@civic/auth 0.0.1-tsc.alpha.3 → 0.1.1-beta.0

package/dist/test/unit/nextjs/NextAuthProvider.test.js

@@ -1,29 +0,0 @@
-import { render } from "@testing-library/react";
-import { describe, it, vi, expect } from "vitest";
-import { CivicNextAuthProvider } from "@/nextjs/providers/NextAuthProvider.js";
-import { resolveAuthConfig } from "@/nextjs/config.js";
-import React from "react";
-vi.mock("@/nextjs/config.js", () => ({
-    resolveAuthConfig: vi.fn(() => ({
-        clientId: "test-client-id",
-        oauthServer: "https://example.com",
-        callbackUrl: "https://example.com/callback",
-        challengeUrl: "https://example.com/challenge",
-        logoutUrl: "https://example.com/logout",
-    })),
-}));
-vi.mock("@/nextjs/hooks/useUserCookie", () => ({
-    useUserCookie: vi.fn(),
-}));
-vi.mock("@/nextjs/hooks/useTokenCookie", () => ({
-    useTokenCookie: vi.fn(),
-}));
-describe("CivicNextAuthProvider", () => {
-    it("should call resolveAuthConfig with no arguments", () => {
-        const children = React.createElement("div", null, "Test Content");
-        render(React.createElement(CivicNextAuthProvider, null, children));
-        // The Next implementation should take all config from the next.config.js file, no config taken from provider props.
-        expect(resolveAuthConfig).toHaveBeenCalledWith();
-    });
-});
-//# sourceMappingURL=NextAuthProvider.test.js.map

package/dist/test/unit/nextjs/NextAuthProvider.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"NextAuthProvider.test.js","sourceRoot":"","sources":["../../../../test/unit/nextjs/NextAuthProvider.test.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9B,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,8BAA8B;QAC3C,YAAY,EAAE,+BAA+B;QAC7C,SAAS,EAAE,4BAA4B;KACxC,CAAC,CAAC;CACJ,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;CACvB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9C,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;CACxB,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,QAAQ,GAAG,gDAAuB,CAAC;QAEzC,MAAM,CACJ,oBAAC,qBAAqB,QACnB,QAAQ,CACa,CACzB,CAAC;QAEF,oHAAoH;QACpH,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { render } from \"@testing-library/react\";\nimport { describe, it, vi, expect } from \"vitest\";\nimport { CivicNextAuthProvider } from \"@/nextjs/providers/NextAuthProvider.js\";\nimport { resolveAuthConfig } from \"@/nextjs/config.js\";\nimport React from \"react\";\n\nvi.mock(\"@/nextjs/config.js\", () => ({\n  resolveAuthConfig: vi.fn(() => ({\n    clientId: \"test-client-id\",\n    oauthServer: \"https://example.com\",\n    callbackUrl: \"https://example.com/callback\",\n    challengeUrl: \"https://example.com/challenge\",\n    logoutUrl: \"https://example.com/logout\",\n  })),\n}));\n\nvi.mock(\"@/nextjs/hooks/useUserCookie\", () => ({\n  useUserCookie: vi.fn(),\n}));\n\nvi.mock(\"@/nextjs/hooks/useTokenCookie\", () => ({\n  useTokenCookie: vi.fn(),\n}));\n\ndescribe(\"CivicNextAuthProvider\", () => {\n  it(\"should call resolveAuthConfig with no arguments\", () => {\n    const children = <div>Test Content</div>;\n\n    render(\n      <CivicNextAuthProvider>\n        {children}\n      </CivicNextAuthProvider>\n    );\n\n    // The Next implementation should take all config from the next.config.js file, no config taken from provider props.\n    expect(resolveAuthConfig).toHaveBeenCalledWith();\n  });\n});"]}

package/dist/test/unit/nextjs/config.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=config.test.d.ts.map

package/dist/test/unit/nextjs/config.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/nextjs/config.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/nextjs/config.test.js

