@cas-system/nextjs-cas-client 1.0.0 → 1.0.1

package/dist/cjs/server/cas-client.js

@@ -0,0 +1,226 @@
+"use strict";
+/**
+ * @module @cas-system/nextjs-cas-client/server/cas-client
+ * @description Server-side CAS client for token validation, generation, and
+ * SSO login URL construction.  Uses only the built-in `fetch` API — zero
+ * external dependencies.
+ *
+ * **IMPORTANT:** This module must only run on the server. It requires the
+ * `clientSecret` which must never be sent to the browser.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CasClient = void 0;
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Normalise a base URL by stripping a trailing slash.
+ * @internal
+ */
+function normaliseUrl(url) {
+    return url.replace(/\/+$/, '');
+}
+// ---------------------------------------------------------------------------
+// CasClient
+// ---------------------------------------------------------------------------
+/**
+ * Server-side CAS client.
+ *
+ * @example
+ * ```ts
+ * import { CasClient } from '@cas-system/nextjs-cas-client/server';
+ *
+ * const cas = new CasClient({
+ *   serverUrl: process.env.CAS_SERVER_URL!,
+ *   clientId: process.env.CAS_CLIENT_ID!,
+ *   clientSecret: process.env.CAS_CLIENT_SECRET!,
+ *   callbackUrl: process.env.CAS_CALLBACK_URL,
+ * });
+ *
+ * // Validate a token received from the callback
+ * const user = await cas.validateToken(token);
+ * ```
+ */
+class CasClient {
+    constructor(config) {
+        if (!config.serverUrl)
+            throw new Error('[CasClient] serverUrl is required');
+        if (!config.clientId)
+            throw new Error('[CasClient] clientId is required');
+        if (!config.clientSecret)
+            throw new Error('[CasClient] clientSecret is required');
+        this.config = {
+            ...config,
+            serverUrl: normaliseUrl(config.serverUrl),
+        };
+    }
+    // -----------------------------------------------------------------------
+    // Login URL
+    // -----------------------------------------------------------------------
+    /**
+     * Build the CAS SSO login URL.
+     *
+     * @param returnUrl - Optional URL to redirect back to after login.
+     *                    Falls back to `config.callbackUrl`.
+     * @returns Fully-qualified CAS login URL.
+     *
+     * @example
+     * ```ts
+     * const loginUrl = cas.getLoginUrl('/dashboard');
+     * redirect(loginUrl);
+     * ```
+     */
+    getLoginUrl(returnUrl) {
+        const callbackUrl = returnUrl ?? this.config.callbackUrl ?? '/api/cas/callback';
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            response_type: 'token',
+            redirect_uri: callbackUrl,
+        });
+        return `${this.config.serverUrl}/sso/login?${params.toString()}`;
+    }
+    // -----------------------------------------------------------------------
+    // Token Validation
+    // -----------------------------------------------------------------------
+    /**
+     * Validate a JWT token with the CAS server (server-to-server call).
+     *
+     * @param token - The JWT token received from the CAS callback.
+     * @returns The authenticated {@link CasUser} or `null` if invalid.
+     *
+     * @example
+     * ```ts
+     * const user = await cas.validateToken(token);
+     * if (!user) throw new Error('Invalid token');
+     * ```
+     */
+    async validateToken(token) {
+        try {
+            const res = await fetch(`${this.config.serverUrl}/api/validate-token`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    token,
+                    client_id: this.config.clientId,
+                    client_secret: this.config.clientSecret,
+                }),
+                cache: 'no-store',
+            });
+            if (!res.ok) {
+                console.error(`[CasClient] validateToken failed: ${res.status} ${res.statusText}`);
+                return null;
+            }
+            const data = (await res.json());
+            if (!data.valid || !data.user)
+                return null;
+            return data.user;
+        }
+        catch (err) {
+            console.error('[CasClient] validateToken error:', err);
+            return null;
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Token Generation
+    // -----------------------------------------------------------------------
+    /**
+     * Generate a JWT token for the given username (server-to-server).
+     *
+     * This is useful for machine-to-machine auth flows or impersonation
+     * when the calling service already knows the target user.
+     *
+     * @param username - The username to issue a token for.
+     * @returns The JWT string or `null` on failure.
+     */
+    async generateToken(username) {
+        try {
+            const res = await fetch(`${this.config.serverUrl}/api/sso/token`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    client_id: this.config.clientId,
+                    client_secret: this.config.clientSecret,
+                    username,
+                }),
+                cache: 'no-store',
+            });
+            if (!res.ok) {
+                console.error(`[CasClient] generateToken failed: ${res.status} ${res.statusText}`);
+                return null;
+            }
+            const data = (await res.json());
+            if (!data.token)
+                return null;
+            return data.token;
+        }
+        catch (err) {
+            console.error('[CasClient] generateToken error:', err);
+            return null;
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Logout
+    // -----------------------------------------------------------------------
+    /**
+     * Notify the CAS server of a logout event.
+     *
+     * @param token - Optional token to invalidate on the server.
+     * @returns `true` if the server acknowledged the logout.
+     */
+    async logout(token) {
+        try {
+            const headers = {
+                'Content-Type': 'application/json',
+            };
+            if (token) {
+                headers['Authorization'] = `Bearer ${token}`;
+            }
+            const res = await fetch(`${this.config.serverUrl}/api/logout`, {
+                method: 'POST',
+                headers,
+                body: JSON.stringify({
+                    client_id: this.config.clientId,
+                }),
+                cache: 'no-store',
+            });
+            return res.ok;
+        }
+        catch (err) {
+            console.error('[CasClient] logout error:', err);
+            return false;
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Role helpers
+    // -----------------------------------------------------------------------
+    /**
+     * Check whether a user has **all** of the specified roles.
+     *
+     * @param user  - The CAS user.
+     * @param roles - Required roles.
+     * @returns `true` if the user possesses every role.
+     */
+    static hasRoles(user, roles) {
+        if (!user.roles)
+            return roles.length === 0;
+        return roles.every((r) => user.roles.includes(r));
+    }
+    /**
+     * Check whether a user has **at least one** of the specified roles.
+     *
+     * @param user  - The CAS user.
+     * @param roles - Roles to check.
+     * @returns `true` if the user possesses any of the roles.
+     */
+    static hasAnyRole(user, roles) {
+        if (!user.roles)
+            return false;
+        return roles.some((r) => user.roles.includes(r));
+    }
+}
+exports.CasClient = CasClient;
+//# sourceMappingURL=cas-client.js.map

