@clerk/fastify 3.1.35 → 3.1.36-canary.v20260610190754

package/dist/index.d.mts

@@ -1,16 +1,16 @@
-import * as _clerk_backend from '@clerk/backend';
-export * from '@clerk/backend';
-import { C as ClerkFastifyOptions } from './index-CqO2PYpu.mjs';
-export { F as FrontendApiProxyOptions } from './index-CqO2PYpu.mjs';
-import { FastifyPluginCallback, FastifyRequest } from 'fastify';
-import { GetAuthFn } from '@clerk/backend/internal';
-import '@clerk/shared/types';
-import '@clerk/shared/proxy';
+import { n as FrontendApiProxyOptions, t as ClerkFastifyOptions } from "./types-Cd_46YLP.mjs";
+import { GetAuthFn } from "@clerk/backend/internal";
+import { FastifyPluginCallback, FastifyRequest } from "fastify";
+export * from "@clerk/backend";
 
+//#region src/clerkPlugin.d.ts
 declare const clerkPlugin: FastifyPluginCallback<ClerkFastifyOptions>;
-
+//#endregion
+//#region src/getAuth.d.ts
 declare const getAuth: GetAuthFn<FastifyRequest>;
-
-declare const clerkClient: _clerk_backend.ClerkClient;
-
-export { ClerkFastifyOptions, clerkClient, clerkPlugin, getAuth };
+//#endregion
+//#region src/clerkClient.d.ts
+declare const clerkClient: import("@clerk/backend").ClerkClient;
+//#endregion
+export { type ClerkFastifyOptions, type FrontendApiProxyOptions, clerkClient, clerkPlugin, getAuth };
+//# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/clerkPlugin.ts","../src/getAuth.ts","../src/clerkClient.ts"],"mappings":";;;;;;cA0Ba,WAAA,EAAW,qBAAA,CAAA,mBAAA;;;cCpBX,OAAA,EAAS,SAAS,CAAC,cAAA;;;cCFnB,WAAA,2BAAW,WAQtB"}

package/dist/index.d.ts

@@ -1,16 +1,16 @@
-import * as _clerk_backend from '@clerk/backend';
-export * from '@clerk/backend';
-import { C as ClerkFastifyOptions } from './index-CqO2PYpu.js';
-export { F as FrontendApiProxyOptions } from './index-CqO2PYpu.js';
-import { FastifyPluginCallback, FastifyRequest } from 'fastify';
-import { GetAuthFn } from '@clerk/backend/internal';
-import '@clerk/shared/types';
-import '@clerk/shared/proxy';
+import { n as FrontendApiProxyOptions, t as ClerkFastifyOptions } from "./types-Cd_46YLP.js";
+import { FastifyPluginCallback, FastifyRequest } from "fastify";
+import { GetAuthFn } from "@clerk/backend/internal";
+export * from "@clerk/backend";
 
+//#region src/clerkPlugin.d.ts
 declare const clerkPlugin: FastifyPluginCallback<ClerkFastifyOptions>;
-
+//#endregion
+//#region src/getAuth.d.ts
 declare const getAuth: GetAuthFn<FastifyRequest>;
-
-declare const clerkClient: _clerk_backend.ClerkClient;
-
-export { ClerkFastifyOptions, clerkClient, clerkPlugin, getAuth };
+//#endregion
+//#region src/clerkClient.d.ts
+declare const clerkClient: import("@clerk/backend").ClerkClient;
+//#endregion
+export { type ClerkFastifyOptions, type FrontendApiProxyOptions, clerkClient, clerkPlugin, getAuth };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/clerkPlugin.ts","../src/getAuth.ts","../src/clerkClient.ts"],"mappings":";;;;;;cA0Ba,WAAA,EAAW,qBAAA,CAAA,mBAAA;;;cCpBX,OAAA,EAAS,SAAS,CAAC,cAAA;;;cCFnB,WAAA,2BAAW,WAQtB"}

package/dist/index.js

@@ -1,231 +1,151 @@
-"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+//#region \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
 var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
+	if (from && typeof from === "object" || typeof from === "function") {
+		for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+			key = keys[i];
+			if (!__hasOwnProp.call(to, key) && key !== except) {
+				__defProp(to, key, {
+					get: ((k) => from[k]).bind(null, key),
+					enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+				});
+			}
+		}
+	}
+	return to;
 };
-var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/index.ts
-var src_exports = {};
-__export(src_exports, {
-  clerkClient: () => clerkClient,
-  clerkPlugin: () => clerkPlugin,
-  getAuth: () => getAuth
-});
-module.exports = __toCommonJS(src_exports);
-__reExport(src_exports, require("@clerk/backend"), module.exports);
-
-// src/clerkPlugin.ts
-var import_fastify_plugin = __toESM(require("fastify-plugin"));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
 
-// src/types.ts
-var ALLOWED_HOOKS = ["onRequest", "preHandler"];
+//#endregion
+const require_utils = require('./utils-D0QXqL7p.js');
+let _clerk_backend = require("@clerk/backend");
+let fastify_plugin = require("fastify-plugin");
+fastify_plugin = __toESM(fastify_plugin);
+let _clerk_backend_internal = require("@clerk/backend/internal");
+let _clerk_backend_proxy = require("@clerk/backend/proxy");
+let _clerk_shared_apiUrlFromPublishableKey = require("@clerk/shared/apiUrlFromPublishableKey");
+let stream = require("stream");
 
-// src/withClerkMiddleware.ts
-var import_backend = require("@clerk/backend");
-var import_internal2 = require("@clerk/backend/internal");
-var import_proxy = require("@clerk/backend/proxy");
-var import_apiUrlFromPublishableKey2 = require("@clerk/shared/apiUrlFromPublishableKey");
-var import_stream2 = require("stream");
+//#region src/types.ts
+const ALLOWED_HOOKS = ["onRequest", "preHandler"];
 
-// src/constants.ts
-var import_internal = require("@clerk/backend/internal");
-var import_apiUrlFromPublishableKey = require("@clerk/shared/apiUrlFromPublishableKey");
-var API_VERSION = process.env.CLERK_API_VERSION || "v1";
-var SECRET_KEY = process.env.CLERK_SECRET_KEY || "";
-var MACHINE_SECRET_KEY = process.env.CLERK_MACHINE_SECRET_KEY || "";
-var PUBLISHABLE_KEY = process.env.CLERK_PUBLISHABLE_KEY || "";
-var API_URL = process.env.CLERK_API_URL || (0, import_apiUrlFromPublishableKey.apiUrlFromPublishableKey)(PUBLISHABLE_KEY);
-var JWT_KEY = process.env.CLERK_JWT_KEY || "";
-var SDK_METADATA = {
-  name: "@clerk/fastify",
-  version: "3.1.35",
-  environment: "production"
+//#endregion
+//#region src/constants.ts
+const API_VERSION = process.env.CLERK_API_VERSION || "v1";
+const SECRET_KEY = process.env.CLERK_SECRET_KEY || "";
+const MACHINE_SECRET_KEY = process.env.CLERK_MACHINE_SECRET_KEY || "";
+const PUBLISHABLE_KEY = process.env.CLERK_PUBLISHABLE_KEY || "";
+const API_URL = process.env.CLERK_API_URL || (0, _clerk_shared_apiUrlFromPublishableKey.apiUrlFromPublishableKey)(PUBLISHABLE_KEY);
+const JWT_KEY = process.env.CLERK_JWT_KEY || "";
+const SDK_METADATA = {
+	name: "@clerk/fastify",
+	version: "3.1.36-canary.v20260610190754",
+	environment: "production"
 };
-var { Cookies, Headers: Headers2 } = import_internal.constants;
+const { Cookies, Headers } = _clerk_backend_internal.constants;
 
