@clerk/hono 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 Clerk Inc
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,154 @@
+<p align="center">
+  <a href="https://clerk.com?utm_source=github&utm_medium=clerk_hono" target="_blank" rel="noopener noreferrer">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="https://images.clerk.com/static/logo-dark-mode-400x400.png">
+      <img src="https://images.clerk.com/static/logo-light-mode-400x400.png" height="64">
+    </picture>
+  </a>
+  <br />
+</p>
+
+# @clerk/hono
+
+<div align="center">
+
+[![Chat on Discord](https://img.shields.io/discord/856971667393609759.svg?logo=discord)](https://clerk.com/discord)
+[![Clerk documentation](https://img.shields.io/badge/documentation-clerk-green.svg)](https://clerk.com/docs?utm_source=github&utm_medium=clerk_hono)
+[![Follow on Twitter](https://img.shields.io/twitter/follow/ClerkDev?style=social)](https://twitter.com/intent/follow?screen_name=ClerkDev)
+
+[Changelog](https://github.com/clerk/javascript/blob/main/packages/hono/CHANGELOG.md)
+·
+[Report a Bug](https://github.com/clerk/javascript/issues/new?assignees=&labels=needs-triage&projects=&template=BUG_REPORT.yml)
+·
+[Request a Feature](https://feedback.clerk.com/roadmap)
+·
+[Get help](https://clerk.com/contact/support?utm_source=github&utm_medium=clerk_hono)
+
+</div>
+
+## Getting Started
+
+[Clerk](https://clerk.com/?utm_source=github&utm_medium=clerk_hono) is the easiest way to add authentication and user management to your Hono application. Add sign up, sign in, and profile management to your application in minutes.
+
+### Prerequisites
+
+- Hono 4+
+- Node.js 20+
+
+### Installation
+
+```sh
+npm install @clerk/hono
+```
+
+### Configuration
+
+Set your Clerk API keys as environment variables:
+
+```sh
+CLERK_SECRET_KEY=sk_****
+CLERK_PUBLISHABLE_KEY=pk_****
+```
+
+### Usage
+
+```typescript
+import { Hono } from 'hono';
+import { clerkMiddleware, getAuth } from '@clerk/hono';
+
+const app = new Hono();
+
+// Apply Clerk middleware to all routes
+app.use('*', clerkMiddleware());
+
+// Public route
+app.get('/', c => {
+  return c.json({ message: 'Hello!' });
+});
+
+// Protected route
+app.get('/protected', c => {
+  const { userId } = getAuth(c);
+
+  if (!userId) {
+    return c.json({ error: 'Unauthorized' }, 401);
+  }
+
+  return c.json({ message: 'Hello authenticated user!', userId });
+});
+
+export default app;
+```
+
+### Accessing the Clerk Client
+
+You can access the Clerk Backend API client directly from the context:
+
+```typescript
+app.get('/user/:id', async c => {
+  const clerkClient = c.get('clerk');
+  const user = await clerkClient.users.getUser(c.req.param('id'));
+  return c.json({ user });
+});
+```
+
+### Using `acceptsToken` for Machine Auth
+
+```typescript
+app.get('/api', c => {
+  const auth = getAuth(c, { acceptsToken: 'api_key' });
+
+  if (!auth.userId) {
+    return c.json({ error: 'Unauthorized' }, 401);
+  }
+
+  return c.json({ message: 'API access granted' });
+});
+```
+
+### Webhook Verification
+
+```typescript
+import { Hono } from 'hono';
+import { verifyWebhook } from '@clerk/hono/webhooks';
+
+const app = new Hono();
+
+app.post('/webhooks/clerk', async c => {
+  const evt = await verifyWebhook(c);
+
+  switch (evt.type) {
+    case 'user.created':
+      console.log('User created:', evt.data.id);
+      break;
+    // Handle other event types...
+  }
+
+  return c.json({ received: true });
+});
+```
+
+## Support
+
+You can get in touch with us in any of the following ways:
+
+- Join our official community [Discord server](https://clerk.com/discord)
+- On [our support page](https://clerk.com/contact/support?utm_source=github&utm_medium=clerk_hono)
+
+## Contributing
+
+We're open to all community contributions! If you'd like to contribute in any way, please read [our contribution guidelines](https://github.com/clerk/javascript/blob/main/docs/CONTRIBUTING.md) and [code of conduct](https://github.com/clerk/javascript/blob/main/docs/CODE_OF_CONDUCT.md).
+
+## Security
+
+`@clerk/hono` follows good practices of security, but 100% security cannot be assured.
+
+`@clerk/hono` is provided **"as is"** without any **warranty**. Use at your own risk.
+
+_For more information and to report security issues, please refer to our [security documentation](https://github.com/clerk/javascript/blob/main/docs/SECURITY.md)._
+
+## License
+
+This project is licensed under the **MIT license**.
+
+See [LICENSE](https://github.com/clerk/javascript/blob/main/packages/hono/LICENSE) for more information.

