 -0
  10. package/dist/server.d.cts +10 -0
  11. package/dist/server.d.ts +10 -0
  12. package/dist/server.js +48 -0
  13. package/dist/server.js.map +1 -0
  14. package/package.json +49 -0
package/README.md ADDED
@@ -0,0 +1,118 @@
1
+ # @authon/nextjs
2
+
3
+ Next.js SDK for [Authon](https://authon.dev) — middleware, server helpers, and React components for App Router.
4
+
5
+ ## Install
6
+
7
+ ```bash
8
+ npm install @authon/nextjs
9
+ # or
10
+ pnpm add @authon/nextjs
11
+ ```
12
+
13
+ Requires `next >= 14.0.0`.
14
+
15
+ ## Quick Start
16
+
17
+ ### 1. Middleware
18
+
19
+ Protect routes at the edge:
20
+
21
+ ```ts
22
+ // middleware.ts
23
+ import { authMiddleware } from '@authon/nextjs';
24
+
25
+ export default authMiddleware({
26
+ publishableKey: process.env.NEXT_PUBLIC_AUTHON_KEY!,
27
+ publicRoutes: ['/', '/about', '/pricing', '/sign-in'],
28
+ });
29
+
30
+ export const config = {
31
+ matcher: ['/((?!_next|.*\\..*).*)'],
32
+ };
33
+ ```
34
+
35
+ ### 2. Provider
36
+
37
+ Wrap your layout:
38
+
39
+ ```tsx
40
+ // app/layout.tsx
41
+ import { AuthonProvider } from '@authon/nextjs';
42
+
43
+ export default function RootLayout({ children }: { children: React.ReactNode }) {
44
+ return (
45
+ <html>
46
+ <body>
47
+ <AuthonProvider publishableKey={process.env.NEXT_PUBLIC_AUTHON_KEY!}>
48
+ {children}
49
+ </AuthonProvider>
50
+ </body>
51
+ </html>
52
+ );
53
+ }
54
+ ```
55
+
56
+ ### 3. Client Components
57
+
58
+ Use all `@authon/react` hooks and components:
59
+
60
+ ```tsx
61
+ 'use client';
62
+
63
+ import { useUser, SignedIn, SignedOut, UserButton } from '@authon/nextjs';
64
+
65
+ export function Header() {
66
+ return (
67
+ <nav>
68
+ <SignedIn><UserButton /></SignedIn>
69
+ <SignedOut><a href="/sign-in">Sign In</a></SignedOut>
70
+ </nav>
71
+ );
72
+ }
73
+ ```
74
+
75
+ ### 4. Server-side
76
+
77
+ ```ts
78
+ import { currentUser, auth } from '@authon/nextjs/server';
79
+
80
+ // In a Server Component or Route Handler
81
+ export async function GET() {
82
+ const user = await currentUser();
83
+ if (!user) return new Response('Unauthorized', { status: 401 });
84
+ return Response.json({ user });
85
+ }
86
+
87
+ // Get the full auth state
88
+ const { userId, sessionId, getToken } = await auth();
89
+ ```
90
+
91
+ ## API Reference
92
+
93
+ ### Client Exports
94
+
95
+ Re-exports all components and hooks from `@authon/react`:
96
+
97
+ `AuthonProvider`, `useAuthon`, `useUser`, `SignedIn`, `SignedOut`, `UserButton`, `SignIn`, `SignUp`, `Protect`
98
+
99
+ ### Server Exports (`@authon/nextjs/server`)
100
+
101
+ | Function | Returns | Description |
102
+ |----------|---------|-------------|
103
+ | `currentUser()` | `Promise<AuthonUser \| null>` | Get the current user from cookies |
104
+ | `auth()` | `Promise<AuthState>` | Get full auth state (userId, sessionId, getToken) |
105
+
106
+ ### Middleware
107
+
108
+ | Function | Description |
109
+ |----------|-------------|
110
