@civic/auth 0.0.1-beta.24 → 0.0.1-beta.26

package/test/unit/shared/components/CivicAuthIframeContainer.test.tsx

@@ -0,0 +1,154 @@
+import { render, act, waitFor } from "@testing-library/react";
+import { CivicAuthIframeContainer } from "@/shared/components/CivicAuthIframeContainer.js";
+import { vi } from "vitest";
+import React, { type RefObject } from "react";
+import { createRef } from "react";
+import { TOKEN_EXCHANGE_TRIGGER_TEXT } from "@/constants.js";
+
+let setAuthResponseUrlMock: any;
+let iframeRefMock: RefObject<HTMLIFrameElement>;
+
+beforeEach(() => {
+  iframeRefMock = createRef();
+
+  vi.mock("@/shared/hooks", () => ({
+    useAuth: () => ({ isLoading: false }),
+    useConfig: () => ({
+      redirectUrl: "https://example.com/redirect",
+      modalIframe: true,
+    }),
+    useIframe: vi.fn(() => ({
+      setAuthResponseUrl: setAuthResponseUrlMock,
+      iframeRef: iframeRefMock,
+    })),
+  }));
+});
+
+describe("CivicAuthIframeContainer", () => {
+  let originalFetch: typeof global.fetch;
+
+  beforeAll(() => {
+    originalFetch = global.fetch;
+  });
+
+  afterAll(() => {
+    global.fetch = originalFetch;
+  });
+
+  it(`triggers a fetch request when '${TOKEN_EXCHANGE_TRIGGER_TEXT}' is in the iframe body`, async () => {
+    const onCloseMock = vi.fn();
+    setAuthResponseUrlMock = vi.fn();
+
+    const fetchMock = vi.fn(() => Promise.resolve({ ok: true }));
+    global.fetch = fetchMock as any;
+
+    render(
+      <CivicAuthIframeContainer onClose={onCloseMock} closeOnRedirect={true} />,
+    );
+
+    act(() => {
+      if (iframeRefMock.current) {
+        Object.defineProperty(iframeRefMock.current, "contentWindow", {
+          value: {
+            location: {
+              href: "https://example.com/redirect?code=1234",
+            },
+            document: {
+              body: {
+                innerHTML: TOKEN_EXCHANGE_TRIGGER_TEXT,
+              },
+            },
+          },
+          configurable: true,
+        });
+      }
+    });
+
+    act(() => {
+      iframeRefMock.current?.dispatchEvent(new Event("load"));
+    });
+
+    await waitFor(() => {
+      expect(fetchMock).toHaveBeenCalledWith(
+        "https://example.com/redirect?code=1234&appUrl=http://localhost:3000",
+      );
+      expect(onCloseMock).toHaveBeenCalled();
+    });
+  });
+
+  it(`sets auth response URL when no '${TOKEN_EXCHANGE_TRIGGER_TEXT}' in iframe body`, async () => {
+    const onCloseMock = vi.fn();
+    setAuthResponseUrlMock = vi.fn();
+
+    render(
+      <CivicAuthIframeContainer onClose={onCloseMock} closeOnRedirect={true} />,
+    );
+
+    act(() => {
+      if (iframeRefMock.current) {
+        Object.defineProperty(iframeRefMock.current, "contentWindow", {
+          value: {
+            location: {
+              href: "https://example.com/redirect?code=5678",
+            },
+            document: {
+              body: {
+                innerHTML: "",
+              },
+            },
+          },
+          configurable: true,
+        });
+      }
+    });
+
+    act(() => {
+      iframeRefMock.current?.dispatchEvent(new Event("load"));
+    });
+
+    await waitFor(() => {
+      expect(setAuthResponseUrlMock).toHaveBeenCalledWith(
+        "https://example.com/redirect?code=5678",
+      );
+      expect(onCloseMock).toHaveBeenCalled();
+    });
+  });
+
+  it("does not call onClose if closeOnRedirect is false", async () => {
+    const onCloseMock = vi.fn();
+    setAuthResponseUrlMock = vi.fn();
+
+    render(
+      <CivicAuthIframeContainer
+        onClose={onCloseMock}
+        closeOnRedirect={false}
+      />,
+    );
+
+    act(() => {
+      if (iframeRefMock.current) {
+        Object.defineProperty(iframeRefMock.current, "contentWindow", {
+          value: {
+            location: {
+              href: "https://example.com/redirect?code=91011",
+            },
+            document: {
+              body: {
+                innerHTML: TOKEN_EXCHANGE_TRIGGER_TEXT,
+              },
+            },
+          },
+          configurable: true,
+        });
+      }
+    });
+
+    act(() => {
+      iframeRefMock.current?.dispatchEvent(new Event("load"));
+    });
+
+    await waitFor(() => {
+      expect(onCloseMock).not.toHaveBeenCalled();
+    });
+  });
+});

