@binary1702/auth 0.2.5 → 0.3.0

package/dist/next/proxy.js

@@ -13,20 +13,24 @@
 //
 // The CLI writes proxy.ts with an inline `config.matcher`, because
 // Next reads the matcher statically and ignores a re-exported one.
-// This function also guards those paths itself, so a missing matcher
-// degrades to "slightly slower", never to "static assets blocked".
+// The matcher only skips Next's build output; isPublic() (core/guard.ts)
+// makes every other decision, so the rule lives in one tested place.
 // ─────────────────────────────────────────────────────────────
 import { NextResponse } from "next/server.js";
-import { COOKIE_NAME, SIGN_IN_PATH, getSecret } from "../core/config.js";
+import { COOKIE_NAME, SIGN_IN_PATH, cookieName, getSecret } from "../core/config.js";
 import { verifySession } from "../core/session.js";
+import { MATCHER, isPublic } from "../core/guard.js";
+import { options } from "../core/options.js";
 /** Paste this into proxy.ts as `export const config = { matcher: MATCHER }` */
-export const MATCHER = ["/((?!auth|_next/static|_next/image|favicon.ico|.*\\..*).*)"];
-const PUBLIC = /^\/(auth(\/|$)|_next\/|favicon\.ico$)|\.[a-z0-9]+$/i;
+export { MATCHER };
 export async function proxy(request) {
     const { pathname, search } = request.nextUrl;
-    if (PUBLIC.test(pathname))
+    // `protected:` or `public:` from b17_auth.yaml, on top of the built-in rules (auth pages, Next internals)
+    const o = options();
+    if (isPublic(pathname, { public: o.public, protected: o.protected }))
         return NextResponse.next();
-    const token = request.cookies.get(COOKIE_NAME)?.value;
+    // The current cookie name, then the pre-0.3.0 one: upgrading signs nobody out
+    const token = request.cookies.get(cookieName(o.production))?.value ?? request.cookies.get(COOKIE_NAME)?.value;
     if (token && (await verifySession(token, getSecret())))
         return NextResponse.next();
     if (pathname.startsWith("/api/")) {

package/dist/react/index.d.ts

@@ -0,0 +1,18 @@
+import { type ReactNode } from "react";
+import { type Authorization, type Organization, type Session } from "../core/org.ts";
+export type { Session, Organization, Authorization };
+export type AuthState = {
+    user: Session["user"] | null;
+    organization: Organization | null;
+    authorization: Authorization;
+    /** True only while the provider is fetching the session itself */
+    loading: boolean;
+    /** Re-fetch GET /auth/session (after switching organization, for instance) */
+    refresh: () => Promise<void>;
+};
+export declare function fetchSession(): Promise<Session | null>;
+export declare function AuthProvider(props: {
+    session?: Session | null;
+    children: ReactNode;
+}): import("react").FunctionComponentElement<import("react").ProviderProps<AuthState | null>>;
+export declare function useAuth(): AuthState;

package/dist/react/index.js

@@ -0,0 +1,55 @@
+"use client";
+// ─────────────────────────────────────────────────────────────
+// React side of the session contract. For rendering only: every
+// protected operation is still checked on the server.
+//
+//   <AuthProvider session={await getSession()}>   in a server layout,
+//                                                 no request from the client
+//   <AuthProvider>                                 anywhere else: fetches
+//                                                 GET /auth/session once
+//   const { user, organization, authorization } = useAuth()
+//
+// Signed out: user and organization are null, permissions are empty.
+// ─────────────────────────────────────────────────────────────
+import { createContext, createElement, useCallback, useContext, useEffect, useState } from "react";
+import { NO_SESSION } from "../core/org.js";
+const SESSION_URL = "/auth/session";
+const Ctx = createContext(null);
+export async function fetchSession() {
+    const res = await fetch(SESSION_URL, { credentials: "same-origin", cache: "no-store" });
+    return res.ok ? (await res.json()) : null;
+}
+export function AuthProvider(props) {
+    const provided = props.session !== undefined;
+    const [session, setSession] = useState(props.session ?? null);
+    const [loading, setLoading] = useState(!provided);
+    const refresh = useCallback(async () => {
+        setLoading(true);
+        try {
+            setSession(await fetchSession());
+        }
+        finally {
+            setLoading(false);
+        }
+    }, []);
+    useEffect(() => {
+        if (provided)
+            setSession(props.session ?? null);
+        else
+            void refresh();
+    }, [provided, props.session, refresh]);
+    const value = {
+        user: session?.user ?? NO_SESSION.user,
+        organization: session?.organization ?? NO_SESSION.organization,
+        authorization: session?.authorization ?? NO_SESSION.authorization,
+        loading,
+        refresh,
+    };
+    return createElement(Ctx.Provider, { value }, props.children);
+}
+export function useAuth() {
+    const ctx = useContext(Ctx);
+    if (!ctx)
+        throw new Error("useAuth() needs an <AuthProvider> above it");
+    return ctx;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@binary1702/auth",
-  "version": "0.2.5",
+  "version": "0.3.0",
   "description": "Email + password auth for Next.js. One command: npx @binary1702/auth",
   "type": "module",
   "repository": {
@@ -26,12 +26,18 @@
     "./next/proxy": {
       "types": "./dist/next/proxy.d.ts",
       "import": "./dist/next/proxy.js"
+    },
+    "./react": {
+      "types": "./dist/react/index.d.ts",
+      "import": "./dist/react/index.js"
     }
   },
   "files": [
     "dist",
     "INSTALL.md",
-    "PROMPT.md"
+    "PROMPT.md",
+    "AGENTS.md",
+    "CHANGELOG.md"
   ],
   "scripts": {
     "build": "tsc",
@@ -43,10 +49,17 @@
     "jose": "^6.2.5"
   },
   "peerDependencies": {
-    "next": ">=15.0.0"
+    "next": ">=15.0.0",
+    "react": ">=18"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
   },
   "devDependencies": {
     "@types/node": "^20",
+    "@types/react": "19.3.0",
     "next": "^16.3.2",
     "typescript": "^5.9.3"
   },