+ | `authMiddleware(options)` | Edge middleware that redirects unauthenticated users |
111
+
112
+ ## Documentation
113
+
114
+ [authon.dev/docs](https://authon.dev/docs)
115
+
116
+ ## License
117
+
118
+ [MIT](../../LICENSE)
package/dist/index.cjs ADDED
@@ -0,0 +1,79 @@
1
+ "use strict";
2
+ var __defProp = Object.defineProperty;
3
+ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
4
+ var __getOwnPropNames = Object.getOwnPropertyNames;
5
+ var __hasOwnProp = Object.prototype.hasOwnProperty;
6
+ var __export = (target, all) => {
7
+ for (var name in all)
8
+ __defProp(target, name, { get: all[name], enumerable: true });
9
+ };
10
+ var __copyProps = (to, from, except, desc) => {
11
+ if (from && typeof from === "object" || typeof from === "function") {
12
+ for (let key of __getOwnPropNames(from))
13
+ if (!__hasOwnProp.call(to, key) && key !== except)
14
+ __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
15
+ }
16
+ return to;
17
+ };
18
+ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
19
+
20
+ // src/index.ts
21
+ var index_exports = {};
22
+ __export(index_exports, {
23
+ AuthonProvider: () => import_react.AuthonProvider,
24
+ Protect: () => import_react.Protect,
25
+ SignIn: () => import_react.SignIn,
26
+ SignUp: () => import_react.SignUp,
27
+ SignedIn: () => import_react.SignedIn,
28
+ SignedOut: () => import_react.SignedOut,
29
+ UserButton: () => import_react.UserButton,
30
+ authonMiddleware: () => authonMiddleware,
31
+ useAuthon: () => import_react.useAuthon,
32
+ useUser: () => import_react.useUser
33
+ });
34
+ module.exports = __toCommonJS(index_exports);
35
+ var import_react = require("@authon/react");
36
+
37
+ // src/middleware.ts
38
+ var import_server = require("next/server");
39
+ function matchRoute(pathname, patterns) {
40
+ return patterns.some((pattern) => {
41
+ if (pattern.endsWith("*")) {
42
+ return pathname.startsWith(pattern.slice(0, -1));
43
+ }
44
+ return pathname === pattern;
45
+ });
46
+ }
47
+ function authonMiddleware(options = {}) {
48
+ const { publicRoutes = ["/"], signInUrl = "/sign-in" } = options;
49
+ return async (request) => {
50
+ const { pathname } = request.nextUrl;
51
+ if (matchRoute(pathname, [...publicRoutes, signInUrl, "/_next/*", "/api/*", "/favicon.ico"])) {
52
+ return import_server.NextResponse.next();
53
+ }
54
+ const token = request.cookies.get("authon-token")?.value || request.headers.get("authorization")?.replace("Bearer ", "");
55
+ if (!token) {
56
+ const url = request.nextUrl.clone();
57
+ url.pathname = signInUrl;
58
+ url.searchParams.set("redirect_url", pathname);
59
+ return import_server.NextResponse.redirect(url);
60
+ }
61
+ const response = import_server.NextResponse.next();
62
+ response.headers.set("x-authon-token", token);
63
+ return response;
64
+ };
65
+ }
66
+ // Annotate the CommonJS export names for ESM import in node:
67
+ 0 && (module.exports = {
68
+ AuthonProvider,
69
+ Protect,
70
+ SignIn,
71
+ SignUp,
72
+ SignedIn,
73
+ SignedOut,
74
+ UserButton,
75
+ authonMiddleware,
76
