@baseworks/auth 0.2.7 → 1.0.2

package/dist/chunk-JS5Y2DTW.js

@@ -1,387 +0,0 @@
-import {
-  getAuthPublicUrl,
-  normalizeUrlLike
-} from "./chunk-3NJASEF4.js";
-import {
-  parseJwtPayload
-} from "./chunk-OD5XLL3O.js";
-import {
-  generatePkce
-} from "./chunk-34E5PYNA.js";
-
-// src/session.ts
-import { cookies } from "next/headers";
-import { NextResponse } from "next/server";
-import { base64urlEncode, base64urlDecodeString } from "@baseworks/core";
-var oidcCookies = {
-  codeVerifier: "oidc_code_verifier",
-  state: "oidc_state",
-  nonce: "oidc_nonce",
-  returnTo: "oidc_return_to",
-  idToken: "oidc_id_token",
-  accessToken: "oidc_access_token",
-  refreshToken: "oidc_refresh_token",
-  expiresAt: "oidc_expires_at",
-  session: "oidc_session"
-};
-function getIssuer() {
-  return (process.env.OIDC_ISSUER ?? "https://nesskey.com").replace(/\/+$/, "");
-}
-function getClientId() {
-  const clientId = process.env.OIDC_CLIENT_ID;
-  if (!clientId) throw new Error("OIDC_CLIENT_ID is required.");
-  return clientId;
-}
-function getOptionalClientSecret() {
-  return process.env.OIDC_CLIENT_SECRET;
-}
-function getCookieDomain() {
-  const domain = process.env.OIDC_COOKIE_DOMAIN?.trim();
-  return domain || void 0;
-}
-function getScope() {
-  return process.env.OIDC_SCOPE ?? "openid profile email offline_access";
-}
-function getPublicAuthBasePath() {
-  return normalizeUrlLike(process.env.OIDC_PUBLIC_BASE_PATH ?? getAuthPublicUrl() ?? "/auth");
-}
-function getRedirectUriOverride() {
-  return process.env.OIDC_REDIRECT_URI ?? null;
-}
-function getDefaultSignedOutRedirect() {
-  return process.env.OIDC_DEFAULT_REDIRECT ?? "/";
-}
-function getPublicSiteUrlFromEnv(request) {
-  const explicit = process.env.APP_PUBLIC_URL ?? process.env.NEXT_PUBLIC_SITE_URL ?? process.env.OIDC_PUBLIC_SITE_URL;
-  if (explicit) return normalizeUrlLike(explicit);
-  if (request) return normalizeUrlLike(request.nextUrl.origin);
-  return null;
-}
-function resolvePublicRedirect(target, request) {
-  if (/^https?:\/\//.test(target)) return new URL(target);
-  const publicSiteUrl = getPublicSiteUrlFromEnv(request);
-  if (publicSiteUrl) return new URL(target, publicSiteUrl);
-  return new URL(target, request.url);
-}
-function randomString() {
-  return base64urlEncode(crypto.getRandomValues(new Uint8Array(32)));
-}
-async function discoverOidc() {
-  const issuer = getIssuer();
-  const response = await fetch(`${issuer}/.well-known/openid-configuration`);
-  if (!response.ok) throw new Error(`Failed to load OIDC discovery document from ${issuer}.`);
-  return await response.json();
-}
-function encodeSessionCookie(session) {
-  return base64urlEncode(new TextEncoder().encode(JSON.stringify(session)));
-}
-function parseSessionCookie(value) {
-  try {
-    const session = JSON.parse(base64urlDecodeString(value));
-    return session.isAuthenticated ? session : null;
-  } catch {
-    return null;
-  }
-}
-function encodeTransactionCookie(transaction) {
-  return base64urlEncode(new TextEncoder().encode(JSON.stringify(transaction)));
-}
-function parseTransactionCookie(value) {
-  try {
-    const transaction = JSON.parse(base64urlDecodeString(value));
-    if (!transaction.codeVerifier || !transaction.returnTo) return null;
-    return transaction;
-  } catch {
-    return null;
-  }
-}
-function getTransactionCookieName(state) {
-  return `oidc_tx_${state}`;
-}
-function getCookieOptions(request) {
-  return {
-    domain: getCookieDomain(),
-    httpOnly: true,
-    path: "/",
-    sameSite: "lax",
-    secure: request.nextUrl.protocol === "https:"
-  };
-}
-function expireCookie(response, request, name) {
-  response.cookies.set(name, "", { ...getCookieOptions(request), expires: /* @__PURE__ */ new Date(0) });