package/dist/index.d.mts

@@ -0,0 +1,58 @@
+import { AuthenticateRequestOptions, GetAuthFn } from '@clerk/backend/internal';
+import { MiddlewareHandler, Context } from 'hono';
+import { ClerkHonoVariables } from './types.mjs';
+import '@clerk/shared/types';
+import '@clerk/backend';
+
+type ClerkMiddlewareOptions = Omit<AuthenticateRequestOptions, 'acceptsToken'>;
+/**
+ * Clerk middleware for Hono that authenticates requests and attaches
+ * auth data to the Hono context.
+ *
+ * @example
+ * ```ts
+ * import { Hono } from 'hono';
+ * import { clerkMiddleware, getAuth } from '@clerk/hono';
+ *
+ * const app = new Hono();
+ * app.use('*', clerkMiddleware());
+ *
+ * app.get('/', (c) => {
+ *   const { userId } = getAuth(c);
+ *   return c.json({ userId });
+ * });
+ * ```
+ */
+declare const clerkMiddleware: (options?: ClerkMiddlewareOptions) => MiddlewareHandler;
+
+/**
+ * Retrieves the Clerk auth object from the Hono context.
+ * Must be used after clerkMiddleware() has been applied.
+ *
+ * @example
+ * ```ts
+ * app.get('/protected', (c) => {
+ *   const { userId } = getAuth(c);
+ *   if (!userId) {
+ *     return c.json({ error: 'Unauthorized' }, 401);
+ *   }
+ *   return c.json({ message: 'Hello!' });
+ * });
+ * ```
+ *
+ * @example Using acceptsToken for API keys
+ * ```ts
+ * app.get('/api', (c) => {
+ *   const auth = getAuth(c, { acceptsToken: 'api_key' });
+ *   // auth will be typed for API key tokens
+ * });
+ * ```
+ */
+declare const getAuth: GetAuthFn<Context>;
+
+declare module 'hono' {
+    interface ContextVariableMap extends ClerkHonoVariables {
+    }
+}
+
+export { ClerkHonoVariables, type ClerkMiddlewareOptions, clerkMiddleware, getAuth };

package/dist/index.d.ts

@@ -0,0 +1,58 @@
+import { AuthenticateRequestOptions, GetAuthFn } from '@clerk/backend/internal';
+import { MiddlewareHandler, Context } from 'hono';
+import { ClerkHonoVariables } from './types.js';
+import '@clerk/shared/types';
+import '@clerk/backend';
+
+type ClerkMiddlewareOptions = Omit<AuthenticateRequestOptions, 'acceptsToken'>;
+/**
+ * Clerk middleware for Hono that authenticates requests and attaches
+ * auth data to the Hono context.
+ *
+ * @example
+ * ```ts
+ * import { Hono } from 'hono';
+ * import { clerkMiddleware, getAuth } from '@clerk/hono';
+ *
+ * const app = new Hono();
+ * app.use('*', clerkMiddleware());
+ *
+ * app.get('/', (c) => {
+ *   const { userId } = getAuth(c);
+ *   return c.json({ userId });
+ * });
+ * ```
+ */
+declare const clerkMiddleware: (options?: ClerkMiddlewareOptions) => MiddlewareHandler;
+
+/**
+ * Retrieves the Clerk auth object from the Hono context.
+ * Must be used after clerkMiddleware() has been applied.
+ *
+ * @example
+ * ```ts
+ * app.get('/protected', (c) => {
+ *   const { userId } = getAuth(c);
+ *   if (!userId) {
+ *     return c.json({ error: 'Unauthorized' }, 401);
+ *   }
+ *   return c.json({ message: 'Hello!' });
+ * });
+ * ```
+ *
+ * @example Using acceptsToken for API keys
+ * ```ts
+ * app.get('/api', (c) => {
+ *   const auth = getAuth(c, { acceptsToken: 'api_key' });
+ *   // auth will be typed for API key tokens
+ * });
+ * ```
+ */
+declare const getAuth: GetAuthFn<Context>;
+
+declare module 'hono' {
+    interface ContextVariableMap extends ClerkHonoVariables {
+    }
+}
+
+export { ClerkHonoVariables, type ClerkMiddlewareOptions, clerkMiddleware, getAuth };

