@clerk/backend 3.0.0-snapshot.v20260114034743 → 3.0.0-snapshot.v20260114114137

package/dist/constants.d.ts

@@ -3,6 +3,16 @@ export declare const API_VERSION = "v1";
 export declare const USER_AGENT: string;
 export declare const MAX_CACHE_LAST_UPDATED_AT_SECONDS: number;
 export declare const SUPPORTED_BAPI_VERSION = "2025-11-10";
+/**
+ * Sync status values for the __clerk_sync query parameter.
+ * Used to coordinate satellite domain authentication flows.
+ */
+export declare const ClerkSyncStatus: {
+    /** Trigger sync - satellite needs to handshake after returning from primary sign-in */
+    readonly NeedsSync: "1";
+    /** Sync completed - prevents re-sync loop after handshake completes */
+    readonly Completed: "2";
+};
 /**
  * @internal
  */
@@ -58,7 +68,9 @@ export declare const constants: {
         readonly Json: "application/json";
     };
     readonly QueryParameters: {
+        /** @deprecated Use ClerkSync with ClerkSyncStatus instead */
         readonly ClerkSynced: "__clerk_synced";
+        readonly ClerkSync: "__clerk_sync";
         readonly SuffixedCookies: "suffixed_cookies";
         readonly ClerkRedirectUrl: "__clerk_redirect_url";
         readonly DevBrowser: "__clerk_db_jwt";
@@ -70,6 +82,12 @@ export declare const constants: {
         readonly HandshakeFormat: "format";
         readonly Session: "__session";
     };
+    readonly ClerkSyncStatus: {
+        /** Trigger sync - satellite needs to handshake after returning from primary sign-in */
+        readonly NeedsSync: "1";
+        /** Sync completed - prevents re-sync loop after handshake completes */
+        readonly Completed: "2";
+    };
 };
 export type Constants = typeof constants;
 //# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,0BAA0B,CAAC;AAC/C,eAAO,MAAM,WAAW,OAAO,CAAC;AAEhC,eAAO,MAAM,UAAU,QAAuC,CAAC;AAC/D,eAAO,MAAM,iCAAiC,QAAS,CAAC;AACxD,eAAO,MAAM,sBAAsB,eAAe,CAAC;AAuEnD;;GAEG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMZ,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,0BAA0B,CAAC;AAC/C,eAAO,MAAM,WAAW,OAAO,CAAC;AAEhC,eAAO,MAAM,UAAU,QAAuC,CAAC;AAC/D,eAAO,MAAM,iCAAiC,QAAS,CAAC;AACxD,eAAO,MAAM,sBAAsB,eAAe,CAAC;AAyEnD;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B,uFAAuF;;IAEvF,uEAAuE;;CAE/D,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAjEpB,6DAA6D;;;;;;;;;;;;;;;QAwD7D,uFAAuF;;QAEvF,uEAAuE;;;CAc/D,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC"}

package/dist/index.js

@@ -1870,7 +1870,7 @@ var snakecase_keys_default = snakecaseKeys;
 // src/constants.ts
 var API_URL = "https://api.clerk.com";
 var API_VERSION = "v1";
-var USER_AGENT = `${"@clerk/backend"}@${"3.0.0-snapshot.v20260114034743"}`;
+var USER_AGENT = `${"@clerk/backend"}@${"3.0.0-snapshot.v20260114114137"}`;
 var MAX_CACHE_LAST_UPDATED_AT_SECONDS = 5 * 60;
 var SUPPORTED_BAPI_VERSION = "2025-11-10";
 var Attributes = {
@@ -1891,7 +1891,9 @@ var Cookies = {
   HandshakeNonce: "__clerk_handshake_nonce"
 };
 var QueryParameters = {
+  /** @deprecated Use ClerkSync with ClerkSyncStatus instead */
   ClerkSynced: "__clerk_synced",
+  ClerkSync: "__clerk_sync",
   SuffixedCookies: "suffixed_cookies",
   ClerkRedirectUrl: "__clerk_redirect_url",
   // use the reference to Cookies to indicate that it's the same value
@@ -1937,12 +1939,19 @@ var Headers2 = {
 var ContentTypes = {
   Json: "application/json"
 };
+var ClerkSyncStatus = {
+  /** Trigger sync - satellite needs to handshake after returning from primary sign-in */
+  NeedsSync: "1",
+  /** Sync completed - prevents re-sync loop after handshake completes */
+  Completed: "2"
+};
 var constants = {
   Attributes,
   Cookies,
   Headers: Headers2,
   ContentTypes,
-  QueryParameters
+  QueryParameters,
+  ClerkSyncStatus
 };
 