-}
-function setTransactionCookie(response, request, state, transaction) {
-  response.cookies.set(
-    getTransactionCookieName(state),
-    encodeTransactionCookie(transaction),
-    { ...getCookieOptions(request), expires: new Date(Date.now() + 10 * 60 * 1e3) }
-  );
-}
-function getRedirectUri(request) {
-  const override = getRedirectUriOverride();
-  if (override) return override;
-  return new URL(
-    `${getPublicAuthBasePath()}/oidc/callback`,
-    getPublicSiteUrlFromEnv(request) ?? request.nextUrl.origin
-  ).toString();
-}
-function appendClientAuthentication(headers, params, clientId, clientSecret) {
-  if (clientSecret) {
-    const basic = btoa(`${clientId}:${clientSecret}`);
-    headers.set("authorization", `Basic ${basic}`);
-    return;
-  }
-  params.set("client_id", clientId);
-}
-async function exchangeAuthorizationCode(args) {
-  const params = new URLSearchParams({
-    code: args.code,
-    code_verifier: args.codeVerifier,
-    grant_type: "authorization_code",
-    redirect_uri: args.redirectUri
-  });
-  const reqHeaders = new Headers({ "content-type": "application/x-www-form-urlencoded" });
-  appendClientAuthentication(reqHeaders, params, args.clientId, args.clientSecret);
-  const response = await fetch(args.tokenEndpoint, {
-    body: params.toString(),
-    headers: reqHeaders,
-    method: "POST"
-  });
-  const json = await response.json();
-  if (!response.ok || !json.id_token) {
-    throw new Error(json.error_description ?? "OIDC code exchange failed.");
-  }
-  return json;
-}
-async function refreshIdToken(args) {
-  const params = new URLSearchParams({
-    grant_type: "refresh_token",
-    refresh_token: args.refreshToken
-  });
-  const reqHeaders = new Headers({ "content-type": "application/x-www-form-urlencoded" });
-  appendClientAuthentication(reqHeaders, params, args.clientId, args.clientSecret);
-  const response = await fetch(args.tokenEndpoint, {
-    body: params.toString(),
-    headers: reqHeaders,
-    method: "POST"
-  });
-  const json = await response.json();
-  if (!response.ok || !json.id_token) {
-    throw new Error(json.error_description ?? "OIDC token refresh failed.");
-  }
-  return json;
-}
-function sessionFromPayload(payload) {
-  return {
-    audience: payload.aud,
-    email: payload.email,
-    expiresAt: payload.exp ?? 0,
-    isAuthenticated: true,
-    issuer: payload.iss,
-    name: payload.name,
-    pictureUrl: payload.picture,
-    subject: payload.sub,
-    tokenIdentifier: payload.sub && payload.iss ? `${payload.sub}|${payload.iss}` : void 0
-  };
-}
-function applyTokenCookies(response, request, tokens) {
-  const options = getCookieOptions(request);
-  const payload = parseJwtPayload(tokens.id_token) ?? {};
-  const expiresAt = payload.exp ?? (tokens.expires_in ? Math.floor(Date.now() / 1e3) + tokens.expires_in : void 0);
-  if (!expiresAt) throw new Error("The OIDC ID token did not include an expiry.");
-  response.cookies.set(oidcCookies.idToken, tokens.id_token, {
-    ...options,
-    expires: new Date(expiresAt * 1e3)
-  });
-  response.cookies.set(oidcCookies.expiresAt, String(expiresAt), {
-    ...options,
-    expires: new Date(expiresAt * 1e3)
-  });
-  response.cookies.set(
-    oidcCookies.session,
-    encodeSessionCookie(sessionFromPayload({ ...payload, exp: expiresAt })),
-    { ...options, expires: new Date(expiresAt * 1e3) }
-  );
-  if (tokens.access_token) {
-    response.cookies.set(oidcCookies.accessToken, tokens.access_token, {
-      ...options,
-      expires: new Date(expiresAt * 1e3)
-    });
-  }
-  if (tokens.refresh_token) {
-    response.cookies.set(oidcCookies.refreshToken, tokens.refresh_token, options);
-  }