package/dist/cjs/server/cas-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cas-client.js","sourceRoot":"","sources":["../../../src/server/cas-client.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AASH,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,SAAS;IAGpB,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,YAAY;YACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAE1D,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,MAAM;YACT,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAE1E;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,SAAkB;QAC5B,MAAM,WAAW,GACf,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,mBAAmB,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,OAAO;YACtB,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,cAAc,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,qBAAqB,EAC7C;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK;oBACL,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;iBACxC,CAAC;gBACF,KAAK,EAAE,UAAU;aAClB,CACF,CAAC;YAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CACX,qCAAqC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CACpE,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAE3C,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,gBAAgB,EACxC;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;oBACvC,QAAQ;iBACT,CAAC;gBACF,KAAK,EAAE,UAAU;aAClB,CACF,CAAC;YAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CACX,qCAAqC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CACpE,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YAE7B,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,SAAS;IACT,0EAA0E;IAE1E;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAA2B;gBACtC,cAAc,EAAE,kBAAkB;aACnC,CAAC;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;YAC/C,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,aAAa,EACrC;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAChC,CAAC;gBACF,KAAK,EAAE,UAAU;aAClB,CACF,CAAC;YAEF,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,eAAe;IACf,0EAA0E;IAE1E;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,CAAC,IAAa,EAAE,KAAe;QAC5C,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,UAAU,CAAC,IAAa,EAAE,KAAe;QAC9C,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;CACF;AA/MD,8BA+MC"}

package/dist/{server → cjs/server}/index.d.ts

@@ -6,7 +6,7 @@
  * the cookie-based session helpers.  These modules require the
  * `clientSecret` / cookie signing secret and must never run in the browser.
  */
-export { CasClient } from './cas-client';
-export { getCasSession, setCasSession, clearCasSession, withCasAuth, getCasSessionFromRequest, } from './auth';
-export type { CasConfig, CasServerConfig, CasUser, CasSessionData, CasHandlerConfig, } from '../types';
+export { CasClient } from './cas-client.js';
+export { getCasSession, setCasSession, clearCasSession, withCasAuth, getCasSessionFromRequest, } from './auth.js';
+export type { CasConfig, CasServerConfig, CasUser, CasSessionData, CasHandlerConfig, } from '../types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,aAAa,EACb,aAAa,EACb,eAAe,EACf,WAAW,EACX,wBAAwB,GACzB,MAAM,WAAW,CAAC;AAEnB,YAAY,EACV,SAAS,EACT,eAAe,EACf,OAAO,EACP,cAAc,EACd,gBAAgB,GACjB,MAAM,aAAa,CAAC"}

