npm - @descope/nextjs-sdk - Versions diffs - 0.0.0-alpha.1 - Mend

@descope/nextjs-sdk 0.0.0-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (139) hide show

package/LICENSE +21 -0
package/README.md +493 -0
package/dist/cjs/client/index.js +52 -0
package/dist/cjs/client/index.js.map +1 -0
package/dist/cjs/index.js +20 -0
package/dist/cjs/index.js.map +1 -0
package/dist/cjs/server/authMiddleware.js +97 -0
package/dist/cjs/server/authMiddleware.js.map +1 -0
package/dist/cjs/server/constants.js +16 -0
package/dist/cjs/server/constants.js.map +1 -0
package/dist/cjs/server/index.js +13 -0
package/dist/cjs/server/index.js.map +1 -0
package/dist/cjs/server/logger.js +28 -0
package/dist/cjs/server/logger.js.map +1 -0
package/dist/cjs/server/sdk.js +29 -0
package/dist/cjs/server/sdk.js.map +1 -0
package/dist/cjs/server/session.js +62 -0
package/dist/cjs/server/session.js.map +1 -0
package/dist/cjs/server/utils.js +24 -0
package/dist/cjs/server/utils.js.map +1 -0
package/dist/cjs/shared/AuthProvider.js +15 -0
package/dist/cjs/shared/AuthProvider.js.map +1 -0
package/dist/cjs/shared/DescopeFlows.js +50 -0
package/dist/cjs/shared/DescopeFlows.js.map +1 -0
package/dist/cjs/shared/DescopeWidgets.js +27 -0
package/dist/cjs/shared/DescopeWidgets.js.map +1 -0
package/dist/cjs/shared/constants.js +10 -0
package/dist/cjs/shared/constants.js.map +1 -0
package/dist/client/dts/src/client/index.d.ts +12 -0
package/dist/client/dts/src/index.d.ts +1 -0
package/dist/client/dts/src/server/authMiddleware.d.ts +12 -0
package/dist/client/dts/src/server/constants.d.ts +9 -0
package/dist/client/dts/src/server/index.d.ts +3 -0
package/dist/client/dts/src/server/sdk.d.ts +10 -0
package/dist/client/dts/src/server/session.d.ts +6 -0
package/dist/client/dts/src/server/utils.d.ts +1 -0
package/dist/client/dts/src/shared/AuthProvider.d.ts +3 -0
package/dist/client/dts/src/shared/DescopeFlows.d.ts +130 -0
package/dist/client/dts/src/shared/DescopeWidgets.d.ts +72 -0
package/dist/client/dts/src/shared/constants.d.ts +4 -0
package/dist/client/dts/src/shared/index.d.ts +3 -0
package/dist/client/dts/src/types.d.ts +1 -0
package/dist/client/index.d.ts +12 -0
package/dist/client/index.js +14 -0
package/dist/client/index.js.map +1 -0
package/dist/dts/src/client/index.d.ts +12 -0
package/dist/dts/src/index.d.ts +1 -0
package/dist/dts/src/server/authMiddleware.d.ts +12 -0
package/dist/dts/src/server/constants.d.ts +9 -0
package/dist/dts/src/server/index.d.ts +3 -0
package/dist/dts/src/server/sdk.d.ts +10 -0
package/dist/dts/src/server/session.d.ts +6 -0
package/dist/dts/src/server/utils.d.ts +1 -0
package/dist/dts/src/shared/AuthProvider.d.ts +3 -0
package/dist/dts/src/shared/DescopeFlows.d.ts +130 -0
package/dist/dts/src/shared/DescopeWidgets.d.ts +72 -0
package/dist/dts/src/shared/constants.d.ts +4 -0
package/dist/dts/src/shared/index.d.ts +3 -0
package/dist/dts/src/types.d.ts +1 -0
package/dist/esm/client/index.js +3 -0
package/dist/esm/client/index.js.map +1 -0
package/dist/esm/index.js +4 -0
package/dist/esm/index.js.map +1 -0
package/dist/esm/server/authMiddleware.js +95 -0
package/dist/esm/server/authMiddleware.js.map +1 -0
package/dist/esm/server/constants.js +12 -0
package/dist/esm/server/constants.js.map +1 -0
package/dist/esm/server/index.js +4 -0
package/dist/esm/server/index.js.map +1 -0
package/dist/esm/server/logger.js +25 -0
package/dist/esm/server/logger.js.map +1 -0
package/dist/esm/server/sdk.js +26 -0