+ useAuthon,
77
+ useUser
78
+ });
79
+ //# sourceMappingURL=index.cjs.map
package/dist/index.cjs.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/index.ts","../src/middleware.ts"],"sourcesContent":["export {\n AuthonProvider,\n useAuthon,\n useUser,\n SignIn,\n SignUp,\n UserButton,\n SignedIn,\n SignedOut,\n Protect,\n} from '@authon/react';\nexport type { AuthonContextValue } from '@authon/react';\nexport { authonMiddleware } from './middleware';\nexport type { AuthonMiddlewareOptions } from './middleware';\n","import type { NextRequest } from 'next/server';\nimport { NextResponse } from 'next/server';\n\nexport interface AuthonMiddlewareOptions {\n publicRoutes?: string[];\n signInUrl?: string;\n secretKey?: string;\n apiUrl?: string;\n}\n\nfunction matchRoute(pathname: string, patterns: string[]): boolean {\n return patterns.some((pattern) => {\n if (pattern.endsWith('*')) {\n return pathname.startsWith(pattern.slice(0, -1));\n }\n return pathname === pattern;\n });\n}\n\nexport function authonMiddleware(options: AuthonMiddlewareOptions = {}) {\n const { publicRoutes = ['/'], signInUrl = '/sign-in' } = options;\n\n return async (request: NextRequest) => {\n const { pathname } = request.nextUrl;\n\n if (matchRoute(pathname, [...publicRoutes, signInUrl, '/_next/*', '/api/*', '/favicon.ico'])) {\n return NextResponse.next();\n }\n\n const token =\n request.cookies.get('authon-token')?.value ||\n request.headers.get('authorization')?.replace('Bearer ', '');\n\n if (!token) {\n const url = request.nextUrl.clone();\n url.pathname = signInUrl;\n url.searchParams.set('redirect_url', pathname);\n return NextResponse.redirect(url);\n }\n\n const response = NextResponse.next();\n response.headers.set('x-authon-token', token);\n return response;\n };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAUO;;;ACTP,oBAA6B;AAS7B,SAAS,WAAW,UAAkB,UAA6B;AACjE,SAAO,SAAS,KAAK,CAAC,YAAY;AAChC,QAAI,QAAQ,SAAS,GAAG,GAAG;AACzB,aAAO,SAAS,WAAW,QAAQ,MAAM,GAAG,EAAE,CAAC;AAAA,IACjD;AACA,WAAO,aAAa;AAAA,EACtB,CAAC;AACH;AAEO,SAAS,iBAAiB,UAAmC,CAAC,GAAG;AACtE,QAAM,EAAE,eAAe,CAAC,GAAG,GAAG,YAAY,WAAW,IAAI;AAEzD,SAAO,OAAO,YAAyB;AACrC,UAAM,EAAE,SAAS,IAAI,QAAQ;AAE7B,QAAI,WAAW,UAAU,CAAC,GAAG,cAAc,WAAW,YAAY,UAAU,cAAc,CAAC,GAAG;AAC5F,aAAO,2BAAa,KAAK;AAAA,IAC3B;AAEA,UAAM,QACJ,QAAQ,QAAQ,IAAI,cAAc,GAAG,SACrC,QAAQ,QAAQ,IAAI,eAAe,GAAG,QAAQ,WAAW,EAAE;AAE7D,QAAI,CAAC,OAAO;AACV,YAAM,MAAM,QAAQ,QAAQ,MAAM;AAClC,UAAI,WAAW;AACf,UAAI,aAAa,IAAI,gBAAgB,QAAQ;AAC7C,aAAO,2BAAa,SAAS,GAAG;AAAA,IAClC;AAEA,UAAM,WAAW,2BAAa,KAAK;AACnC,aAAS,QAAQ,IAAI,kBAAkB,KAAK;AAC5C,WAAO;AAAA,EACT;AACF;","names":[]}
package/dist/index.d.cts ADDED
@@ -0,0 +1,12 @@
1
+ export { AuthonContextValue, AuthonProvider, Protect, SignIn, SignUp, SignedIn, SignedOut, UserButton, useAuthon, useUser } from '@authon/react';
2
+ import { NextRequest, NextResponse } from 'next/server';
3
+
4
+ interface AuthonMiddlewareOptions {
5
+ publicRoutes?: string[];
6
+ signInUrl?: string;
7
+ secretKey?: string;
8
+ apiUrl?: string;
9
+ }
10