package/dist/cjs/server/index.js

@@ -0,0 +1,20 @@
+"use strict";
+/**
+ * @module @cas-system/nextjs-cas-client/server
+ * @description Server-only entry point for the Next.js CAS Client SDK.
+ *
+ * Exposes the {@link CasClient} (token validation / generation / logout) and
+ * the cookie-based session helpers.  These modules require the
+ * `clientSecret` / cookie signing secret and must never run in the browser.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCasSessionFromRequest = exports.withCasAuth = exports.clearCasSession = exports.setCasSession = exports.getCasSession = exports.CasClient = void 0;
+var cas_client_js_1 = require("./cas-client.js");
+Object.defineProperty(exports, "CasClient", { enumerable: true, get: function () { return cas_client_js_1.CasClient; } });
+var auth_js_1 = require("./auth.js");
+Object.defineProperty(exports, "getCasSession", { enumerable: true, get: function () { return auth_js_1.getCasSession; } });
+Object.defineProperty(exports, "setCasSession", { enumerable: true, get: function () { return auth_js_1.setCasSession; } });
+Object.defineProperty(exports, "clearCasSession", { enumerable: true, get: function () { return auth_js_1.clearCasSession; } });
+Object.defineProperty(exports, "withCasAuth", { enumerable: true, get: function () { return auth_js_1.withCasAuth; } });
+Object.defineProperty(exports, "getCasSessionFromRequest", { enumerable: true, get: function () { return auth_js_1.getCasSessionFromRequest; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,iDAA4C;AAAnC,0GAAA,SAAS,OAAA;AAClB,qCAMmB;AALjB,wGAAA,aAAa,OAAA;AACb,wGAAA,aAAa,OAAA;AACb,0GAAA,eAAe,OAAA;AACf,sGAAA,WAAW,OAAA;AACX,mHAAA,wBAAwB,OAAA"}

package/dist/cjs/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,SAAS;IACxB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAElB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,OAAO;IACtB,qCAAqC;IACrC,EAAE,EAAE,MAAM,CAAC;IAEX,sBAAsB;IACtB,QAAQ,EAAE,MAAM,CAAC;IAEjB,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IAEd,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAMD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,8BAA8B;IAC9B,IAAI,EAAE,OAAO,CAAC;IAEd,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IAEd,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;IAEzB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAErB,6DAA6D;IAC7D,SAAS,EAAE,OAAO,CAAC;IAEnB,0CAA0C;IAC1C,eAAe,EAAE,OAAO,CAAC;IAEzB,iDAAiD;IACjD,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAEpB,kDAAkD;IAClD,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAEpC,oDAAoD;IACpD,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B,4CAA4C;IAC5C,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qCAAqC;IACrC,GAAG,EAAE,eAAe,CAAC;IAErB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/cjs/types.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * @module @cas-system/nextjs-cas-client/types
+ * @description Core TypeScript type definitions for the CAS Client SDK.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cjs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/dist/esm/CasProvider.d.ts