package/test/unit/shared/storage.test.ts

@@ -0,0 +1,67 @@
+import { describe, it, expect } from "vitest";
+import {
+  CookieStorage,
+  DEFAULT_COOKIE_DURATION,
+  type CookieStorageSettings,
+} from "@/shared/lib/storage.js";
+
+describe("CookieStorage", () => {
+  class MockCookieStorage extends CookieStorage {
+    private storage: Record<string, string> = {};
+
+    constructor(settings: Partial<CookieStorageSettings>) {
+      super(settings);
+    }
+
+    get(key: string): string | null {
+      return this.storage[key] ?? null;
+    }
+    set(key: string, value: string): void {
+      this.storage[key] = value;
+    }
+  }
+
+  it("should set default settings if none are provided", () => {
+    const storage = new MockCookieStorage({});
+
+    const expectedSettings: CookieStorageSettings = {
+      httpOnly: true,
+      secure: true,
+      sameSite: "lax",
+      expires: new Date(Date.now() + 1000 * DEFAULT_COOKIE_DURATION),
+      path: "/",
+    };
+
+    expect(storage["settings"]).toMatchObject({
+      httpOnly: expectedSettings.httpOnly,
+      secure: expectedSettings.secure,
+      sameSite: expectedSettings.sameSite,
+      path: expectedSettings.path,
+    });
+
+    const expires = storage["settings"].expires;
+    const expectedExpires = expectedSettings.expires;
+    expect(expires.getTime()).toBeCloseTo(expectedExpires.getTime(), -3); // Allow small time diff tolerance
+  });
+
+  it("should allow custom settings to override defaults", () => {
+    const customSettings: Partial<CookieStorageSettings> = {
+      httpOnly: false,
+      secure: false,
+      sameSite: "strict",
+      expires: new Date(Date.now() + 1000 * 60 * 30), // 30 minutes
+      path: "/custom",
+    };
+    const storage = new MockCookieStorage(customSettings);
+
+    expect(storage["settings"]).toMatchObject(customSettings);
+  });
+
+  it("should set and get values correctly", () => {
+    const storage = new MockCookieStorage({});
+
+    storage.set("testKey", "testValue");
+    expect(storage.get("testKey")).toBe("testValue");
+    expect(storage.get("nonExistentKey")).toBe(null);
+  });
+});

package/test/unit/utils.test.ts

@@ -0,0 +1,48 @@
+import { isPopupBlocked } from "@/utils.js";
+import { vi } from "vitest";
+
+describe("isPopupBlocked", () => {
+  afterEach(() => {
+    // Reset mocks after each test
+    vi.restoreAllMocks();
+  });
+
+  it("should return true if window.open returns null", () => {
+    // Mock window.open to return null (popup blocked)
+    vi.spyOn(window, "open").mockReturnValue(null);
+
+    const result = isPopupBlocked();
+    expect(result).toBe(true);
+  });
+
+  it("should return false if window.open returns a valid popup", () => {
+    // Mock a valid popup window object
+    const mockPopup = { closed: false, close: vi.fn() } as unknown as Window;
+
+    vi.spyOn(window, "open").mockReturnValue(mockPopup);
+
+    const result = isPopupBlocked();
+    expect(result).toBe(false);
+    expect(mockPopup.close).toHaveBeenCalled(); // Ensure the popup is closed
+  });
+
+  it("should return true if window.open throws an error accessing properties", () => {
+    // Mock a popup window object that throws an error when accessing properties
+    const mockPopup = {
+      get closed() {
+        throw new Error("Blocked");
+      },
+      close: vi.fn(),
+    } as unknown as Window;
+
+    vi.spyOn(window, "open").mockReturnValue(mockPopup);
+
+    const result = isPopupBlocked();
+    expect(result).toBe(true);
+  });
+  it("should return true if popup properties are not defined", () => {
+    const mockPopup = {} as unknown as Window;
+    vi.spyOn(window, "open").mockReturnValue(mockPopup);
+    expect(isPopupBlocked()).toBe(true);
+  });
+});

package/tsconfig.build.json

@@ -0,0 +1,5 @@
+{
+  "extends": "./tsconfig.json",
+  "include": ["src"],
+  "exclude": ["test"]
+}