+ declare function authonMiddleware(options?: AuthonMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
11
+
12
+ export { type AuthonMiddlewareOptions, authonMiddleware };
package/dist/index.d.ts ADDED
@@ -0,0 +1,12 @@
1
+ export { AuthonContextValue, AuthonProvider, Protect, SignIn, SignUp, SignedIn, SignedOut, UserButton, useAuthon, useUser } from '@authon/react';
2
+ import { NextRequest, NextResponse } from 'next/server';
3
+
4
+ interface AuthonMiddlewareOptions {
5
+ publicRoutes?: string[];
6
+ signInUrl?: string;
7
+ secretKey?: string;
8
+ apiUrl?: string;
9
+ }
10
+ declare function authonMiddleware(options?: AuthonMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
11
+
12
+ export { type AuthonMiddlewareOptions, authonMiddleware };
package/dist/index.js ADDED
@@ -0,0 +1,55 @@
1
+ // src/index.ts
2
+ import {
3
+ AuthonProvider,
4
+ useAuthon,
5
+ useUser,
6
+ SignIn,
7
+ SignUp,
8
+ UserButton,
9
+ SignedIn,
10
+ SignedOut,
11
+ Protect
12
+ } from "@authon/react";
13
+
14
+ // src/middleware.ts
15
+ import { NextResponse } from "next/server";
16
+ function matchRoute(pathname, patterns) {
17
+ return patterns.some((pattern) => {
18
+ if (pattern.endsWith("*")) {
19
+ return pathname.startsWith(pattern.slice(0, -1));
20
+ }
21
+ return pathname === pattern;
22
+ });
23
+ }
24
+ function authonMiddleware(options = {}) {
25
+ const { publicRoutes = ["/"], signInUrl = "/sign-in" } = options;
26
+ return async (request) => {
27
+ const { pathname } = request.nextUrl;
28
+ if (matchRoute(pathname, [...publicRoutes, signInUrl, "/_next/*", "/api/*", "/favicon.ico"])) {
29
+ return NextResponse.next();
30
+ }
31
+ const token = request.cookies.get("authon-token")?.value || request.headers.get("authorization")?.replace("Bearer ", "");
32
+ if (!token) {
33
+ const url = request.nextUrl.clone();
34
+ url.pathname = signInUrl;
35
+ url.searchParams.set("redirect_url", pathname);
36
+ return NextResponse.redirect(url);
37
+ }
38
+ const response = NextResponse.next();
39
+ response.headers.set("x-authon-token", token);
40
+ return response;
41
+ };
42
+ }
43
+ export {
44
+ AuthonProvider,
45
+ Protect,
46
+ SignIn,
47
+ SignUp,
48
+ SignedIn,
49
+ SignedOut,
50
+ UserButton,
51
+ authonMiddleware,
52
+ useAuthon,
53
+ useUser
54
+ };
55
+ //# sourceMappingURL=index.js.map
package/dist/index.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/index.ts","../src/middleware.ts"],"sourcesContent":["export {\n AuthonProvider,\n useAuthon,\n useUser,\n SignIn,\n SignUp,\n UserButton,\n SignedIn,\n SignedOut,\n Protect,\n} from '@authon/react';\nexport type { AuthonContextValue } from '@authon/react';\nexport { authonMiddleware } from './middleware';\nexport type { AuthonMiddlewareOptions } from './middleware';\n","import type { NextRequest } from 'next/server';\nimport { NextResponse } from 'next/server';\n\nexport interface AuthonMiddlewareOptions {\n publicRoutes?: string[];\n signInUrl?: string;\n secretKey?: string;\n apiUrl?: string;\n}\n\nfunction