@@ -0,0 +1,63 @@
+/**
+ * @module @cas-system/nextjs-cas-client/CasProvider
+ * @description Client-side React context provider that manages CAS
+ * authentication state.  Fetches the current session from
+ * `/api/cas/user` on mount and exposes login / logout / refresh actions.
+ *
+ * @example
+ * ```tsx
+ * // app/layout.tsx
+ * import { CasProvider } from '@cas-system/nextjs-cas-client';
+ *
+ * export default function RootLayout({ children }: { children: React.ReactNode }) {
+ *   return (
+ *     <html>
+ *       <body>
+ *         <CasProvider>{children}</CasProvider>
+ *       </body>
+ *     </html>
+ *   );
+ * }
+ * ```
+ */
+import React from 'react';
+import type { CasAuthContext } from './types.js';
+/** Props accepted by {@link CasProvider}. */
+export interface CasProviderProps {
+    children: React.ReactNode;
+    /**
+     * Custom endpoint that returns the current user JSON.
+     * @default '/api/cas/user'
+     */
+    userEndpoint?: string;
+    /**
+     * Custom endpoint for logout.
+     * @default '/api/cas/logout'
+     */
+    logoutEndpoint?: string;
+    /**
+     * CAS login URL (client-side redirect).
+     * When omitted the provider builds it from `casServerUrl` and `casClientId`.
+     */
+    loginUrl?: string;
+    /** CAS server URL — used to build the login redirect when `loginUrl` is not provided. */
+    casServerUrl?: string;
+    /** CAS client ID — used to build the login redirect when `loginUrl` is not provided. */
+    casClientId?: string;
+    /** Callback URL — used to build the login redirect when `loginUrl` is not provided. */
+    casCallbackUrl?: string;
+}
+/**
+ * Client-side authentication provider.
+ *
+ * Wrap your application (typically in `app/layout.tsx`) with this provider to
+ * make CAS auth state available to all client components via the
+ * {@link useCasAuth} and {@link useCasUser} hooks.
+ */
+export declare function CasProvider({ children, userEndpoint, logoutEndpoint, loginUrl: loginUrlProp, casServerUrl, casClientId, casCallbackUrl, }: CasProviderProps): React.JSX.Element;
+/**
+ * Access the CAS auth context.  Must be called inside a `<CasProvider>`.
+ * @throws If used outside of a `CasProvider`.
+ */
+export declare function useCasAuthContext(): CasAuthContext;
+//# sourceMappingURL=CasProvider.d.ts.map

package/dist/esm/CasProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CasProvider.d.ts","sourceRoot":"","sources":["../../src/CasProvider.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAON,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EAAE,cAAc,EAAW,MAAM,YAAY,CAAC;AAY1D,6CAA6C;AAC7C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAE1B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,EAC1B,QAAQ,EACR,YAA8B,EAC9B,cAAkC,EAClC,QAAQ,EAAE,YAAY,EACtB,YAAY,EACZ,WAAW,EACX,cAAc,GACf,EAAE,gBAAgB,qBA8GlB;AAMD;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CASlD"}

package/dist/esm/CasProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CasProvider.js","sourceRoot":"","sources":["../../src/CasProvider.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAc,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,OAAO,EACP,QAAQ,GACT,MAAM,OAAO,CAAC;AAGf,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,UAAU,GAAG,aAAa,CAA6B,SAAS,CAAC,CAAC;AAsCxE,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,EAC1B,QAAQ,EACR,YAAY,GAAG,eAAe,EAC9B,cAAc,GAAG,iBAAiB,EAClC,QAAQ,EAAE,YAAY,EACtB,YAAY,EACZ,WAAW,EACX,cAAc,GACG;IACjB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAiB,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,0EAA0E;IAC1E,wBAAwB;IACxB,0EAA0E;IAE1E,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACvC,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;gBACpC,WAAW,EAAE,aAAa;gBAC1B,KAAK,EAAE,UAAU;aAClB,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,QAAQ,CACN,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CACtE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEnB,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,SAAS,EAAE,CAAC;IACnB,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB,0EAA0E;IAC1E,UAAU;IACV,0EAA0E;IAE1E,MAAM,KAAK,GAAG,WAAW,CACvB,CAAC,SAAkB,EAAE,EAAE;QACrB,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;YAClC,IAAI,SAAS;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC5D,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;QAED,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;YAChC,MAAM,QAAQ,GACZ,cAAc;gBACd,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,mBAAmB,CAAC;YAE/C,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,SAAS;gBAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAE3E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;gBACjC,SAAS,EAAE,WAAW;gBACtB,aAAa,EAAE,OAAO;gBACtB,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;aAC5C,CAAC,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,4CAA4C;QAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC,EACD,CAAC,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,CAAC,CAC1D,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,cAAc,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC;IAC7B,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAErB,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB,0EAA0E;IAC1E,yBAAyB;IACzB,0EAA0E;IAE1E,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC;QACL,IAAI;QACJ,SAAS;QACT,eAAe,EAAE,CAAC,CAAC,IAAI;QACvB,KAAK;QACL,KAAK;QACL,MAAM;QACN,OAAO;KACR,CAAC,EACF,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CACjD,CAAC;IAEF,OAAO,KAAC,UAAU,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAuB,CAAC;AAC7E,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,yDAAyD;YACvD,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/esm/components/CasLoginButton.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @module @cas-system/nextjs-cas-client/components/CasLoginButton
+ * @description A ready-to-use login button that redirects to the CAS SSO
+ * login page when clicked.
+ *
+ * @example
+ * ```tsx
+ * import { CasLoginButton } from '@cas-system/nextjs-cas-client';
+ *
+ * export default function Header() {
+ *   return (
+ *     <nav>
+ *       <CasLoginButton>Sign in with SSO</CasLoginButton>
+ *     </nav>
+ *   );
+ * }
+ * ```
+ */
+import React from 'react';
+/** Props for {@link CasLoginButton}. */
+export interface CasLoginButtonProps extends Omit<React.ButtonHTMLAttributes<HTMLButtonElement>, 'onClick'> {
+    children?: React.ReactNode;
+    /**
+     * URL to return to after login.
+     * Defaults to the current page.
+     */
+    returnUrl?: string;
+}
+/**
+ * A simple button that triggers the CAS login flow.
+ *
+ * When the user is already authenticated the button renders nothing by
+ * default.  Customise this via the {@link CasLoginButtonProps}.
+ */
+export declare function CasLoginButton({ children, returnUrl, ...buttonProps }: CasLoginButtonProps): React.JSX.Element | null;
+//# sourceMappingURL=CasLoginButton.d.ts.map