package/dist/esm/server/sdk.js.map +1 -0
package/dist/esm/server/session.js +59 -0
package/dist/esm/server/session.js.map +1 -0
package/dist/esm/server/utils.js +22 -0
package/dist/esm/server/utils.js.map +1 -0
package/dist/esm/shared/AuthProvider.js +13 -0
package/dist/esm/shared/AuthProvider.js.map +1 -0
package/dist/esm/shared/DescopeFlows.js +45 -0
package/dist/esm/shared/DescopeFlows.js.map +1 -0
package/dist/esm/shared/DescopeWidgets.js +20 -0
package/dist/esm/shared/DescopeWidgets.js.map +1 -0
package/dist/esm/shared/constants.js +8 -0
package/dist/esm/shared/constants.js.map +1 -0
package/dist/index.d.ts +212 -0
package/dist/index.js +16 -0
package/dist/index.js.map +1 -0
package/dist/server/authMiddleware.js +98 -0
package/dist/server/authMiddleware.js.map +1 -0
package/dist/server/constants.js +12 -0
package/dist/server/constants.js.map +1 -0
package/dist/server/dts/src/client/index.d.ts +12 -0
package/dist/server/dts/src/index.d.ts +1 -0
package/dist/server/dts/src/server/authMiddleware.d.ts +12 -0
package/dist/server/dts/src/server/constants.d.ts +9 -0
package/dist/server/dts/src/server/index.d.ts +3 -0
package/dist/server/dts/src/server/sdk.d.ts +10 -0
package/dist/server/dts/src/server/session.d.ts +6 -0
package/dist/server/dts/src/server/utils.d.ts +1 -0
package/dist/server/dts/src/shared/AuthProvider.d.ts +3 -0
package/dist/server/dts/src/shared/DescopeFlows.d.ts +130 -0
package/dist/server/dts/src/shared/DescopeWidgets.d.ts +72 -0
package/dist/server/dts/src/shared/constants.d.ts +4 -0
package/dist/server/dts/src/shared/index.d.ts +3 -0
package/dist/server/dts/src/types.d.ts +1 -0
package/dist/server/index.d.ts +32 -0
package/dist/server/index.js +4 -0
package/dist/server/index.js.map +1 -0
package/dist/server/sdk.js +27 -0
package/dist/server/sdk.js.map +1 -0
package/dist/server/session.js +32 -0
package/dist/server/session.js.map +1 -0
package/dist/server/utils.js +22 -0
package/dist/server/utils.js.map +1 -0
package/dist/shared/AuthProvider.js +19 -0
package/dist/shared/AuthProvider.js.map +1 -0
package/dist/shared/DescopeFlows.js +53 -0
package/dist/shared/DescopeFlows.js.map +1 -0
package/dist/shared/DescopeWidgets.js +35 -0
package/dist/shared/DescopeWidgets.js.map +1 -0
package/dist/shared/constants.js +8 -0
package/dist/shared/constants.js.map +1 -0
package/dist/types/client/index.d.ts +1 -0
package/dist/types/index.d.ts +1 -0
package/dist/types/server/authMiddleware.d.ts +12 -0
package/dist/types/server/constants.d.ts +9 -0
package/dist/types/server/index.d.ts +3 -0
package/dist/types/server/logger.d.ts +25 -0
package/dist/types/server/sdk.d.ts +9 -0
package/dist/types/server/session.d.ts +10 -0
package/dist/types/server/utils.d.ts +1 -0
package/dist/types/shared/AuthProvider.d.ts +3 -0
package/dist/types/shared/DescopeFlows.d.ts +141 -0
package/dist/types/shared/DescopeWidgets.d.ts +54 -0
package/dist/types/shared/constants.d.ts +4 -0
package/dist/types/shared/index.d.ts +3 -0
package/dist/types/types.d.ts +1 -0
package/package.json +152 -0

package/LICENSE ADDED Viewed

@@ -0,0 +1,21 @@
+MIT License
+Copyright (c) 2023 Descope <help@descope.com>
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md ADDED Viewed

@@ -0,0 +1,493 @@
+# Descope SDK for Next.js
+The Descope SDK for Next.js provides convenient access to the Descope for an application written on top of Next.js. You can read more on the [Descope Website](https://descope.com).