@@ -1,189 +0,0 @@
-/* eslint-disable turbo/no-undeclared-env-vars */
-import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
-import { resolveAuthConfig, createCivicAuthPlugin, defaultAuthConfig, } from "@/nextjs/config.js";
-import { DEFAULT_AUTH_SERVER } from "@/constants.js";
-const defaultCookies = {
-    id_token: {
-        httpOnly: true,
-        path: "/",
-        sameSite: "strict",
-        secure: false,
-    },
-    access_token: {
-        httpOnly: true,
-        path: "/",
-        sameSite: "strict",
-        secure: false,
-    },
-    refresh_token: {
-        httpOnly: true,
-        path: "/",
-        sameSite: "strict",
-        secure: false,
-    },
-    code_verifier: {
-        httpOnly: true,
-        path: "/",
-        sameSite: "strict",
-        secure: false,
-    },
-    app_url: {
-        httpOnly: true,
-        path: "/",
-        sameSite: "strict",
-        secure: false,
-    },
-};
-describe("nextjs/config", () => {
-    const originalEnv = process.env;
-    beforeEach(() => {
-        vi.resetModules();
-        process.env = { ...originalEnv, NODE_ENV: "development" };
-    });
-    afterEach(() => {
-        process.env = originalEnv;
-        vi.restoreAllMocks();
-    });
-    describe("resolveAuthConfig", () => {
-        it("should throw an error if clientId is not provided", () => {
-            expect(() => resolveAuthConfig()).toThrowError("Civic Auth client ID is required");
-        });
-        it("should use default values when no config is provided", () => {
-            // client id must be defined
-            process.env._civic_auth_client_id = "clientId";
-            const result = resolveAuthConfig();
-            expect(result).toEqual({ ...defaultAuthConfig, clientId: "clientId" });
-        });
-        it("should override default values with provided config", () => {
-            const config = {
-                clientId: "clientId",
-                callbackUrl: "/custom/callback",
-                loginUrl: "/custom/login",
-                include: ["/protected/*"],
-                exclude: ["/public/*"],
-            };
-            const result = resolveAuthConfig(config);
-            expect(result.callbackUrl).toBe("/custom/callback");
-            expect(result.loginUrl).toBe("/custom/login");
-            expect(result.include).toEqual(["/protected/*"]);
-            expect(result.exclude).toEqual(["/public/*"]);
-        });
-        it("should use environment variables if set", () => {
-            process.env._civic_auth_client_id = "clientId";
-            process.env._civic_auth_callback_url = "/env/callback";
-            process.env._civic_auth_login_url = "/env/login";
-            process.env._civic_auth_includes = "/env/protected/*";
-            process.env._civic_auth_excludes = "/env/public/*";
-            const result = resolveAuthConfig();
-            expect(result.callbackUrl).toBe("/env/callback");
-            expect(result.loginUrl).toBe("/env/login");
-            expect(result.include).toEqual(["/env/protected/*"]);
-            expect(result.exclude).toEqual(["/env/public/*"]);
-        });
-        it("should prioritize provided config over environment variables", () => {
-            process.env._civic_auth_callback_url = "/env/callback";
-            const config = {
-                clientId: "clientId",
-                callbackUrl: "/config/callback",
-            };
-            const result = resolveAuthConfig(config);
-            expect(result.callbackUrl).toBe("/config/callback");
-        });
-        it("should merge cookie configurations correctly", () => {
-            const config = {
-                clientId: "clientId",
-                cookies: {
-                    tokens: {
-                        id_token: { ...defaultCookies.id_token, secure: false },
-                    },
-                    user: {
-                        httpOnly: false,
-                        secure: false,
-                        sameSite: "strict",
-                    },
-                },
-            };
-            const result = resolveAuthConfig(config);
-            expect(result.cookies.tokens).toEqual({
-                ...defaultCookies,
-                id_token: { ...defaultCookies.id_token, secure: false },
-            });
-            expect(result.cookies.user).toEqual({
-                httpOnly: false,
-                secure: false,
-                sameSite: "strict",
-                path: "/",
-                maxAge: 3600,
-            });
-        });
-        it("should set secure to true in the default cookie configs if NODE_ENV is not development", async () => {
-            process.env = { ...originalEnv, NODE_ENV: "production" };
-            // re-import to get the configs with the updated NODE_ENV
-            const configs = await import("../../../src/nextjs/config.js");
-            const result = configs.resolveAuthConfig({ clientId: "clientId" });
-            Object.values(result.cookies.tokens).forEach((cookie) => {
-                expect(cookie.secure).toBe(true);
-            });
-        });
-    });
-    describe("createCivicAuthPlugin", () => {
-        it("should return a function", () => {
-            const plugin = createCivicAuthPlugin({ clientId: "clientId" });
-            expect(typeof plugin).toBe("function");
-        });
-        it("should set environment variables based on resolved config", () => {
-            const config = {
-                clientId: "clientId",
-                callbackUrl: "/custom/callback",
-                loginUrl: "/custom/login",
-                logoutUrl: "/custom/logout",
-                include: ["/protected/*"],
-                exclude: ["/public/*"],
-                cookies: {
-                    tokens: defaultCookies,
-                    user: {
-                        secure: false,
-                        sameSite: "strict",
-                        maxAge: 3600,
-                    },
-                },
-            };
-            const plugin = createCivicAuthPlugin(config);
-            const nextConfig = plugin({});
-            expect(nextConfig.env).toEqual({
-                _civic_auth_client_id: "clientId",
-                _civic_auth_callback_url: "/custom/callback",
-                _civic_auth_challenge_url: "/api/auth/challenge",
-                _civic_auth_login_url: "/custom/login",
-                _civic_auth_logout_url: "/custom/logout",
-                _civic_auth_includes: "/protected/*",
-                _civic_auth_excludes: "/public/*",
-                _civic_oauth_server: DEFAULT_AUTH_SERVER,
-                _civic_auth_cookie_config: JSON.stringify({
-                    tokens: defaultCookies,
-                    user: {
-                        secure: false,
-                        httpOnly: false,
-                        sameSite: "strict",
-                        path: "/",
-                        maxAge: 3600,
-                    },
-                }),
-            });
-        });
-        it("should merge with existing Next.js config", () => {
-            const existingConfig = {
-                reactStrictMode: true,
-                env: {
-                    CUSTOM_VAR: "value",
-                },
-            };
-            const plugin = createCivicAuthPlugin({ clientId: "clientId" });
-            const nextConfig = plugin(existingConfig);
-            expect(nextConfig.reactStrictMode).toBe(true);
-            expect(nextConfig.env).toHaveProperty("CUSTOM_VAR", "value");
-            expect(nextConfig.env).toHaveProperty("_civic_auth_callback_url");
-        });
-    });
-});
-//# sourceMappingURL=config.test.js.map