package/tsconfig.cjs.json

@@ -0,0 +1,8 @@
+{
+  "extends": "./tsconfig.build.json",
+  "compilerOptions": {
+    "module": "CommonJS",
+    "verbatimModuleSyntax": false,
+    "outDir": "dist/cjs"
+  }
+}

package/tsconfig.esm.json

@@ -0,0 +1,7 @@
+{
+  "extends": "./tsconfig.build.json",
+  "compilerOptions": {
+    "module": "NodeNext",
+    "outDir": "dist/esm"
+  }
+}

package/tsconfig.json

@@ -0,0 +1,42 @@
+{
+  "compilerOptions": {
+    "types": ["node"],
+    "baseUrl": ".",
+    "paths": {
+      "@/*": ["./src/*"]
+    },
+    /* Base Options: */
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "target": "es2022",
+    "allowJs": true,
+    "resolveJsonModule": true,
+    "moduleDetection": "force",
+    "isolatedModules": true,
+    "verbatimModuleSyntax": true,
+
+    /* Strictness */
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+
+    /* If transpiling with TypeScript: */
+    "module": "NodeNext",
+    "outDir": "dist",
+    "sourceMap": true,
+    "inlineSources": true,
+
+    /* AND if you're building for a library: */
+    "declaration": true,
+
+    /* AND if you're building for a library in a monorepo: */
+    "composite": true,
+    "declarationMap": true,
+
+    /* If your code runs in the DOM: */
+    "lib": ["es2022", "dom", "dom.iterable"],
+    "jsx": "react"
+  },
+  "include": ["src", "test", "test/support/*.json", "vitest.config.ts", "etc/scripts/**/*.ts"],
+  "exclude": ["node_modules"]
+}

package/vitest.config.ts

@@ -0,0 +1,41 @@
+/// <reference types='vitest' />
+import { defineConfig } from "vite";
+import path from "path";
+
+export default defineConfig({
+  resolve: {
+    alias: {
+      "@": path.resolve(__dirname, "./src"),
+    },
+  },
+
+  test: {
+    globals: true,
+    environment: "jsdom",
+    include: ["test/**/*.{test,spec}.{js,mjs,cjs,ts,mts,cts,jsx,tsx}"],
+    env: {
+      NODE_ENV: "development",
+    },
+    reporters: ["default"],
+    coverage: {
+      exclude: [
+        "**/node_modules/**",
+        "**/dist/**",
+        "**/build/**",
+        "postcss.config.cjs",
+        "tailwind.config.js",
+        ".eslintrc.js",
+        "tsup.config.ts",
+        "vitest.config.ts",
+      ],
+      reportsDirectory: "../../coverage/apps/civic-auth-client",
+      provider: "v8",
+      thresholds: {
+        lines: 80,
+        functions: 70,
+        branches: 85,
+        statements: 80,
+      },
+    },
+  },
+});

package/dist/AuthProvider-Bj_Prt1x.d.ts

@@ -1,21 +0,0 @@
-import { ReactNode } from 'react';
-import { C as Config, S as SessionData } from './types-HdCjGldB.js';
-
-interface PKCEConsumer {
-    getCodeChallenge(): Promise<string>;
-}
-
-type AuthProviderProps = {
-    children: ReactNode;
-    clientId: string;
-    redirectUrl?: string;
-    nonce?: string;
-    config?: Config;
-    onSignIn?: (error?: Error) => void;
-    onSignOut?: () => Promise<void>;
-    pkceConsumer?: PKCEConsumer;
-    modalIframe?: boolean;
-    sessionData?: SessionData;
-};
-
-export type { AuthProviderProps as A };

package/dist/AuthProvider-DUAoX4G9.d.mts

@@ -1,21 +0,0 @@
-import { ReactNode } from 'react';
-import { C as Config, S as SessionData } from './types-HdCjGldB.mjs';
-
-interface PKCEConsumer {
-    getCodeChallenge(): Promise<string>;
-}
-
-type AuthProviderProps = {
-    children: ReactNode;
-    clientId: string;
-    redirectUrl?: string;
-    nonce?: string;
-    config?: Config;
-    onSignIn?: (error?: Error) => void;
-    onSignOut?: () => Promise<void>;
-    pkceConsumer?: PKCEConsumer;
-    modalIframe?: boolean;
-    sessionData?: SessionData;
-};
-
-export type { AuthProviderProps as A };