+This SDK uses under the hood the Descope React SDK and Descope Node SDK
+Refer to the [Descope React SDK](https://github.com/descope/descope-js/tree/main/packages/sdks/react-sdk) and [Descope Node SDK](https://github.com/descope/node-sdk) for more details.
+## Requirements
+- The SDK supports Next.js version 13 and above.
+- A Descope `Project ID` is required for using the SDK. Find it on the [project page in the Descope Console](https://app.descope.com/settings/project).
+## Installing the SDK
+Install the package with:
+```bash
+npm i --save @descope/nextjs-sdk
+```
+## Usage
+This section contains guides for App router and Pages router.
+For Pages router, see the [Pages Router](#pages-router) section.
+### App Router
+#### Wrap your app layout with Auth Provider
+```js
+// src/app/layout.tsx
+import { AuthProvider } from '@descope/nextjs-sdk';
+export default function RootLayout({
+	children
+}: {
+	children: React.ReactNode
+}) {
+	return (
+		<AuthProvider projectId="your-descope-project-id">
+			<html lang="en">
+				<body>{children}</body>
+			</html>
+		</AuthProvider>
+	);
+}
+```
+Note: `AuthProvider` uses `sessionTokenViaCookie={true}` by default, in order that the [AuthMiddleware](<#Require-authentication-for-application-(Middleware)>) will work out of the box.
+The session token cookie is set to [`SameSite=Strict; Secure;`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie) by default.
+If you need to customize this, you can set `sessionTokenViaCookie={sameSite: 'Lax', secure: false}` (if you pass only `sameSite`, `secure` will be set to `true` by default).
+#### Use Descope to render Flow
+You can use **default flows** or **provide flow id** directly to the Descope component
+```js
+// Login page, e.g. src/app/sign-in.tsx
+import { Descope } from '@descope/nextjs-sdk';
+// you can choose flow to run from the following without `flowId` instead
+// import { SignInFlow, SignUpFlow, SignUpOrInFlow } from '@descope/nextjs-sdk'
+const Page = () => {
+	return (
+		<Descope
+			flowId="sign-up-or-in"
+			onSuccess={(e) => console.log('Logged in!')}
+			onError={(e) => console.log('Could not logged in!')}
+			redirectAfterSuccess="/"
+			// redirectAfterError="/error-page"
+		/>
+	);
+};
+```
+Refer to the [Descope React SDK Section](../react-sdk/README.md) for a list of available props.
+**Note:** Descope is a client component. if the component that renders it is a server component, you cannot pass `onSuccess`/`onError`/`errorTransformer`/`logger` props because they are not serializable. To redirect the user after the flow is completed, use the `redirectAfterSuccess` and `redirectAfterError` props.
+#### Client Side Usage
+Use the `useDescope`, `useSession` and `useUser` hooks in your components in order to get authentication state, user details and utilities
+This can be helpful to implement application-specific logic. Examples:
+- Render different components if current session is authenticated
+- Render user's content
+- Logout button
+Note: these hooks should be used in a client component only (For example, component with `use client` notation).