package/dist/test/unit/nextjs/config.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../../../test/unit/nextjs/config.test.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EAErB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,cAAc,GAAG;IACrB,QAAQ,EAAE;QACR,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;IACD,YAAY,EAAE;QACZ,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;IACD,OAAO,EAAE;QACP,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;CACoB,CAAC;AAExB,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC1B,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,YAAY,CAC5C,kCAAkC,CACnC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,4BAA4B;YAC5B,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,UAAU,CAAC;YAC/C,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,MAAM,GAAe;gBACzB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,kBAAkB;gBAC/B,QAAQ,EAAE,eAAe;gBACzB,OAAO,EAAE,CAAC,cAAc,CAAC;gBACzB,OAAO,EAAE,CAAC,WAAW,CAAC;aACvB,CAAC;YACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,UAAU,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,eAAe,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,YAAY,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,kBAAkB,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,eAAe,CAAC;YAEnD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,eAAe,CAAC;YACvD,MAAM,MAAM,GAAe;gBACzB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,kBAAkB;aAChC,CAAC;YAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,MAAM,GAAe;gBACzB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE;oBACP,MAAM,EAAE;wBACN,QAAQ,EAAE,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;qBAClC;oBACvB,IAAI,EAAE;wBACJ,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,KAAK;wBACb,QAAQ,EAAE,QAAQ;qBACnB;iBACF;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACpC,GAAG,cAAc;gBACjB,QAAQ,EAAE,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;aACxD,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;gBAClC,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;YACtG,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;YACzD,yDAAyD;YACzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBACtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,MAAM,GAAG;gBACb,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,kBAAkB;gBAC/B,QAAQ,EAAE,eAAe;gBACzB,SAAS,EAAE,gBAAgB;gBAC3B,OAAO,EAAE,CAAC,cAAc,CAAC;gBACzB,OAAO,EAAE,CAAC,WAAW,CAAC;gBACtB,OAAO,EAAE;oBACP,MAAM,EAAE,cAAc;oBACtB,IAAI,EAAE;wBACJ,MAAM,EAAE,KAAK;wBACb,QAAQ,EAAE,QAAQ;wBAClB,MAAM,EAAE,IAAI;qBACJ;iBACX;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;YAE9B,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;gBAC7B,qBAAqB,EAAE,UAAU;gBACjC,wBAAwB,EAAE,kBAAkB;gBAC5C,yBAAyB,EAAE,qBAAqB;gBAChD,qBAAqB,EAAE,eAAe;gBACtC,sBAAsB,EAAE,gBAAgB;gBACxC,oBAAoB,EAAE,cAAc;gBACpC,oBAAoB,EAAE,WAAW;gBACjC,mBAAmB,EAAE,mBAAmB;gBACxC,yBAAyB,EAAE,IAAI,CAAC,SAAS,CAAC;oBACxC,MAAM,EAAE,cAAc;oBACtB,IAAI,EAAE;wBACJ,MAAM,EAAE,KAAK;wBACb,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,GAAG;wBACT,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC;aACH,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,cAAc,GAAG;gBACrB,eAAe,EAAE,IAAI;gBACrB,GAAG,EAAE;oBACH,UAAU,EAAE,OAAO;iBACpB;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;YAE1C,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC7D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,0BAA0B,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["/* eslint-disable turbo/no-undeclared-env-vars */\nimport { describe, it, expect, beforeEach, afterEach, vi } from \"vitest\";\nimport {\n  resolveAuthConfig,\n  createCivicAuthPlugin,\n  type AuthConfig,\n  defaultAuthConfig,\n} from \"@/nextjs/config.js\";\nimport type { TokensCookieConfig } from \"@/index.js\";\nimport { DEFAULT_AUTH_SERVER } from \"@/constants.js\";\n\nconst defaultCookies = {\n  id_token: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n  access_token: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n  refresh_token: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n  code_verifier: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n  app_url: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n} as TokensCookieConfig;\n\ndescribe(\"nextjs/config\", () => {\n  const originalEnv = process.env;\n\n  beforeEach(() => {\n    vi.resetModules();\n    process.env = { ...originalEnv, NODE_ENV: \"development\" };\n  });\n\n  afterEach(() => {\n    process.env = originalEnv;\n    vi.restoreAllMocks();\n  });\n\n  describe(\"resolveAuthConfig\", () => {\n    it(\"should throw an error if clientId is not provided\", () => {\n      expect(() => resolveAuthConfig()).toThrowError(\n        \"Civic Auth client ID is required\",\n      );\n    });\n\n    it(\"should use default values when no config is provided\", () => {\n      // client id must be defined\n      process.env._civic_auth_client_id = \"clientId\";\n      const result = resolveAuthConfig();\n      expect(result).toEqual({ ...defaultAuthConfig, clientId: \"clientId\" });\n    });\n\n    it(\"should override default values with provided