package/dist/UserProvider-CMLaYOUD.d.ts

@@ -1,16 +0,0 @@
-import { JWT } from 'oslo/jwt';
-import { D as DisplayMode, U as User } from './types-HdCjGldB.js';
-
-type AuthContextType = {
-    signIn: (displayMode?: DisplayMode) => Promise<void>;
-    isAuthenticated: boolean;
-    isLoading: boolean;
-    error: Error | null;
-    signOut: () => Promise<void>;
-};
-
-type UserContextType<T extends Record<string, unknown> & JWT["payload"] = Record<string, unknown> & JWT["payload"]> = {
-    user: User<T> | null;
-} & Omit<AuthContextType, "isAuthenticated">;
-
-export type { AuthContextType as A, UserContextType as U };

package/dist/UserProvider-Cbm8MZkJ.d.mts

@@ -1,16 +0,0 @@
-import { JWT } from 'oslo/jwt';
-import { D as DisplayMode, U as User } from './types-HdCjGldB.mjs';
-
-type AuthContextType = {
-    signIn: (displayMode?: DisplayMode) => Promise<void>;
-    isAuthenticated: boolean;
-    isLoading: boolean;
-    error: Error | null;
-    signOut: () => Promise<void>;
-};
-
-type UserContextType<T extends Record<string, unknown> & JWT["payload"] = Record<string, unknown> & JWT["payload"]> = {
-    user: User<T> | null;
-} & Omit<AuthContextType, "isAuthenticated">;
-
-export type { AuthContextType as A, UserContextType as U };

