@clerk/backend 3.0.0-snapshot.v20260114130428 → 3.0.0-snapshot.v20260114214542

package/dist/index.mjs

@@ -2,7 +2,7 @@ import {
   createAuthenticateRequest,
   createBackendApiClient,
   verifyToken
-} from "./chunk-W4KGWT7U.mjs";
+} from "./chunk-SJTEA37I.mjs";
 import "./chunk-YBVFDYDR.mjs";
 import {
   withLegacyReturn

package/dist/internal.js

@@ -228,7 +228,7 @@ module.exports = __toCommonJS(internal_exports);
 // src/constants.ts
 var API_URL = "https://api.clerk.com";
 var API_VERSION = "v1";
-var USER_AGENT = `${"@clerk/backend"}@${"3.0.0-snapshot.v20260114130428"}`;
+var USER_AGENT = `${"@clerk/backend"}@${"3.0.0-snapshot.v20260114214542"}`;
 var MAX_CACHE_LAST_UPDATED_AT_SECONDS = 5 * 60;
 var SUPPORTED_BAPI_VERSION = "2025-11-10";
 var Attributes = {
@@ -249,9 +249,7 @@ var Cookies = {
   HandshakeNonce: "__clerk_handshake_nonce"
 };
 var QueryParameters = {
-  /** @deprecated Use ClerkSync with ClerkSyncStatus instead */
   ClerkSynced: "__clerk_synced",
-  ClerkSync: "__clerk_sync",
   SuffixedCookies: "suffixed_cookies",
   ClerkRedirectUrl: "__clerk_redirect_url",
   // use the reference to Cookies to indicate that it's the same value
@@ -297,19 +295,12 @@ var Headers2 = {
 var ContentTypes = {
   Json: "application/json"
 };
-var ClerkSyncStatus = {
-  /** Trigger sync - satellite needs to handshake after returning from primary sign-in */
-  NeedsSync: "1",
-  /** Sync completed - prevents re-sync loop after handshake completes */
-  Completed: "2"
-};
 var constants = {
   Attributes,
   Cookies,
   Headers: Headers2,
   ContentTypes,
-  QueryParameters,
-  ClerkSyncStatus
+  QueryParameters
 };
 
 // src/createRedirect.ts
@@ -326,7 +317,7 @@ var errorThrower = (0, import_error.buildErrorThrower)({ packageName: "@clerk/ba
 var { isDevOrStagingUrl } = (0, import_keys2.createDevOrStagingUrlCache)();
 
 // src/createRedirect.ts
-var buildUrl = (_baseUrl, _targetUrl, _returnBackUrl, _devBrowserToken, _isSatellite) => {
+var buildUrl = (_baseUrl, _targetUrl, _returnBackUrl, _devBrowserToken) => {
   if (_baseUrl === "") {
     return legacyBuildUrl(_targetUrl.toString(), _returnBackUrl?.toString());
   }
@@ -337,9 +328,6 @@ var buildUrl = (_baseUrl, _targetUrl, _returnBackUrl, _devBrowserToken, _isSatel
   if (returnBackUrl) {
     if (isCrossOriginRedirect) {
       returnBackUrl.searchParams.delete(constants.QueryParameters.ClerkSynced);
-      if (_isSatellite) {
-        returnBackUrl.searchParams.set(constants.QueryParameters.ClerkSync, ClerkSyncStatus.NeedsSync);
-      }
     }
     res.searchParams.set("redirect_url", returnBackUrl.toString());
   }
@@ -365,7 +353,7 @@ var legacyBuildUrl = (targetUrl, redirectUrl) => {
   return url.toString();
 };
 var createRedirect = (params) => {
-  const { publishableKey, redirectAdapter, signInUrl, signUpUrl, baseUrl, sessionStatus, isSatellite } = params;
+  const { publishableKey, redirectAdapter, signInUrl, signUpUrl, baseUrl, sessionStatus } = params;
   const parsedPublishableKey = (0, import_keys.parsePublishableKey)(publishableKey);
   const frontendApi = parsedPublishableKey?.frontendApi;
   const isDevelopment = parsedPublishableKey?.instanceType === "development";
@@ -373,7 +361,7 @@ var createRedirect = (params) => {
   const hasPendingStatus = sessionStatus === "pending";
   const redirectToTasks = (url, { returnBackUrl }) => {
     return redirectAdapter(
-      buildUrl(baseUrl, `${url}/tasks`, returnBackUrl, isDevelopment ? params.devBrowserToken : null, isSatellite)
+      buildUrl(baseUrl, `${url}/tasks`, returnBackUrl, isDevelopment ? params.devBrowserToken : null)
     );
   };
   const redirectToSignUp = ({ returnBackUrl } = {}) => {
@@ -393,9 +381,7 @@ var createRedirect = (params) => {
     if (hasPendingStatus) {
       return redirectToTasks(targetUrl, { returnBackUrl });
     }
-    return redirectAdapter(
-      buildUrl(baseUrl, targetUrl, returnBackUrl, isDevelopment ? params.devBrowserToken : null, isSatellite)
-    );
+    return redirectAdapter(buildUrl(baseUrl, targetUrl, returnBackUrl, isDevelopment ? params.devBrowserToken : null));
   };
   const redirectToSignIn = ({ returnBackUrl } = {}) => {
     if (!signInUrl && !accountsBaseUrl) {
@@ -406,9 +392,7 @@ var createRedirect = (params) => {
     if (hasPendingStatus) {
       return redirectToTasks(targetUrl, { returnBackUrl });
     }
-    return redirectAdapter(
-      buildUrl(baseUrl, targetUrl, returnBackUrl, isDevelopment ? params.devBrowserToken : null, isSatellite)
-    );
+    return redirectAdapter(buildUrl(baseUrl, targetUrl, returnBackUrl, isDevelopment ? params.devBrowserToken : null));
   };
   return { redirectToSignUp, redirectToSignIn };
 };
@@ -3610,7 +3594,7 @@ var MachineSecretKey = class _MachineSecretKey {
 