-}
-function clearTransientCookies(response, request) {
-  expireCookie(response, request, oidcCookies.codeVerifier);
-  expireCookie(response, request, oidcCookies.state);
-  expireCookie(response, request, oidcCookies.nonce);
-}
-async function buildAuthorizationRedirect(request) {
-  const discovery = await discoverOidc();
-  const clientId = getClientId();
-  const { challenge, verifier } = await generatePkce();
-  const nonce = randomString();
-  const state = randomString();
-  const redirectUri = getRedirectUri(request);
-  const returnTo = request.nextUrl.searchParams.get("redirectTo") ?? getDefaultSignedOutRedirect();
-  const url = new URL(discovery.authorization_endpoint);
-  url.searchParams.set("client_id", clientId);
-  url.searchParams.set("code_challenge", challenge);
-  url.searchParams.set("code_challenge_method", "S256");
-  url.searchParams.set("nonce", nonce);
-  url.searchParams.set("redirect_uri", redirectUri);
-  url.searchParams.set("response_type", "code");
-  url.searchParams.set("scope", getScope());
-  url.searchParams.set("state", state);
-  const response = NextResponse.redirect(url);
-  const options = getCookieOptions(request);
-  setTransactionCookie(response, request, state, { codeVerifier: verifier, nonce, returnTo });
-  response.cookies.set(oidcCookies.codeVerifier, verifier, options);
-  response.cookies.set(oidcCookies.state, state, options);
-  response.cookies.set(oidcCookies.nonce, nonce, options);
-  response.cookies.set(oidcCookies.returnTo, returnTo, options);
-  return response;
-}
-async function handleAuthorizationCallback(request) {
-  const cookieStore = await cookies();
-  const code = request.nextUrl.searchParams.get("code");
-  const state = request.nextUrl.searchParams.get("state");
-  const transaction = state ? parseTransactionCookie(cookieStore.get(getTransactionCookieName(state))?.value ?? "") : null;
-  const savedState = cookieStore.get(oidcCookies.state)?.value;
-  const codeVerifier = transaction?.codeVerifier ?? cookieStore.get(oidcCookies.codeVerifier)?.value;
-  const savedNonce = transaction?.nonce ?? cookieStore.get(oidcCookies.nonce)?.value;
-  const returnTo = transaction?.returnTo ?? cookieStore.get(oidcCookies.returnTo)?.value ?? getDefaultSignedOutRedirect();
-  if (!code || !state || !codeVerifier || !transaction && (!savedState || state !== savedState)) {
-    return NextResponse.redirect(
-      resolvePublicRedirect(`${getPublicAuthBasePath()}?error=oidc_state`, request)
-    );
-  }
-  try {
-    const discovery = await discoverOidc();
-    const tokens = await exchangeAuthorizationCode({
-      clientId: getClientId(),
-      clientSecret: getOptionalClientSecret(),
-      code,
-      codeVerifier,
-      redirectUri: getRedirectUri(request),
-      tokenEndpoint: discovery.token_endpoint
-    });
-    const payload = parseJwtPayload(tokens.id_token) ?? {};
-    if (savedNonce && payload.nonce && payload.nonce !== savedNonce) {
-      throw new Error("OIDC nonce mismatch.");
-    }
-    const response = NextResponse.redirect(resolvePublicRedirect(returnTo, request));
-    applyTokenCookies(response, request, tokens);
-    clearTransientCookies(response, request);
-    expireCookie(response, request, oidcCookies.returnTo);
-    expireCookie(response, request, getTransactionCookieName(state));
-    return response;
-  } catch {
-    return NextResponse.redirect(
-      resolvePublicRedirect(`${getPublicAuthBasePath()}?error=oidc_callback`, request)
-    );
-  }
-}
-async function getSessionFromCookies() {
-  const cookieStore = await cookies();
-  const idToken = cookieStore.get(oidcCookies.idToken)?.value;
-  if (idToken) {
-    try {
-      return sessionFromPayload(parseJwtPayload(idToken) ?? {});