matchRoute(pathname: string, patterns: string[]): boolean {\n return patterns.some((pattern) => {\n if (pattern.endsWith('*')) {\n return pathname.startsWith(pattern.slice(0, -1));\n }\n return pathname === pattern;\n });\n}\n\nexport function authonMiddleware(options: AuthonMiddlewareOptions = {}) {\n const { publicRoutes = ['/'], signInUrl = '/sign-in' } = options;\n\n return async (request: NextRequest) => {\n const { pathname } = request.nextUrl;\n\n if (matchRoute(pathname, [...publicRoutes, signInUrl, '/_next/*', '/api/*', '/favicon.ico'])) {\n return NextResponse.next();\n }\n\n const token =\n request.cookies.get('authon-token')?.value ||\n request.headers.get('authorization')?.replace('Bearer ', '');\n\n if (!token) {\n const url = request.nextUrl.clone();\n url.pathname = signInUrl;\n url.searchParams.set('redirect_url', pathname);\n return NextResponse.redirect(url);\n }\n\n const response = NextResponse.next();\n response.headers.set('x-authon-token', token);\n return response;\n };\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACTP,SAAS,oBAAoB;AAS7B,SAAS,WAAW,UAAkB,UAA6B;AACjE,SAAO,SAAS,KAAK,CAAC,YAAY;AAChC,QAAI,QAAQ,SAAS,GAAG,GAAG;AACzB,aAAO,SAAS,WAAW,QAAQ,MAAM,GAAG,EAAE,CAAC;AAAA,IACjD;AACA,WAAO,aAAa;AAAA,EACtB,CAAC;AACH;AAEO,SAAS,iBAAiB,UAAmC,CAAC,GAAG;AACtE,QAAM,EAAE,eAAe,CAAC,GAAG,GAAG,YAAY,WAAW,IAAI;AAEzD,SAAO,OAAO,YAAyB;AACrC,UAAM,EAAE,SAAS,IAAI,QAAQ;AAE7B,QAAI,WAAW,UAAU,CAAC,GAAG,cAAc,WAAW,YAAY,UAAU,cAAc,CAAC,GAAG;AAC5F,aAAO,aAAa,KAAK;AAAA,IAC3B;AAEA,UAAM,QACJ,QAAQ,QAAQ,IAAI,cAAc,GAAG,SACrC,QAAQ,QAAQ,IAAI,eAAe,GAAG,QAAQ,WAAW,EAAE;AAE7D,QAAI,CAAC,OAAO;AACV,YAAM,MAAM,QAAQ,QAAQ,MAAM;AAClC,UAAI,WAAW;AACf,UAAI,aAAa,IAAI,gBAAgB,QAAQ;AAC7C,aAAO,aAAa,SAAS,GAAG;AAAA,IAClC;AAEA,UAAM,WAAW,aAAa,KAAK;AACnC,aAAS,QAAQ,IAAI,kBAAkB,KAAK;AAC5C,WAAO;AAAA,EACT;AACF;","names":[]}
package/dist/server.cjs ADDED
@@ -0,0 +1,84 @@
1
+ "use strict";
2
+ var __create = Object.create;
3
+ var __defProp = Object.defineProperty;
4
+ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
5
+ var __getOwnPropNames = Object.getOwnPropertyNames;
6
+ var __getProtoOf = Object.getPrototypeOf;
7
+ var __hasOwnProp = Object.prototype.hasOwnProperty;
8
+ var __export = (target, all) => {
9
+ for (var name in all)
10
+ __defProp(target, name, { get: all[name], enumerable: true });
11
+ };
12
+ var __copyProps = (to, from, except, desc) => {
13
+ if (from && typeof from === "object" || typeof from === "function") {
14
+ for (let key of __getOwnPropNames(from))
15
+ if (!__hasOwnProp.call(to, key) && key !== except)
16
+ __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
17
+ }
18
+ return to;
19
+ };
20
+ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
21
+ // If the importer is in node compatibility mode or this is not an ESM
22
+ // file that has been converted to a CommonJS file using a Babel-
23
+ // compatible transform (i.e. "__esModule" has not been set), then set
24
+ // "default" to the CommonJS "module.exports" for node compatibility.