package/dist/index.js

@@ -0,0 +1,101 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  clerkMiddleware: () => clerkMiddleware,
+  getAuth: () => getAuth
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/clerkMiddleware.ts
+var import_backend = require("@clerk/backend");
+var import_internal = require("@clerk/backend/internal");
+var import_adapter = require("hono/adapter");
+var clerkMiddleware = (options) => {
+  return async (c, next) => {
+    const clerkEnv = (0, import_adapter.env)(c);
+    const { secretKey, publishableKey, apiUrl, apiVersion, ...rest } = options || {
+      secretKey: clerkEnv.CLERK_SECRET_KEY || "",
+      publishableKey: clerkEnv.CLERK_PUBLISHABLE_KEY || "",
+      apiUrl: clerkEnv.CLERK_API_URL,
+      apiVersion: clerkEnv.CLERK_API_VERSION
+    };
+    if (!secretKey) {
+      throw new Error(
+        "Clerk: Missing Secret Key. Set CLERK_SECRET_KEY in your environment or pass secretKey to clerkMiddleware()."
+      );
+    }
+    if (!publishableKey) {
+      throw new Error(
+        "Clerk: Missing Publishable Key. Set CLERK_PUBLISHABLE_KEY in your environment or pass publishableKey to clerkMiddleware()."
+      );
+    }
+    const clerkClient = (0, import_backend.createClerkClient)({
+      ...rest,
+      apiUrl,
+      apiVersion,
+      secretKey,
+      publishableKey,
+      userAgent: `${"@clerk/hono"}@${"0.0.1"}`
+    });
+    const requestState = await clerkClient.authenticateRequest(c.req.raw, {
+      ...rest,
+      secretKey,
+      publishableKey,
+      acceptsToken: "any"
+    });
+    if (requestState.headers) {
+      requestState.headers.forEach((value, key) => {
+        c.res.headers.append(key, value);
+      });
+      const locationHeader = requestState.headers.get("location");
+      if (locationHeader) {
+        return c.redirect(locationHeader, 307);
+      } else if (requestState.status === "handshake") {
+        throw new Error("Clerk: Unexpected handshake without redirect");
+      }
+    }
+    const authObjectFn = ((authOptions) => (0, import_internal.getAuthObjectForAcceptedToken)({
+      authObject: requestState.toAuth(authOptions),
+      acceptsToken: "any"
+    }));
+    c.set("clerkAuth", authObjectFn);
+    c.set("clerk", clerkClient);
+    await next();
+  };
+};
+
+// src/getAuth.ts
+var getAuth = ((c, options) => {
+  const authFn = c.get("clerkAuth");
+  if (!authFn) {
+    throw new Error(
+      "Clerk: getAuth() called without clerkMiddleware() being applied. Make sure to use clerkMiddleware() before calling getAuth()."
+    );
+  }
+  return authFn(options);
+});
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  clerkMiddleware,
+  getAuth
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/clerkMiddleware.ts","../src/getAuth.ts"],"sourcesContent":["export { clerkMiddleware } from './clerkMiddleware';\nexport type { ClerkMiddlewareOptions } from './clerkMiddleware';\n\nexport { getAuth } from './getAuth';\n\nimport type { ClerkHonoVariables } from './types';\nexport type { ClerkHonoVariables };\n\n// Augment Hono's ContextVariableMap so users get type inference\n// for c.get('clerk') and c.get('clerkAuth')\ndeclare module 'hono' {\n  // eslint-disable-next-line @typescript-eslint/no-empty-object-type\n  interface ContextVariableMap extends ClerkHonoVariables {}\n}\n","import type { AuthObject } from '@clerk/backend';\nimport { createClerkClient } from '@clerk/backend';\nimport type { AuthenticateRequestOptions, AuthOptions, GetAuthFnNoRequest } from '@clerk/backend/internal';\nimport { getAuthObjectForAcceptedToken } from '@clerk/backend/internal';\nimport type { MiddlewareHandler } from 'hono';\nimport { env } from 'hono/adapter';\n\ntype ClerkEnv = {\n  CLERK_SECRET_KEY: string;\n  CLERK_PUBLISHABLE_KEY: string;\n  CLERK_API_URL?: string;\n  CLERK_API_VERSION?: string;\n};\n\nexport type ClerkMiddlewareOptions = Omit<AuthenticateRequestOptions, 'acceptsToken'>;\n\n/**\n * Clerk middleware for Hono that authenticates requests and attaches\n * auth data to the Hono context.