-    } catch {
-    }
-  }
-  const sessionCookie = cookieStore.get(oidcCookies.session)?.value;
-  const session = sessionCookie ? parseSessionCookie(sessionCookie) : null;
-  return session ?? { expiresAt: 0, isAuthenticated: false };
-}
-async function getServerIdToken() {
-  const cookieStore = await cookies();
-  return cookieStore.get(oidcCookies.idToken)?.value ?? null;
-}
-async function hasServerOidcSession() {
-  const cookieStore = await cookies();
-  return Boolean(
-    cookieStore.get(oidcCookies.session)?.value ?? cookieStore.get(oidcCookies.idToken)?.value ?? cookieStore.get(oidcCookies.accessToken)?.value
-  );
-}
-async function getServerAccessToken() {
-  const cookieStore = await cookies();
-  const accessToken = cookieStore.get(oidcCookies.accessToken)?.value;
-  if (accessToken) return accessToken;
-  const refreshToken = cookieStore.get(oidcCookies.refreshToken)?.value;
-  if (!refreshToken) return null;
-  try {
-    const discovery = await discoverOidc();
-    const tokens = await refreshIdToken({
-      clientId: getClientId(),
-      clientSecret: getOptionalClientSecret(),
-      refreshToken,
-      tokenEndpoint: discovery.token_endpoint
-    });
-    return tokens.access_token ?? null;
-  } catch {
-    return null;
-  }
-}
-async function buildSessionResponse(_request) {
-  const cookieStore = await cookies();
-  const idToken = cookieStore.get(oidcCookies.idToken)?.value;
-  const expiresAt = Number(cookieStore.get(oidcCookies.expiresAt)?.value ?? "0");
-  const now = Math.floor(Date.now() / 1e3);
-  if (!idToken || expiresAt <= now) {
-    return NextResponse.json({ expiresAt: 0, isAuthenticated: false }, {
-      status: 401
-    });
-  }
-  return NextResponse.json(sessionFromPayload({ ...parseJwtPayload(idToken) ?? {}, exp: expiresAt }));
-}
-async function buildTokenResponse(request) {
-  const cookieStore = await cookies();
-  const idToken = cookieStore.get(oidcCookies.idToken)?.value;
-  const expiresAt = Number(cookieStore.get(oidcCookies.expiresAt)?.value ?? "0");
-  const now = Math.floor(Date.now() / 1e3);
-  if (!idToken || expiresAt <= now) {
-    const response = NextResponse.json({ token: null }, { status: 401 });
-    expireCookie(response, request, oidcCookies.idToken);
-    expireCookie(response, request, oidcCookies.refreshToken);
-    expireCookie(response, request, oidcCookies.expiresAt);
-    return response;
-  }
-  return NextResponse.json({ token: idToken });
-}
-async function buildLogoutResponse(request) {
-  const redirectTo = request.nextUrl.searchParams.get("redirectTo") ?? getDefaultSignedOutRedirect();
-  const postLogoutUrl = resolvePublicRedirect(redirectTo, request).toString();
-  const cookieStore = await cookies();
-  const idToken = cookieStore.get(oidcCookies.idToken)?.value;
-  const clearResponse = NextResponse.redirect(postLogoutUrl);
-  Object.values(oidcCookies).forEach((name) => expireCookie(clearResponse, request, name));
-  try {
-    const discovery = await discoverOidc();
-    if (discovery.end_session_endpoint) {
-      const endSessionUrl = new URL(discovery.end_session_endpoint);
-      endSessionUrl.searchParams.set("post_logout_redirect_uri", postLogoutUrl);
-      if (idToken) endSessionUrl.searchParams.set("id_token_hint", idToken);
-      return NextResponse.redirect(endSessionUrl.toString(), {
-        headers: clearResponse.headers
-      });
-    }
-  } catch {
-  }
-  return clearResponse;
-}
-
-export {
-  oidcCookies,
-  buildAuthorizationRedirect,
-  handleAuthorizationCallback,
-  getSessionFromCookies,
-  getServerIdToken,
-  hasServerOidcSession,
-  getServerAccessToken,
-  buildSessionResponse,
-  buildTokenResponse,
-  buildLogoutResponse
-};

