@chemmangat/msal-next 3.0.4 → 3.0.6

package/dist/index.d.mts

@@ -3,7 +3,6 @@ import { Configuration, LogLevel, IPublicClientApplication, PublicClientApplicat
 export { AccountInfo } from '@azure/msal-browser';
 import { ReactNode, CSSProperties, Component, ErrorInfo, ComponentType } from 'react';
 import { NextRequest, NextResponse } from 'next/server';
-export { ServerSession } from './server.mjs';
 export { useAccount, useIsAuthenticated, useMsal } from '@azure/msal-react';
 
 /**
@@ -912,4 +911,24 @@ interface AuthMiddlewareConfig {
  */
 declare function createAuthMiddleware(config?: AuthMiddlewareConfig): (request: NextRequest) => Promise<NextResponse<unknown>>;
 
-export { AuthGuard, type AuthGuardProps, type AuthMiddlewareConfig, AuthStatus, type AuthStatusProps, type CustomTokenClaims, type DebugLoggerConfig, ErrorBoundary, type ErrorBoundaryProps, type GraphApiOptions, MSALProvider, MicrosoftSignInButton, type MicrosoftSignInButtonProps, type MsalAuthConfig, MsalAuthProvider, type MsalAuthProviderProps, type RetryConfig, SignOutButton, type SignOutButtonProps, type UseGraphApiReturn, type UseMsalAuthReturn, type UseRolesReturn, type UseUserProfileReturn, UserAvatar, type UserAvatarProps, type UserProfile, type ValidatedAccountData, type WithAuthOptions, createAuthMiddleware, createMsalConfig, createRetryWrapper, createScopedLogger, getDebugLogger, getMsalInstance, isValidAccountData, isValidRedirectUri, isValidScope, retryWithBackoff, safeJsonParse, sanitizeError, useGraphApi, useMsalAuth, useRoles, useUserProfile, validateScopes, withAuth };
+interface ServerSession {
+    /**
+     * Whether user is authenticated
+     */
+    isAuthenticated: boolean;
+    /**
+     * User's account ID from MSAL cache
+     */
+    accountId?: string;
+    /**
+     * User's username/email
+     */
+    username?: string;
+    /**
+     * Access token (if available in cookie)
+     * @deprecated Storing tokens in cookies is not recommended for security reasons
+     */
+    accessToken?: string;
+}
+
+export { AuthGuard, type AuthGuardProps, type AuthMiddlewareConfig, AuthStatus, type AuthStatusProps, type CustomTokenClaims, type DebugLoggerConfig, ErrorBoundary, type ErrorBoundaryProps, type GraphApiOptions, MSALProvider, MicrosoftSignInButton, type MicrosoftSignInButtonProps, type MsalAuthConfig, MsalAuthProvider, type MsalAuthProviderProps, type RetryConfig, type ServerSession, SignOutButton, type SignOutButtonProps, type UseGraphApiReturn, type UseMsalAuthReturn, type UseRolesReturn, type UseUserProfileReturn, UserAvatar, type UserAvatarProps, type UserProfile, type ValidatedAccountData, type WithAuthOptions, createAuthMiddleware, createMsalConfig, createRetryWrapper, createScopedLogger, getDebugLogger, getMsalInstance, isValidAccountData, isValidRedirectUri, isValidScope, retryWithBackoff, safeJsonParse, sanitizeError, useGraphApi, useMsalAuth, useRoles, useUserProfile, validateScopes, withAuth };

package/dist/index.d.ts

@@ -3,7 +3,6 @@ import { Configuration, LogLevel, IPublicClientApplication, PublicClientApplicat
 export { AccountInfo } from '@azure/msal-browser';
 import { ReactNode, CSSProperties, Component, ErrorInfo, ComponentType } from 'react';
 import { NextRequest, NextResponse } from 'next/server';
-export { ServerSession } from './server.js';
 export { useAccount, useIsAuthenticated, useMsal } from '@azure/msal-react';
 
 /**
@@ -912,4 +911,24 @@ interface AuthMiddlewareConfig {
  */
 declare function createAuthMiddleware(config?: AuthMiddlewareConfig): (request: NextRequest) => Promise<NextResponse<unknown>>;
 