config\", () => {\n      const config: AuthConfig = {\n        clientId: \"clientId\",\n        callbackUrl: \"/custom/callback\",\n        loginUrl: \"/custom/login\",\n        include: [\"/protected/*\"],\n        exclude: [\"/public/*\"],\n      };\n      const result = resolveAuthConfig(config);\n      expect(result.callbackUrl).toBe(\"/custom/callback\");\n      expect(result.loginUrl).toBe(\"/custom/login\");\n      expect(result.include).toEqual([\"/protected/*\"]);\n      expect(result.exclude).toEqual([\"/public/*\"]);\n    });\n\n    it(\"should use environment variables if set\", () => {\n      process.env._civic_auth_client_id = \"clientId\";\n      process.env._civic_auth_callback_url = \"/env/callback\";\n      process.env._civic_auth_login_url = \"/env/login\";\n      process.env._civic_auth_includes = \"/env/protected/*\";\n      process.env._civic_auth_excludes = \"/env/public/*\";\n\n      const result = resolveAuthConfig();\n      expect(result.callbackUrl).toBe(\"/env/callback\");\n      expect(result.loginUrl).toBe(\"/env/login\");\n      expect(result.include).toEqual([\"/env/protected/*\"]);\n      expect(result.exclude).toEqual([\"/env/public/*\"]);\n    });\n\n    it(\"should prioritize provided config over environment variables\", () => {\n      process.env._civic_auth_callback_url = \"/env/callback\";\n      const config: AuthConfig = {\n        clientId: \"clientId\",\n        callbackUrl: \"/config/callback\",\n      };\n\n      const result = resolveAuthConfig(config);\n      expect(result.callbackUrl).toBe(\"/config/callback\");\n    });\n\n    it(\"should merge cookie configurations correctly\", () => {\n      const config: AuthConfig = {\n        clientId: \"clientId\",\n        cookies: {\n          tokens: {\n            id_token: { ...defaultCookies.id_token, secure: false },\n          } as TokensCookieConfig,\n          user: {\n            httpOnly: false,\n            secure: false,\n            sameSite: \"strict\",\n          },\n        },\n      };\n\n      const result = resolveAuthConfig(config);\n      expect(result.cookies.tokens).toEqual({\n        ...defaultCookies,\n        id_token: { ...defaultCookies.id_token, secure: false },\n      });\n\n      expect(result.cookies.user).toEqual({\n        httpOnly: false,\n        secure: false,\n        sameSite: \"strict\",\n        path: \"/\",\n        maxAge: 3600,\n      });\n    });\n\n    it(\"should set secure to true in the default cookie configs if NODE_ENV is not development\", async () => {\n      process.env = { ...originalEnv, NODE_ENV: \"production\" };\n      // re-import to get the configs with the updated NODE_ENV\n      const configs = await import(\"../../../src/nextjs/config.js\");\n      const result = configs.resolveAuthConfig({ clientId: \"clientId\" });\n      Object.values(result.cookies.tokens).forEach((cookie) => {\n        expect(cookie.secure).toBe(true);\n      });\n    });\n  });\n\n  describe(\"createCivicAuthPlugin\", () => {\n    it(\"should return a function\", () => {\n      const plugin = createCivicAuthPlugin({ clientId: \"clientId\" });\n      expect(typeof plugin).toBe(\"function\");\n    });\n\n    it(\"should set environment variables based on resolved config\", () => {\n      const config = {\n        clientId: \"clientId\",\n        callbackUrl: \"/custom/callback\",\n        loginUrl: \"/custom/login\",\n        logoutUrl: \"/custom/logout\",\n        include: [\"/protected/*\"],\n        exclude: [\"/public/*\"],\n        cookies: {\n          tokens: defaultCookies,\n          user: {\n            secure: false,\n            sameSite: \"strict\",\n            maxAge: 3600,\n          } as const,\n        },\n      };\n\n      const plugin = createCivicAuthPlugin(config);\n      const nextConfig = plugin({});\n\n      expect(nextConfig.env).toEqual({\n        _civic_auth_client_id: \"clientId\",\n        _civic_auth_callback_url: \"/custom/callback\",\n        _civic_auth_challenge_url: \"/api/auth/challenge\",\n        _civic_auth_login_url: \"/custom/login\",\n        _civic_auth_logout_url: \"/custom/logout\",\n        _civic_auth_includes: \"/protected/*\",\n        _civic_auth_excludes: \"/public/*\",\n        _civic_oauth_server: DEFAULT_AUTH_SERVER,\n        _civic_auth_cookie_config: JSON.stringify({\n          tokens: defaultCookies,\n          user: {\n            secure: false,\n            httpOnly: false,\n            sameSite: \"strict\",\n            path: \"/\",\n            maxAge: 3600,\n          },\n        }),\n      });\n    });\n\n    it(\"should merge with existing Next.js config\", () => {\n      const existingConfig = {\n        reactStrictMode: true,\n        env: {\n          CUSTOM_VAR: \"value\",\n        },\n      };\n\n      const plugin = createCivicAuthPlugin({ clientId: \"clientId\" });\n      const nextConfig = plugin(existingConfig);\n\n      expect(nextConfig.reactStrictMode).toBe(true);\n      expect(nextConfig.env).toHaveProperty(\"CUSTOM_VAR\", \"value\");\n      expect(nextConfig.env).toHaveProperty(\"_civic_auth_callback_url\");\n    });\n  });\n});\n"]}