\n *\n * @example\n * ```ts\n * import { Hono } from 'hono';\n * import { clerkMiddleware, getAuth } from '@clerk/hono';\n *\n * const app = new Hono();\n * app.use('*', clerkMiddleware());\n *\n * app.get('/', (c) => {\n *   const { userId } = getAuth(c);\n *   return c.json({ userId });\n * });\n * ```\n */\nexport const clerkMiddleware = (options?: ClerkMiddlewareOptions): MiddlewareHandler => {\n  return async (c, next) => {\n    const clerkEnv = env<ClerkEnv>(c);\n    const { secretKey, publishableKey, apiUrl, apiVersion, ...rest } = options || {\n      secretKey: clerkEnv.CLERK_SECRET_KEY || '',\n      publishableKey: clerkEnv.CLERK_PUBLISHABLE_KEY || '',\n      apiUrl: clerkEnv.CLERK_API_URL,\n      apiVersion: clerkEnv.CLERK_API_VERSION,\n    };\n\n    if (!secretKey) {\n      throw new Error(\n        'Clerk: Missing Secret Key. Set CLERK_SECRET_KEY in your environment or pass secretKey to clerkMiddleware().',\n      );\n    }\n\n    if (!publishableKey) {\n      throw new Error(\n        'Clerk: Missing Publishable Key. Set CLERK_PUBLISHABLE_KEY in your environment or pass publishableKey to clerkMiddleware().',\n      );\n    }\n\n    const clerkClient = createClerkClient({\n      ...rest,\n      apiUrl,\n      apiVersion,\n      secretKey,\n      publishableKey,\n      userAgent: `${PACKAGE_NAME}@${PACKAGE_VERSION}`,\n    });\n\n    const requestState = await clerkClient.authenticateRequest(c.req.raw, {\n      ...rest,\n      secretKey,\n      publishableKey,\n      acceptsToken: 'any',\n    });\n\n    if (requestState.headers) {\n      requestState.headers.forEach((value, key) => {\n        c.res.headers.append(key, value);\n      });\n\n      const locationHeader = requestState.headers.get('location');\n\n      if (locationHeader) {\n        return c.redirect(locationHeader, 307);\n      } else if (requestState.status === 'handshake') {\n        throw new Error('Clerk: Unexpected handshake without redirect');\n      }\n    }\n\n    const authObjectFn = ((authOptions?: AuthOptions) =>\n      getAuthObjectForAcceptedToken({\n        authObject: requestState.toAuth(authOptions) as AuthObject,\n        acceptsToken: 'any',\n      })) as GetAuthFnNoRequest;\n\n    c.set('clerkAuth', authObjectFn);\n    c.set('clerk', clerkClient);\n\n    await next();\n  };\n};\n","import type { AuthOptions, GetAuthFn } from '@clerk/backend/internal';\nimport type { Context } from 'hono';\n\n/**\n * Retrieves the Clerk auth object from the Hono context.\n * Must be used after clerkMiddleware() has been applied.\n *\n * @example\n * ```ts\n * app.get('/protected', (c) => {\n *   const { userId } = getAuth(c);\n *   if (!userId) {\n *     return c.json({ error: 'Unauthorized' }, 401);\n *   }\n *   return c.json({ message: 'Hello!' });\n * });\n * ```\n *\n * @example Using acceptsToken for API keys\n * ```ts\n * app.get('/api', (c) => {\n *   const auth = getAuth(c, { acceptsToken: 'api_key' });\n *   // auth will be typed for API key tokens\n * });\n * ```\n */\nexport const getAuth: GetAuthFn<Context> = ((c: Context, options?: AuthOptions) => {\n  const authFn = c.get('clerkAuth');\n\n  if (!authFn) {\n    throw new Error(\n      'Clerk: getAuth() called without clerkMiddleware() being applied. Make sure to use clerkMiddleware() before calling getAuth().',\n    );\n  }\n\n  return authFn(options);\n}) as GetAuthFn<Context>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCA,qBAAkC;AAElC,sBAA8C;AAE9C,qBAAoB;AA6Bb,IAAM,kBAAkB,CAAC,YAAwD;AACtF,SAAO,OAAO,GAAG,SAAS;AACxB,UAAM,eAAW,oBAAc,CAAC;AAChC,UAAM,EAAE,WAAW,gBAAgB,QAAQ,YAAY,GAAG,KAAK,IAAI,WAAW;AAAA,MAC5E,WAAW,SAAS,oBAAoB;AAAA,MACxC,gBAAgB,SAAS,yBAAyB;AAAA,MAClD,QAAQ,SAAS;AAAA,MACjB,YAAY,SAAS;AAAA,IACvB;AAEA,QAAI,CAAC,WAAW;AACd,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,kBAAc,kCAAkB;AAAA,MACpC,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,GAAG,aAAY,IAAI,OAAe;AAAA,IAC/C,CAAC;AAED,UAAM,eAAe,MAAM,YAAY,oBAAoB,EAAE,IAAI,KAAK;AAAA,MACpE,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,aAAa,SAAS;AACxB,mBAAa,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC3C,UAAE,IAAI,QAAQ,OAAO,KAAK,KAAK;AAAA,MACjC,CAAC;AAED,YAAM,iBAAiB,aAAa,QAAQ,IAAI,UAAU;AAE1D,UAAI,gBAAgB;AAClB,eAAO,EAAE,SAAS,gBAAgB,GAAG;AAAA,MACvC,WAAW,aAAa,WAAW,aAAa;AAC9C,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAAA,IACF;AAEA,UAAM,gBAAgB,CAAC,oBACrB,+CAA8B;AAAA,MAC5B,YAAY,aAAa,OAAO,WAAW;AAAA,MAC3C,cAAc;AAAA,IAChB,CAAC;AAEH,MAAE,IAAI,aAAa,YAAY;AAC/B,MAAE,IAAI,SAAS,WAAW;AAE1B,UAAM,KAAK;AAAA,EACb;AACF;;;ACvEO,IAAM,WAA+B,CAAC,GAAY,YAA0B;AACjF,QAAM,SAAS,EAAE,IAAI,WAAW;AAEhC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO,OAAO,OAAO;AACvB;","names":[]}