package/dist/edge.d.ts

@@ -1,17 +0,0 @@
-import { OidcSession } from './session.js';
-import 'next/server';
-
-type EdgeAuthProvider = "anonymous" | "cookie" | "pomerium";
-type EdgeSession = OidcSession & {
-    groups?: string[];
-    provider: EdgeAuthProvider;
-    rawClaims?: Record<string, unknown>;
-    role?: string;
-    username?: string;
-};
-declare function getEdgeSession(): Promise<EdgeSession>;
-declare function getPomeriumAuthenticateUrl(redirectTo: string, origin?: string): string | null;
-declare function handleEdgeLogin(request: Request): void;
-declare function getPomeriumSignOutUrl(redirectTo: string, origin?: string): string | null;
-
-export { type EdgeAuthProvider, type EdgeSession, getEdgeSession, getPomeriumAuthenticateUrl, getPomeriumSignOutUrl, handleEdgeLogin };

package/dist/edge.js

@@ -1,145 +0,0 @@
-import {
-  getSessionFromCookies
-} from "./chunk-JS5Y2DTW.js";
-import {
-  buildPublicUrl,
-  normalizeUrlLike
-} from "./chunk-3NJASEF4.js";
-import {
-  parseJwtPayload
-} from "./chunk-OD5XLL3O.js";
-import "./chunk-34E5PYNA.js";
-
-// src/edge.ts
-import { headers } from "next/headers";
-import { redirect } from "next/navigation";
-function firstHeader(headerStore, names) {
-  for (const name of names) {
-    const value = headerStore.get(name);
-    if (value) return value;
-  }
-  return void 0;
-}
-function stringClaim(claims, keys) {
-  for (const key of keys) {
-    const value = claims[key];
-    if (typeof value === "string" && value.trim()) return value;
-    if (Array.isArray(value)) {
-      const first = value.find((item) => typeof item === "string" && item.trim());
-      if (first) return first;
-    }
-  }
-  return void 0;
-}
-function parseHeaderClaim(value) {
-  if (!value) return void 0;
-  try {
-    const parsed = JSON.parse(value);
-    if (typeof parsed === "string" && parsed.trim()) return parsed;
-    if (Array.isArray(parsed)) {
-      const first = parsed.find((item) => typeof item === "string" && item.trim());
-      if (first) return first;
-    }
-  } catch {
-  }
-  return value.trim() || void 0;
-}
-function stringHeaderClaim(headerStore, names) {
-  for (const name of names) {
-    const value = parseHeaderClaim(headerStore.get(name) ?? void 0);
-    if (value) return value;
-  }
-  return void 0;
-}
-function stringArrayClaim(claims, keys) {
-  for (const key of keys) {
-    const value = claims[key];
-    if (typeof value === "string" && value.trim()) return [value];
-    if (Array.isArray(value)) {
-      const strings = value.filter((item) => typeof item === "string" && item.trim().length > 0);
-      if (strings.length) return strings;
-    }
-  }
-  return void 0;
-}
-function stringArrayHeaderClaim(headerStore, names) {
-  for (const name of names) {
-    const raw = headerStore.get(name);
-    if (!raw) continue;
-    try {
-      const parsed = JSON.parse(raw);
-      if (typeof parsed === "string" && parsed.trim()) return [parsed];
-      if (Array.isArray(parsed)) {
-        const strings = parsed.filter((item) => typeof item === "string" && item.trim().length > 0);
-        if (strings.length) return strings;
-      }
-    } catch {
