@cimplify/cli 0.7.7 → 0.7.9

package/templates/storefront-grocery/app/auth/session/route.ts

@@ -1,11 +1,11 @@
 import { handleSessionRequest } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
 export async function GET(req: Request): Promise<Response> {
   if (!CLIENT_ID) {
     return Response.json({ sub: null }, { status: 200 });
   }
-  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+  return handleSessionRequest(req, { clientId: CLIENT_ID, issuer: ISSUER });
 }

package/templates/storefront-grocery/components/auth-error-toast.tsx

@@ -0,0 +1,46 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+const MESSAGES: Record<string, string> = {
+  state_mismatch: "Sign-in didn't complete. Please try again.",
+  exchange_failed: "We couldn't finish signing you in. Please try again.",
+  missing_code: "Sign-in didn't complete. Please try again.",
+  missing_id_token: "Sign-in didn't complete. Please try again.",
+  id_token_invalid: "Sign-in didn't complete. Please try again.",
+  access_denied: "Sign-in was cancelled.",
+  login_required: "Please sign in to continue.",
+};
+
+export function AuthErrorToast() {
+  const [message, setMessage] = useState<string | null>(null);
+
+  useEffect(() => {
+    const url = new URL(window.location.href);
+    const err = url.searchParams.get("cimplify_auth_error");
+    if (!err) return;
+    setMessage(MESSAGES[err] ?? "Sign-in didn't complete. Please try again.");
+    url.searchParams.delete("cimplify_auth_error");
+    window.history.replaceState(null, "", url.toString());
+  }, []);
+
+  if (!message) return null;
+
+  return (
+    <div
+      role="status"
+      aria-live="polite"
+      className="fixed bottom-4 left-1/2 -translate-x-1/2 z-50 max-w-sm rounded-lg bg-zinc-900 text-white px-4 py-3 text-sm shadow-lg flex items-center gap-3"
+    >
+      <span>{message}</span>
+      <button
+        type="button"
+        onClick={() => setMessage(null)}
+        aria-label="Dismiss"
+        className="text-zinc-400 hover:text-white transition-colors text-base leading-none"
+      >
+        ×
+      </button>
+    </div>
+  );
+}

package/templates/storefront-grocery/components/providers.tsx

@@ -3,6 +3,7 @@
 import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
+import { AuthErrorToast } from "@/components/auth-error-toast";
 
 // Same-origin client — every request goes through the Next.js rewrite in
 // next.config.ts, so no CORS preflight ever hits the browser.
@@ -20,7 +21,10 @@ export function Providers({ children }: { children: ReactNode }) {
 
   return (
     <CimplifyProvider client={client}>
-      <CartDrawerProvider>{children}</CartDrawerProvider>
+      <CartDrawerProvider>
+        {children}
+        <AuthErrorToast />
+      </CartDrawerProvider>
     </CimplifyProvider>
   );
 }

package/templates/storefront-grocery/lib/auth.ts

@@ -8,9 +8,9 @@ import {
 } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
-const oidcConfig = { clientId: CLIENT_ID, authUrl: AUTH_URL };
+const oidcConfig = { clientId: CLIENT_ID, issuer: ISSUER };
 
 export async function getSession(): Promise<CimplifySession | null> {
   if (!CLIENT_ID) return null;

package/templates/storefront-grocery/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.59.0",
+    "@cimplify/sdk": "^0.60.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-pharmacy/app/auth/callback/route.ts

@@ -1,7 +1,7 @@
 import { handleOidcCallback, handleRedirectCallback } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
 
 // Redirect sign-in: the browser lands here via a top-level GET carrying ?code.
@@ -11,7 +11,7 @@ export async function GET(req: Request): Promise<Response> {
   }
   return handleRedirectCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
     defaultReturnTo: "/account",
   });
@@ -24,7 +24,7 @@ export async function POST(req: Request): Promise<Response> {
   }
   return handleOidcCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
   });
 }

package/templates/storefront-pharmacy/app/auth/session/route.ts

@@ -1,11 +1,11 @@
 import { handleSessionRequest } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
 export async function GET(req: Request): Promise<Response> {
   if (!CLIENT_ID) {
     return Response.json({ sub: null }, { status: 200 });
   }
-  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+  return handleSessionRequest(req, { clientId: CLIENT_ID, issuer: ISSUER });
 }

