@coreiam/auth 1.0.0 → 1.0.1

package/dist/core/index.d.ts

@@ -3,6 +3,13 @@ export interface CoreIAMConfig {
     apiKey?: string;
     tenantId?: string;
 }
+export interface CoreIAMIdentity {
+    sub: string;
+    email?: string;
+    tenantId?: string;
+    roles?: string[];
+    [key: string]: any;
+}
 export declare class CoreIAM {
     private apiKey;
     private baseUrl;

package/dist/nextjs/actions.d.ts

@@ -1,3 +1,4 @@
+import { CoreIAMIdentity } from '../core';
 export interface AuthResult {
     ok: boolean;
     status: number;
@@ -7,7 +8,7 @@ export interface AuthResult {
  * NEW: Securely gets the user session.
  * Handles 401 by attempting a silent refresh internally.
  */
-export declare function getSession(): Promise<any | null>;
+export declare function getSession(): Promise<CoreIAMIdentity | null>;
 export declare function loginActionSdk(identifier: string, password: string): Promise<AuthResult>;
 export declare function registerActionSdk(userData: any): Promise<AuthResult>;
 export declare function logoutActionSdk(): Promise<AuthResult>;

package/dist/nextjs/actions.js

@@ -66,26 +66,31 @@ async function getSession() {
     const reqHeaders = await (0, headers_1.headers)();
     let response = await iam.proxy('/auth/profile', { method: 'GET' }, reqHeaders);
     if (response.status === 401) {
-        const refreshResponse = await iam.refreshTokens(reqHeaders);
-        if (refreshResponse && refreshResponse.length > 0) {
-            // Sync the new cookies to the browser
-            const fakeRes = new Response(null, { headers: { 'set-cookie': refreshResponse.join(', ') } });
-            await syncCookiesToNext(fakeRes);
-            // Build new headers with the refreshed cookies and retry
-            const cookieStore = await (0, headers_1.cookies)();
-            const newJwt = cookieStore.get('jwt')?.value;
-            const newRefresh = cookieStore.get('refreshToken')?.value;
-            const retryHeaders = new Headers(reqHeaders);
-            if (newJwt && newRefresh) {
-                retryHeaders.set('cookie', `jwt=${newJwt}; refreshToken=${newRefresh}`);
-                retryHeaders.set('Authorization', `Bearer ${newJwt}`);
+        const refreshRes = await iam.proxy('/auth/refresh-token', { method: 'POST' }, reqHeaders);
+        if (refreshRes.ok) {
+            const setCookies = refreshRes.headers.getSetCookie();
+            if (setCookies && setCookies.length > 0) {
+                const fakeRes = new Response(null, { headers: { 'set-cookie': setCookies.join(', ') } });
+                await syncCookiesToNext(fakeRes);
+                const cookieStore = await (0, headers_1.cookies)();
+                const newJwt = cookieStore.get('jwt')?.value;
+                const newRefresh = cookieStore.get('refreshToken')?.value;
+                const retryHeaders = new Headers(reqHeaders);
+                if (newJwt && newRefresh) {
+                    retryHeaders.set('cookie', `jwt=${newJwt}; refreshToken=${newRefresh}`);
+                    retryHeaders.set('Authorization', `Bearer ${newJwt}`);
+                }
+                response = await iam.proxy('/auth/profile', { method: 'GET' }, retryHeaders);
             }
-            response = await iam.proxy('/auth/profile', { method: 'GET' }, retryHeaders);
         }
     }
     if (!response.ok)
         return null;
-    return response.json();
+    const coreIamIdentity = await response.json();
+    if (!coreIamIdentity?.sub)
+        return null;
+    // Return the Provider's Identity, NOT the Customer's User
+    return coreIamIdentity;
 }
 async function loginActionSdk(identifier, password) {
     const reqHeaders = await (0, headers_1.headers)();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coreiam/auth",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "main": "./dist/core/index.js",
   "types": "./dist/core/index.d.ts",
   "exports": {