package/dist/esm/components/CasLoginButton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CasLoginButton.d.ts","sourceRoot":"","sources":["../../../src/components/CasLoginButton.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,wCAAwC;AACxC,MAAM,WAAW,mBACf,SAAQ,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC;IACtE,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAE3B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,EAC7B,QAAoB,EACpB,SAAS,EACT,GAAG,WAAW,EACf,EAAE,mBAAmB,4BA8BrB"}

package/dist/{components → esm/components}/CasLoginButton.js

@@ -1,6 +1,6 @@
 'use client';
 import { jsx as _jsx } from "react/jsx-runtime";
-import { useCasAuthContext } from '../CasProvider';
+import { useCasAuthContext } from '../CasProvider.js';
 /**
  * A simple button that triggers the CAS login flow.
  *

package/dist/esm/components/CasLoginButton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CasLoginButton.js","sourceRoot":"","sources":["../../../src/components/CasLoginButton.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAsBb,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AActD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,QAAQ,GAAG,SAAS,EACpB,SAAS,EACT,GAAG,WAAW,EACM;IACpB,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAElE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CACL,oBAAY,WAAW,EAAE,QAAQ,oCAExB,CACV,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,oBACM,WAAW,EACf,OAAO,EAAE,GAAG,EAAE,CACZ,KAAK,CACH,SAAS;YACP,CAAC,OAAO,MAAM,KAAK,WAAW;gBAC5B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACnD,CAAC,CAAC,SAAS,CAAC,CACjB,YAGF,QAAQ,GACF,CACV,CAAC;AACJ,CAAC"}

package/dist/esm/components/CasProtectedRoute.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @module @cas-system/nextjs-cas-client/components/CasProtectedRoute
+ * @description Client component that guards its children behind CAS
+ * authentication.  Shows a loading state while the session is being
+ * fetched and redirects to login when no valid session exists.
+ *
+ * @example
+ * ```tsx
+ * import { CasProtectedRoute } from '@cas-system/nextjs-cas-client';
+ *
+ * export default function SecretPage() {
+ *   return (
+ *     <CasProtectedRoute>
+ *       <h1>Secret Content</h1>
+ *     </CasProtectedRoute>
+ *   );
+ * }
+ * ```
+ */
+import React from 'react';
+/** Props for {@link CasProtectedRoute}. */
+export interface CasProtectedRouteProps {
+    children: React.ReactNode;
+    /**
+     * Optional list of required roles.  The user must possess **all** of
+     * these roles to see the content.
+     */
+    roles?: string[];
+    /**
+     * Custom loading element shown while the session is being fetched.
+     * @default A simple "Loading…" paragraph.
+     */
+    loadingFallback?: React.ReactNode;
+    /**
+     * Custom element shown when the user is authenticated but lacks the
+     * required roles.
+     * @default A simple "Access denied" paragraph.
+     */
+    unauthorizedFallback?: React.ReactNode;
+    /**
+     * URL to redirect to when not authenticated.
+     * If omitted the provider's `login()` action is invoked instead.
+     */
+    redirectTo?: string;
+}
+/**
+ * Client component that only renders its children when the user is
+ * authenticated (and optionally has the required roles).
+ */
+export declare function CasProtectedRoute({ children, roles, loadingFallback, unauthorizedFallback, redirectTo, }: CasProtectedRouteProps): React.JSX.Element;
+//# sourceMappingURL=CasProtectedRoute.d.ts.map