package/dist/test/unit/nextjs/getUser.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=getUser.test.d.ts.map

package/dist/test/unit/nextjs/getUser.test.js

@@ -1,36 +0,0 @@
-import { describe, it, expect, beforeEach, vi } from "vitest";
-import { GenericUserSession } from "@/shared/lib/UserSession.js";
-import { getUser } from "@/nextjs/index.js";
-import { NextjsClientStorage } from "@/nextjs/cookies.js";
-const mockUser = {
-    id: "user123",
-    name: "John Doe",
-    email: "john@example.com",
-    picture: "https://example.com/john.jpg",
-    idToken: "test-id-token",
-    accessToken: "test-access-token",
-    refreshToken: "test-refresh-token",
-};
-describe("getUser", () => {
-    beforeEach(() => {
-        vi.clearAllMocks();
-        vi.spyOn(GenericUserSession.prototype, "get").mockReturnValue(mockUser);
-        vi.spyOn(NextjsClientStorage.prototype, "get").mockImplementation((cookieName) => {
-            switch (cookieName) {
-                case "access_token":
-                    return "test-access-token";
-                case "id_token":
-                    return "test-id-token";
-                case "refresh_token":
-                    return "test-refresh-token";
-                default:
-                    return null;
-            }
-        });
-    });
-    it("should get the user from session", () => {
-        const user = getUser();
-        expect(user).toEqual(mockUser);
-    });
-});
-//# sourceMappingURL=getUser.test.js.map