package/dist/index.mjs

@@ -0,0 +1,73 @@
+// src/clerkMiddleware.ts
+import { createClerkClient } from "@clerk/backend";
+import { getAuthObjectForAcceptedToken } from "@clerk/backend/internal";
+import { env } from "hono/adapter";
+var clerkMiddleware = (options) => {
+  return async (c, next) => {
+    const clerkEnv = env(c);
+    const { secretKey, publishableKey, apiUrl, apiVersion, ...rest } = options || {
+      secretKey: clerkEnv.CLERK_SECRET_KEY || "",
+      publishableKey: clerkEnv.CLERK_PUBLISHABLE_KEY || "",
+      apiUrl: clerkEnv.CLERK_API_URL,
+      apiVersion: clerkEnv.CLERK_API_VERSION
+    };
+    if (!secretKey) {
+      throw new Error(
+        "Clerk: Missing Secret Key. Set CLERK_SECRET_KEY in your environment or pass secretKey to clerkMiddleware()."
+      );
+    }
+    if (!publishableKey) {
+      throw new Error(
+        "Clerk: Missing Publishable Key. Set CLERK_PUBLISHABLE_KEY in your environment or pass publishableKey to clerkMiddleware()."
+      );
+    }
+    const clerkClient = createClerkClient({
+      ...rest,
+      apiUrl,
+      apiVersion,
+      secretKey,
+      publishableKey,
+      userAgent: `${"@clerk/hono"}@${"0.0.1"}`
+    });
+    const requestState = await clerkClient.authenticateRequest(c.req.raw, {
+      ...rest,
+      secretKey,
+      publishableKey,
+      acceptsToken: "any"
+    });
+    if (requestState.headers) {
+      requestState.headers.forEach((value, key) => {
+        c.res.headers.append(key, value);
+      });
+      const locationHeader = requestState.headers.get("location");
+      if (locationHeader) {
+        return c.redirect(locationHeader, 307);
+      } else if (requestState.status === "handshake") {
+        throw new Error("Clerk: Unexpected handshake without redirect");
+      }
+    }
+    const authObjectFn = ((authOptions) => getAuthObjectForAcceptedToken({
+      authObject: requestState.toAuth(authOptions),
+      acceptsToken: "any"
+    }));
+    c.set("clerkAuth", authObjectFn);
+    c.set("clerk", clerkClient);
+    await next();
+  };
+};
+
+// src/getAuth.ts
+var getAuth = ((c, options) => {
+  const authFn = c.get("clerkAuth");
+  if (!authFn) {
+    throw new Error(
+      "Clerk: getAuth() called without clerkMiddleware() being applied. Make sure to use clerkMiddleware() before calling getAuth()."
+    );
+  }
+  return authFn(options);
+});
+export {
+  clerkMiddleware,
+  getAuth
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/clerkMiddleware.ts","../src/getAuth.ts"],"sourcesContent":["import type { AuthObject } from '@clerk/backend';\nimport { createClerkClient } from '@clerk/backend';\nimport type { AuthenticateRequestOptions, AuthOptions, GetAuthFnNoRequest } from '@clerk/backend/internal';\nimport { getAuthObjectForAcceptedToken } from '@clerk/backend/internal';\nimport type { MiddlewareHandler } from 'hono';\nimport { env } from 'hono/adapter';\n\ntype ClerkEnv = {\n  CLERK_SECRET_KEY: string;\n  CLERK_PUBLISHABLE_KEY: string;\n  CLERK_API_URL?: string;\n  CLERK_API_VERSION?: string;\n};\n\nexport type ClerkMiddlewareOptions = Omit<AuthenticateRequestOptions, 'acceptsToken'>;\n\n/**\n * Clerk middleware for Hono that authenticates requests and attaches\n * auth data to the Hono context.\n *\n * @example\n * ```ts\n * import { Hono } from 'hono';\n * import { clerkMiddleware, getAuth } from '@clerk/hono';\n *\n * const app = new Hono();\n * app.use('*', clerkMiddleware());\n *\n * app.get('/', (c) => {\n *   const { userId } = getAuth(c);\n *   return c.json({ userId });\n * });\n * ```\n */\nexport const clerkMiddleware = (options?: ClerkMiddlewareOptions): MiddlewareHandler => {\n  return async (c, next) => {\n    const clerkEnv = env<ClerkEnv>(c);\n    const { secretKey, publishableKey, apiUrl, apiVersion, ...rest } = options || {\n      secretKey: clerkEnv.CLERK_SECRET_KEY || '',\n      publishableKey: clerkEnv.CLERK_PUBLISHABLE_KEY || '',\n      apiUrl: clerkEnv.CLERK_API_URL,\n      apiVersion: clerkEnv.CLERK_API_VERSION,\n    };\n\n    if (!secretKey) {\n      throw new Error(\n        'Clerk: Missing Secret Key. Set CLERK_SECRET_KEY in your environment or pass secretKey to clerkMiddleware().',\n      );\n    }\n\n    if (!publishableKey) {\n      throw new Error(\n        'Clerk: Missing Publishable Key. Set CLERK_PUBLISHABLE_KEY in your environment or pass publishableKey to clerkMiddleware().',\n      );\n    }\n\n    const clerkClient = createClerkClient({\n      ...rest,\n      apiUrl,\n      apiVersion,\n      secretKey,\n      publishableKey,\n      userAgent: `${PACKAGE_NAME}@${PACKAGE_VERSION}`,\n    });\n\n    const requestState = await clerkClient.authenticateRequest(c.req.raw, {\n      ...rest,\n      secretKey,\n      publishableKey,\n      acceptsToken: 'any',\n    });\n\n    if (requestState.headers) {\n      requestState.headers.forEach((value, key) => {\n        c.res.headers.append(key, value);\n      });\n\n      const locationHeader = requestState.headers.get('location');\n\n      if (locationHeader) {\n        return c.redirect(locationHeader, 307);\n      } else if (requestState.status === 'handshake') {\n        throw new Error('Clerk: Unexpected handshake without redirect');\n      }\n    }\n\n    const authObjectFn = ((authOptions?: AuthOptions) =>\n      getAuthObjectForAcceptedToken({\n        authObject: requestState.toAuth(authOptions) as AuthObject,\n        acceptsToken: 'any',\n      })) as GetAuthFnNoRequest;\n\n    c.set('clerkAuth', authObjectFn);\n    c.set('clerk', clerkClient);\n\n    await next();\n  };\n};\n","import type { AuthOptions, GetAuthFn } from '@clerk/backend/internal';\nimport type { Context } from 'hono';\n\n/**\n * Retrieves the Clerk auth object from the Hono context.\n * Must be used after clerkMiddleware() has been applied.\n *\n * @example\n * ```ts\n * app.get('/protected', (c) => {\n *   const { userId } = getAuth(c);\n *   if (!userId) {\n *     return c.json({ error: 'Unauthorized' }, 401);\n *   }\n *   return c.json({ message: 'Hello!' });\n * });\n * ```\n *\n * @example Using acceptsToken for API keys\n * ```ts\n * app.get('/api', (c) => {\n *   const auth = getAuth(c, { acceptsToken: 'api_key' });\n *   // auth will be typed for API key tokens\n * });\n * ```\n */\nexport const getAuth: GetAuthFn<Context> = ((c: Context, options?: AuthOptions) => {\n  const authFn = c.get('clerkAuth');\n\n  if (!authFn) {\n    throw new Error(\n      'Clerk: getAuth() called without clerkMiddleware() being applied. Make sure to use clerkMiddleware() before calling getAuth().',\n    );\n  }\n\n  return authFn(options);\n}) as GetAuthFn<Context>;\n"],"mappings":";AACA,SAAS,yBAAyB;AAElC,SAAS,qCAAqC;AAE9C,SAAS,WAAW;AA6Bb,IAAM,kBAAkB,CAAC,YAAwD;AACtF,SAAO,OAAO,GAAG,SAAS;AACxB,UAAM,WAAW,IAAc,CAAC;AAChC,UAAM,EAAE,WAAW,gBAAgB,QAAQ,YAAY,GAAG,KAAK,IAAI,WAAW;AAAA,MAC5E,WAAW,SAAS,oBAAoB;AAAA,MACxC,gBAAgB,SAAS,yBAAyB;AAAA,MAClD,QAAQ,SAAS;AAAA,MACjB,YAAY,SAAS;AAAA,IACvB;AAEA,QAAI,CAAC,WAAW;AACd,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,kBAAkB;AAAA,MACpC,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,GAAG,aAAY,IAAI,OAAe;AAAA,IAC/C,CAAC;AAED,UAAM,eAAe,MAAM,YAAY,oBAAoB,EAAE,IAAI,KAAK;AAAA,MACpE,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAED,QAAI,aAAa,SAAS;AACxB,mBAAa,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC3C,UAAE,IAAI,QAAQ,OAAO,KAAK,KAAK;AAAA,MACjC,CAAC;AAED,YAAM,iBAAiB,aAAa,QAAQ,IAAI,UAAU;AAE1D,UAAI,gBAAgB;AAClB,eAAO,EAAE,SAAS,gBAAgB,GAAG;AAAA,MACvC,WAAW,aAAa,WAAW,aAAa;AAC9C,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAAA,IACF;AAEA,UAAM,gBAAgB,CAAC,gBACrB,8BAA8B;AAAA,MAC5B,YAAY,aAAa,OAAO,WAAW;AAAA,MAC3C,cAAc;AAAA,IAChB,CAAC;AAEH,MAAE,IAAI,aAAa,YAAY;AAC/B,MAAE,IAAI,SAAS,WAAW;AAE1B,UAAM,KAAK;AAAA,EACb;AACF;;;ACvEO,IAAM,WAA+B,CAAC,GAAY,YAA0B;AACjF,QAAM,SAAS,EAAE,IAAI,WAAW;AAEhC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO,OAAO,OAAO;AACvB;","names":[]}