package/templates/storefront-pharmacy/components/auth-error-toast.tsx

@@ -0,0 +1,46 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+const MESSAGES: Record<string, string> = {
+  state_mismatch: "Sign-in didn't complete. Please try again.",
+  exchange_failed: "We couldn't finish signing you in. Please try again.",
+  missing_code: "Sign-in didn't complete. Please try again.",
+  missing_id_token: "Sign-in didn't complete. Please try again.",
+  id_token_invalid: "Sign-in didn't complete. Please try again.",
+  access_denied: "Sign-in was cancelled.",
+  login_required: "Please sign in to continue.",
+};
+
+export function AuthErrorToast() {
+  const [message, setMessage] = useState<string | null>(null);
+
+  useEffect(() => {
+    const url = new URL(window.location.href);
+    const err = url.searchParams.get("cimplify_auth_error");
+    if (!err) return;
+    setMessage(MESSAGES[err] ?? "Sign-in didn't complete. Please try again.");
+    url.searchParams.delete("cimplify_auth_error");
+    window.history.replaceState(null, "", url.toString());
+  }, []);
+
+  if (!message) return null;
+
+  return (
+    <div
+      role="status"
+      aria-live="polite"
+      className="fixed bottom-4 left-1/2 -translate-x-1/2 z-50 max-w-sm rounded-lg bg-zinc-900 text-white px-4 py-3 text-sm shadow-lg flex items-center gap-3"
+    >
+      <span>{message}</span>
+      <button
+        type="button"
+        onClick={() => setMessage(null)}
+        aria-label="Dismiss"
+        className="text-zinc-400 hover:text-white transition-colors text-base leading-none"
+      >
+        ×
+      </button>
+    </div>
+  );
+}

package/templates/storefront-pharmacy/components/providers.tsx

@@ -3,6 +3,7 @@
 import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
+import { AuthErrorToast } from "@/components/auth-error-toast";
 
 // Same-origin client — every request goes through the Next.js rewrite in
 // next.config.ts, so no CORS preflight ever hits the browser.
@@ -20,7 +21,10 @@ export function Providers({ children }: { children: ReactNode }) {
 
   return (
     <CimplifyProvider client={client}>
-      <CartDrawerProvider>{children}</CartDrawerProvider>
+      <CartDrawerProvider>
+        {children}
+        <AuthErrorToast />
+      </CartDrawerProvider>
     </CimplifyProvider>
   );
 }

package/templates/storefront-pharmacy/lib/auth.ts

@@ -8,9 +8,9 @@ import {
 } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
-const oidcConfig = { clientId: CLIENT_ID, authUrl: AUTH_URL };
+const oidcConfig = { clientId: CLIENT_ID, issuer: ISSUER };
 
 export async function getSession(): Promise<CimplifySession | null> {
   if (!CLIENT_ID) return null;

package/templates/storefront-pharmacy/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.59.0",
+    "@cimplify/sdk": "^0.60.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-restaurant/app/auth/callback/route.ts

@@ -1,7 +1,7 @@
 import { handleOidcCallback, handleRedirectCallback } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
 
 // Redirect sign-in: the browser lands here via a top-level GET carrying ?code.
@@ -11,7 +11,7 @@ export async function GET(req: Request): Promise<Response> {
   }
   return handleRedirectCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
     defaultReturnTo: "/account",
   });
@@ -24,7 +24,7 @@ export async function POST(req: Request): Promise<Response> {
   }
   return handleOidcCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
   });
 }

package/templates/storefront-restaurant/app/auth/session/route.ts

@@ -1,11 +1,11 @@
 import { handleSessionRequest } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
 export async function GET(req: Request): Promise<Response> {
   if (!CLIENT_ID) {
     return Response.json({ sub: null }, { status: 200 });
   }
-  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+  return handleSessionRequest(req, { clientId: CLIENT_ID, issuer: ISSUER });
 }

package/templates/storefront-restaurant/components/auth-error-toast.tsx

@@ -0,0 +1,46 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+const MESSAGES: Record<string, string> = {
+  state_mismatch: "Sign-in didn't complete. Please try again.",
+  exchange_failed: "We couldn't finish signing you in. Please try again.",
+  missing_code: "Sign-in didn't complete. Please try again.",
+  missing_id_token: "Sign-in didn't complete. Please try again.",
+  id_token_invalid: "Sign-in didn't complete. Please try again.",
+  access_denied: "Sign-in was cancelled.",
+  login_required: "Please sign in to continue.",
+};
+
+export function AuthErrorToast() {
+  const [message, setMessage] = useState<string | null>(null);
+
+  useEffect(() => {
+    const url = new URL(window.location.href);
+    const err = url.searchParams.get("cimplify_auth_error");
+    if (!err) return;
+    setMessage(MESSAGES[err] ?? "Sign-in didn't complete. Please try again.");
+    url.searchParams.delete("cimplify_auth_error");
+    window.history.replaceState(null, "", url.toString());
+  }, []);
+
+  if (!message) return null;
+
+  return (
+    <div
+      role="status"
+      aria-live="polite"
+      className="fixed bottom-4 left-1/2 -translate-x-1/2 z-50 max-w-sm rounded-lg bg-zinc-900 text-white px-4 py-3 text-sm shadow-lg flex items-center gap-3"
+    >
+      <span>{message}</span>
+      <button
+        type="button"
+        onClick={() => setMessage(null)}
+        aria-label="Dismiss"
+        className="text-zinc-400 hover:text-white transition-colors text-base leading-none"
+      >
+        ×
+      </button>
+    </div>
+  );
+}