-export { AuthGuard, type AuthGuardProps, type AuthMiddlewareConfig, AuthStatus, type AuthStatusProps, type CustomTokenClaims, type DebugLoggerConfig, ErrorBoundary, type ErrorBoundaryProps, type GraphApiOptions, MSALProvider, MicrosoftSignInButton, type MicrosoftSignInButtonProps, type MsalAuthConfig, MsalAuthProvider, type MsalAuthProviderProps, type RetryConfig, SignOutButton, type SignOutButtonProps, type UseGraphApiReturn, type UseMsalAuthReturn, type UseRolesReturn, type UseUserProfileReturn, UserAvatar, type UserAvatarProps, type UserProfile, type ValidatedAccountData, type WithAuthOptions, createAuthMiddleware, createMsalConfig, createRetryWrapper, createScopedLogger, getDebugLogger, getMsalInstance, isValidAccountData, isValidRedirectUri, isValidScope, retryWithBackoff, safeJsonParse, sanitizeError, useGraphApi, useMsalAuth, useRoles, useUserProfile, validateScopes, withAuth };
+interface ServerSession {
+    /**
+     * Whether user is authenticated
+     */
+    isAuthenticated: boolean;
+    /**
+     * User's account ID from MSAL cache
+     */
+    accountId?: string;
+    /**
+     * User's username/email
+     */
+    username?: string;
+    /**
+     * Access token (if available in cookie)
+     * @deprecated Storing tokens in cookies is not recommended for security reasons
+     */
+    accessToken?: string;
+}
+
+export { AuthGuard, type AuthGuardProps, type AuthMiddlewareConfig, AuthStatus, type AuthStatusProps, type CustomTokenClaims, type DebugLoggerConfig, ErrorBoundary, type ErrorBoundaryProps, type GraphApiOptions, MSALProvider, MicrosoftSignInButton, type MicrosoftSignInButtonProps, type MsalAuthConfig, MsalAuthProvider, type MsalAuthProviderProps, type RetryConfig, type ServerSession, SignOutButton, type SignOutButtonProps, type UseGraphApiReturn, type UseMsalAuthReturn, type UseRolesReturn, type UseUserProfileReturn, UserAvatar, type UserAvatarProps, type UserProfile, type ValidatedAccountData, type WithAuthOptions, createAuthMiddleware, createMsalConfig, createRetryWrapper, createScopedLogger, getDebugLogger, getMsalInstance, isValidAccountData, isValidRedirectUri, isValidScope, retryWithBackoff, safeJsonParse, sanitizeError, useGraphApi, useMsalAuth, useRoles, useUserProfile, validateScopes, withAuth };

package/dist/index.js

@@ -1,3 +1,4 @@
+"use client";
 "use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -207,27 +208,34 @@ function MsalAuthProvider({ children, loadingComponent, onInitialized, ...config
         const msalConfig = createMsalConfig(config);
         const instance = new import_msal_browser2.PublicClientApplication(msalConfig);
         await instance.initialize();
-        try {
-          const response = await instance.handleRedirectPromise();
-          if (response) {
-            if (config.enableLogging) {
-              console.log("[MSAL] Redirect authentication successful");
+        const isInPopup = window.opener && window.opener !== window;
+        if (!isInPopup) {
+          try {
+            const response = await instance.handleRedirectPromise();
+            if (response) {
+              if (config.enableLogging) {
+                console.log("[MSAL] Redirect authentication successful");
+              }
+              if (response.account) {
+                instance.setActiveAccount(response.account);
+              }
             }
-            if (response.account) {
-              instance.setActiveAccount(response.account);
+          } catch (redirectError) {
+            if (redirectError?.errorCode === "no_token_request_cache_error") {
+              if (config.enableLogging) {
+                console.log("[MSAL] No pending redirect found (this is normal)");
+              }
+            } else if (redirectError?.errorCode === "user_cancelled") {
+              if (config.enableLogging) {
+                console.log("[MSAL] User cancelled authentication");
+              }
+            } else {
+              console.error("[MSAL] Redirect handling error:", redirectError);
             }
           }
-        } catch (redirectError) {
-          if (redirectError?.errorCode === "no_token_request_cache_error") {
-            if (config.enableLogging) {
-              console.log("[MSAL] No pending redirect found (this is normal)");
-            }
-          } else if (redirectError?.errorCode === "user_cancelled") {
-            if (config.enableLogging) {
-              console.log("[MSAL] User cancelled authentication");
-            }
-          } else {
-            console.error("[MSAL] Redirect handling error:", redirectError);
+        } else {
+          if (config.enableLogging) {
+            console.log("[MSAL] Running in popup window, skipping redirect handling");
           }
         }
         const accounts = instance.getAllAccounts();

