@bounc.ing/next 0.1.0 → 0.2.2

package/dist/client/provider.d.ts

@@ -3,6 +3,7 @@ import type { User } from '../types.js';
 interface BouncingContextValue {
     user: User | null;
     isLoading: boolean;
+    error: Error | null;
     domain: string;
 }
 export declare function useBouncingContext(): BouncingContextValue;

package/dist/client/provider.js

@@ -2,7 +2,7 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { createContext, useContext, useState, useEffect } from 'react';
 const BouncingContext = createContext({
-    user: null, isLoading: true, domain: '',
+    user: null, isLoading: true, error: null, domain: '',
 });
 export function useBouncingContext() {
     return useContext(BouncingContext);
@@ -10,6 +10,7 @@ export function useBouncingContext() {
 export function BouncingProvider({ domain, children }) {
     const [user, setUser] = useState(null);
     const [isLoading, setIsLoading] = useState(true);
+    const [error, setError] = useState(null);
     useEffect(() => {
         // Try hydration from server-rendered script tag
         const script = document.getElementById('__bouncing');
@@ -26,10 +27,23 @@ export function BouncingProvider({ domain, children }) {
         }
         // Fetch from /auth/me
         fetch(`https://${domain}/auth/me`, { credentials: 'include' })
-            .then((res) => res.ok ? res.json() : null)
-            .then((data) => setUser(data))
-            .catch(() => setUser(null))
+            .then(async (res) => {
+            if (res.status === 401) {
+                // Not authenticated — not an error, just no user
+                setUser(null);
+                return;
+            }
+            if (!res.ok) {
+                throw new Error(`/auth/me returned ${res.status}`);
+            }
+            const data = await res.json();
+            setUser(data);
+        })
+            .catch((e) => {
+            setError(e instanceof Error ? e : new Error(String(e)));
+            setUser(null);
+        })
             .finally(() => setIsLoading(false));
     }, [domain]);
-    return (_jsx(BouncingContext, { value: { user, isLoading, domain }, children: children }));
+    return (_jsx(BouncingContext, { value: { user, isLoading, error, domain }, children: children }));
 }

package/dist/client/use-user.d.ts

@@ -2,4 +2,5 @@ import type { User } from '../types.js';
 export declare function useUser(): {
     user: User | null;
     isLoading: boolean;
+    error: Error | null;
 };

package/dist/client/use-user.js

@@ -1,6 +1,6 @@
 'use client';
 import { useBouncingContext } from './provider.js';
 export function useUser() {
-    const { user, isLoading } = useBouncingContext();
-    return { user, isLoading };
+    const { user, isLoading, error } = useBouncingContext();
+    return { user, isLoading, error };
 }

package/dist/index.d.ts

@@ -2,3 +2,4 @@ export { createBouncing } from './server/config.js';
 export type { BouncingConfig, BouncingInstance, Session, User } from './server/config.js';
 export { createAdminClient } from './server/admin.js';
 export type { BouncingAdminClient } from './server/admin.js';
+export { BouncingError, BouncingUnauthenticatedError, BouncingNetworkError } from './types.js';

package/dist/index.js

@@ -1,2 +1,3 @@
 export { createBouncing } from './server/config.js';
 export { createAdminClient } from './server/admin.js';
+export { BouncingError, BouncingUnauthenticatedError, BouncingNetworkError } from './types.js';

package/dist/server/auth.d.ts

@@ -1,4 +1,6 @@
 import type { Session } from '../types.js';
+/** Clear the JWKS cache for a baseURL — call after verification failure to force re-fetch */
+export declare function invalidateJWKSCache(baseURL: string): void;
 /** Verify a JWT access token against the JWKS endpoint. Returns Session or null. */
 export declare function verifyAccessToken(token: string, baseURL: string): Promise<Session | null>;
 /** Exchange a refresh token for new tokens. Returns null on failure. */

package/dist/server/auth.js

@@ -1,13 +1,22 @@
 import { createRemoteJWKSet, jwtVerify } from 'jose';
+const JWKS_TTL_MS = 60 * 60 * 1000; // 1 hour
 const jwksCache = new Map();
 function getJWKS(baseURL) {
-    let jwks = jwksCache.get(baseURL);
-    if (!jwks) {
-        jwks = createRemoteJWKSet(new URL('/.well-known/jwks.json', baseURL));
-        jwksCache.set(baseURL, jwks);
+    const cached = jwksCache.get(baseURL);
+    if (cached && Date.now() - cached.fetchedAt < JWKS_TTL_MS) {
+        return cached.jwks;
     }
+    const jwks = createRemoteJWKSet(new URL('/.well-known/jwks.json', baseURL), {
+        cacheMaxAge: JWKS_TTL_MS,
+        cooldownDuration: 5000,
+    });
+    jwksCache.set(baseURL, { jwks, fetchedAt: Date.now() });
     return jwks;
 }
+/** Clear the JWKS cache for a baseURL — call after verification failure to force re-fetch */
+export function invalidateJWKSCache(baseURL) {
+    jwksCache.delete(baseURL);
+}
 /** Verify a JWT access token against the JWKS endpoint. Returns Session or null. */
 export async function verifyAccessToken(token, baseURL) {
     try {
@@ -28,6 +37,8 @@ export async function verifyAccessToken(token, baseURL) {
         };
     }
     catch {
+        // Invalidate cache on verification failure — signing keys may have rotated
+        invalidateJWKSCache(baseURL);
         return null;
     }
 }

package/dist/types.d.ts

@@ -21,3 +21,14 @@ export interface TokenResponse {
     refresh_token: string;
     expires_in: number;
 }
+/** Base class for SDK errors */
+export declare class BouncingError extends Error {
+    code: string;
+    constructor(message: string, code: string);
+}
+export declare class BouncingUnauthenticatedError extends BouncingError {
+    constructor(message?: string);
+}
+export declare class BouncingNetworkError extends BouncingError {
+    constructor(message: string);
+}

package/dist/types.js

@@ -1 +1,21 @@
-export {};
+/** Base class for SDK errors */
+export class BouncingError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'BouncingError';
+    }
+}
+export class BouncingUnauthenticatedError extends BouncingError {
+    constructor(message = 'Not authenticated') {
+        super(message, 'unauthenticated');
+        this.name = 'BouncingUnauthenticatedError';
+    }
+}
+export class BouncingNetworkError extends BouncingError {
+    constructor(message) {
+        super(message, 'network_error');
+        this.name = 'BouncingNetworkError';
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bounc.ing/next",
-  "version": "0.1.0",
+  "version": "0.2.2",
   "description": "Bouncing auth SDK for Next.js — auth for your app in 3 minutes",
   "type": "module",
   "exports": {
@@ -38,7 +38,7 @@
     "vitest": "^4.1.0"
   },
   "files": ["dist"],
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/scttfrdmn/bouncing-managed",