25
+ isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
26
+ mod
27
+ ));
28
+ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
29
+
30
+ // src/server.ts
31
+ var server_exports = {};
32
+ __export(server_exports, {
33
+ auth: () => auth,
34
+ currentUser: () => currentUser
35
+ });
36
+ module.exports = __toCommonJS(server_exports);
37
+ async function getTokenFromCookies() {
38
+ try {
39
+ const { cookies } = await import("next/headers");
40
+ const cookieStore = await cookies();
41
+ return cookieStore.get("authon-token")?.value ?? null;
42
+ } catch {
43
+ return null;
44
+ }
45
+ }
46
+ async function verifyTokenWithApi(token, secretKey, apiUrl) {
47
+ const url = apiUrl || process.env["AUTHON_API_URL"] || "https://api.authon.dev";
48
+ const key = secretKey || process.env["AUTHON_SECRET_KEY"];
49
+ if (!key) return null;
50
+ try {
51
+ const res = await fetch(`${url}/v1/auth/token/verify`, {
52
+ headers: {
53
+ Authorization: `Bearer ${token}`,
54
+ "x-api-key": key,
55
+ "Content-Type": "application/json"
56
+ }
57
+ });
58
+ if (!res.ok) return null;
59
+ return res.json();
60
+ } catch {
61
+ return null;
62
+ }
63
+ }
64
+ async function currentUser() {
65
+ const token = await getTokenFromCookies();
66
+ if (!token) return null;
67
+ return verifyTokenWithApi(token);
68
+ }
69
+ async function auth() {
70
+ const token = await getTokenFromCookies();
71
+ if (!token) return { userId: null, user: null, getToken: () => null };
72
+ const user = await verifyTokenWithApi(token);
73
+ return {
74
+ userId: user?.id ?? null,
75
+ user,
76
+ getToken: () => token
77
+ };
78
+ }
79
+ // Annotate the CommonJS export names for ESM import in node:
80
+ 0 && (module.exports = {
81
+ auth,
82
+ currentUser
83
+ });
84
+ //# sourceMappingURL=server.cjs.map
package/dist/server.cjs.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AuthonUser } from '@authon/shared';\n\nasync function getTokenFromCookies(): Promise<string | null> {\n try {\n const { cookies } = await import('next/headers');\n const cookieStore = await cookies();\n return cookieStore.get('authon-token')?.value ?? null;\n } catch {\n return null;\n }\n}\n\nasync function verifyTokenWithApi(\n token: string,\n secretKey?: string,\n apiUrl?: string,\n): Promise<AuthonUser | null> {\n const url = apiUrl || process.env['AUTHON_API_URL'] || 'https://api.authon.dev';\n const key = secretKey || process.env['AUTHON_SECRET_KEY'];\n if (!key) return null;\n\n try {\n const res = await fetch(`${url}/v1/auth/token/verify`, {\n headers: {\n Authorization: `Bearer ${token}`,\n 'x-api-key': key,\n 'Content-Type': 'application/json',\n },\n });\n if (!res.ok) return null;\n return res.json() as Promise<AuthonUser>;\n } catch {\n return null;\n }\n}\n\nexport async function currentUser(): Promise<AuthonUser | null> {\n const token = await getTokenFromCookies();\n if (!token) return null;\n return verifyTokenWithApi(token);\n}\n\nexport async function auth(): Promise<{\n userId: string | null;\n user: AuthonUser | null;\n getToken: () => string | null;\n}> {\n const token = await getTokenFromCookies();\n if (!token) return { userId: null, user: null, getToken: () => null };\n\n const user = await verifyTokenWithApi(token);\n return {\n userId: user?.id ?? null,\n user,\n getToken: () => token,\n };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,eAAe,sBAA8C;AAC3D,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,cAAc;AAC/C,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,cAAc,GAAG,SAAS;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,mBACb,OACA,WACA,QAC4B;AAC5B,QAAM,MAAM,UAAU,QAAQ,IAAI,gBAAgB,KAAK;AACvD,QAAM,MAAM,aAAa,QAAQ,IAAI,mBAAmB;AACxD,MAAI,CAAC,IAAK,QAAO;AAEjB,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,GAAG,GAAG,yBAAyB;AAAA,MACrD,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,aAAa;AAAA,QACb,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,WAAO,IAAI,KAAK;AAAA,EAClB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,cAA0C;AAC9D,QAAM,QAAQ,MAAM,oBAAoB;AACxC,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,mBAAmB,KAAK;AACjC;AAEA,eAAsB,OAInB;AACD,QAAM,QAAQ,MAAM,oBAAoB;AACxC,MAAI,CAAC,MAAO,QAAO,EAAE,QAAQ,MAAM,MAAM,MAAM,UAAU,MAAM,KAAK;AAEpE,QAAM,OAAO,MAAM,mBAAmB,KAAK;AAC3C,SAAO;AAAA,IACL,QAAQ,MAAM,MAAM;AAAA,IACpB;AAAA,IACA,UAAU,MAAM;AAAA,EAClB;AACF;","names":[]}
package/dist/server.d.cts ADDED
@@ -0,0 +1,10 @@
1
+ import { AuthonUser } from '@authon/shared';
2
+
3
+ declare function currentUser(): Promise<AuthonUser | null>;
4
+ declare function auth(): Promise<{
5
+ userId: string | null;
6
+ user: AuthonUser | null;
7
+ getToken: () => string | null;
8
+ }>;
9
+
10
+ export { auth, currentUser };
package/dist/server.d.ts ADDED
@@ -0,0 +1,10 @@
1
+ import { AuthonUser } from '@authon/shared';
2
+
3
+ declare function currentUser(): Promise<AuthonUser | null>;
4
+ declare function auth(): Promise<{
5
+ userId: string | null;
6
+ user: AuthonUser | null;
7
+ getToken: () => string | null;
8
+ }>;
9
+
10
+ export { auth, currentUser };
package/dist/server.js ADDED
@@ -0,0 +1,48 @@
1
+ // src/server.ts
2
+ async function getTokenFromCookies() {
3
+ try {
4
+ const { cookies } = await import("next/headers");
5
+ const cookieStore = await cookies();
6
+ return cookieStore.get("authon-token")?.value ?? null;
7
+ } catch {
8
+ return null;
9
+ }
10
+ }
11
+ async function verifyTokenWithApi(token, secretKey, apiUrl) {
12
+ const url = apiUrl || process.env["AUTHON_API_URL"] || "https://api.authon.dev";
13
+ const key = secretKey || process.env["AUTHON_SECRET_KEY"];
14
+ if (!key) return null;
15
+ try {
16
+ const res = await fetch(`${url}/v1/auth/token/verify`, {
17
+ headers: {
18
+ Authorization: `Bearer ${token}`,
19
+ "x-api-key": key,
20
+ "Content-Type": "application/json"
21
+ }
22
+ });
23
+ if (!res.ok) return null;
24
+ return res.json();
25
+ } catch {
26
+ return null;
27
+ }
28
+ }
29
+ async function currentUser() {
30
+ const token = await getTokenFromCookies();
31
+ if (!token) return null;
32
+ return verifyTokenWithApi(token);
33
+ }
34
+ async function auth() {
35
+ const token = await getTokenFromCookies();
36
+ if (!token) return { userId: null, user: null, getToken: () => null };
37
+ const user = await verifyTokenWithApi(token);
38
+ return {
39
+ userId: user?.id ?? null,
40
+ user,
41
+ getToken: () => token
42
+ };
43
+ }
44
+ export {
45
+ auth,
46
+ currentUser
47
+ };
48
+ //# sourceMappingURL=server.js.map