package/dist/index.mjs

@@ -1,11 +1,4 @@
-import {
-  isValidAccountData,
-  isValidRedirectUri,
-  isValidScope,
-  safeJsonParse,
-  sanitizeError,
-  validateScopes
-} from "./chunk-AD43IVG7.mjs";
+"use client";
 
 // src/components/MsalAuthProvider.tsx
 import { MsalProvider } from "@azure/msal-react";
@@ -14,6 +7,51 @@ import { useEffect, useState, useRef } from "react";
 
 // src/utils/createMsalConfig.ts
 import { LogLevel } from "@azure/msal-browser";
+
+// src/utils/validation.ts
+function safeJsonParse(jsonString, validator) {
+  try {
+    const parsed = JSON.parse(jsonString);
+    if (validator(parsed)) {
+      return parsed;
+    }
+    console.warn("[Validation] JSON validation failed");
+    return null;
+  } catch (error) {
+    console.error("[Validation] JSON parse error:", error);
+    return null;
+  }
+}
+function isValidAccountData(data) {
+  return typeof data === "object" && data !== null && typeof data.homeAccountId === "string" && data.homeAccountId.length > 0 && typeof data.username === "string" && data.username.length > 0 && (data.name === void 0 || typeof data.name === "string");
+}
+function sanitizeError(error) {
+  if (error instanceof Error) {
+    const message = error.message;
+    const sanitized = message.replace(/[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}/g, "[TOKEN_REDACTED]").replace(/[a-f0-9]{32,}/gi, "[SECRET_REDACTED]").replace(/Bearer\s+[^\s]+/gi, "Bearer [REDACTED]");
+    return sanitized;
+  }
+  return "An unexpected error occurred";
+}
+function isValidRedirectUri(uri, allowedOrigins) {
+  try {
+    const url = new URL(uri);
+    return allowedOrigins.some((allowed) => {
+      const allowedUrl = new URL(allowed);
+      return url.origin === allowedUrl.origin;
+    });
+  } catch {
+    return false;
+  }
+}
+function isValidScope(scope) {
+  return /^[a-zA-Z0-9._-]+$/.test(scope);
+}
+function validateScopes(scopes) {
+  return Array.isArray(scopes) && scopes.every(isValidScope);
+}
+
+// src/utils/createMsalConfig.ts
 function createMsalConfig(config) {
   if (config.msalConfig) {
     return config.msalConfig;
@@ -117,27 +155,34 @@ function MsalAuthProvider({ children, loadingComponent, onInitialized, ...config
         const msalConfig = createMsalConfig(config);
         const instance = new PublicClientApplication(msalConfig);
         await instance.initialize();
-        try {
-          const response = await instance.handleRedirectPromise();
-          if (response) {
-            if (config.enableLogging) {
-              console.log("[MSAL] Redirect authentication successful");
+        const isInPopup = window.opener && window.opener !== window;
+        if (!isInPopup) {
+          try {
+            const response = await instance.handleRedirectPromise();
+            if (response) {
+              if (config.enableLogging) {
+                console.log("[MSAL] Redirect authentication successful");
+              }
+              if (response.account) {
+                instance.setActiveAccount(response.account);
+              }
             }
-            if (response.account) {
-              instance.setActiveAccount(response.account);
+          } catch (redirectError) {
+            if (redirectError?.errorCode === "no_token_request_cache_error") {
+              if (config.enableLogging) {
+                console.log("[MSAL] No pending redirect found (this is normal)");
+              }
+            } else if (redirectError?.errorCode === "user_cancelled") {
+              if (config.enableLogging) {
+                console.log("[MSAL] User cancelled authentication");
+              }
+            } else {
+              console.error("[MSAL] Redirect handling error:", redirectError);
             }
           }
-        } catch (redirectError) {
-          if (redirectError?.errorCode === "no_token_request_cache_error") {
-            if (config.enableLogging) {
-              console.log("[MSAL] No pending redirect found (this is normal)");
-            }
-          } else if (redirectError?.errorCode === "user_cancelled") {
-            if (config.enableLogging) {
-              console.log("[MSAL] User cancelled authentication");
-            }
-          } else {
-            console.error("[MSAL] Redirect handling error:", redirectError);
+        } else {
+          if (config.enableLogging) {
+            console.log("[MSAL] Running in popup window, skipping redirect handling");
           }
         }
         const accounts = instance.getAllAccounts();