-// src/utils.ts
-var import_stream = require("stream");
-var fastifyRequestToRequest = (req) => {
-  const headers = new Headers(
-    Object.keys(req.headers).reduce((acc, key) => {
-      const value = req.headers[key];
-      if (!value) {
-        return acc;
-      }
-      if (typeof value === "string") {
-        acc.set(key, value);
-      } else {
-        acc.set(key, value.join(","));
-      }
-      return acc;
-    }, new Headers())
-  );
-  const dummyOriginReqUrl = new URL(req.url || "", `${req.protocol}://clerk-dummy`);
-  return new Request(dummyOriginReqUrl, {
-    method: req.method,
-    headers
-  });
-};
-var requestToProxyRequest = (req) => {
-  const headers = new Headers();
-  Object.entries(req.headers).forEach(([key, value]) => {
-    if (value) {
-      headers.set(key, Array.isArray(value) ? value.join(", ") : value);
-    }
-  });
-  const forwardedProto = req.headers["x-forwarded-proto"];
-  const protoHeader = Array.isArray(forwardedProto) ? forwardedProto[0] : forwardedProto;
-  const proto = (protoHeader || "").split(",")[0].trim();
-  const protocol = proto === "https" || req.protocol === "https" ? "https" : "http";
-  const forwardedHost = req.headers["x-forwarded-host"];
-  const hostHeader = Array.isArray(forwardedHost) ? forwardedHost[0] : forwardedHost;
-  const host = (hostHeader || "").split(",")[0].trim() || req.hostname || "localhost";
-  const url = new URL(req.url || "", `${protocol}://${host}`);
-  const hasBody = ["POST", "PUT", "PATCH"].includes(req.method);
-  return new Request(url.toString(), {
-    method: req.method,
-    headers,
-    body: hasBody ? import_stream.Readable.toWeb(req.raw) : void 0,
-    // @ts-expect-error - duplex required for streaming bodies but not in all TS definitions
-    duplex: hasBody ? "half" : void 0
-  });
+//#endregion
+//#region src/withClerkMiddleware.ts
+const withClerkMiddleware = (options) => {
+	const { hookName: _hookName, frontendApiProxy, ...clerkOptions } = options;
+	const proxyPath = (0, _clerk_backend_proxy.stripTrailingSlashes)(frontendApiProxy?.path ?? _clerk_backend_proxy.DEFAULT_PROXY_PATH) || _clerk_backend_proxy.DEFAULT_PROXY_PATH;
+	const publishableKey = options.publishableKey || PUBLISHABLE_KEY;
+	const secretKey = options.secretKey || SECRET_KEY;
+	const apiUrl = options.apiUrl || (0, _clerk_shared_apiUrlFromPublishableKey.apiUrlFromPublishableKey)(publishableKey);
+	const clerkClient = (0, _clerk_backend.createClerkClient)({
+		...clerkOptions,
+		publishableKey,
+		secretKey,
+		machineSecretKey: options.machineSecretKey || MACHINE_SECRET_KEY,
+		apiUrl,
+		apiVersion: options.apiVersion || API_VERSION,
+		jwtKey: options.jwtKey || JWT_KEY,
+		userAgent: options.userAgent || `${SDK_METADATA.name}@${SDK_METADATA.version}`,
+		sdkMetadata: options.sdkMetadata || SDK_METADATA
+	});
+	return async (fastifyRequest, reply) => {
+		let resolvedProxyUrl = options.proxyUrl;
+		if (frontendApiProxy) {
+			const requestUrl = new URL(fastifyRequest.url, `${fastifyRequest.protocol}://${fastifyRequest.hostname || "localhost"}`);
+			if (typeof frontendApiProxy.enabled === "function" ? frontendApiProxy.enabled(requestUrl) : frontendApiProxy.enabled) {
+				if (requestUrl.pathname === proxyPath || requestUrl.pathname.startsWith(proxyPath + "/")) {
+					const proxyResponse = await (0, _clerk_backend_proxy.clerkFrontendApiProxy)(require_utils.requestToProxyRequest(fastifyRequest), {
+						proxyPath,
+						publishableKey,
+						secretKey
+					});
+					reply.code(proxyResponse.status);
+					proxyResponse.headers.forEach((value, key) => {
+						reply.header(key, value);
+					});
+					if (proxyResponse.body) {
+						const reader = proxyResponse.body.getReader();
+						const stream$1 = new stream.Readable({ async read() {
+							try {
+								const { done, value } = await reader.read();
+								if (done) this.push(null);
+								else this.push(Buffer.from(value));
+							} catch (error) {
+								this.destroy(error instanceof Error ? error : new Error(String(error)));
+							}
+						} });
+						return reply.send(stream$1);
+					}
+					return reply.send();
+				}
+				if (!resolvedProxyUrl) resolvedProxyUrl = proxyPath;
+			}
+		}
+		const req = require_utils.fastifyRequestToRequest(fastifyRequest);
+		const requestState = await clerkClient.authenticateRequest(req, {
+			...options,
+			secretKey,
+			publishableKey,
+			proxyUrl: resolvedProxyUrl,
+			acceptsToken: "any"
+		});
+		requestState.headers.forEach((value, key) => reply.header(key, value));
+		if (requestState.headers.get(Headers.Location)) return reply.code(307).send();
+		else if (requestState.status === _clerk_backend_internal.AuthStatus.Handshake) throw new Error("Clerk: handshake status without redirect");
+		fastifyRequest.auth = requestState.toAuth();
+		fastifyRequest.clerk = clerkClient;
+	};
 };
 