package/dist/chunk-2OZJONNO.js

@@ -1,172 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
-
-var _chunk7K3QN2ATjs = require('./chunk-7K3QN2AT.js');
-
-
-
-var _chunkCRTRMMJ7js = require('./chunk-CRTRMMJ7.js');
-
-// src/lib/logger.ts
-var _debug = require('debug'); var _debug2 = _interopRequireDefault(_debug);
-var PACKAGE_NAME = "@civic/auth";
-var DebugLogger = class {
-  constructor(namespace) {
-    this.debugLogger = _debug2.default.call(void 0, `${PACKAGE_NAME}:${namespace}:debug`);
-    this.infoLogger = _debug2.default.call(void 0, `${PACKAGE_NAME}:${namespace}:info`);
-    this.warnLogger = _debug2.default.call(void 0, `${PACKAGE_NAME}:${namespace}:warn`);
-    this.errorLogger = _debug2.default.call(void 0, `${PACKAGE_NAME}:${namespace}:error`);
-    this.debugLogger.color = "4";
-    this.infoLogger.color = "2";
-    this.warnLogger.color = "3";
-    this.errorLogger.color = "1";
-  }
-  debug(message, ...args) {
-    this.debugLogger(message, ...args);
-  }
-  info(message, ...args) {
-    this.infoLogger(message, ...args);
-  }
-  warn(message, ...args) {
-    this.warnLogger(message, ...args);
-  }
-  error(message, ...args) {
-    this.errorLogger(message, ...args);
-  }
-};
-var createLogger = (namespace) => new DebugLogger(namespace);
-var loggers = {
-  // Next.js specific loggers
-  nextjs: {
-    routes: createLogger("api:routes"),
-    middleware: createLogger("api:middleware"),
-    handlers: {
-      auth: createLogger("api:handlers:auth")
-    }
-  },
-  // React specific loggers
-  react: {
-    components: createLogger("react:components"),
-    hooks: createLogger("react:hooks"),
-    context: createLogger("react:context")
-  },
-  // Shared utilities loggers
-  services: {
-    validation: createLogger("utils:validation"),
-    network: createLogger("utils:network")
-  }
-};
-
-// src/nextjs/config.ts
-var logger = loggers.nextjs.handlers.auth;
-var _a;
-var appUrl = typeof process !== "undefined" ? ((_a = process == null ? void 0 : process.env) == null ? void 0 : _a.NEXT_PUBLIC_APP_URL) || "" : "";
-var defaultServerSecure = !appUrl.startsWith("http://localhost");
-var defaultAuthConfig = {
-  oauthServer: _chunk7K3QN2ATjs.DEFAULT_AUTH_SERVER,
-  callbackUrl: "/api/auth/callback",
-  challengeUrl: "/api/auth/challenge",
-  logoutUrl: "/api/auth/logout",
-  loginUrl: "/",
-  include: ["/*"],
-  exclude: [],
-  cookies: {
-    tokens: {
-      ["id_token" /* ID_TOKEN */]: {
-        secure: defaultServerSecure,
-        httpOnly: true,
-        sameSite: "strict",
-        path: "/"
-      },
-      ["access_token" /* ACCESS_TOKEN */]: {
-        secure: defaultServerSecure,
-        httpOnly: true,
-        sameSite: "strict",
-        path: "/"
-      },
-      ["refresh_token" /* REFRESH_TOKEN */]: {
-        secure: defaultServerSecure,
-        httpOnly: true,
-        sameSite: "strict",
-        path: "/"
-      },
-      ["code_verifier" /* COOKIE_NAME */]: {
-        secure: defaultServerSecure,
-        httpOnly: true,
-        sameSite: "strict",
-        path: "/"
-      }
-    },
-    user: {
-      secure: defaultServerSecure,
-      httpOnly: false,
-      sameSite: "strict",
-      path: "/",
-      maxAge: 60 * 60
-      // 1 hour
-    }
-  }
-};
-var resolveAuthConfig = (config = {}) => {
-  var _a2, _b, _c, _d, _e, _f;
-  const configFromEnv = _chunk7K3QN2ATjs.withoutUndefined.call(void 0, {
-    clientId: process.env._civic_auth_client_id,
-    oauthServer: process.env._civic_oauth_server,
-    callbackUrl: process.env._civic_auth_callback_url,
-    challengeUrl: process.env._civic_auth_challenge_url,
-    loginUrl: process.env._civic_auth_login_url,
-    appUrl: process.env._civic_auth_app_url,
-    logoutUrl: process.env._civic_auth_logout_url,
-    include: (_a2 = process.env._civic_auth_includes) == null ? void 0 : _a2.split(","),
-    exclude: (_b = process.env._civic_auth_excludes) == null ? void 0 : _b.split(","),
-    cookies: process.env._civic_auth_cookie_config ? JSON.parse(process.env._civic_auth_cookie_config) : void 0
-  });
-  const mergedConfig = _chunkCRTRMMJ7js.__spreadProps.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, {}, defaultAuthConfig), configFromEnv), config), {
-    // Override with directly passed config
-    cookies: {
-      tokens: _chunkCRTRMMJ7js.__spreadValues.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, {}, defaultAuthConfig.cookies.tokens), ((_c = configFromEnv == null ? void 0 : configFromEnv.cookies) == null ? void 0 : _c.tokens) || {}), ((_d = config.cookies) == null ? void 0 : _d.tokens) || {}),
-      user: _chunkCRTRMMJ7js.__spreadValues.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, {}, defaultAuthConfig.cookies.user), ((_e = configFromEnv == null ? void 0 : configFromEnv.cookies) == null ? void 0 : _e.user) || {}), ((_f = config.cookies) == null ? void 0 : _f.user) || {})
-    }
-  });
-  logger.debug(
-    "Config from environment:",
-    JSON.stringify(configFromEnv, null, 2)
-  );
-  logger.debug("Resolved config:", JSON.stringify(mergedConfig, null, 2));
-  if (mergedConfig.clientId === void 0) {
-    throw new Error("Civic Auth client ID is required");
-  }
-  return mergedConfig;
-};
-var createCivicAuthPlugin = (authConfig) => {
-  return (nextConfig) => {
-    logger.debug(
-      "createCivicAuthPlugin nextConfig",
-      JSON.stringify(nextConfig, null, 2)
-    );
-    const resolvedConfig = resolveAuthConfig(_chunkCRTRMMJ7js.__spreadValues.call(void 0, {}, authConfig));
-    return _chunkCRTRMMJ7js.__spreadProps.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, {}, nextConfig), {
-      env: _chunkCRTRMMJ7js.__spreadProps.call(void 0, _chunkCRTRMMJ7js.__spreadValues.call(void 0, {}, nextConfig == null ? void 0 : nextConfig.env), {
-        // Internal environment variables - do not set these manually
-        _civic_auth_client_id: resolvedConfig.clientId,
-        _civic_oauth_server: resolvedConfig.oauthServer,
-        _civic_auth_callback_url: resolvedConfig.callbackUrl,
-        _civic_auth_challenge_url: resolvedConfig.challengeUrl,
-        _civic_auth_login_url: resolvedConfig.loginUrl,
-        _civic_auth_logout_url: resolvedConfig.logoutUrl,
-        _civic_auth_app_url: resolvedConfig.appUrl,
-        _civic_auth_includes: resolvedConfig.include.join(","),
-        _civic_auth_excludes: resolvedConfig.exclude.join(","),
-        _civic_auth_cookie_config: JSON.stringify(resolvedConfig.cookies)
-      })
-    });
-  };
-};
-
-
-
-
-
-
-exports.loggers = loggers; exports.defaultAuthConfig = defaultAuthConfig; exports.resolveAuthConfig = resolveAuthConfig; exports.createCivicAuthPlugin = createCivicAuthPlugin;
-//# sourceMappingURL=chunk-2OZJONNO.js.map