-      const values = raw.split(",").map((v) => v.trim()).filter(Boolean);
-      if (values.length) return values;
-    }
-  }
-  return void 0;
-}
-function parsePomeriumSession(headerStore) {
-  const assertion = firstHeader(headerStore, ["x-pomerium-jwt-assertion", "x-pomerium-jwt"]);
-  const claims = assertion ? parseJwtPayload(assertion) : {};
-  const email = stringHeaderClaim(headerStore, ["x-pomerium-claim-email", "x-forwarded-email"]) ?? stringClaim(claims ?? {}, ["email"]);
-  const subject = stringHeaderClaim(headerStore, ["x-pomerium-claim-sub", "x-pomerium-claim-user", "x-user-id"]) ?? stringClaim(claims ?? {}, ["sub", "user", "id"]);
-  const name = stringHeaderClaim(headerStore, ["x-pomerium-claim-name", "x-forwarded-user"]) ?? stringClaim(claims ?? {}, ["name", "preferred_username"]);
-  const pictureUrl = stringHeaderClaim(headerStore, ["x-pomerium-claim-picture"]) ?? stringClaim(claims ?? {}, ["picture"]);
-  const username = stringHeaderClaim(headerStore, ["x-pomerium-claim-username", "x-pomerium-claim-preferred-username"]) ?? stringClaim(claims ?? {}, ["username", "preferred_username", "user"]);
-  const groups = stringArrayHeaderClaim(headerStore, ["x-pomerium-claim-groups", "x-pomerium-claim-roles"]) ?? stringArrayClaim(claims ?? {}, ["groups", "roles"]);
-  const role = stringHeaderClaim(headerStore, ["x-pomerium-claim-role"]) ?? stringClaim(claims ?? {}, ["role"]);
-  if (!email && !subject && !name) return null;
-  return {
-    email,
-    expiresAt: Number.MAX_SAFE_INTEGER,
-    groups,
-    isAuthenticated: true,
-    name,
-    pictureUrl,
-    provider: "pomerium",
-    rawClaims: claims ?? void 0,
-    role,
-    subject: subject ?? email,
-    username
-  };
-}
-async function getEdgeSession() {
-  const headerStore = await headers();
-  const pomerium = parsePomeriumSession(headerStore);
-  if (pomerium) return pomerium;
-  const cookieSession = await getSessionFromCookies();
-  if (cookieSession.isAuthenticated) {
-    return { ...cookieSession, provider: "cookie" };
-  }
-  return { expiresAt: 0, isAuthenticated: false, provider: "anonymous" };
-}
-function getPomeriumAuthenticateUrl(redirectTo, origin) {
-  const appUrl = origin ?? process.env.APP_PUBLIC_URL ?? process.env.NEXT_PUBLIC_SITE_URL;
-  if (!appUrl) return null;
-  const url = new URL(
-    process.env.POMERIUM_LOGIN_PATH ?? "/auth/edge/login",
-    `${normalizeUrlLike(appUrl)}/`
-  );
-  url.searchParams.set("pomerium_redirect_uri", buildPublicUrl(redirectTo, origin));
-  return url.toString();
-}
-function handleEdgeLogin(request) {
-  const url = new URL(request.url);
-  const redirectTo = url.searchParams.get("pomerium_redirect_uri") ?? "/";
-  redirect(redirectTo);
-}
-function getPomeriumSignOutUrl(redirectTo, origin) {
-  const authUrl = process.env.POMERIUM_AUTHENTICATE_URL ?? process.env.POMERIUM_AUTH_URL ?? origin;
-  if (!authUrl) return null;
-  const url = new URL("/.pomerium/sign_out", `${normalizeUrlLike(authUrl)}/`);
-  url.searchParams.set("pomerium_redirect_uri", buildPublicUrl(redirectTo, origin));
-  return url.toString();
-}
-export {
-  getEdgeSession,
-  getPomeriumAuthenticateUrl,
-  getPomeriumSignOutUrl,
-  handleEdgeLogin
-};