-// src/withClerkMiddleware.ts
-var withClerkMiddleware = (options) => {
-  const { hookName: _hookName, frontendApiProxy, ...clerkOptions } = options;
-  const proxyPath = (0, import_proxy.stripTrailingSlashes)(frontendApiProxy?.path ?? import_proxy.DEFAULT_PROXY_PATH) || import_proxy.DEFAULT_PROXY_PATH;
-  const publishableKey = options.publishableKey || PUBLISHABLE_KEY;
-  const secretKey = options.secretKey || SECRET_KEY;
-  const apiUrl = options.apiUrl || (0, import_apiUrlFromPublishableKey2.apiUrlFromPublishableKey)(publishableKey);
-  const clerkClient2 = (0, import_backend.createClerkClient)({
-    ...clerkOptions,
-    publishableKey,
-    secretKey,
-    machineSecretKey: options.machineSecretKey || MACHINE_SECRET_KEY,
-    apiUrl,
-    apiVersion: options.apiVersion || API_VERSION,
-    jwtKey: options.jwtKey || JWT_KEY,
-    userAgent: options.userAgent || `${SDK_METADATA.name}@${SDK_METADATA.version}`,
-    sdkMetadata: options.sdkMetadata || SDK_METADATA
-  });
-  return async (fastifyRequest, reply) => {
-    let resolvedProxyUrl = options.proxyUrl;
-    if (frontendApiProxy) {
-      const requestUrl = new URL(
-        fastifyRequest.url,
-        `${fastifyRequest.protocol}://${fastifyRequest.hostname || "localhost"}`
-      );
-      const isEnabled = typeof frontendApiProxy.enabled === "function" ? frontendApiProxy.enabled(requestUrl) : frontendApiProxy.enabled;
-      if (isEnabled) {
-        if (requestUrl.pathname === proxyPath || requestUrl.pathname.startsWith(proxyPath + "/")) {
-          const proxyRequest = requestToProxyRequest(fastifyRequest);
-          const proxyResponse = await (0, import_proxy.clerkFrontendApiProxy)(proxyRequest, {
-            proxyPath,
-            publishableKey,
-            secretKey
-          });
-          reply.code(proxyResponse.status);
-          proxyResponse.headers.forEach((value, key) => {
-            reply.header(key, value);
-          });
-          if (proxyResponse.body) {
-            const reader = proxyResponse.body.getReader();
-            const stream = new import_stream2.Readable({
-              async read() {
-                try {
-                  const { done, value } = await reader.read();
-                  if (done) {
-                    this.push(null);
-                  } else {
-                    this.push(Buffer.from(value));
-                  }
-                } catch (error) {
-                  this.destroy(error instanceof Error ? error : new Error(String(error)));
-                }
-              }
-            });
-            return reply.send(stream);
-          }
-          return reply.send();
-        }
-        if (!resolvedProxyUrl) {
-          resolvedProxyUrl = proxyPath;
-        }
-      }
-    }
-    const req = fastifyRequestToRequest(fastifyRequest);
-    const requestState = await clerkClient2.authenticateRequest(req, {
-      ...options,
-      secretKey,
-      publishableKey,
-      proxyUrl: resolvedProxyUrl,
-      acceptsToken: "any"
-    });
-    requestState.headers.forEach((value, key) => reply.header(key, value));
-    const locationHeader = requestState.headers.get(Headers2.Location);
-    if (locationHeader) {
-      return reply.code(307).send();
-    } else if (requestState.status === import_internal2.AuthStatus.Handshake) {
-      throw new Error("Clerk: handshake status without redirect");
-    }
-    fastifyRequest.auth = requestState.toAuth();
-    fastifyRequest.clerk = clerkClient2;
-  };
-};
-
-// src/clerkPlugin.ts
-var plugin = (instance, opts, done) => {
-  instance.decorateRequest("auth", null);
-  instance.decorateRequest("clerk", null);
-  const hookName = opts.hookName || "preHandler";
-  if (!ALLOWED_HOOKS.includes(hookName)) {
-    throw new Error(`Unsupported hookName: ${hookName}`);
-  }
-  instance.addHook(hookName, withClerkMiddleware(opts));
-  done();
+//#endregion
+//#region src/clerkPlugin.ts
+const plugin = (instance, opts, done) => {
+	instance.decorateRequest("auth", null);
+	instance.decorateRequest("clerk", null);
+	const hookName = opts.hookName || "preHandler";
+	if (!ALLOWED_HOOKS.includes(hookName)) throw new Error(`Unsupported hookName: ${hookName}`);
+	instance.addHook(hookName, withClerkMiddleware(opts));
+	done();
 };
-var clerkPlugin = (0, import_fastify_plugin.default)(plugin, {
-  name: "@clerk/fastify",
-  fastify: "5.x"
+const clerkPlugin = (0, fastify_plugin.default)(plugin, {
+	name: "@clerk/fastify",
+	fastify: "5.x"
 });
 
-// src/getAuth.ts
-var import_internal3 = require("@clerk/backend/internal");
-
-// src/errors.ts
-var createErrorMessage = (msg) => {
-  return `\u{1F512} Clerk: ${msg.trim()}
+//#endregion
+//#region src/errors.ts
+const createErrorMessage = (msg) => {
+	return `🔒 Clerk: ${msg.trim()}
 
 For more info, check out the docs: https://clerk.com/docs,
 or come say hi in our discord server: https://clerk.com/discord
 `;
 };
-var pluginRegistrationRequired = createErrorMessage(`The "clerkPlugin" should be registered before using the "getAuth".
+const pluginRegistrationRequired = createErrorMessage(`The "clerkPlugin" should be registered before using the "getAuth".
 Example:
 
 import { clerkPlugin } from '@clerk/fastify';
@@ -234,31 +154,38 @@ const server: FastifyInstance = Fastify({ logger: true });
 server.register(clerkPlugin);
 `);
 
-// src/getAuth.ts
-var getAuth = ((req, options) => {
-  const authReq = req;
-  if (!authReq.auth) {
-    throw new Error(pluginRegistrationRequired);
-  }
-  return (0, import_internal3.getAuthObjectForAcceptedToken)({ authObject: authReq.auth, acceptsToken: options?.acceptsToken });
+//#endregion
+//#region src/getAuth.ts
+const getAuth = ((req, options) => {
+	const authReq = req;
+	if (!authReq.auth) throw new Error(pluginRegistrationRequired);
+	return (0, _clerk_backend_internal.getAuthObjectForAcceptedToken)({
+		authObject: authReq.auth,
+		acceptsToken: options?.acceptsToken
+	});
 });
 