package/dist/chunk-2OZJONNO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/Users/pedroapfilho/dev/civic-auth/packages/civic-auth-client/dist/chunk-2OZJONNO.js","../src/lib/logger.ts","../src/nextjs/config.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACA;ACTA,4EAAkB;AAElB,IAAM,aAAA,EAAe,aAAA;AASrB,IAAM,YAAA,EAAN,MAAoC;AAAA,EAMlC,WAAA,CAAY,SAAA,EAAmB;AAE7B,IAAA,IAAA,CAAK,YAAA,EAAc,6BAAA,CAAM,EAAA;AACD,IAAA;AACA,IAAA;AACC,IAAA;AAEA,IAAA;AACD,IAAA;AACA,IAAA;AACC,IAAA;AAC3B,EAAA;AAEiD,EAAA;AACrB,IAAA;AAC5B,EAAA;AAEgD,EAAA;AACrB,IAAA;AAC3B,EAAA;AAEgD,EAAA;AACrB,IAAA;AAC3B,EAAA;AAEiD,EAAA;AACrB,IAAA;AAC5B,EAAA;AACF;AAE6B;AAIN;AAAA;AAEb,EAAA;AACe,IAAA;AACI,IAAA;AACf,IAAA;AACW,MAAA;AACrB,IAAA;AACF,EAAA;AAAA;AAEO,EAAA;AACoB,IAAA;AACL,IAAA;AACE,IAAA;AACxB,EAAA;AAAA;AAEU,EAAA;AACiB,IAAA;AACH,IAAA;AACxB,EAAA;AACF;ADb8B;AACA;AE/CA;AAZ9B;AAqCS;AACoB;AAK8C;AAC5D,EAAA;AACA,EAAA;AACC,EAAA;AACH,EAAA;AACD,EAAA;AACI,EAAA;AACJ,EAAA;AACD,EAAA;AACC,IAAA;AACN,MAAA;AACU,QAAA;AACE,QAAA;AACA,QAAA;AACJ,QAAA;AACR,MAAA;AACA,MAAA;AACU,QAAA;AACE,QAAA;AACA,QAAA;AACJ,QAAA;AACR,MAAA;AACA,MAAA;AACU,QAAA;AACE,QAAA;AACA,QAAA;AACJ,QAAA;AACR,MAAA;AACA,MAAA;AACU,QAAA;AACE,QAAA;AACA,QAAA;AACJ,QAAA;AACR,MAAA;AACF,IAAA;AACM,IAAA;AACI,MAAA;AACE,MAAA;AACA,MAAA;AACJ,MAAA;AACO,MAAA;AAAA;AACf,IAAA;AACF,EAAA;AACF;AAoBE;AA1GF,EAAA;AA6GwB,EAAA;AACE,IAAA;AACG,IAAA;AACA,IAAA;AACC,IAAA;AACJ,IAAA;AACF,IAAA;AACG,IAAA;AACN,IAAA;AACA,IAAA;AACI,IAAA;AAGtB,EAAA;AACoB,EAAA;AAAA;AAIV,IAAA;AACC,MAAA;AAKF,MAAA;AAKR,IAAA;AACF,EAAA;AAEO,EAAA;AACL,IAAA;AACe,IAAA;AACjB,EAAA;AACa,EAAA;AACI,EAAA;AACC,IAAA;AAClB,EAAA;AACO,EAAA;AACT;AA0BE;AAEoC,EAAA;AAC3B,IAAA;AACL,MAAA;AACe,MAAA;AACjB,IAAA;AACuB,IAAA;AAChB,IAAA;AAEA,MAAA;AAAA;AAGH,QAAA;AACqB,QAAA;AACrB,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACqB,QAAA;AACC,QAAA;AACA,QAAA;AACtB,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AACF;AFtC8B;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/pedroapfilho/dev/civic-auth/packages/civic-auth-client/dist/chunk-2OZJONNO.js","sourcesContent":[null,"import debug from \"debug\";\n\nconst PACKAGE_NAME = \"@civic/auth\";\n\nexport interface Logger {\n  debug(message: string, ...args: unknown[]): void;\n  info(message: string, ...args: unknown[]): void;\n  warn(message: string, ...args: unknown[]): void;\n  error(message: string, ...args: unknown[]): void;\n}\n\nclass DebugLogger implements Logger {\n  private debugLogger: debug.Debugger;\n  private infoLogger: debug.Debugger;\n  private warnLogger: debug.Debugger;\n  private errorLogger: debug.Debugger;\n\n  constructor(namespace: string) {\n    // Format: @org/package:library:component:level\n    this.debugLogger = debug(`${PACKAGE_NAME}:${namespace}:debug`);\n    this.infoLogger = debug(`${PACKAGE_NAME}:${namespace}:info`);\n    this.warnLogger = debug(`${PACKAGE_NAME}:${namespace}:warn`);\n    this.errorLogger = debug(`${PACKAGE_NAME}:${namespace}:error`);\n\n    this.debugLogger.color = \"4\";\n    this.infoLogger.color = \"2\";\n    this.warnLogger.color = \"3\";\n    this.errorLogger.color = \"1\";\n  }\n\n  debug(message: string, ...args: unknown[]): void {\n    this.debugLogger(message, ...args);\n  }\n\n  info(message: string, ...args: unknown[]): void {\n    this.infoLogger(message, ...args);\n  }\n\n  warn(message: string, ...args: unknown[]): void {\n    this.warnLogger(message, ...args);\n  }\n\n  error(message: string, ...args: unknown[]): void {\n    this.errorLogger(message, ...args);\n  }\n}\n\nexport const createLogger = (namespace: string): Logger =>\n  new