+```js
+'use client';
+import { useDescope, useSession, useUser } from '@descope/nextjs-sdk/client';
+import { useCallback } from 'react';
+const App = () => {
+	// NOTE - `useDescope`, `useSession`, `useUser` should be used inside `AuthProvider` context,
+	// and will throw an exception if this requirement is not met
+	// useSession retrieves authentication state, session loading status, and session token
+	const { isAuthenticated, isSessionLoading, sessionToken } = useSession();
+	// useUser retrieves the logged in user information
+	const { user } = useUser();
+	// useDescope retrieves Descope SDK for further operations related to authentication
+	// such as logout
+	const sdk = useDescope();
+	if (isSessionLoading || isUserLoading) {
+		return <p>Loading...</p>;
+	}
+	const handleLogout = useCallback(() => {
+		sdk.logout();
+	}, [sdk]);
+	if (isAuthenticated) {
+		return (
+			<>
+				<p>Hello {user.name}</p>
+				<button onClick={handleLogout}>Logout</button>
+			</>
+		);
+	}
+	return <p>You are not logged in</p>;
+};
+```
+#### Server Side Usage
+##### Require authentication for application (Middleware)
+You can use Next.js Middleware to require authentication for a page/route or a group of pages/routes.
+Descope SDK provides a middleware function that can be used to require authentication for a page/route or a group of pages/routes.
+```js
+// src/middleware.ts
+import { authMiddleware } from '@descope/nextjs-sdk/server'
+export default authMiddleware({
+	// The Descope project ID to use for authentication
+	// Defaults to process.env.DESCOPE_PROJECT_ID
+	projectId: 'your-descope-project-id',
+	// The URL to redirect to if the user is not authenticated
+	// Defaults to process.env.SIGN_IN_ROUTE or '/sign-in' if not provided
+	// NOTE: In case it contains query parameters that exist in the original URL, they will override the original query parameters. e.g. if the original URL is /page?param1=1&param2=2 and the redirect URL is /sign-in?param1=3, the final redirect URL will be /sign-in?param1=3&param2=2
+	redirectUrl?: string,
+	// These are the public and private routes in your app. You can also use wildcards (e.g. /api/*) with routes as well in these definitions.
+	// Read more about how to use these below.
+	publicRoutes?: string[],
+	privateRoutes?: string[]
+	// If you having privateRoutes and publicRoutes defined at the same time, privateRoutes will be ignored.
+  // Optional: log level for the middleware
+  // Defaults to 'info'
+  // logLevel: 'debug' | 'info' | 'warn' | 'error'
+})
+export const config = {
+	matcher: ['/((?!.+\\.[\\w]+$|_next).*)', '/', '/(api|trpc)(.*)']
+}
+```
+##### Public and Private Route Definitions
+- **All routes are private by default.**
+- **`publicRoutes`:** Use this to specify which routes do not require authentication. If specified, only these routes and the default public routes will be public.
+- **`privateRoutes`:** Use this to specify which routes require authentication. If specified, only these routes will be private, and all other routes will be public.
+- **Conflict Handling:** If both `publicRoutes` and `privateRoutes` are provided, `privateRoutes` will be ignored, and a warning will be logged.
+This setup ensures that you can clearly define which routes in your application require authentication and which do not, while providing a mechanism to handle potential misconfigurations gracefully.
+###### Public Routes
+- **Description:** An array of public routes that do not require authentication.
+- **Configuration:** Use `publicRoutes` to specify routes that don't require authentication.
+- **Additional Defaults:** In addition to the routes you specify, the following default public routes are included:
+  - `process.env.SIGN_IN_ROUTE` or `/sign-in` if not provided
+  - `process.env.SIGN_UP_ROUTE` or `/sign-up` if not provided
+- **Example:**
+  ```typescript
+  const options = {
+  	publicRoutes: ['/home', '/about']
+  };
+  ```
+###### Private Routes
+- **Description:** An array of private routes that require authentication.
+- **Configuration:** Use `privateRoutes` to specify routes that require authentication. All other routes will be considered public.
+- **Conflict Handling:** If both `publicRoutes` and `privateRoutes` are defined at the same time, `privateRoutes` will be ignored, and a warning will be logged.
+- **Example:**
+  ```typescript
+  const options = {
+  	privateRoutes: ['/dashboard', '/profile']
+  };
+  ```
+##### Read session information in server side
+use the `session()` helper to read session information in Server Components and Route handlers.
+Note: While using `authMiddleware` is still recommended for session management (because it validates the session only once), `session()` can function without it. If `authMiddleware` does not set a session, `session()` will attempt to retrieve the session token from cookies, then parse and validate it.