package/dist/session.d.ts

@@ -1,42 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-
-type OidcSession = {
-    audience?: string | string[];
-    email?: string;
-    expiresAt: number;
-    isAuthenticated: boolean;
-    issuer?: string;
-    name?: string;
-    pictureUrl?: string;
-    subject?: string;
-    tokenIdentifier?: string;
-};
-declare const oidcCookies: {
-    readonly codeVerifier: "oidc_code_verifier";
-    readonly state: "oidc_state";
-    readonly nonce: "oidc_nonce";
-    readonly returnTo: "oidc_return_to";
-    readonly idToken: "oidc_id_token";
-    readonly accessToken: "oidc_access_token";
-    readonly refreshToken: "oidc_refresh_token";
-    readonly expiresAt: "oidc_expires_at";
-    readonly session: "oidc_session";
-};
-declare function buildAuthorizationRedirect(request: NextRequest): Promise<NextResponse<unknown>>;
-declare function handleAuthorizationCallback(request: NextRequest): Promise<NextResponse<unknown>>;
-declare function getSessionFromCookies(): Promise<OidcSession>;
-declare function getServerIdToken(): Promise<string | null>;
-declare function hasServerOidcSession(): Promise<boolean>;
-declare function getServerAccessToken(): Promise<string | null>;
-declare function buildSessionResponse(_request?: NextRequest): Promise<NextResponse<{
-    expiresAt: number;
-    isAuthenticated: false;
-}> | NextResponse<OidcSession>>;
-declare function buildTokenResponse(request: NextRequest): Promise<NextResponse<{
-    token: null;
-}> | NextResponse<{
-    token: string;
-}>>;
-declare function buildLogoutResponse(request: NextRequest): Promise<NextResponse<unknown>>;
-
-export { type OidcSession, buildAuthorizationRedirect, buildLogoutResponse, buildSessionResponse, buildTokenResponse, getServerAccessToken, getServerIdToken, getSessionFromCookies, handleAuthorizationCallback, hasServerOidcSession, oidcCookies };

package/dist/session.js

@@ -1,27 +0,0 @@
-import {
-  buildAuthorizationRedirect,
-  buildLogoutResponse,
-  buildSessionResponse,
-  buildTokenResponse,
-  getServerAccessToken,
-  getServerIdToken,
-  getSessionFromCookies,
-  handleAuthorizationCallback,
-  hasServerOidcSession,
-  oidcCookies
-} from "./chunk-JS5Y2DTW.js";
-import "./chunk-3NJASEF4.js";
-import "./chunk-OD5XLL3O.js";
-import "./chunk-34E5PYNA.js";
-export {
-  buildAuthorizationRedirect,
-  buildLogoutResponse,
-  buildSessionResponse,
-  buildTokenResponse,
-  getServerAccessToken,
-  getServerIdToken,
-  getSessionFromCookies,
-  handleAuthorizationCallback,
-  hasServerOidcSession,
-  oidcCookies
-};

package/dist/url-helpers.d.ts

@@ -1,11 +0,0 @@
-declare function normalizeUrlLike(value: string): string;
-declare function getAuthPublicUrl(): string;
-declare function getAccountPublicUrl(): string;
-declare function getAppBasePath(defaultPath?: string): string;
-declare function getPublicSiteUrl(): string;
-declare function buildPublicUrl(pathOrUrl: string, fallbackOrigin?: string): string;
-declare function buildAuthLoginUrl(redirectTo: string, origin?: string): string;
-declare function buildAuthLogoutUrl(redirectTo: string, origin?: string): string;
-declare function buildAccountProfileUrl(): string;
-
-export { buildAccountProfileUrl, buildAuthLoginUrl, buildAuthLogoutUrl, buildPublicUrl, getAccountPublicUrl, getAppBasePath, getAuthPublicUrl, getPublicSiteUrl, normalizeUrlLike };

package/dist/url-helpers.js

@@ -1,22 +0,0 @@
-import {
-  buildAccountProfileUrl,
-  buildAuthLoginUrl,
-  buildAuthLogoutUrl,
-  buildPublicUrl,
-  getAccountPublicUrl,
-  getAppBasePath,
-  getAuthPublicUrl,
-  getPublicSiteUrl,
-  normalizeUrlLike
-} from "./chunk-3NJASEF4.js";
-export {
-  buildAccountProfileUrl,
-  buildAuthLoginUrl,
-  buildAuthLogoutUrl,
-  buildPublicUrl,
-  getAccountPublicUrl,
-  getAppBasePath,
-  getAuthPublicUrl,
-  getPublicSiteUrl,
-  normalizeUrlLike
-};