package/dist/types.d.mts

@@ -0,0 +1,14 @@
+export * from '@clerk/shared/types';
+import { ClerkClient } from '@clerk/backend';
+import { GetAuthFnNoRequest } from '@clerk/backend/internal';
+
+/**
+ * Variables that clerkMiddleware sets on the Hono context.
+ * Access via c.get('clerk') and c.get('clerkAuth').
+ */
+type ClerkHonoVariables = {
+    clerk: ClerkClient;
+    clerkAuth: GetAuthFnNoRequest;
+};
+
+export type { ClerkHonoVariables };

package/dist/types.d.ts

@@ -0,0 +1,14 @@
+export * from '@clerk/shared/types';
+import { ClerkClient } from '@clerk/backend';
+import { GetAuthFnNoRequest } from '@clerk/backend/internal';
+
+/**
+ * Variables that clerkMiddleware sets on the Hono context.
+ * Access via c.get('clerk') and c.get('clerkAuth').
+ */
+type ClerkHonoVariables = {
+    clerk: ClerkClient;
+    clerkAuth: GetAuthFnNoRequest;
+};
+
+export type { ClerkHonoVariables };

package/dist/types.js

@@ -0,0 +1,19 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/types/index.ts
+var types_exports = {};
+module.exports = __toCommonJS(types_exports);
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types/index.ts"],"sourcesContent":["/**\n * Re-export all shared Clerk types for convenient access via @clerk/hono/types\n */\nexport type * from '@clerk/shared/types';\n\n/**\n * Hono-specific types\n */\nexport type { ClerkHonoVariables } from '../types';\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/dist/types.mjs

@@ -0,0 +1 @@
+//# sourceMappingURL=types.mjs.map

package/dist/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/webhooks.d.mts