package/dist/esm/components/CasProtectedRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CasProtectedRoute.d.ts","sourceRoot":"","sources":["../../../src/components/CasProtectedRoute.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAoB,MAAM,OAAO,CAAC;AAGzC,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAE1B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjB;;;OAGG;IACH,eAAe,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAElC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAEvC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,QAAQ,EACR,KAAK,EACL,eAAe,EACf,oBAAoB,EACpB,UAAU,GACX,EAAE,sBAAsB,qBAmCxB"}

package/dist/{components → esm/components}/CasProtectedRoute.js

@@ -20,7 +20,7 @@ import { jsx as _jsx, Fragment as _Fragment } from "react/jsx-runtime";
  * ```
  */
 import { useEffect } from 'react';
-import { useCasAuthContext } from '../CasProvider';
+import { useCasAuthContext } from '../CasProvider.js';
 /**
  * Client component that only renders its children when the user is
  * authenticated (and optionally has the required roles).

package/dist/esm/components/CasProtectedRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CasProtectedRoute.js","sourceRoot":"","sources":["../../../src/components/CasProtectedRoute.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAc,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAgCtD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,QAAQ,EACR,KAAK,EACL,eAAe,EACf,oBAAoB,EACpB,UAAU,GACa;IACvB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAExE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,SAAS,IAAI,CAAC,eAAe,EAAE,CAAC;YACnC,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,UAAU,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;IAEpD,gBAAgB;IAChB,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,4BAAG,eAAe,IAAI,wCAAe,GAAI,CAAC;IACnD,CAAC;IAED,iDAAiD;IACjD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,4BAAG,eAAe,IAAI,qDAA4B,GAAI,CAAC;IAChE,CAAC;IAED,aAAa;IACb,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,CACL,4BAAG,oBAAoB,IAAI,yEAAgD,GAAI,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,4BAAG,QAAQ,GAAI,CAAC;AACzB,CAAC"}

package/dist/esm/handlers/callback.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @module @cas-system/nextjs-cas-client/handlers/callback
+ * @description API route handler for the CAS SSO callback endpoint.
+ *
+ * After the CAS server authenticates the user it redirects to
+ * `{callbackUrl}?token=JWT_TOKEN`.  This handler:
+ *
+ * 1. Extracts the `token` query parameter.
+ * 2. Validates it server-side via the CAS `/api/validate-token` endpoint.
+ * 3. Sets an encrypted session cookie.
+ * 4. Redirects the user to the intended URL (or `/`).
+ *
+ * @example
+ * ```ts
+ * // app/api/cas/callback/route.ts
+ * import { createCallbackHandler } from '@cas-system/nextjs-cas-client/handlers';
+ *
+ * const handler = createCallbackHandler({
+ *   cas: {
+ *     serverUrl: process.env.CAS_SERVER_URL!,
+ *     clientId: process.env.CAS_CLIENT_ID!,
+ *     clientSecret: process.env.CAS_CLIENT_SECRET!,
+ *   },
+ *   afterLoginUrl: '/dashboard',
+ * });
+ *
+ * export { handler as GET };
+ * ```
+ */
+import { NextRequest, NextResponse } from 'next/server.js';
+import type { CasHandlerConfig } from '../types.js';
+/**
+ * Create a GET handler for `/api/cas/callback`.
+ *
+ * @param config - Handler configuration including CAS server details.
+ * @returns A Next.js App Router GET handler.
+ */
+export declare function createCallbackHandler(config: CasHandlerConfig): (request: NextRequest) => Promise<NextResponse>;
+//# sourceMappingURL=callback.d.ts.map

package/dist/esm/handlers/callback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback.d.ts","sourceRoot":"","sources":["../../../src/handlers/callback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,gBAAgB,IAIlC,SAAS,WAAW,KAAG,OAAO,CAAC,YAAY,CAAC,CA4BvE"}

package/dist/{handlers → esm/handlers}/callback.js

@@ -27,10 +27,10 @@
  * export { handler as GET };
  * ```
  */
-import { NextResponse } from 'next/server';
-import { cookies } from 'next/headers';
-import { CasClient } from '../server/cas-client';
-import { setCasSession } from '../server/auth';
+import { NextResponse } from 'next/server.js';
+import { cookies } from 'next/headers.js';
+import { CasClient } from '../server/cas-client.js';
+import { setCasSession } from '../server/auth.js';
 /**
  * Create a GET handler for `/api/cas/callback`.
  *

