@clerk/backend 3.0.0-snapshot.v20260114130428 → 3.0.0-snapshot.v20260114214542

package/dist/constants.d.ts

@@ -3,16 +3,6 @@ export declare const API_VERSION = "v1";
 export declare const USER_AGENT: string;
 export declare const MAX_CACHE_LAST_UPDATED_AT_SECONDS: number;
 export declare const SUPPORTED_BAPI_VERSION = "2025-11-10";
-/**
- * Sync status values for the __clerk_sync query parameter.
- * Used to coordinate satellite domain authentication flows.
- */
-export declare const ClerkSyncStatus: {
-    /** Trigger sync - satellite needs to handshake after returning from primary sign-in */
-    readonly NeedsSync: "1";
-    /** Sync completed - prevents re-sync loop after handshake completes */
-    readonly Completed: "2";
-};
 /**
  * @internal
  */
@@ -68,9 +58,7 @@ export declare const constants: {
         readonly Json: "application/json";
     };
     readonly QueryParameters: {
-        /** @deprecated Use ClerkSync with ClerkSyncStatus instead */
         readonly ClerkSynced: "__clerk_synced";
-        readonly ClerkSync: "__clerk_sync";
         readonly SuffixedCookies: "suffixed_cookies";
         readonly ClerkRedirectUrl: "__clerk_redirect_url";
         readonly DevBrowser: "__clerk_db_jwt";
@@ -82,12 +70,6 @@ export declare const constants: {
         readonly HandshakeFormat: "format";
         readonly Session: "__session";
     };
-    readonly ClerkSyncStatus: {
-        /** Trigger sync - satellite needs to handshake after returning from primary sign-in */
-        readonly NeedsSync: "1";
-        /** Sync completed - prevents re-sync loop after handshake completes */
-        readonly Completed: "2";
-    };
 };
 export type Constants = typeof constants;
 //# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,0BAA0B,CAAC;AAC/C,eAAO,MAAM,WAAW,OAAO,CAAC;AAEhC,eAAO,MAAM,UAAU,QAAuC,CAAC;AAC/D,eAAO,MAAM,iCAAiC,QAAS,CAAC;AACxD,eAAO,MAAM,sBAAsB,eAAe,CAAC;AAyEnD;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B,uFAAuF;;IAEvF,uEAAuE;;CAE/D,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAjEpB,6DAA6D;;;;;;;;;;;;;;;QAwD7D,uFAAuF;;QAEvF,uEAAuE;;;CAc/D,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,0BAA0B,CAAC;AAC/C,eAAO,MAAM,WAAW,OAAO,CAAC;AAEhC,eAAO,MAAM,UAAU,QAAuC,CAAC;AAC/D,eAAO,MAAM,iCAAiC,QAAS,CAAC;AACxD,eAAO,MAAM,sBAAsB,eAAe,CAAC;AAuEnD;;GAEG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMZ,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC"}

package/dist/createRedirect.d.ts

@@ -15,7 +15,6 @@ type CreateRedirect = <ReturnType>(params: {
     signInUrl?: URL | string;
     signUpUrl?: URL | string;
     sessionStatus?: SessionStatusClaim | null;
-    isSatellite?: boolean;
 }) => {
     redirectToSignIn: RedirectFun<ReturnType>;
     redirectToSignUp: RedirectFun<ReturnType>;

package/dist/createRedirect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createRedirect.d.ts","sourceRoot":"","sources":["../src/createRedirect.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAsE9D,KAAK,eAAe,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,cAAc,CAAC;AACvE,KAAK,gBAAgB,GAAG;IAAE,aAAa,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAA;CAAE,CAAC;AAChE,MAAM,MAAM,WAAW,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,EAAE,gBAAgB,KAAK,UAAU,CAAC;AAEhF;;GAEG;AACH,KAAK,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC1C,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,KAAK;IACJ,gBAAgB,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1C,gBAAgB,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;CAC3C,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,cA4D5B,CAAC"}
+{"version":3,"file":"createRedirect.d.ts","sourceRoot":"","sources":["../src/createRedirect.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AA+D9D,KAAK,eAAe,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,cAAc,CAAC;AACvE,KAAK,gBAAgB,GAAG;IAAE,aAAa,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAA;CAAE,CAAC;AAChE,MAAM,MAAM,WAAW,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,EAAE,gBAAgB,KAAK,UAAU,CAAC;AAEhF;;GAEG;AACH,KAAK,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAC3C,KAAK;IACJ,gBAAgB,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1C,gBAAgB,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;CAC3C,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,cAwD5B,CAAC"}

package/dist/index.js

@@ -1870,7 +1870,7 @@ var snakecase_keys_default = snakecaseKeys;
 // src/constants.ts
 var API_URL = "https://api.clerk.com";
 var API_VERSION = "v1";
-var USER_AGENT = `${"@clerk/backend"}@${"3.0.0-snapshot.v20260114130428"}`;
+var USER_AGENT = `${"@clerk/backend"}@${"3.0.0-snapshot.v20260114214542"}`;
 var MAX_CACHE_LAST_UPDATED_AT_SECONDS = 5 * 60;
 var SUPPORTED_BAPI_VERSION = "2025-11-10";
 var Attributes = {
@@ -1891,9 +1891,7 @@ var Cookies = {
   HandshakeNonce: "__clerk_handshake_nonce"
 };
 var QueryParameters = {
-  /** @deprecated Use ClerkSync with ClerkSyncStatus instead */
   ClerkSynced: "__clerk_synced",
-  ClerkSync: "__clerk_sync",
   SuffixedCookies: "suffixed_cookies",
   ClerkRedirectUrl: "__clerk_redirect_url",
   // use the reference to Cookies to indicate that it's the same value
@@ -1939,19 +1937,12 @@ var Headers2 = {
 var ContentTypes = {
   Json: "application/json"
 };
-var ClerkSyncStatus = {
-  /** Trigger sync - satellite needs to handshake after returning from primary sign-in */
-  NeedsSync: "1",
-  /** Sync completed - prevents re-sync loop after handshake completes */
-  Completed: "2"
-};
 var constants = {
   Attributes,
   Cookies,
   Headers: Headers2,
   ContentTypes,
-  QueryParameters,
-  ClerkSyncStatus
+  QueryParameters
 };
 