@@ -0,0 +1,33 @@
+import * as _clerk_backend_webhooks from '@clerk/backend/webhooks';
+import { VerifyWebhookOptions } from '@clerk/backend/webhooks';
+export * from '@clerk/backend/webhooks';
+import { Context } from 'hono';
+
+/**
+ * Verifies the authenticity of a webhook request from Clerk using Svix.
+ *
+ * @param c - The Hono Context object from the webhook handler
+ * @param options - Optional configuration object
+ * @param options.signingSecret - Custom signing secret. If not provided, falls back to CLERK_WEBHOOK_SIGNING_SECRET env variable
+ * @throws Will throw an error if the webhook signature verification fails
+ * @returns A promise that resolves to the verified webhook event data
+ *
+ * @example
+ * ```ts
+ * import { Hono } from 'hono';
+ * import { verifyWebhook } from '@clerk/hono/webhooks';
+ *
+ * const app = new Hono();
+ *
+ * app.post('/webhooks/clerk', async (c) => {
+ *   const evt = await verifyWebhook(c);
+ *   // Handle the webhook event
+ *   return c.json({ received: true });
+ * });
+ * ```
+ *
+ * @see {@link https://clerk.com/docs/webhooks/sync-data} to learn more about syncing Clerk data to your application using webhooks
+ */
+declare function verifyWebhook(c: Context, options?: VerifyWebhookOptions): Promise<_clerk_backend_webhooks.WebhookEvent>;
+
+export { verifyWebhook };

package/dist/webhooks.d.ts

@@ -0,0 +1,33 @@
+import * as _clerk_backend_webhooks from '@clerk/backend/webhooks';
+import { VerifyWebhookOptions } from '@clerk/backend/webhooks';
+export * from '@clerk/backend/webhooks';
+import { Context } from 'hono';
+
+/**
+ * Verifies the authenticity of a webhook request from Clerk using Svix.
+ *
+ * @param c - The Hono Context object from the webhook handler
+ * @param options - Optional configuration object
+ * @param options.signingSecret - Custom signing secret. If not provided, falls back to CLERK_WEBHOOK_SIGNING_SECRET env variable
+ * @throws Will throw an error if the webhook signature verification fails
+ * @returns A promise that resolves to the verified webhook event data
+ *
+ * @example
+ * ```ts
+ * import { Hono } from 'hono';
+ * import { verifyWebhook } from '@clerk/hono/webhooks';
+ *
+ * const app = new Hono();
+ *
+ * app.post('/webhooks/clerk', async (c) => {
+ *   const evt = await verifyWebhook(c);
+ *   // Handle the webhook event
+ *   return c.json({ received: true });
+ * });
+ * ```
+ *
+ * @see {@link https://clerk.com/docs/webhooks/sync-data} to learn more about syncing Clerk data to your application using webhooks
+ */
+declare function verifyWebhook(c: Context, options?: VerifyWebhookOptions): Promise<_clerk_backend_webhooks.WebhookEvent>;
+
+export { verifyWebhook };

package/dist/webhooks.js

@@ -0,0 +1,41 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/webhooks.ts
+var webhooks_exports = {};
+__export(webhooks_exports, {
+  verifyWebhook: () => verifyWebhook
+});
+module.exports = __toCommonJS(webhooks_exports);
+var import_webhooks = require("@clerk/backend/webhooks");
+__reExport(webhooks_exports, require("@clerk/backend/webhooks"), module.exports);
+async function verifyWebhook(c, options) {
+  const body = await c.req.text();
+  const clonedRequest = new Request(c.req.raw, {
+    body
+  });
+  return (0, import_webhooks.verifyWebhook)(clonedRequest, options);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  verifyWebhook,
+  ...require("@clerk/backend/webhooks")
+});
+//# sourceMappingURL=webhooks.js.map

package/dist/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/webhooks.ts"],"sourcesContent":["/* eslint-disable import/export */\nimport type { VerifyWebhookOptions } from '@clerk/backend/webhooks';\nimport { verifyWebhook as verifyWebhookBase } from '@clerk/backend/webhooks';\nimport type { Context } from 'hono';\n\n// Re-export everything from backend webhooks\nexport * from '@clerk/backend/webhooks';\n\n/**\n * Verifies the authenticity of a webhook request from Clerk using Svix.\n *\n * @param c - The Hono Context object from the webhook handler\n * @param options - Optional configuration object\n * @param options.signingSecret - Custom signing secret. If not provided, falls back to CLERK_WEBHOOK_SIGNING_SECRET env variable\n * @throws Will throw an error if the webhook signature verification fails\n * @returns A promise that resolves to the verified webhook event data\n *\n * @example\n * ```ts\n * import { Hono } from 'hono';\n * import { verifyWebhook } from '@clerk/hono/webhooks';\n *\n * const app = new Hono();\n *\n * app.post('/webhooks/clerk', async (c) => {\n *   const evt = await verifyWebhook(c);\n *   // Handle the webhook event\n *   return c.json({ received: true });\n * });\n * ```\n *\n * @see {@link https://clerk.com/docs/webhooks/sync-data} to learn more about syncing Clerk data to your application using webhooks\n */\nexport async function verifyWebhook(c: Context, options?: VerifyWebhookOptions) {\n  // Hono's c.req.raw is already a standard Web Request\n  // We need to clone it with the body for verification\n  const body = await c.req.text();\n  const clonedRequest = new Request(c.req.raw, {\n    body,\n  });\n  return verifyWebhookBase(clonedRequest, options);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,sBAAmD;AAInD,6BAAc,oCANd;AAiCA,eAAsB,cAAc,GAAY,SAAgC;AAG9E,QAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,QAAM,gBAAgB,IAAI,QAAQ,EAAE,IAAI,KAAK;AAAA,IAC3C;AAAA,EACF,CAAC;AACD,aAAO,gBAAAA,eAAkB,eAAe,OAAO;AACjD;","names":["verifyWebhookBase"]}