-// src/clerkClient.ts
-var import_backend2 = require("@clerk/backend");
-var clerkClient = (0, import_backend2.createClerkClient)({
-  secretKey: SECRET_KEY,
-  machineSecretKey: MACHINE_SECRET_KEY,
-  apiUrl: API_URL,
-  apiVersion: API_VERSION,
-  jwtKey: JWT_KEY,
-  userAgent: `${"@clerk/fastify"}@${"3.1.35"}`,
-  sdkMetadata: SDK_METADATA
+//#endregion
+//#region src/clerkClient.ts
+const clerkClient = (0, _clerk_backend.createClerkClient)({
+	secretKey: SECRET_KEY,
+	machineSecretKey: MACHINE_SECRET_KEY,
+	apiUrl: API_URL,
+	apiVersion: API_VERSION,
+	jwtKey: JWT_KEY,
+	userAgent: `@clerk/fastify@3.1.36-canary.v20260610190754`,
+	sdkMetadata: SDK_METADATA
 });
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  clerkClient,
-  clerkPlugin,
-  getAuth,
-  ...require("@clerk/backend")
+
+//#endregion
+exports.clerkClient = clerkClient;
+exports.clerkPlugin = clerkPlugin;
+exports.getAuth = getAuth;
+Object.keys(_clerk_backend).forEach(function (k) {
+  if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+    enumerable: true,
+    get: function () { return _clerk_backend[k]; }
+  });
 });
+
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/clerkPlugin.ts","../src/types.ts","../src/withClerkMiddleware.ts","../src/constants.ts","../src/utils.ts","../src/getAuth.ts","../src/errors.ts","../src/clerkClient.ts"],"sourcesContent":["export * from '@clerk/backend';\n\nexport type { ClerkFastifyOptions, FrontendApiProxyOptions } from './types';\n\nexport { clerkPlugin } from './clerkPlugin';\nexport { getAuth } from './getAuth';\nexport { clerkClient } from './clerkClient';\n","import type { FastifyInstance, FastifyPluginCallback } from 'fastify';\nimport fp from 'fastify-plugin';\n\nimport type { ClerkFastifyOptions } from './types';\nimport { ALLOWED_HOOKS } from './types';\nimport { withClerkMiddleware } from './withClerkMiddleware';\n\nconst plugin: FastifyPluginCallback<ClerkFastifyOptions> = (\n  instance: FastifyInstance,\n  opts: ClerkFastifyOptions,\n  done,\n) => {\n  instance.decorateRequest('auth', null);\n  instance.decorateRequest('clerk', null as any);\n\n  // run clerk as a middleware to all scoped routes\n  const hookName = opts.hookName || 'preHandler';\n  if (!ALLOWED_HOOKS.includes(hookName)) {\n    throw new Error(`Unsupported hookName: ${hookName}`);\n  }\n\n  instance.addHook(hookName, withClerkMiddleware(opts));\n\n  done();\n};\n\nexport const clerkPlugin = fp(plugin, {\n  name: '@clerk/fastify',\n  fastify: '5.x',\n});\n","import type { ClerkClient, ClerkOptions } from '@clerk/backend';\nimport type { ShouldProxyFn } from '@clerk/shared/proxy';\n\ndeclare module 'fastify' {\n  interface FastifyRequest {\n    clerk: ClerkClient;\n  }\n}\n\nexport const ALLOWED_HOOKS = ['onRequest', 'preHandler'] as const;\n\n/**\n * Options for the built-in Frontend API proxy.\n *\n * When enabled, the middleware intercepts requests that match the proxy path\n * (default `/__clerk`) and forwards them to the Clerk Frontend API, allowing\n * the Clerk frontend SDKs to communicate with Clerk without third-party\n * cookie or ad-blocker issues.\n */\nexport interface FrontendApiProxyOptions {\n  /** Toggle the proxy on/off, or supply a function that decides per-request. */\n  enabled: boolean | ShouldProxyFn;\n  /** Custom path prefix for the proxy (default: `/__clerk`). */\n  path?: string;\n}\n\nexport type ClerkFastifyOptions = ClerkOptions & {\n  hookName?: (typeof ALLOWED_HOOKS)[number];\n  frontendApiProxy?: FrontendApiProxyOptions;\n};\n","import { createClerkClient } from '@clerk/backend';\nimport { AuthStatus } from '@clerk/backend/internal';\nimport { clerkFrontendApiProxy, DEFAULT_PROXY_PATH, stripTrailingSlashes } from '@clerk/backend/proxy';\nimport { apiUrlFromPublishableKey } from '@clerk/shared/apiUrlFromPublishableKey';\nimport type { FastifyReply, FastifyRequest } from 'fastify';\nimport { Readable } from 'stream';\n\nimport * as constants from './constants';\nimport type { ClerkFastifyOptions } from './types';\nimport { fastifyRequestToRequest, requestToProxyRequest } from './utils';\n\nexport const withClerkMiddleware = (options: ClerkFastifyOptions) => {\n  const { hookName: _hookName, frontendApiProxy, ...clerkOptions } = options;\n  const proxyPath = stripTrailingSlashes(frontendApiProxy?.path ?? DEFAULT_PROXY_PATH) || DEFAULT_PROXY_PATH;\n  const publishableKey = options.publishableKey || constants.PUBLISHABLE_KEY;\n  const secretKey = options.secretKey || constants.SECRET_KEY;\n  const apiUrl = options.apiUrl || apiUrlFromPublishableKey(publishableKey);\n  const clerkClient = createClerkClient({\n    ...clerkOptions,\n    publishableKey,\n    secretKey,\n    machineSecretKey: options.machineSecretKey || constants.MACHINE_SECRET_KEY,\n    apiUrl,\n    apiVersion: options.apiVersion || constants.API_VERSION,\n    jwtKey: options.jwtKey || constants.JWT_KEY,\n    userAgent: options.userAgent || `${constants.SDK_METADATA.name}@${constants.SDK_METADATA.version}`,\n    sdkMetadata: options.sdkMetadata || constants.SDK_METADATA,\n  });\n\n  return async (fastifyRequest: FastifyRequest, reply: FastifyReply) => {\n    // Handle Frontend API proxy requests and auto-derive proxyUrl\n    let resolvedProxyUrl = options.proxyUrl;\n    if (frontendApiProxy) {\n      const requestUrl = new URL(\n        fastifyRequest.url,\n        `${fastifyRequest.protocol}://${fastifyRequest.hostname || 'localhost'}`,\n      );\n      const isEnabled =\n        typeof frontendApiProxy.enabled === 'function'\n          ? frontendApiProxy.enabled(requestUrl)\n          : frontendApiProxy.enabled;\n\n      if (isEnabled) {\n        if (requestUrl.pathname === proxyPath || requestUrl.pathname.startsWith(proxyPath + '/')) {\n          const proxyRequest = requestToProxyRequest(fastifyRequest);\n\n          const proxyResponse = await clerkFrontendApiProxy(proxyRequest, {\n            proxyPath,\n            publishableKey,\n            