DebugLogger(namespace);\n\n// Pre-configured loggers for different parts of your package\nexport const loggers = {\n  // Next.js specific loggers\n  nextjs: {\n    routes: createLogger(\"api:routes\"),\n    middleware: createLogger(\"api:middleware\"),\n    handlers: {\n      auth: createLogger(\"api:handlers:auth\"),\n    },\n  },\n  // React specific loggers\n  react: {\n    components: createLogger(\"react:components\"),\n    hooks: createLogger(\"react:hooks\"),\n    context: createLogger(\"react:context\"),\n  },\n  // Shared utilities loggers\n  services: {\n    validation: createLogger(\"utils:validation\"),\n    network: createLogger(\"utils:network\"),\n  },\n} as const;\n","/* eslint-disable turbo/no-undeclared-env-vars */\nimport { NextConfig } from \"next\";\nimport { loggers } from \"@/lib/logger\";\nimport { withoutUndefined } from \"@/utils\";\nimport {\n  CodeVerifier,\n  CookieConfig,\n  OAuthTokens,\n  TokensCookieConfig,\n} from \"@/shared/types\";\nimport { DEFAULT_AUTH_SERVER } from \"@/constants\";\n\nconst logger = loggers.nextjs.handlers.auth;\n\nexport type CookiesConfigObject = {\n  tokens: TokensCookieConfig;\n  user: CookieConfig;\n};\n\nexport type AuthConfigWithDefaults = {\n  clientId: string;\n  oauthServer: string;\n  callbackUrl: string;\n  loginUrl: string;\n  logoutUrl: string;\n  appUrl?: string;\n  challengeUrl: string;\n  include: string[];\n  exclude: string[];\n  cookies: CookiesConfigObject;\n};\n\nexport type AuthConfig = Partial<AuthConfigWithDefaults>;\n\nexport type DefinedAuthConfig = AuthConfigWithDefaults;\n\nconst appUrl =\n  typeof process !== \"undefined\" ? process?.env?.NEXT_PUBLIC_APP_URL || \"\" : \"\";\nconst defaultServerSecure = !appUrl.startsWith(\"http://localhost\");\n\n/**\n * Default configuration values that will be used if not overridden\n */\nexport const defaultAuthConfig: Omit<AuthConfigWithDefaults, \"clientId\"> = {\n  oauthServer: DEFAULT_AUTH_SERVER,\n  callbackUrl: \"/api/auth/callback\",\n  challengeUrl: \"/api/auth/challenge\",\n  logoutUrl: \"/api/auth/logout\",\n  loginUrl: \"/\",\n  include: [\"/*\"],\n  exclude: [],\n  cookies: {\n    tokens: {\n      [OAuthTokens.ID_TOKEN]: {\n        secure: defaultServerSecure,\n        httpOnly: true,\n        sameSite: \"strict\",\n        path: \"/\",\n      },\n      [OAuthTokens.ACCESS_TOKEN]: {\n        secure: defaultServerSecure,\n        httpOnly: true,\n        sameSite: \"strict\",\n        path: \"/\",\n      },\n      [OAuthTokens.REFRESH_TOKEN]: {\n        secure: defaultServerSecure,\n        httpOnly: true,\n        sameSite: \"strict\",\n        path: \"/\",\n      },\n      [CodeVerifier.COOKIE_NAME]: {\n        secure: defaultServerSecure,\n        httpOnly: true,\n        sameSite: \"strict\",\n        path: \"/\",\n      },\n    },\n    user: {\n      secure: defaultServerSecure,\n      httpOnly: false,\n      sameSite: \"strict\",\n      path: \"/\",\n      maxAge: 60 * 60, // 1 hour\n    },\n  },\n};\n\n/**\n * Resolves the authentication configuration by combining:\n * 1. Default values\n * 2. Environment variables (set internally by the plugin)\n * 3. Explicitly passed configuration\n *\n * Note: Developers should not set _civic_auth_* environment variables directly.