package/dist/test/unit/nextjs/getUser.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"getUser.test.js","sourceRoot":"","sources":["../../../../test/unit/nextjs/getUser.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,QAAQ,GAAS;IACrB,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,kBAAkB;IACzB,OAAO,EAAE,8BAA8B;IACvC,OAAO,EAAE,eAAe;IACxB,WAAW,EAAE,mBAAmB;IAChC,YAAY,EAAE,oBAAoB;CAChB,CAAC;AAErB,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACxE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAC/D,CAAC,UAAkB,EAAE,EAAE;YACrB,QAAQ,UAAU,EAAE,CAAC;gBACnB,KAAK,cAAc;oBACjB,OAAO,mBAAmB,CAAC;gBAC7B,KAAK,UAAU;oBACb,OAAO,eAAe,CAAC;gBACzB,KAAK,eAAe;oBAClB,OAAO,oBAAoB,CAAC;gBAC9B;oBACE,OAAO,IAAI,CAAC;YAChB,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, beforeEach, vi } from \"vitest\";\nimport { GenericUserSession } from \"@/shared/lib/UserSession.js\";\nimport type { User } from \"@/types.ts\";\nimport { getUser } from \"@/nextjs/index.js\";\nimport { NextjsClientStorage } from \"@/nextjs/cookies.js\";\n\nconst mockUser: User = {\n  id: \"user123\",\n  name: \"John Doe\",\n  email: \"john@example.com\",\n  picture: \"https://example.com/john.jpg\",\n  idToken: \"test-id-token\",\n  accessToken: \"test-access-token\",\n  refreshToken: \"test-refresh-token\",\n} as unknown as User;\n\ndescribe(\"getUser\", () => {\n  beforeEach(() => {\n    vi.clearAllMocks();\n    vi.spyOn(GenericUserSession.prototype, \"get\").mockReturnValue(mockUser);\n    vi.spyOn(NextjsClientStorage.prototype, \"get\").mockImplementation(\n      (cookieName: string) => {\n        switch (cookieName) {\n          case \"access_token\":\n            return \"test-access-token\";\n          case \"id_token\":\n            return \"test-id-token\";\n          case \"refresh_token\":\n            return \"test-refresh-token\";\n          default:\n            return null;\n        }\n      },\n    );\n  });\n\n  it(\"should get the user from session\", () => {\n    const user = getUser();\n    expect(user).toEqual(mockUser);\n  });\n});\n"]}

package/dist/test/unit/nextjs/middleware.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=middleware.test.d.ts.map

package/dist/test/unit/nextjs/middleware.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"middleware.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/nextjs/middleware.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/nextjs/middleware.test.js