 // src/util/optionsAssertions.ts
@@ -2827,7 +2818,7 @@ var MachineSecretKey = class _MachineSecretKey {
 
 // src/api/resources/OauthAccessToken.ts
 var OauthAccessToken = class _OauthAccessToken {
-  constructor(externalAccountId, provider, token, publicMetadata = {}, label, scopes, tokenSecret, expiresAt) {
+  constructor(externalAccountId, provider, token, publicMetadata = {}, label, scopes, tokenSecret, expiresAt, idToken) {
     this.externalAccountId = externalAccountId;
     this.provider = provider;
     this.token = token;
@@ -2836,6 +2827,7 @@ var OauthAccessToken = class _OauthAccessToken {
     this.scopes = scopes;
     this.tokenSecret = tokenSecret;
     this.expiresAt = expiresAt;
+    this.idToken = idToken;
   }
   static fromJSON(data) {
     return new _OauthAccessToken(
@@ -2846,7 +2838,8 @@ var OauthAccessToken = class _OauthAccessToken {
       data.label || "",
       data.scopes,
       data.token_secret,
-      data.expires_at
+      data.expires_at,
+      data.id_token
     );
   }
 };
@@ -5879,46 +5872,17 @@ var authenticateRequest = (async (request, options) => {
       }
     }
     const isRequestEligibleForMultiDomainSync = authenticateContext.isSatellite && authenticateContext.secFetchDest === "document";
-    const syncStatus = authenticateContext.clerkUrl.searchParams.get(constants.QueryParameters.ClerkSync);
-    const needsSync = syncStatus === constants.ClerkSyncStatus.NeedsSync;
-    const legacySynced = authenticateContext.clerkUrl.searchParams.get(constants.QueryParameters.ClerkSynced) === "true";
-    const syncCompleted = syncStatus === constants.ClerkSyncStatus.Completed || legacySynced;
-    const hasCookies = hasSessionToken || hasActiveClient;
-    const shouldSkipSatelliteHandshake = authenticateContext.satelliteAutoSync === false && !hasCookies && !needsSync;
-    if (authenticateContext.instanceType === "production" && isRequestEligibleForMultiDomainSync && !syncCompleted) {
-      if (shouldSkipSatelliteHandshake) {
-        return signedOut({
-          tokenType: TokenType.SessionToken,
-          authenticateContext,
-          reason: AuthErrorReason.SessionTokenAndUATMissing
-        });
-      }
-      if (!hasCookies || needsSync) {
-        return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.SatelliteCookieNeedsSyncing, "");
-      }
-    }
-    if (authenticateContext.instanceType === "development" && isRequestEligibleForMultiDomainSync && !syncCompleted) {
-      if (shouldSkipSatelliteHandshake) {
-        return signedOut({
-          tokenType: TokenType.SessionToken,
-          authenticateContext,
-          reason: AuthErrorReason.SessionTokenAndUATMissing
-        });
-      }
-      if (!hasCookies || needsSync) {
-        const redirectURL = new URL(authenticateContext.signInUrl);
-        redirectURL.searchParams.append(
-          constants.QueryParameters.ClerkRedirectUrl,
-          authenticateContext.clerkUrl.toString()
-        );
-        const headers = new Headers({ [constants.Headers.Location]: redirectURL.toString() });
-        return handleMaybeHandshakeStatus(
-          authenticateContext,
-          AuthErrorReason.SatelliteCookieNeedsSyncing,
-          "",
-          headers
-        );
-      }
+    if (authenticateContext.instanceType === "production" && isRequestEligibleForMultiDomainSync) {
+      return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.SatelliteCookieNeedsSyncing, "");
+    }
+    if (authenticateContext.instanceType === "development" && isRequestEligibleForMultiDomainSync && !authenticateContext.clerkUrl.searchParams.has(constants.QueryParameters.ClerkSynced)) {
+      const redirectURL = new URL(authenticateContext.signInUrl);
+      redirectURL.searchParams.append(
+        constants.QueryParameters.ClerkRedirectUrl,
+        authenticateContext.clerkUrl.toString()
+      );
+      const headers = new Headers({ [constants.Headers.Location]: redirectURL.toString() });
+      return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.SatelliteCookieNeedsSyncing, "", headers);
     }
     const redirectUrl = new URL(authenticateContext.clerkUrl).searchParams.get(
       constants.QueryParameters.ClerkRedirectUrl
@@ -5931,10 +5895,7 @@ var authenticateRequest = (async (request, options) => {
           authenticateContext.devBrowserToken
         );
       }
-      redirectBackToSatelliteUrl.searchParams.set(
-        constants.QueryParameters.ClerkSync,
-        constants.ClerkSyncStatus.Completed
-      );
+      redirectBackToSatelliteUrl.searchParams.append(constants.QueryParameters.ClerkSynced, "true");
       const headers = new Headers({ [constants.Headers.Location]: redirectBackToSatelliteUrl.toString() });
       return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.PrimaryRespondsToSyncing, "", headers);
     }