secretKey,\n          });\n\n          reply.code(proxyResponse.status);\n          proxyResponse.headers.forEach((value, key) => {\n            reply.header(key, value);\n          });\n\n          if (proxyResponse.body) {\n            const reader = proxyResponse.body.getReader();\n            const stream = new Readable({\n              async read() {\n                try {\n                  const { done, value } = await reader.read();\n                  if (done) {\n                    this.push(null);\n                  } else {\n                    this.push(Buffer.from(value));\n                  }\n                } catch (error) {\n                  this.destroy(error instanceof Error ? error : new Error(String(error)));\n                }\n              },\n            });\n            return reply.send(stream);\n          }\n          return reply.send();\n        }\n\n        // Pass just the path - the backend resolves it against the request's\n        // public origin (from x-forwarded-* headers).\n        if (!resolvedProxyUrl) {\n          resolvedProxyUrl = proxyPath;\n        }\n      }\n    }\n\n    const req = fastifyRequestToRequest(fastifyRequest);\n\n    const requestState = await clerkClient.authenticateRequest(req, {\n      ...options,\n      secretKey,\n      publishableKey,\n      proxyUrl: resolvedProxyUrl,\n      acceptsToken: 'any',\n    });\n\n    requestState.headers.forEach((value, key) => reply.header(key, value));\n\n    const locationHeader = requestState.headers.get(constants.Headers.Location);\n    if (locationHeader) {\n      return reply.code(307).send();\n    } else if (requestState.status === AuthStatus.Handshake) {\n      throw new Error('Clerk: handshake status without redirect');\n    }\n\n    // @ts-expect-error Inject auth so getAuth can read it\n    fastifyRequest.auth = requestState.toAuth();\n    fastifyRequest.clerk = clerkClient;\n  };\n};\n","import { constants } from '@clerk/backend/internal';\nimport { apiUrlFromPublishableKey } from '@clerk/shared/apiUrlFromPublishableKey';\n\nexport const API_VERSION = process.env.CLERK_API_VERSION || 'v1';\nexport const SECRET_KEY = process.env.CLERK_SECRET_KEY || '';\nexport const MACHINE_SECRET_KEY = process.env.CLERK_MACHINE_SECRET_KEY || '';\nexport const PUBLISHABLE_KEY = process.env.CLERK_PUBLISHABLE_KEY || '';\nexport const API_URL = process.env.CLERK_API_URL || apiUrlFromPublishableKey(PUBLISHABLE_KEY);\nexport const JWT_KEY = process.env.CLERK_JWT_KEY || '';\nexport const SDK_METADATA = {\n  name: PACKAGE_NAME,\n  version: PACKAGE_VERSION,\n  environment: process.env.NODE_ENV,\n};\n\nexport const { Cookies, Headers } = constants;\n","import type { FastifyRequest } from 'fastify';\nimport { Readable } from 'stream';\n\nexport const fastifyRequestToRequest = (req: FastifyRequest): Request => {\n  const headers = new Headers(\n    Object.keys(req.headers).reduce((acc, key) => {\n      const value = req.headers[key];\n      if (!value) {\n        return acc;\n      }\n\n      if (typeof value === 'string') {\n        acc.set(key, value);\n      } else {\n        acc.set(key, value.join(','));\n      }\n      return acc;\n    }, new Headers()),\n  );\n\n  // Making some manual tests it seems that FastifyRequest populates the req protocol / hostname\n  // based on the forwarded headers. Nevertheless, we are gonna use a dummy base and the request\n  // will be fixed by the internals of the clerk/backend package\n  const dummyOriginReqUrl = new URL(req.url || '', `${req.protocol}://clerk-dummy`);\n  return new Request(dummyOriginReqUrl, {\n    method: req.method,\n    headers,\n  });\n};\n\n/**\n * Converts a Fastify request to a Fetch API Request with full headers and body streaming,\n * suitable for proxy forwarding.\n */\nexport const requestToProxyRequest = (req: FastifyRequest): Request => {\n  const headers = new Headers();\n  Object.entries(req.headers).forEach(([key, value]) => {\n    if (value) {\n      headers.set(key, Array.isArray(value) ? value.join(', ') : value);\n    }\n  });\n\n  const forwardedProto = req.headers['x-forwarded-proto'];\n  const protoHeader = Array.isArray(forwardedProto) ? forwardedProto[0] : forwardedProto;\n  const proto = (protoHeader || '').split(',')[0].trim();\n  const protocol = proto === 'https' || req.protocol === 'https' ? 'https' : 'http';\n\n  const forwardedHost = req.headers['x-forwarded-host'];\n  const hostHeader = Array.isArray(forwardedHost) ? forwardedHost[0] : forwardedHost;\n  const host = (hostHeader || '').split(',')[0].trim() || req.hostname || 'localhost';\n\n  const url = new URL(req.url || '', `${protocol}://${host}`);\n\n  const hasBody = ['POST', 'PUT', 'PATCH'].includes(req.method);\n\n  return new Request(url.toString(), {\n    method: req.method,\n    headers,\n    body: hasBody ? (Readable.toWeb(req.raw) as ReadableStream) : undefined,\n    // @ts-expect-error - duplex required for streaming bodies but not in all TS definitions\n    duplex: hasBody ? 'half' : undefined,\n  });\n};\n","import type { AuthOptions, GetAuthFn, SignedInAuthObject, SignedOutAuthObject } from '@clerk/backend/internal';\nimport { getAuthObjectForAcceptedToken } from '@clerk/backend/internal';\nimport type { FastifyRequest } from 'fastify';\n\nimport { pluginRegistrationRequired } from './errors';\n\nexport const getAuth: GetAuthFn<FastifyRequest> = ((req: FastifyRequest, options?: AuthOptions) => {\n  const authReq = req as FastifyRequest & { auth: SignedInAuthObject | SignedOutAuthObject };\n\n  if (!authReq.auth) {\n    throw new Error(pluginRegistrationRequired);\n  }\n\n  return getAuthObjectForAcceptedToken({ authObject: authReq.auth, acceptsToken: options?.acceptsToken });\n}) as GetAuthFn<FastifyRequest>;\n","// https://github.com/clerk/javascript/blob/main/packages/remix/src/errors.ts#L1-L0\nconst createErrorMessage = (msg: string) => {\n  return `🔒 Clerk: ${msg.trim()}\n\nFor more info, check out the docs: https://clerk.com/docs,\nor come say hi in our discord server: https://clerk.com/discord\n`;\n};\n\nexport const pluginRegistrationRequired =\n  createErrorMessage(`The \"clerkPlugin\" should be registered before using the \"getAuth\".