@@ -1,113 +0,0 @@
-import { describe, it, expect, beforeEach, vi } from "vitest";
-import { NextResponse } from "next/server.js";
-import { authMiddleware, withAuth } from "@/nextjs/middleware/index.js";
-import { defaultAuthConfig } from "@/nextjs/config.js";
-// Mock next/server
-vi.mock("next/server.js", () => ({
-    NextResponse: {
-        next: vi.fn(() => ({ type: "next" })),
-        redirect: vi.fn((url) => ({ type: "redirect", url })),
-    },
-}));
-describe("Auth Middleware", () => {
-    let request;
-    beforeEach(() => {
-        // Reset mocks
-        vi.clearAllMocks();
-        // Create base request
-        request = {
-            nextUrl: {
-                pathname: "/protected",
-            },
-            cookies: {
-                get: vi.fn(),
-            },
-            method: "GET",
-            url: "http://example.com/protected",
-        };
-        process.env._civic_auth_client_id = "abc";
-    });
-    describe("authMiddleware", () => {
-        /* FIXME
-        it("should redirect to login when no token present", async () => {
-          const middleware = authMiddleware();
-          const response = await middleware(request);
-    
-          expect(NextResponse.redirect).toHaveBeenCalledWith("http://example.com/");
-          expect(response.type).toBe("redirect");
-        });
-        */
-        it("should allow access when token is present", async () => {
-            request.cookies.get = vi.fn().mockReturnValue({ value: "valid-token" });
-            const middleware = authMiddleware();
-            const response = await middleware(request);
-            expect(NextResponse.next).toHaveBeenCalled();
-            expect(response.type).toBe("next");
-        });
-        it("should skip auth check for redirect to login page", async () => {
-            request.nextUrl.pathname = "/login";
-            const middleware = authMiddleware({
-                ...defaultAuthConfig,
-                loginUrl: "/login",
-            });
-            const response = await middleware(request);
-            expect(NextResponse.next).toHaveBeenCalled();
-            expect(response.type).toBe("next");
-        });
-        it("should not skip auth check for non-GET to login page", async () => {
-            request.nextUrl.pathname = "/login";
-            const middleware = authMiddleware({
-                ...defaultAuthConfig,
-                loginUrl: "/login",
-            });
-            const response = await middleware({
-                ...request,
-                method: "POST",
-            });
-            // should have redirected to the login page
-            expect(NextResponse.next).not.toHaveBeenCalled();
-            expect(response.type).toBe("redirect");
-        });
-    });
-    describe("withAuth", () => {
-        it("should chain custom middleware when authenticated", async () => {
-            request.cookies.get = vi.fn().mockReturnValue({ value: "valid-token" });
-            const customMiddleware = vi.fn(() => NextResponse.next());
-            const middleware = withAuth(customMiddleware);
-            await middleware(request);
-            expect(customMiddleware).toHaveBeenCalled();
-        });
-        it("should not chain custom middleware when unauthorized", async () => {
-            const customMiddleware = vi.fn(() => NextResponse.next());
-            const middleware = withAuth(customMiddleware);
-            const response = await middleware(request);
-            expect(customMiddleware).not.toHaveBeenCalled();
-            expect(NextResponse.redirect).toHaveBeenCalled();
-            expect(response.type).toBe("redirect");
-        });
-    });
-    describe("path matching", () => {
-        it("should respect include patterns", async () => {
-            request.cookies.get = vi.fn().mockReturnValue({ value: "valid-token" });
-            request.nextUrl.pathname = "/public";
-            const middleware = authMiddleware({
-                include: ["/protected/**"],
-            });
-            const response = await middleware(request);
-            expect(NextResponse.next).toHaveBeenCalled();
-            expect(response.type).toBe("next");
-        });
-        it("should respect exclude patterns", async () => {
-            request.cookies.get = vi.fn().mockReturnValue({ value: "valid-token" });
-            request.nextUrl.pathname = "/protected/public";
-            const middleware = authMiddleware({
-                include: ["/protected/**"],
-                exclude: ["/protected/public"],
-            });
-            const response = await middleware(request);
-            expect(NextResponse.next).toHaveBeenCalled();
-            expect(response.type).toBe("next");
-        });
-    });
-});
-//# sourceMappingURL=middleware.test.js.map