package/dist/server.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AuthonUser } from '@authon/shared';\n\nasync function getTokenFromCookies(): Promise<string | null> {\n try {\n const { cookies } = await import('next/headers');\n const cookieStore = await cookies();\n return cookieStore.get('authon-token')?.value ?? null;\n } catch {\n return null;\n }\n}\n\nasync function verifyTokenWithApi(\n token: string,\n secretKey?: string,\n apiUrl?: string,\n): Promise<AuthonUser | null> {\n const url = apiUrl || process.env['AUTHON_API_URL'] || 'https://api.authon.dev';\n const key = secretKey || process.env['AUTHON_SECRET_KEY'];\n if (!key) return null;\n\n try {\n const res = await fetch(`${url}/v1/auth/token/verify`, {\n headers: {\n Authorization: `Bearer ${token}`,\n 'x-api-key': key,\n 'Content-Type': 'application/json',\n },\n });\n if (!res.ok) return null;\n return res.json() as Promise<AuthonUser>;\n } catch {\n return null;\n }\n}\n\nexport async function currentUser(): Promise<AuthonUser | null> {\n const token = await getTokenFromCookies();\n if (!token) return null;\n return verifyTokenWithApi(token);\n}\n\nexport async function auth(): Promise<{\n userId: string | null;\n user: AuthonUser | null;\n getToken: () => string | null;\n}> {\n const token = await getTokenFromCookies();\n if (!token) return { userId: null, user: null, getToken: () => null };\n\n const user = await verifyTokenWithApi(token);\n return {\n userId: user?.id ?? null,\n user,\n getToken: () => token,\n };\n}\n"],"mappings":";AAEA,eAAe,sBAA8C;AAC3D,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,cAAc;AAC/C,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,cAAc,GAAG,SAAS;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,mBACb,OACA,WACA,QAC4B;AAC5B,QAAM,MAAM,UAAU,QAAQ,IAAI,gBAAgB,KAAK;AACvD,QAAM,MAAM,aAAa,QAAQ,IAAI,mBAAmB;AACxD,MAAI,CAAC,IAAK,QAAO;AAEjB,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,GAAG,GAAG,yBAAyB;AAAA,MACrD,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,aAAa;AAAA,QACb,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,WAAO,IAAI,KAAK;AAAA,EAClB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,cAA0C;AAC9D,QAAM,QAAQ,MAAM,oBAAoB;AACxC,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,mBAAmB,KAAK;AACjC;AAEA,eAAsB,OAInB;AACD,QAAM,QAAQ,MAAM,oBAAoB;AACxC,MAAI,CAAC,MAAO,QAAO,EAAE,QAAQ,MAAM,MAAM,MAAM,UAAU,MAAM,KAAK;AAEpE,QAAM,OAAO,MAAM,mBAAmB,KAAK;AAC3C,SAAO;AAAA,IACL,QAAQ,MAAM,MAAM;AAAA,IACpB;AAAA,IACA,UAAU,MAAM;AAAA,EAClB;AACF;","names":[]}
package/package.json ADDED
@@ -0,0 +1,49 @@
1
+ {
2
+ "name": "@authon/nextjs",
3
+ "version": "0.1.0",
4
+ "description": "Authon Next.js SDK — middleware, server helpers, and React components",
5
+ "type": "module",
6
+ "main": "./dist/index.cjs",
7
+ "module": "./dist/index.js",
8
+ "types": "./dist/index.d.ts",
9
+ "exports": {
10
+ ".": {
11
+ "types": "./dist/index.d.ts",
12
+ "import": "./dist/index.js",
13
+ "require": "./dist/index.cjs"
14
+ },
15
+ "./server": {
16
+ "types": "./dist/server.d.ts",
17
+ "import": "./dist/server.js",
18
+ "require": "./dist/server.cjs"
19
+ }
20
+ },
21
+ "files": ["dist"],
22
+ "scripts": {
23
+ "build": "tsup",
24
+ "dev": "tsup --watch"
25
+ },
26
+ "license": "MIT",
27
+ "repository": {
28
+ "type": "git",
29
+ "url": "https://github.com/mikusnuz/authon-sdk.git",
30
+ "directory": "packages/nextjs"
31
+ },
32
+ "homepage": "https://github.com/mikusnuz/authon-sdk/tree/main/packages/nextjs",
33
+ "publishConfig": { "access": "public" },
34
+ "keywords": ["authon", "auth", "nextjs", "middleware", "sdk"],
35
+ "dependencies": {
36
+ "@authon/shared": "workspace:*",
37
+ "@authon/react": "workspace:*"
38
+ },
39
+ "peerDependencies": {
40
+ "next": "^14.0.0 || ^15.0.0"
41
+ },
42
+ "devDependencies": {
43
+ "@types/react": "^19.0.0",
44
+ "next": "^15.3.0",
45
+ "react": "^19.0.0",
46
+ "tsup": "^8.0.0",
47
+ "typescript": "^5.9.3"
48
+ }
49
+ }