\nExample:\n\nimport { clerkPlugin } from '@clerk/fastify';\n\nconst server: FastifyInstance = Fastify({ logger: true });\nserver.register(clerkPlugin);\n`);\n","import { createClerkClient } from '@clerk/backend';\n\nimport { API_URL, API_VERSION, JWT_KEY, MACHINE_SECRET_KEY, SDK_METADATA, SECRET_KEY } from './constants';\n\nexport const clerkClient = createClerkClient({\n  secretKey: SECRET_KEY,\n  machineSecretKey: MACHINE_SECRET_KEY,\n  apiUrl: API_URL,\n  apiVersion: API_VERSION,\n  jwtKey: JWT_KEY,\n  userAgent: `${PACKAGE_NAME}@${PACKAGE_VERSION}`,\n  sdkMetadata: SDK_METADATA,\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAAc,2BAAd;;;ACCA,4BAAe;;;ACQR,IAAM,gBAAgB,CAAC,aAAa,YAAY;;;ACTvD,qBAAkC;AAClC,IAAAA,mBAA2B;AAC3B,mBAAgF;AAChF,IAAAC,mCAAyC;AAEzC,IAAAC,iBAAyB;;;ACLzB,sBAA0B;AAC1B,sCAAyC;AAElC,IAAM,cAAc,QAAQ,IAAI,qBAAqB;AACrD,IAAM,aAAa,QAAQ,IAAI,oBAAoB;AACnD,IAAM,qBAAqB,QAAQ,IAAI,4BAA4B;AACnE,IAAM,kBAAkB,QAAQ,IAAI,yBAAyB;AAC7D,IAAM,UAAU,QAAQ,IAAI,qBAAiB,0DAAyB,eAAe;AACrF,IAAM,UAAU,QAAQ,IAAI,iBAAiB;AAC7C,IAAM,eAAe;AAAA,EAC1B,MAAM;AAAA,EACN,SAAS;AAAA,EACT,aAAa;AACf;AAEO,IAAM,EAAE,SAAS,SAAAC,SAAQ,IAAI;;;ACdpC,oBAAyB;AAElB,IAAM,0BAA0B,CAAC,QAAiC;AACvE,QAAM,UAAU,IAAI;AAAA,IAClB,OAAO,KAAK,IAAI,OAAO,EAAE,OAAO,CAAC,KAAK,QAAQ;AAC5C,YAAM,QAAQ,IAAI,QAAQ,GAAG;AAC7B,UAAI,CAAC,OAAO;AACV,eAAO;AAAA,MACT;AAEA,UAAI,OAAO,UAAU,UAAU;AAC7B,YAAI,IAAI,KAAK,KAAK;AAAA,MACpB,OAAO;AACL,YAAI,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC;AAAA,MAC9B;AACA,aAAO;AAAA,IACT,GAAG,IAAI,QAAQ,CAAC;AAAA,EAClB;AAKA,QAAM,oBAAoB,IAAI,IAAI,IAAI,OAAO,IAAI,GAAG,IAAI,QAAQ,gBAAgB;AAChF,SAAO,IAAI,QAAQ,mBAAmB;AAAA,IACpC,QAAQ,IAAI;AAAA,IACZ;AAAA,EACF,CAAC;AACH;AAMO,IAAM,wBAAwB,CAAC,QAAiC;AACrE,QAAM,UAAU,IAAI,QAAQ;AAC5B,SAAO,QAAQ,IAAI,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AACpD,QAAI,OAAO;AACT,cAAQ,IAAI,KAAK,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK;AAAA,IAClE;AAAA,EACF,CAAC;AAED,QAAM,iBAAiB,IAAI,QAAQ,mBAAmB;AACtD,QAAM,cAAc,MAAM,QAAQ,cAAc,IAAI,eAAe,CAAC,IAAI;AACxE,QAAM,SAAS,eAAe,IAAI,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK;AACrD,QAAM,WAAW,UAAU,WAAW,IAAI,aAAa,UAAU,UAAU;AAE3E,QAAM,gBAAgB,IAAI,QAAQ,kBAAkB;AACpD,QAAM,aAAa,MAAM,QAAQ,aAAa,IAAI,cAAc,CAAC,IAAI;AACrE,QAAM,QAAQ,cAAc,IAAI,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,KAAK,IAAI,YAAY;AAExE,QAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,GAAG,QAAQ,MAAM,IAAI,EAAE;AAE1D,QAAM,UAAU,CAAC,QAAQ,OAAO,OAAO,EAAE,SAAS,IAAI,MAAM;AAE5D,SAAO,IAAI,QAAQ,IAAI,SAAS,GAAG;AAAA,IACjC,QAAQ,IAAI;AAAA,IACZ;AAAA,IACA,MAAM,UAAW,uBAAS,MAAM,IAAI,GAAG,IAAuB;AAAA;AAAA,IAE9D,QAAQ,UAAU,SAAS;AAAA,EAC7B,CAAC;AACH;;;AFnDO,IAAM,sBAAsB,CAAC,YAAiC;AACnE,QAAM,EAAE,UAAU,WAAW,kBAAkB,GAAG,aAAa,IAAI;AACnE,QAAM,gBAAY,mCAAqB,kBAAkB,QAAQ,+BAAkB,KAAK;AACxF,QAAM,iBAAiB,QAAQ,kBAA4B;AAC3D,QAAM,YAAY,QAAQ,aAAuB;AACjD,QAAM,SAAS,QAAQ,cAAU,2DAAyB,cAAc;AACxE,QAAMC,mBAAc,kCAAkB;AAAA,IACpC,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA,kBAAkB,QAAQ,oBAA8B;AAAA,IACxD;AAAA,IACA,YAAY,QAAQ,cAAwB;AAAA,IAC5C,QAAQ,QAAQ,UAAoB;AAAA,IACpC,WAAW,QAAQ,aAAa,GAAa,aAAa,IAAI,IAAc,aAAa,OAAO;AAAA,IAChG,aAAa,QAAQ,eAAyB;AAAA,EAChD,CAAC;AAED,SAAO,OAAO,gBAAgC,UAAwB;AAEpE,QAAI,mBAAmB,QAAQ;AAC/B,QAAI,kBAAkB;AACpB,YAAM,aAAa,IAAI;AAAA,QACrB,eAAe;AAAA,QACf,GAAG,eAAe,QAAQ,MAAM,eAAe,YAAY,WAAW;AAAA,MACxE;AACA,YAAM,YACJ,OAAO,iBAAiB,YAAY,aAChC,iBAAiB,QAAQ,UAAU,IACnC,iBAAiB;AAEvB,UAAI,WAAW;AACb,YAAI,WAAW,aAAa,aAAa,WAAW,SAAS,WAAW,YAAY,GAAG,GAAG;AACxF,gBAAM,eAAe,sBAAsB,cAAc;AAEzD,gBAAM,gBAAgB,UAAM,oCAAsB,cAAc;AAAA,YAC9D;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAED,gBAAM,KAAK,cAAc,MAAM;AAC/B,wBAAc,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC5C,kBAAM,OAAO,KAAK,KAAK;AAAA,UACzB,CAAC;AAED,cAAI,cAAc,MAAM;AACtB,kBAAM,SAAS,cAAc,KAAK,UAAU;AAC5C,kBAAM,SAAS,IAAI,wBAAS;AAAA,cAC1B,MAAM,OAAO;AACX,oBAAI;AACF,wBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,sBAAI,MAAM;AACR,yBAAK,KAAK,IAAI;AAAA,kBAChB,OAAO;AACL,yBAAK,KAAK,OAAO,KAAK,KAAK,CAAC;AAAA,kBAC9B;AAAA,gBACF,SAAS,OAAO;AACd,uBAAK,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AAAA,gBACxE;AAAA,cACF;AAAA,YACF,CAAC;AACD,mBAAO,MAAM,KAAK,MAAM;AAAA,UAC1B;AACA,iBAAO,MAAM,KAAK;AAAA,QACpB;AAIA,YAAI,CAAC,kBAAkB;AACrB,6BAAmB;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,MAAM,wBAAwB,cAAc;AAElD,UAAM,eAAe,MAAMA,aAAY,oBAAoB,KAAK;AAAA,MAC9D,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV,cAAc;AAAA,IAChB,CAAC;AAED,iBAAa,QAAQ,QAAQ,CAAC,OAAO,QAAQ,MAAM,OAAO,KAAK,KAAK,CAAC;AAErE,UAAM,iBAAiB,aAAa,QAAQ,IAAcC,SAAQ,QAAQ;AAC1E,QAAI,gBAAgB;AAClB,aAAO,MAAM,KAAK,GAAG,EAAE,KAAK;AAAA,IAC9B,WAAW,aAAa,WAAW,4BAAW,WAAW;AACvD,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AAGA,mBAAe,OAAO,aAAa,OAAO;AAC1C,mBAAe,QAAQD;AAAA,EACzB;AACF;;;AFtGA,IAAM,SAAqD,CACzD,UACA,MACA,SACG;AACH,WAAS,gBAAgB,QAAQ,IAAI;AACrC,WAAS,gBAAgB,SAAS,IAAW;AAG7C,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,cAAc,SAAS,QAAQ,GAAG;AACrC,UAAM,IAAI,MAAM,yBAAyB,QAAQ,EAAE;AAAA,EACrD;AAEA,WAAS,QAAQ,UAAU,oBAAoB,IAAI,CAAC;AAEpD,OAAK;AACP;AAEO,IAAM,kBAAc,sBAAAE,SAAG,QAAQ;AAAA,EACpC,MAAM;AAAA,EACN,SAAS;AACX,CAAC;;;AK5BD,IAAAC,mBAA8C;;;ACA9C,IAAM,qBAAqB,CAAC,QAAgB;AAC1C,SAAO,oBAAa,IAAI,KAAK,CAAC;AAAA;AAAA;AAAA;AAAA;AAKhC;AAEO,IAAM,6BACX,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOpB;;;ADXM,IAAM,WAAsC,CAAC,KAAqB,YAA0B;AACjG,QAAM,UAAU;AAEhB,MAAI,CAAC,QAAQ,MAAM;AACjB,UAAM,IAAI,MAAM,0BAA0B;AAAA,EAC5C;AAEA,aAAO,gDAA8B,EAAE,YAAY,QAAQ,MAAM,cAAc,SAAS,aAAa,CAAC;AACxG;;;AEdA,IAAAC,kBAAkC;AAI3B,IAAM,kBAAc,mCAAkB;AAAA,EAC3C,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,WAAW,GAAG,gBAAY,IAAI,QAAe;AAAA,EAC7C,aAAa;AACf,CAAC;","names":["import_internal","import_apiUrlFromPublishableKey","import_stream","Headers","clerkClient","Headers","fp","import_internal","import_backend"]}