package/dist/test/unit/nextjs/middleware.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"middleware.test.js","sourceRoot":"","sources":["../../../../test/unit/nextjs/middleware.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAoB,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,mBAAmB;AACnB,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,YAAY,EAAE;QACZ,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACrC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;KACtD;CACF,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,OAAoB,CAAC;IAEzB,UAAU,CAAC,GAAG,EAAE;QACd,cAAc;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QAEnB,sBAAsB;QACtB,OAAO,GAAG;YACR,OAAO,EAAE;gBACP,QAAQ,EAAE,YAAY;aACvB;YACD,OAAO,EAAE;gBACP,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;aACb;YACD,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,8BAA8B;SACV,CAAC;QAE5B,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,KAAK,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B;;;;;;;;UAQE;QAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YACxE,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACpC,MAAM,UAAU,GAAG,cAAc,CAAC;gBAChC,GAAG,iBAAiB;gBACpB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACpC,MAAM,UAAU,GAAG,cAAc,CAAC;gBAChC,GAAG,iBAAiB;gBACpB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC;gBAChC,GAAG,OAAO;gBACV,MAAM,EAAE,MAAM;aACA,CAAC,CAAC;YAElB,2CAA2C;YAC3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YACxE,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAE9C,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE1B,MAAM,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAE9C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAChD,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;YAErC,MAAM,UAAU,GAAG,cAAc,CAAC;gBAChC,OAAO,EAAE,CAAC,eAAe,CAAC;aAC3B,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,mBAAmB,CAAC;YAE/C,MAAM,UAAU,GAAG,cAAc,CAAC;gBAChC,OAAO,EAAE,CAAC,eAAe,CAAC;gBAC1B,OAAO,EAAE,CAAC,mBAAmB,CAAC;aAC/B,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, beforeEach, vi } from \"vitest\";\nimport { NextResponse, type NextRequest } from \"next/server.js\";\nimport { authMiddleware, withAuth } from \"@/nextjs/middleware/index.js\";\nimport { defaultAuthConfig } from \"@/nextjs/config.js\";\n\n// Mock next/server\nvi.mock(\"next/server.js\", () => ({\n  NextResponse: {\n    next: vi.fn(() => ({ type: \"next\" })),\n    redirect: vi.fn((url) => ({ type: \"redirect\", url })),\n  },\n}));\n\ndescribe(\"Auth Middleware\", () => {\n  let request: NextRequest;\n\n  beforeEach(() => {\n    // Reset mocks\n    vi.clearAllMocks();\n\n    // Create base request\n    request = {\n      nextUrl: {\n        pathname: \"/protected\",\n      },\n      cookies: {\n        get: vi.fn(),\n      },\n      method: \"GET\",\n      url: \"http://example.com/protected\",\n    } as unknown as NextRequest;\n\n    process.env._civic_auth_client_id = \"abc\";\n  });\n\n  describe(\"authMiddleware\", () => {\n    /* FIXME\n    it(\"should redirect to login when no token present\", async () => {\n      const middleware = authMiddleware();\n      const response = await middleware(request);\n\n      expect(NextResponse.redirect).toHaveBeenCalledWith(\"http://example.com/\");\n      expect(response.type).toBe(\"redirect\");\n    });\n    */\n\n    it(\"should allow access when token is present\", async () => {\n      request.cookies.get = vi.fn().mockReturnValue({ value: \"valid-token\" });\n      const middleware = authMiddleware();\n      const response = await middleware(request);\n\n      expect(NextResponse.next).toHaveBeenCalled();\n      expect(response.type).toBe(\"next\");\n    });\n\n    it(\"should skip auth check for redirect to login page\", async () => {\n      request.nextUrl.pathname = \"/login\";\n      const middleware = authMiddleware({\n        ...defaultAuthConfig,\n        loginUrl: \"/login\",\n      });\n      const response = await middleware(request);\n\n      expect(NextResponse.next).toHaveBeenCalled();\n      expect(response.type).toBe(\"next\");\n    });\n\n    it(\"should not skip auth check for non-GET to login page\", async () => {\n      request.nextUrl.pathname = \"/login\";\n      const middleware = authMiddleware({\n        ...defaultAuthConfig,\n        loginUrl: \"/login\",\n      });\n      const response = await middleware({\n        ...request,\n        method: \"POST\",\n      } as NextRequest);\n\n      // should have redirected to the login page\n      expect(NextResponse.next).not.toHaveBeenCalled();\n      expect(response.type).toBe(\"redirect\");\n    });\n  });\n\n  describe(\"withAuth\", () => {\n    it(\"should chain custom middleware when authenticated\", async () => {\n      request.cookies.get = vi.fn().mockReturnValue({ value: \"valid-token\" });\n      const customMiddleware = vi.fn(() => NextResponse.next());\n      const middleware = withAuth(customMiddleware);\n\n      await middleware(request);\n\n      expect(customMiddleware).toHaveBeenCalled();\n    });\n\n    it(\"should not chain custom middleware when unauthorized\", async () => {\n      const customMiddleware = vi.fn(() => NextResponse.next());\n      const middleware = withAuth(customMiddleware);\n\n      const response = await middleware(request);\n\n      expect(customMiddleware).not.toHaveBeenCalled();\n      expect(NextResponse.redirect).toHaveBeenCalled();\n      expect(response.type).toBe(\"redirect\");\n    });\n  });\n\n  describe(\"path matching\", () => {\n    it(\"should respect include patterns\", async () => {\n      request.cookies.get = vi.fn().mockReturnValue({ value: \"valid-token\" });\n      request.nextUrl.pathname = \"/public\";\n\n      const middleware = authMiddleware({\n        include: [\"/protected/**\"],\n      });\n\n      const response = await middleware(request);\n\n      expect(NextResponse.next).toHaveBeenCalled();\n      expect(response.type).toBe(\"next\");\n    });\n\n    it(\"should respect exclude patterns\", async () => {\n      request.cookies.get = vi.fn().mockReturnValue({ value: \"valid-token\" });\n      request.nextUrl.pathname = \"/protected/public\";\n\n      const middleware = authMiddleware({\n        include: [\"/protected/**\"],\n        exclude: [\"/protected/public\"],\n      });\n\n      const response = await middleware(request);\n\n      expect(NextResponse.next).toHaveBeenCalled();\n      expect(response.type).toBe(\"next\");\n    });\n  });\n});\n"]}

package/dist/test/unit/nextjs/routeHandler.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=routeHandler.test.d.ts.map

package/dist/test/unit/nextjs/routeHandler.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"routeHandler.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/nextjs/routeHandler.test.ts"],"names":[],"mappings":""}