\n * Instead, pass configuration to the createCivicAuthPlugin in next.config.js:\n *\n * @example\n * ```js\n * // next.config.js\n * export default createCivicAuthPlugin({\n *   callbackUrl: '/custom/callback',\n * })\n * ```\n */\nexport const resolveAuthConfig = (\n  config: AuthConfig = {},\n): AuthConfigWithDefaults => {\n  // Read configuration that was set by the plugin via environment variables\n  const configFromEnv = withoutUndefined({\n    clientId: process.env._civic_auth_client_id,\n    oauthServer: process.env._civic_oauth_server,\n    callbackUrl: process.env._civic_auth_callback_url,\n    challengeUrl: process.env._civic_auth_challenge_url,\n    loginUrl: process.env._civic_auth_login_url,\n    appUrl: process.env._civic_auth_app_url,\n    logoutUrl: process.env._civic_auth_logout_url,\n    include: process.env._civic_auth_includes?.split(\",\"),\n    exclude: process.env._civic_auth_excludes?.split(\",\"),\n    cookies: process.env._civic_auth_cookie_config\n      ? JSON.parse(process.env._civic_auth_cookie_config)\n      : undefined,\n  }) as AuthConfig;\n  const mergedConfig = {\n    ...defaultAuthConfig,\n    ...configFromEnv, // Apply plugin-set config\n    ...config, // Override with directly passed config\n    cookies: {\n      tokens: {\n        ...defaultAuthConfig.cookies.tokens,\n        ...(configFromEnv?.cookies?.tokens || {}),\n        ...(config.cookies?.tokens || {}),\n      },\n      user: {\n        ...defaultAuthConfig.cookies.user,\n        ...(configFromEnv?.cookies?.user || {}),\n        ...(config.cookies?.user || {}),\n      },\n    },\n  };\n\n  logger.debug(\n    \"Config from environment:\",\n    JSON.stringify(configFromEnv, null, 2),\n  );\n  logger.debug(\"Resolved config:\", JSON.stringify(mergedConfig, null, 2));\n  if (mergedConfig.clientId === undefined) {\n    throw new Error(\"Civic Auth client ID is required\");\n  }\n  return mergedConfig as AuthConfigWithDefaults & { clientId: string };\n};\n\n/**\n * Creates a Next.js plugin that handles auth configuration.\n *\n * This is the main configuration point for the auth system.\n * Do not set _civic_auth_* environment variables directly - instead,\n * pass your configuration here:\n *\n * @example\n * ```js\n * // next.config.js\n * export default createCivicAuthPlugin({\n *   clientId: 'my-client-id',\n *   callbackUrl: '/custom/callback',\n *   loginUrl: '/custom/login',\n *   logoutUrl: '/custom/logout',\n *   include: ['/protected/*'],\n *   exclude: ['/public/*']\n * })\n * ```\n *\n * The plugin sets internal environment variables that are used by\n * the auth system. These variables should not be set manually.\n */\nexport const createCivicAuthPlugin = (\n  authConfig: AuthConfig & Pick<Required<AuthConfig>, \"clientId\">,\n) => {\n  return (nextConfig?: NextConfig) => {\n    logger.debug(\n      \"createCivicAuthPlugin nextConfig\",\n      JSON.stringify(nextConfig, null, 2),\n    );\n    const resolvedConfig = resolveAuthConfig({ ...authConfig });\n    return {\n      ...nextConfig,\n      env: {\n        ...nextConfig?.env,\n        // Internal environment variables - do not set these manually\n        _civic_auth_client_id: resolvedConfig.clientId,\n        _civic_oauth_server: resolvedConfig.oauthServer,\n        _civic_auth_callback_url: resolvedConfig.callbackUrl,\n        _civic_auth_challenge_url: resolvedConfig.challengeUrl,\n        _civic_auth_login_url: resolvedConfig.loginUrl,\n        _civic_auth_logout_url: resolvedConfig.logoutUrl,\n        _civic_auth_app_url: resolvedConfig.appUrl,\n        _civic_auth_includes: resolvedConfig.include.join(\",\"),\n        _civic_auth_excludes: resolvedConfig.exclude.join(\",\"),\n        _civic_auth_cookie_config: JSON.stringify(resolvedConfig.cookies),\n      },\n    };\n  };\n};\n"]}