+{"version":3,"file":"index.js","names":["constants","DEFAULT_PROXY_PATH","constants.PUBLISHABLE_KEY","constants.SECRET_KEY","constants.MACHINE_SECRET_KEY","constants.API_VERSION","constants.JWT_KEY","constants.SDK_METADATA","requestToProxyRequest","stream","Readable","fastifyRequestToRequest","AuthStatus"],"sources":["../src/types.ts","../src/constants.ts","../src/withClerkMiddleware.ts","../src/clerkPlugin.ts","../src/errors.ts","../src/getAuth.ts","../src/clerkClient.ts"],"sourcesContent":["import type { ClerkClient, ClerkOptions } from '@clerk/backend';\nimport type { ShouldProxyFn } from '@clerk/shared/proxy';\n\ndeclare module 'fastify' {\n  interface FastifyRequest {\n    clerk: ClerkClient;\n  }\n}\n\nexport const ALLOWED_HOOKS = ['onRequest', 'preHandler'] as const;\n\n/**\n * Options for the built-in Frontend API proxy.\n *\n * When enabled, the middleware intercepts requests that match the proxy path\n * (default `/__clerk`) and forwards them to the Clerk Frontend API, allowing\n * the Clerk frontend SDKs to communicate with Clerk without third-party\n * cookie or ad-blocker issues.\n */\nexport interface FrontendApiProxyOptions {\n  /** Toggle the proxy on/off, or supply a function that decides per-request. */\n  enabled: boolean | ShouldProxyFn;\n  /** Custom path prefix for the proxy (default: `/__clerk`). */\n  path?: string;\n}\n\nexport type ClerkFastifyOptions = ClerkOptions & {\n  hookName?: (typeof ALLOWED_HOOKS)[number];\n  frontendApiProxy?: FrontendApiProxyOptions;\n};\n","import { constants } from '@clerk/backend/internal';\nimport { apiUrlFromPublishableKey } from '@clerk/shared/apiUrlFromPublishableKey';\n\nexport const API_VERSION = process.env.CLERK_API_VERSION || 'v1';\nexport const SECRET_KEY = process.env.CLERK_SECRET_KEY || '';\nexport const MACHINE_SECRET_KEY = process.env.CLERK_MACHINE_SECRET_KEY || '';\nexport const PUBLISHABLE_KEY = process.env.CLERK_PUBLISHABLE_KEY || '';\nexport const API_URL = process.env.CLERK_API_URL || apiUrlFromPublishableKey(PUBLISHABLE_KEY);\nexport const JWT_KEY = process.env.CLERK_JWT_KEY || '';\nexport const SDK_METADATA = {\n  name: PACKAGE_NAME,\n  version: PACKAGE_VERSION,\n  environment: process.env.NODE_ENV,\n};\n\nexport const { Cookies, Headers } = constants;\n","import { createClerkClient } from '@clerk/backend';\nimport { AuthStatus } from '@clerk/backend/internal';\nimport { clerkFrontendApiProxy, DEFAULT_PROXY_PATH, stripTrailingSlashes } from '@clerk/backend/proxy';\nimport { apiUrlFromPublishableKey } from '@clerk/shared/apiUrlFromPublishableKey';\nimport type { FastifyReply, FastifyRequest } from 'fastify';\nimport { Readable } from 'stream';\n\nimport * as constants from './constants';\nimport type { ClerkFastifyOptions } from './types';\nimport { fastifyRequestToRequest, requestToProxyRequest } from './utils';\n\nexport const withClerkMiddleware = (options: ClerkFastifyOptions) => {\n  const { hookName: _hookName, frontendApiProxy, ...clerkOptions } = options;\n  const proxyPath = stripTrailingSlashes(frontendApiProxy?.path ?? DEFAULT_PROXY_PATH) || DEFAULT_PROXY_PATH;\n  const publishableKey = options.publishableKey || constants.PUBLISHABLE_KEY;\n  const secretKey = options.secretKey || constants.SECRET_KEY;\n  const apiUrl = options.apiUrl || apiUrlFromPublishableKey(publishableKey);\n  const clerkClient = createClerkClient({\n    ...clerkOptions,\n    publishableKey,\n    secretKey,\n    machineSecretKey: options.machineSecretKey || constants.MACHINE_SECRET_KEY,\n    apiUrl,\n    apiVersion: options.apiVersion || constants.API_VERSION,\n    jwtKey: options.jwtKey || constants.JWT_KEY,\n    userAgent: options.userAgent || `${constants.SDK_METADATA.name}@${constants.SDK_METADATA.version}`,\n    sdkMetadata: options.sdkMetadata || constants.SDK_METADATA,\n  });\n\n  return async (fastifyRequest: FastifyRequest, reply: FastifyReply) => {\n    // Handle Frontend API proxy requests and auto-derive proxyUrl\n    let resolvedProxyUrl = options.proxyUrl;\n    if (frontendApiProxy) {\n      const requestUrl = new URL(\n        fastifyRequest.url,\n        `${fastifyRequest.protocol}://${fastifyRequest.hostname || 'localhost'}`,\n      );\n      const isEnabled =\n        typeof frontendApiProxy.enabled === 'function'\n          ? frontendApiProxy.enabled(requestUrl)\n          : frontendApiProxy.enabled;\n\n      if (isEnabled) {\n        if (requestUrl.pathname === proxyPath || requestUrl.pathname.startsWith(proxyPath + '/')) {\n          const proxyRequest = requestToProxyRequest(fastifyRequest);\n\n          const proxyResponse = await clerkFrontendApiProxy(proxyRequest, {\n            proxyPath,\n            publishableKey,\n            secretKey,\n          });\n\n          reply.code(proxyResponse.status);\n          proxyResponse.headers.forEach((value, key) => {\n            reply.header(key, value);\n          });\n\n          if (proxyResponse.body) {\n            const reader = proxyResponse.body.getReader();\n            const stream = new Readable({\n              async read() {\n                try {\n                  const { done, value } = await reader.read();\n                  if (done) {\n                    this.push(null);\n                  } else {\n                    this.push(Buffer.from(value));\n                  }\n                } catch (error) {\n                  this.destroy(error instanceof Error ? error : new Error(String(error)));\n                }\n              },\n            });\n            return reply.send(stream);\n          }\n          return reply.send();\n        }\n\n        // Pass just the path - the backend resolves it against the request's\n        // public origin (from x-forwarded-* headers).