+Server Component:
+```js
+// src/app/page.tsx
+import { session } from '@descope/nextjs-sdk/server';
+async function Page() {
+	const sessionRes = await session();
+	if (!sessionRes) {
+		// ...
+	}
+	// Use the session jwt or parsed token
+	const { jwt, token } = sessionRes;
+}
+```
+Route handler:
+```js
+// src/pages/api/routes.ts
+export async function GET() {
+	const currSession = await session();
+	if (!currSession) {
+		// ...
+	}
+	// Use the session jwt or parsed token
+	const { jwt, token } = currSession;
+}
+```
+The `session()` function uses Next.js's `cookies()` and `headers()` functions to retrieve the session token. If you are using Next.js Version 13, you can use the `getSession(req)` instead.
+```js
+import { getSession } from '@descope/nextjs-sdk/server';
+export async function GET(req) {
+	const currSession = await getSession(req);
+	// ...
+}
+```
+##### Optional Parameters
+If the middleware did not set a session, The `session()` function will attempt to retrieve the session token from cookies and validates it, this requires the project ID to be either set in the environment variables or passed as a parameter to the function.
+You can also pass the log level to the function (defaults to 'info').
+```
+session({
+  projectId?: string;
+  baseUrl?: string;
+  logLevel?: 'debug' | 'info' | 'warn' | 'error'
+})
+```
+- **projectId:** The Descope Project ID. If not provided, the function will fall back to `DESCOPE_PROJECT_ID` from the environment variables.
+- **baseUrl:** The Descope API base URL.
+This allows developers to use `session()` even if the project ID is not set in the environment.
+#### Access Descope SDK in server side
+Use `createSdk` function to create Descope SDK in server side.
+Refer to the [Descope Node SDK](https://github.com/descope/node-sdk/?tab=readme-ov-file#authentication-functions) for a list of available functions.
+Usage example in Route handler:
+```js
+// src/pages/api/routes.ts
+import { createSdk } from '@descope/nextjs-sdk/server';
+const sdk = createSdk({
+	// The Descope project ID to use for authentication
+	// Defaults to process.env.DESCOPE_PROJECT_ID
+	projectId: 'your-descope-project-id',
+	// The Descope management key to use for management operations
+	// Defaults to process.env.DESCOPE_MANAGEMENT_KEY
+	managementKey: 'your-descope-management-key'
+	// Optional: Descope API base URL
+	// Defaults to process.env.DESCOPE_BASE_URL
+	// baseUrl: 'https://...'
+});
+export async function GET(req) {
+	const { searchParams } = new URL(req.url);
+	const loginId = searchParams.get('loginId');
+	const { ok, data: user } = await sdk.management.user.load(loginId);
+	if (!ok) {
+		// ...
+	}
+	// Use the user data ...
+}
+```
+### Pages Router
+This section is Working in progress :-)
+In the meantime, you can see the example in the [Pages Router](./examples/pages-router/) folder.
+### Widgets
+Widgets are components that allow you to expose management features for tenant-based implementation. In certain scenarios, your customers may require the capability to perform managerial actions independently, alleviating the necessity to contact you. Widgets serve as a feature enabling you to delegate these capabilities to your customers in a modular manner.
+Important Note:
+- For the user to be able to use the widget, they need to be assigned the `Tenant Admin` Role.
+#### User Management
+The `UserManagement` widget will let you embed a user table in your site to view and take action.
+The widget lets you:
+- Create a new user
+- Edit an existing user
+- Activate / disable an existing user
+- Reset an existing user's password
+- Remove an existing user's passkey
+- Delete an existing user
+Note:
+- Custom fields also appear in the table.
+###### Usage
+```js
+import { UserManagement } from '@descope/nextjs-sdk';
+...
+  <UserManagement
+    widgetId="user-management-widget"
+    tenant="tenant-id"
+  />
+```
+Example:
+[Manage Users](./examples/app-router/app/manage-users/page.tsx)
+#### Role Management
+The `RoleManagement` widget will let you embed a role table in your site to view and take action.
+The widget lets you:
+- Create a new role
+- Change an existing role's fields
+- Delete an existing role
+Note:
+- The `Editable` field is determined by the user's access to the role - meaning that project-level roles are not editable by tenant level users.