 // src/api/resources/OauthAccessToken.ts
 var OauthAccessToken = class _OauthAccessToken {
-  constructor(externalAccountId, provider, token, publicMetadata = {}, label, scopes, tokenSecret, expiresAt) {
+  constructor(externalAccountId, provider, token, publicMetadata = {}, label, scopes, tokenSecret, expiresAt, idToken) {
     this.externalAccountId = externalAccountId;
     this.provider = provider;
     this.token = token;
@@ -3619,6 +3603,7 @@ var OauthAccessToken = class _OauthAccessToken {
     this.scopes = scopes;
     this.tokenSecret = tokenSecret;
     this.expiresAt = expiresAt;
+    this.idToken = idToken;
   }
   static fromJSON(data) {
     return new _OauthAccessToken(
@@ -3629,7 +3614,8 @@ var OauthAccessToken = class _OauthAccessToken {
       data.label || "",
       data.scopes,
       data.token_secret,
-      data.expires_at
+      data.expires_at,
+      data.id_token
     );
   }
 };
@@ -6007,46 +5993,17 @@ var authenticateRequest = (async (request, options) => {
       }
     }
     const isRequestEligibleForMultiDomainSync = authenticateContext.isSatellite && authenticateContext.secFetchDest === "document";
-    const syncStatus = authenticateContext.clerkUrl.searchParams.get(constants.QueryParameters.ClerkSync);
-    const needsSync = syncStatus === constants.ClerkSyncStatus.NeedsSync;
-    const legacySynced = authenticateContext.clerkUrl.searchParams.get(constants.QueryParameters.ClerkSynced) === "true";
-    const syncCompleted = syncStatus === constants.ClerkSyncStatus.Completed || legacySynced;
-    const hasCookies = hasSessionToken || hasActiveClient;
-    const shouldSkipSatelliteHandshake = authenticateContext.satelliteAutoSync === false && !hasCookies && !needsSync;
-    if (authenticateContext.instanceType === "production" && isRequestEligibleForMultiDomainSync && !syncCompleted) {
-      if (shouldSkipSatelliteHandshake) {
-        return signedOut({
-          tokenType: TokenType.SessionToken,
-          authenticateContext,
-          reason: AuthErrorReason.SessionTokenAndUATMissing
-        });
-      }
-      if (!hasCookies || needsSync) {
-        return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.SatelliteCookieNeedsSyncing, "");
-      }
-    }
-    if (authenticateContext.instanceType === "development" && isRequestEligibleForMultiDomainSync && !syncCompleted) {
-      if (shouldSkipSatelliteHandshake) {
-        return signedOut({
-          tokenType: TokenType.SessionToken,
-          authenticateContext,
-          reason: AuthErrorReason.SessionTokenAndUATMissing
-        });
-      }
-      if (!hasCookies || needsSync) {
-        const redirectURL = new URL(authenticateContext.signInUrl);
-        redirectURL.searchParams.append(
-          constants.QueryParameters.ClerkRedirectUrl,
-          authenticateContext.clerkUrl.toString()
-        );
-        const headers = new Headers({ [constants.Headers.Location]: redirectURL.toString() });
-        return handleMaybeHandshakeStatus(
-          authenticateContext,
-          AuthErrorReason.SatelliteCookieNeedsSyncing,
-          "",
-          headers
-        );
-      }
+    if (authenticateContext.instanceType === "production" && isRequestEligibleForMultiDomainSync) {
+      return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.SatelliteCookieNeedsSyncing, "");
+    }
+    if (authenticateContext.instanceType === "development" && isRequestEligibleForMultiDomainSync && !authenticateContext.clerkUrl.searchParams.has(constants.QueryParameters.ClerkSynced)) {
+      const redirectURL = new URL(authenticateContext.signInUrl);
+      redirectURL.searchParams.append(
+        constants.QueryParameters.ClerkRedirectUrl,
+        authenticateContext.clerkUrl.toString()
+      );
+      const headers = new Headers({ [constants.Headers.Location]: redirectURL.toString() });
+      return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.SatelliteCookieNeedsSyncing, "", headers);
     }
     const redirectUrl = new URL(authenticateContext.clerkUrl).searchParams.get(
       constants.QueryParameters.ClerkRedirectUrl
@@ -6059,10 +6016,7 @@ var authenticateRequest = (async (request, options) => {
           authenticateContext.devBrowserToken
         );
       }
-      redirectBackToSatelliteUrl.searchParams.set(
-        constants.QueryParameters.ClerkSync,
-        constants.ClerkSyncStatus.Completed
-      );
+      redirectBackToSatelliteUrl.searchParams.append(constants.QueryParameters.ClerkSynced, "true");
       const headers = new Headers({ [constants.Headers.Location]: redirectBackToSatelliteUrl.toString() });
       return handleMaybeHandshakeStatus(authenticateContext, AuthErrorReason.PrimaryRespondsToSyncing, "", headers);
     }