package/templates/storefront-restaurant/components/providers.tsx

@@ -3,6 +3,7 @@
 import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
+import { AuthErrorToast } from "@/components/auth-error-toast";
 
 // Same-origin client — every request goes through the Next.js rewrite in
 // next.config.ts, so no CORS preflight ever hits the browser.
@@ -20,7 +21,10 @@ export function Providers({ children }: { children: ReactNode }) {
 
   return (
     <CimplifyProvider client={client}>
-      <CartDrawerProvider>{children}</CartDrawerProvider>
+      <CartDrawerProvider>
+        {children}
+        <AuthErrorToast />
+      </CartDrawerProvider>
     </CimplifyProvider>
   );
 }

package/templates/storefront-restaurant/lib/auth.ts

@@ -8,9 +8,9 @@ import {
 } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
-const oidcConfig = { clientId: CLIENT_ID, authUrl: AUTH_URL };
+const oidcConfig = { clientId: CLIENT_ID, issuer: ISSUER };
 
 export async function getSession(): Promise<CimplifySession | null> {
   if (!CLIENT_ID) return null;

package/templates/storefront-restaurant/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.59.0",
+    "@cimplify/sdk": "^0.60.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-retail/app/auth/callback/route.ts

@@ -1,7 +1,7 @@
 import { handleOidcCallback, handleRedirectCallback } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
 
 // Redirect sign-in: the browser lands here via a top-level GET carrying ?code.
@@ -11,7 +11,7 @@ export async function GET(req: Request): Promise<Response> {
   }
   return handleRedirectCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
     defaultReturnTo: "/account",
   });
@@ -24,7 +24,7 @@ export async function POST(req: Request): Promise<Response> {
   }
   return handleOidcCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
   });
 }

package/templates/storefront-retail/app/auth/session/route.ts

@@ -1,11 +1,11 @@
 import { handleSessionRequest } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
 export async function GET(req: Request): Promise<Response> {
   if (!CLIENT_ID) {
     return Response.json({ sub: null }, { status: 200 });
   }
-  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+  return handleSessionRequest(req, { clientId: CLIENT_ID, issuer: ISSUER });
 }

package/templates/storefront-retail/components/auth-error-toast.tsx

@@ -0,0 +1,46 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+const MESSAGES: Record<string, string> = {
+  state_mismatch: "Sign-in didn't complete. Please try again.",
+  exchange_failed: "We couldn't finish signing you in. Please try again.",
+  missing_code: "Sign-in didn't complete. Please try again.",
+  missing_id_token: "Sign-in didn't complete. Please try again.",
+  id_token_invalid: "Sign-in didn't complete. Please try again.",
+  access_denied: "Sign-in was cancelled.",
+  login_required: "Please sign in to continue.",
+};
+
+export function AuthErrorToast() {
+  const [message, setMessage] = useState<string | null>(null);
+
+  useEffect(() => {
+    const url = new URL(window.location.href);
+    const err = url.searchParams.get("cimplify_auth_error");
+    if (!err) return;
+    setMessage(MESSAGES[err] ?? "Sign-in didn't complete. Please try again.");
+    url.searchParams.delete("cimplify_auth_error");
+    window.history.replaceState(null, "", url.toString());
+  }, []);
+
+  if (!message) return null;
+
+  return (
+    <div
+      role="status"
+      aria-live="polite"
+      className="fixed bottom-4 left-1/2 -translate-x-1/2 z-50 max-w-sm rounded-lg bg-zinc-900 text-white px-4 py-3 text-sm shadow-lg flex items-center gap-3"
+    >
+      <span>{message}</span>
+      <button
+        type="button"
+        onClick={() => setMessage(null)}
+        aria-label="Dismiss"
+        className="text-zinc-400 hover:text-white transition-colors text-base leading-none"
+      >
+        ×
+      </button>
+    </div>
+  );
+}

package/templates/storefront-retail/components/providers.tsx

@@ -3,6 +3,7 @@
 import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
+import { AuthErrorToast } from "@/components/auth-error-toast";
 