package/dist/webhooks.mjs

@@ -0,0 +1,14 @@
+// src/webhooks.ts
+import { verifyWebhook as verifyWebhookBase } from "@clerk/backend/webhooks";
+export * from "@clerk/backend/webhooks";
+async function verifyWebhook(c, options) {
+  const body = await c.req.text();
+  const clonedRequest = new Request(c.req.raw, {
+    body
+  });
+  return verifyWebhookBase(clonedRequest, options);
+}
+export {
+  verifyWebhook
+};
+//# sourceMappingURL=webhooks.mjs.map

package/dist/webhooks.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/webhooks.ts"],"sourcesContent":["/* eslint-disable import/export */\nimport type { VerifyWebhookOptions } from '@clerk/backend/webhooks';\nimport { verifyWebhook as verifyWebhookBase } from '@clerk/backend/webhooks';\nimport type { Context } from 'hono';\n\n// Re-export everything from backend webhooks\nexport * from '@clerk/backend/webhooks';\n\n/**\n * Verifies the authenticity of a webhook request from Clerk using Svix.\n *\n * @param c - The Hono Context object from the webhook handler\n * @param options - Optional configuration object\n * @param options.signingSecret - Custom signing secret. If not provided, falls back to CLERK_WEBHOOK_SIGNING_SECRET env variable\n * @throws Will throw an error if the webhook signature verification fails\n * @returns A promise that resolves to the verified webhook event data\n *\n * @example\n * ```ts\n * import { Hono } from 'hono';\n * import { verifyWebhook } from '@clerk/hono/webhooks';\n *\n * const app = new Hono();\n *\n * app.post('/webhooks/clerk', async (c) => {\n *   const evt = await verifyWebhook(c);\n *   // Handle the webhook event\n *   return c.json({ received: true });\n * });\n * ```\n *\n * @see {@link https://clerk.com/docs/webhooks/sync-data} to learn more about syncing Clerk data to your application using webhooks\n */\nexport async function verifyWebhook(c: Context, options?: VerifyWebhookOptions) {\n  // Hono's c.req.raw is already a standard Web Request\n  // We need to clone it with the body for verification\n  const body = await c.req.text();\n  const clonedRequest = new Request(c.req.raw, {\n    body,\n  });\n  return verifyWebhookBase(clonedRequest, options);\n}\n"],"mappings":";AAEA,SAAS,iBAAiB,yBAAyB;AAInD,cAAc;AA2Bd,eAAsB,cAAc,GAAY,SAAgC;AAG9E,QAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,QAAM,gBAAgB,IAAI,QAAQ,EAAE,IAAI,KAAK;AAAA,IAC3C;AAAA,EACF,CAAC;AACD,SAAO,kBAAkB,eAAe,OAAO;AACjD;","names":[]}

package/package.json

@@ -0,0 +1,91 @@
+{
+  "name": "@clerk/hono",
+  "version": "0.0.1",
+  "description": "Clerk SDK for Hono",
+  "keywords": [
+    "auth",
+    "authentication",
+    "passwordless",
+    "session",
+    "jwt",
+    "hono",
+    "clerk"
+  ],
+  "homepage": "https://clerk.com/",
+  "bugs": {
+    "url": "https://github.com/clerk/javascript/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/clerk/javascript.git",
+    "directory": "packages/hono"
+  },
+  "license": "MIT",
+  "author": "Clerk",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.mts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    },
+    "./webhooks": {
+      "import": {
+        "types": "./dist/webhooks.d.mts",
+        "default": "./dist/webhooks.mjs"
+      },
+      "require": {
+        "types": "./dist/webhooks.d.ts",
+        "default": "./dist/webhooks.js"
+      }
+    },
+    "./types": {
+      "import": {
+        "types": "./dist/types.d.mts"
+      },
+      "require": {
+        "types": "./dist/types.d.ts"
+      }
+    }
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@clerk/backend": "3.0.0-canary.v20260211111223",
+    "@clerk/shared": "4.0.0-canary.v20260211111223"
+  },
+  "devDependencies": {
+    "hono": "^4.7.4"
+  },
+  "peerDependencies": {
+    "hono": ">=4"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup --env.NODE_ENV production",
+    "clean": "rimraf ./dist",
+    "dev": "tsup --watch",
+    "format": "node ../../scripts/format-package.mjs",
+    "format:check": "node ../../scripts/format-package.mjs --check",
+    "lint": "eslint src",
+    "lint:attw": "attw --pack . --profile node16",
+    "lint:publint": "publint",
+    "publish:local": "pnpm yalc push --replace --sig",
+    "test": "vitest run",
+    "test:watch": "vitest watch"
+  }
+}