package/dist/esm/handlers/callback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback.js","sourceRoot":"","sources":["../../../src/handlers/callback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAe,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAwB;IAC5D,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC;IAElD,OAAO,KAAK,UAAU,GAAG,CAAC,OAAoB;QAC5C,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QACzC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,aAAa,CAAC;QAEjE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAClE,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,iCAAiC;QACjC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,OAAO,YAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CAAC,4BAA4B,EAAE,OAAO,CAAC,GAAG,CAAC,CACnD,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,WAAW,GAAG,MAAM,OAAO,EAAE,CAAC;QACpC,MAAM,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE9C,+BAA+B;QAC/B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/handlers/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @module @cas-system/nextjs-cas-client/handlers
+ * @description Re-exports all API route handler factories.
+ */
+export { createCallbackHandler } from './callback.js';
+export { createLogoutHandler } from './logout.js';
+export { createUserHandler } from './user.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/handlers/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC"}

package/dist/esm/handlers/index.js

@@ -0,0 +1,8 @@
+/**
+ * @module @cas-system/nextjs-cas-client/handlers
+ * @description Re-exports all API route handler factories.
+ */
+export { createCallbackHandler } from './callback.js';
+export { createLogoutHandler } from './logout.js';
+export { createUserHandler } from './user.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/handlers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/handlers/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC"}

package/dist/esm/handlers/logout.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @module @cas-system/nextjs-cas-client/handlers/logout
+ * @description API route handler for the CAS logout endpoint.
+ *
+ * 1. Reads the session to obtain the JWT token.
+ * 2. Notifies the CAS server of the logout.
+ * 3. Clears the session cookies.
+ * 4. Redirects the user (or returns 200 for API calls).
+ *
+ * @example
+ * ```ts
+ * // app/api/cas/logout/route.ts
+ * import { createLogoutHandler } from '@cas-system/nextjs-cas-client/handlers';
+ *
+ * const handler = createLogoutHandler({
+ *   cas: {
+ *     serverUrl: process.env.CAS_SERVER_URL!,
+ *     clientId: process.env.CAS_CLIENT_ID!,
+ *     clientSecret: process.env.CAS_CLIENT_SECRET!,
+ *   },
+ *   afterLogoutUrl: '/',
+ * });
+ *
+ * export { handler as POST };
+ * ```
+ */
+import { NextRequest, NextResponse } from 'next/server.js';
+import type { CasHandlerConfig } from '../types.js';
+/**
+ * Create a POST handler for `/api/cas/logout`.
+ *
+ * @param config - Handler configuration.
+ * @returns A Next.js App Router POST handler.
+ */
+export declare function createLogoutHandler(config: CasHandlerConfig): (request: NextRequest) => Promise<NextResponse>;
+//# sourceMappingURL=logout.d.ts.map

package/dist/esm/handlers/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../../src/handlers/logout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,IAI/B,SAAS,WAAW,KAAG,OAAO,CAAC,YAAY,CAAC,CAyBxE"}

package/dist/{handlers → esm/handlers}/logout.js

@@ -24,10 +24,10 @@
  * export { handler as POST };
  * ```
  */
-import { NextResponse } from 'next/server';
-import { cookies } from 'next/headers';
-import { CasClient } from '../server/cas-client';
-import { getCasSession, clearCasSession } from '../server/auth';
+import { NextResponse } from 'next/server.js';
+import { cookies } from 'next/headers.js';
+import { CasClient } from '../server/cas-client.js';
+import { getCasSession, clearCasSession } from '../server/auth.js';
 /**
  * Create a POST handler for `/api/cas/logout`.
  *