 // Same-origin client — every request goes through the Next.js rewrite in
 // next.config.ts, so no CORS preflight ever hits the browser.
@@ -20,7 +21,10 @@ export function Providers({ children }: { children: ReactNode }) {
 
   return (
     <CimplifyProvider client={client}>
-      <CartDrawerProvider>{children}</CartDrawerProvider>
+      <CartDrawerProvider>
+        {children}
+        <AuthErrorToast />
+      </CartDrawerProvider>
     </CimplifyProvider>
   );
 }

package/templates/storefront-retail/lib/auth.ts

@@ -8,9 +8,9 @@ import {
 } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
-const oidcConfig = { clientId: CLIENT_ID, authUrl: AUTH_URL };
+const oidcConfig = { clientId: CLIENT_ID, issuer: ISSUER };
 
 export async function getSession(): Promise<CimplifySession | null> {
   if (!CLIENT_ID) return null;

package/templates/storefront-retail/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.59.0",
+    "@cimplify/sdk": "^0.60.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-services/app/auth/callback/route.ts

@@ -1,7 +1,7 @@
 import { handleOidcCallback, handleRedirectCallback } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
 
 // Redirect sign-in: the browser lands here via a top-level GET carrying ?code.
@@ -11,7 +11,7 @@ export async function GET(req: Request): Promise<Response> {
   }
   return handleRedirectCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
     defaultReturnTo: "/account",
   });
@@ -24,7 +24,7 @@ export async function POST(req: Request): Promise<Response> {
   }
   return handleOidcCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
   });
 }

package/templates/storefront-services/app/auth/session/route.ts

@@ -1,11 +1,11 @@
 import { handleSessionRequest } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
 export async function GET(req: Request): Promise<Response> {
   if (!CLIENT_ID) {
     return Response.json({ sub: null }, { status: 200 });
   }
-  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+  return handleSessionRequest(req, { clientId: CLIENT_ID, issuer: ISSUER });
 }

package/templates/storefront-services/components/auth-error-toast.tsx

@@ -0,0 +1,46 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+const MESSAGES: Record<string, string> = {
+  state_mismatch: "Sign-in didn't complete. Please try again.",
+  exchange_failed: "We couldn't finish signing you in. Please try again.",
+  missing_code: "Sign-in didn't complete. Please try again.",
+  missing_id_token: "Sign-in didn't complete. Please try again.",
+  id_token_invalid: "Sign-in didn't complete. Please try again.",
+  access_denied: "Sign-in was cancelled.",
+  login_required: "Please sign in to continue.",
+};
+
+export function AuthErrorToast() {
+  const [message, setMessage] = useState<string | null>(null);
+
+  useEffect(() => {
+    const url = new URL(window.location.href);
+    const err = url.searchParams.get("cimplify_auth_error");
+    if (!err) return;
+    setMessage(MESSAGES[err] ?? "Sign-in didn't complete. Please try again.");
+    url.searchParams.delete("cimplify_auth_error");
+    window.history.replaceState(null, "", url.toString());
+  }, []);
+
+  if (!message) return null;
+
+  return (
+    <div
+      role="status"
+      aria-live="polite"
+      className="fixed bottom-4 left-1/2 -translate-x-1/2 z-50 max-w-sm rounded-lg bg-zinc-900 text-white px-4 py-3 text-sm shadow-lg flex items-center gap-3"
+    >
+      <span>{message}</span>
+      <button
+        type="button"
+        onClick={() => setMessage(null)}
+        aria-label="Dismiss"
+        className="text-zinc-400 hover:text-white transition-colors text-base leading-none"
+      >
+        ×
+      </button>
+    </div>
+  );
+}

package/templates/storefront-services/components/providers.tsx

@@ -3,6 +3,7 @@
 import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
+import { AuthErrorToast } from "@/components/auth-error-toast";
 
 // Same-origin client — every request goes through the Next.js rewrite in
 // next.config.ts, so no CORS preflight ever hits the browser.
@@ -20,7 +21,10 @@ export function Providers({ children }: { children: ReactNode }) {
 
   return (
     <CimplifyProvider client={client}>
-      <CartDrawerProvider>{children}</CartDrawerProvider>
+      <CartDrawerProvider>
+        {children}
+        <AuthErrorToast />
+      </CartDrawerProvider>
     </CimplifyProvider>
   );
 }

package/templates/storefront-services/lib/auth.ts

@@ -8,9 +8,9 @@ import {
 } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
-const oidcConfig = { clientId: CLIENT_ID, authUrl: AUTH_URL };
+const oidcConfig = { clientId: CLIENT_ID, issuer: ISSUER };
 
 export async function getSession(): Promise<CimplifySession | null> {
   if (!CLIENT_ID) return null;

package/templates/storefront-services/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.59.0",
+    "@cimplify/sdk": "^0.60.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"