 // src/util/optionsAssertions.ts
@@ -5870,17 +5879,46 @@ var authenticateRequest = (async (request, options) => {
       }
     }
     const isRequestEligibleForMultiDomainSync = authenticateContext.isSatellite && authenticateContext.secFetchDest === "document";
-    if (authenticateContext.instanceType === "production" && isRequestEligibleForMultiDomainSync) {
-      return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.SatelliteCookieNeedsSyncing, "");
-    }
-    if (authenticateContext.instanceType === "development" && isRequestEligibleForMultiDomainSync && !authenticateContext.clerkUrl.searchParams.has(constants.QueryParameters.ClerkSynced)) {
-      const redirectURL = new URL(authenticateContext.signInUrl);
-      redirectURL.searchParams.append(
-        constants.QueryParameters.ClerkRedirectUrl,
-        authenticateContext.clerkUrl.toString()
-      );
-      const headers = new Headers({ [constants.Headers.Location]: redirectURL.toString() });
-      return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.SatelliteCookieNeedsSyncing, "", headers);
+    const syncStatus = authenticateContext.clerkUrl.searchParams.get(constants.QueryParameters.ClerkSync);
+    const needsSync = syncStatus === constants.ClerkSyncStatus.NeedsSync;
+    const legacySynced = authenticateContext.clerkUrl.searchParams.get(constants.QueryParameters.ClerkSynced) === "true";
+    const syncCompleted = syncStatus === constants.ClerkSyncStatus.Completed || legacySynced;
+    const hasCookies = hasSessionToken || hasActiveClient;
+    const shouldSkipSatelliteHandshake = authenticateContext.satelliteAutoSync === false && !hasCookies && !needsSync;
+    if (authenticateContext.instanceType === "production" && isRequestEligibleForMultiDomainSync && !syncCompleted) {
+      if (shouldSkipSatelliteHandshake) {
+        return signedOut({
+          tokenType: TokenType.SessionToken,
+          authenticateContext,
+          reason: AuthErrorReason.SessionTokenAndUATMissing
+        });
+      }
+      if (!hasCookies || needsSync) {
+        return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.SatelliteCookieNeedsSyncing, "");
+      }
+    }
+    if (authenticateContext.instanceType === "development" && isRequestEligibleForMultiDomainSync && !syncCompleted) {
+      if (shouldSkipSatelliteHandshake) {
+        return signedOut({
+          tokenType: TokenType.SessionToken,
+          authenticateContext,
+          reason: AuthErrorReason.SessionTokenAndUATMissing
+        });
+      }
+      if (!hasCookies || needsSync) {
+        const redirectURL = new URL(authenticateContext.signInUrl);
+        redirectURL.searchParams.append(
+          constants.QueryParameters.ClerkRedirectUrl,
+          authenticateContext.clerkUrl.toString()
+        );
+        const headers = new Headers({ [constants.Headers.Location]: redirectURL.toString() });
+        return handleMaybeHandshakeStatus(
+          authenticateContext,
+          AuthErrorReason.SatelliteCookieNeedsSyncing,
+          "",
+          headers
+        );
+      }
     }
     const redirectUrl = new URL(authenticateContext.clerkUrl).searchParams.get(
       constants.QueryParameters.ClerkRedirectUrl
@@ -5893,7 +5931,10 @@ var authenticateRequest = (async (request, options) => {
           authenticateContext.devBrowserToken
         );
       }
-      redirectBackToSatelliteUrl.searchParams.append(constants.QueryParameters.ClerkSynced, "true");
+      redirectBackToSatelliteUrl.searchParams.set(
+        constants.QueryParameters.ClerkSync,
+        constants.ClerkSyncStatus.Completed
+      );
       const headers = new Headers({ [constants.Headers.Location]: redirectBackToSatelliteUrl.toString() });
       return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.PrimaryRespondsToSyncing, "", headers);
     }