package/dist/server.mjs

@@ -1,10 +1,25 @@
-import {
-  isValidAccountData,
-  safeJsonParse
-} from "./chunk-AD43IVG7.mjs";
-
 // src/utils/getServerSession.ts
 import { cookies, headers } from "next/headers";
+
+// src/utils/validation.ts
+function safeJsonParse(jsonString, validator) {
+  try {
+    const parsed = JSON.parse(jsonString);
+    if (validator(parsed)) {
+      return parsed;
+    }
+    console.warn("[Validation] JSON validation failed");
+    return null;
+  } catch (error) {
+    console.error("[Validation] JSON parse error:", error);
+    return null;
+  }
+}
+function isValidAccountData(data) {
+  return typeof data === "object" && data !== null && typeof data.homeAccountId === "string" && data.homeAccountId.length > 0 && typeof data.username === "string" && data.username.length > 0 && (data.name === void 0 || typeof data.name === "string");
+}
+
+// src/utils/getServerSession.ts
 async function getServerSession() {
   try {
     const cookieStore = await cookies();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chemmangat/msal-next",
-  "version": "3.0.4",
+  "version": "3.0.6",
   "description": "Production-grade MSAL authentication package for Next.js App Router with minimal boilerplate",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",

package/dist/chunk-AD43IVG7.mjs

@@ -1,51 +0,0 @@
-// src/utils/validation.ts
-function safeJsonParse(jsonString, validator) {
-  try {
-    const parsed = JSON.parse(jsonString);
-    if (validator(parsed)) {
-      return parsed;
-    }
-    console.warn("[Validation] JSON validation failed");
-    return null;
-  } catch (error) {
-    console.error("[Validation] JSON parse error:", error);
-    return null;
-  }
-}
-function isValidAccountData(data) {
-  return typeof data === "object" && data !== null && typeof data.homeAccountId === "string" && data.homeAccountId.length > 0 && typeof data.username === "string" && data.username.length > 0 && (data.name === void 0 || typeof data.name === "string");
-}
-function sanitizeError(error) {
-  if (error instanceof Error) {
-    const message = error.message;
-    const sanitized = message.replace(/[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}/g, "[TOKEN_REDACTED]").replace(/[a-f0-9]{32,}/gi, "[SECRET_REDACTED]").replace(/Bearer\s+[^\s]+/gi, "Bearer [REDACTED]");
-    return sanitized;
-  }
-  return "An unexpected error occurred";
-}
-function isValidRedirectUri(uri, allowedOrigins) {
-  try {
-    const url = new URL(uri);
-    return allowedOrigins.some((allowed) => {
-      const allowedUrl = new URL(allowed);
-      return url.origin === allowedUrl.origin;
-    });
-  } catch {
-    return false;
-  }
-}
-function isValidScope(scope) {
-  return /^[a-zA-Z0-9._-]+$/.test(scope);
-}
-function validateScopes(scopes) {
-  return Array.isArray(scopes) && scopes.every(isValidScope);
-}
-
-export {
-  safeJsonParse,
-  isValidAccountData,
-  sanitizeError,
-  isValidRedirectUri,
-  isValidScope,
-  validateScopes
-};