\n        if (!resolvedProxyUrl) {\n          resolvedProxyUrl = proxyPath;\n        }\n      }\n    }\n\n    const req = fastifyRequestToRequest(fastifyRequest);\n\n    const requestState = await clerkClient.authenticateRequest(req, {\n      ...options,\n      secretKey,\n      publishableKey,\n      proxyUrl: resolvedProxyUrl,\n      acceptsToken: 'any',\n    });\n\n    requestState.headers.forEach((value, key) => reply.header(key, value));\n\n    const locationHeader = requestState.headers.get(constants.Headers.Location);\n    if (locationHeader) {\n      return reply.code(307).send();\n    } else if (requestState.status === AuthStatus.Handshake) {\n      throw new Error('Clerk: handshake status without redirect');\n    }\n\n    // @ts-expect-error Inject auth so getAuth can read it\n    fastifyRequest.auth = requestState.toAuth();\n    fastifyRequest.clerk = clerkClient;\n  };\n};\n","import type { FastifyInstance, FastifyPluginCallback } from 'fastify';\nimport fp from 'fastify-plugin';\n\nimport type { ClerkFastifyOptions } from './types';\nimport { ALLOWED_HOOKS } from './types';\nimport { withClerkMiddleware } from './withClerkMiddleware';\n\nconst plugin: FastifyPluginCallback<ClerkFastifyOptions> = (\n  instance: FastifyInstance,\n  opts: ClerkFastifyOptions,\n  done,\n) => {\n  instance.decorateRequest('auth', null);\n  instance.decorateRequest('clerk', null as any);\n\n  // run clerk as a middleware to all scoped routes\n  const hookName = opts.hookName || 'preHandler';\n  if (!ALLOWED_HOOKS.includes(hookName)) {\n    throw new Error(`Unsupported hookName: ${hookName}`);\n  }\n\n  instance.addHook(hookName, withClerkMiddleware(opts));\n\n  done();\n};\n\nexport const clerkPlugin = fp(plugin, {\n  name: '@clerk/fastify',\n  fastify: '5.x',\n});\n","// https://github.com/clerk/javascript/blob/main/packages/remix/src/errors.ts#L1-L0\nconst createErrorMessage = (msg: string) => {\n  return `🔒 Clerk: ${msg.trim()}\n\nFor more info, check out the docs: https://clerk.com/docs,\nor come say hi in our discord server: https://clerk.com/discord\n`;\n};\n\nexport const pluginRegistrationRequired =\n  createErrorMessage(`The \"clerkPlugin\" should be registered before using the \"getAuth\".\nExample:\n\nimport { clerkPlugin } from '@clerk/fastify';\n\nconst server: FastifyInstance = Fastify({ logger: true });\nserver.register(clerkPlugin);\n`);\n","import type { AuthOptions, GetAuthFn, SignedInAuthObject, SignedOutAuthObject } from '@clerk/backend/internal';\nimport { getAuthObjectForAcceptedToken } from '@clerk/backend/internal';\nimport type { FastifyRequest } from 'fastify';\n\nimport { pluginRegistrationRequired } from './errors';\n\nexport const getAuth: GetAuthFn<FastifyRequest> = ((req: FastifyRequest, options?: AuthOptions) => {\n  const authReq = req as FastifyRequest & { auth: SignedInAuthObject | SignedOutAuthObject };\n\n  if (!authReq.auth) {\n    throw new Error(pluginRegistrationRequired);\n  }\n\n  return getAuthObjectForAcceptedToken({ authObject: authReq.auth, acceptsToken: options?.acceptsToken });\n}) as GetAuthFn<FastifyRequest>;\n","import { createClerkClient } from '@clerk/backend';\n\nimport { API_URL, API_VERSION, JWT_KEY, MACHINE_SECRET_KEY, SDK_METADATA, SECRET_KEY } from './constants';\n\nexport const clerkClient = createClerkClient({\n  secretKey: SECRET_KEY,\n  machineSecretKey: MACHINE_SECRET_KEY,\n  apiUrl: API_URL,\n  apiVersion: API_VERSION,\n  jwtKey: JWT_KEY,\n  userAgent: `${PACKAGE_NAME}@${PACKAGE_VERSION}`,\n  sdkMetadata: SDK_METADATA,\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,MAAa,gBAAgB,CAAC,aAAa,YAAY;;;;ACNvD,MAAa,cAAc,QAAQ,IAAI,qBAAqB;AAC5D,MAAa,aAAa,QAAQ,IAAI,oBAAoB;AAC1D,MAAa,qBAAqB,QAAQ,IAAI,4BAA4B;AAC1E,MAAa,kBAAkB,QAAQ,IAAI,yBAAyB;AACpE,MAAa,UAAU,QAAQ,IAAI,sFAA0C,eAAe;AAC5F,MAAa,UAAU,QAAQ,IAAI,iBAAiB;AACpD,MAAa,eAAe;CAC1B;CACA;CACA;AACF;AAEA,MAAa,EAAE,SAAS,YAAYA;;;;ACJpC,MAAa,uBAAuB,YAAiC;CACnE,MAAM,EAAE,UAAU,WAAW,kBAAkB,GAAG,iBAAiB;CACnE,MAAM,2DAAiC,kBAAkB,QAAQC,uCAAkB,KAAKA;CACxF,MAAM,iBAAiB,QAAQ,kBAAkBC;CACjD,MAAM,YAAY,QAAQ,aAAaC;CACvC,MAAM,SAAS,QAAQ,+EAAmC,cAAc;CACxE,MAAM,oDAAgC;EACpC,GAAG;EACH;EACA;EACA,kBAAkB,QAAQ,oBAAoBC;EAC9C;EACA,YAAY,QAAQ,cAAcC;EAClC,QAAQ,QAAQ,UAAUC;EAC1B,WAAW,QAAQ,aAAa,gBAA0B,KAAK,gBAA0B;EACzF,aAAa,QAAQ,eAAeC;CACtC,CAAC;CAED,OAAO,OAAO,gBAAgC,UAAwB;EAEpE,IAAI,mBAAmB,QAAQ;EAC/B,IAAI,kBAAkB;GACpB,MAAM,aAAa,IAAI,IACrB,eAAe,KACf,GAAG,eAAe,SAAS,KAAK,eAAe,YAAY,aAC7D;GAMA,IAJE,OAAO,iBAAiB,YAAY,aAChC,iBAAiB,QAAQ,UAAU,IACnC,iBAAiB,SAER;IACb,IAAI,WAAW,aAAa,aAAa,WAAW,SAAS,WAAW,YAAY,GAAG,GAAG;KAGxF,MAAM,gBAAgB,sDAFDC,oCAAsB,cAEkB,GAAG;MAC9D;MACA;MACA;KACF,CAAC;KAED,MAAM,KAAK,cAAc,MAAM;KAC/B,cAAc,QAAQ,SAAS,OAAO,QAAQ;MAC5C,MAAM,OAAO,KAAK,KAAK;KACzB,CAAC;KAED,IAAI,cAAc,MAAM;MACtB,MAAM,SAAS,cAAc,KAAK,UAAU;MAC5C,MAAMC,WAAS,IAAIC,gBAAS,EAC1B,MAAM,OAAO;OACX,IAAI;QACF,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;QAC1C,IAAI,MACF,KAAK,KAAK,IAAI;aAEd,KAAK,KAAK,OAAO,KAAK,KAAK,CAAC;OAEhC,SAAS,OAAO;QACd,KAAK,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;OACxE;MACF,EACF,CAAC;MACD,OAAO,MAAM,KAAKD,QAAM;KAC1B;KACA,OAAO,MAAM,KAAK;IACpB;IAIA,IAAI,CAAC,kBACH,mBAAmB;GAEvB;EACF;EAEA,MAAM,MAAME,sCAAwB,cAAc;EAElD,MAAM,eAAe,MAAM,YAAY,oBAAoB,KAAK;GAC9D,GAAG;GACH;GACA;GACA,UAAU;GACV,cAAc;EAChB,CAAC;EAED,aAAa,QAAQ,SAAS,OAAO,QAAQ,MAAM,OAAO,KAAK,KAAK,CAAC;EAGrE,IADuB,aAAa,QAAQ,YAAsB,QACjD,GACf,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;OACvB,IAAI,aAAa,WAAWC,mCAAW,WAC5C,MAAM,IAAI,MAAM,0CAA0C;EAI5D,eAAe,OAAO,aAAa,OAAO;EAC1C,eAAe,QAAQ;CACzB;AACF;;;;ACtGA,MAAM,UACJ,UACA,MACA,SACG;CACH,SAAS,gBAAgB,QAAQ,IAAI;CACrC,SAAS,gBAAgB,SAAS,IAAW;CAG7C,MAAM,WAAW,KAAK,YAAY;CAClC,IAAI,CAAC,cAAc,SAAS,QAAQ,GAClC,MAAM,IAAI,MAAM,yBAAyB,UAAU;CAGrD,SAAS,QAAQ,UAAU,oBAAoB,IAAI,CAAC;CAEpD,KAAK;AACP;AAEA,MAAa,0CAAiB,QAAQ;CACpC,MAAM;CACN,SAAS;AACX,CAAC;;;;AC5BD,MAAM,sBAAsB,QAAgB;CAC1C,OAAO,aAAa,IAAI,KAAK,EAAE;;;;;AAKjC;AAEA,MAAa,6BACX,mBAAmB;;;;;;;CAOpB;;;;ACXD,MAAa,YAAuC,KAAqB,YAA0B;CACjG,MAAM,UAAU;CAEhB,IAAI,CAAC,QAAQ,MACX,MAAM,IAAI,MAAM,0BAA0B;CAG5C,kEAAqC;EAAE,YAAY,QAAQ;EAAM,cAAc,SAAS;CAAa,CAAC;AACxG;;;;ACVA,MAAa,oDAAgC;CAC3C,WAAW;CACX,kBAAkB;CAClB,QAAQ;CACR,YAAY;CACZ,QAAQ;CACR,WAAW;CACX,aAAa;AACf,CAAC"}