+- You need to pre-define the permissions that the user can use, which are not editable in the widget.
+###### Usage
+```js
+import { RoleManagement } from '@descope/nextjs-sdk';
+...
+  <RoleManagement
+    widgetId="role-management-widget"
+    tenant="tenant-id"
+  />
+```
+Example:
+[Manage Roles](./examples/app-router/app/manage-roles/page.tsx)
+#### Access Key Management
+The `AccessKeyManagement` widget will let you embed an access key table in your site to view and take action.
+The widget lets you:
+- Create a new access key
+- Activate / deactivate an existing access key
+- Delete an exising access key
+###### Usage
+```js
+import { AccessKeyManagement } from '@descope/nextjs-sdk';
+{
+	/* admin view: manage all tenant users' access keys */
+}
+<AccessKeyManagement
+	widgetId="access-key-management-widget"
+	tenant="tenant-id"
+/>;
+{
+	/* user view: mange access key for the logged-in tenant's user */
+}
+<AccessKeyManagement
+	widgetId="user-access-key-management-widget"
+	tenant="tenant-id"
+/>;
+```
+Example:
+[Manage Access Keys](./examples/app-router/app/manage-access-keys/page.tsx)
+#### Audit Management
+The `AuditManagement` widget will let you embed an audit table in your site.
+###### Usage
+```js
+import { AuditManagement } from '@descope/nextjs-sdk';
+...
+  <AuditManagement
+    widgetId="audit-management-widget"
+    tenant="tenant-id"
+  />
+```
+Example:
+[Manage Audit](./examples/app-router/app/manage-audit/page.tsx)
+#### User Profile
+The `UserProfile` widget lets you embed a user profile component in your app and let the logged in user update his profile.
+The widget lets you:
+- Update user profile picture
+- Update user personal information
+- Update authentication methods
+- Logout
+###### Usage
+```js
+import { UserProfile } from '@descope/nextjs-sdk';
+...
+  <UserProfile
+    widgetId="user-profile-widget"
+    onLogout={() => {
+      // add here you own logout callback
+      window.location.href = '/login';
+    }}
+  />
+```
+Example:
+[User Profile](./examples/app-router/app/my-user-profile/page.tsx)
+#### Applications Portal
+The `ApplicationsPortal` lets you embed an applications portal component in your app and allows the logged-in user to open applications they are assigned to.
+###### Usage
+```js
+import { ApplicationsPortal } from '@descope/nextjs-sdk';
+...
+  <ApplicationsPortal
+    widgetId="applications-portal-widget"
+  />
+```
+Example:
+[User Profile](./examples/app-router/app/my-applications-portal/page.tsx)
+## Code Example
+You can find an example react app in the [examples folder](./examples). - [App Router](./examples/app-router/) - [Pages Router](./examples/pages-router/)
+## Learn More
+To learn more please see the [Descope Documentation and API reference page](https://docs.descope.com/).
+## Contact Us
+If you need help you can email [Descope Support](mailto:support@descope.com)
+## License
+The Descope SDK for React is licensed for use under the terms and conditions of the [MIT license Agreement](./LICENSE).

package/dist/cjs/client/index.js ADDED Viewed

@@ -0,0 +1,52 @@
+"use client";
+'use strict';
+var reactSdk = require('@descope/react-sdk');
+Object.defineProperty(exports, "getCurrentTenant", {
+	enumerable: true,
+	get: function () { return reactSdk.getCurrentTenant; }
+});
+Object.defineProperty(exports, "getJwtPermissions", {
+	enumerable: true,
+	get: function () { return reactSdk.getJwtPermissions; }
+});
+Object.defineProperty(exports, "getJwtRoles", {
+	enumerable: true,
+	get: function () { return reactSdk.getJwtRoles; }
+});
+Object.defineProperty(exports, "getRefreshToken", {
+	enumerable: true,
+	get: function () { return reactSdk.getRefreshToken; }
+});
+Object.defineProperty(exports, "getSessionToken", {
+	enumerable: true,
+	get: function () { return reactSdk.getSessionToken; }
+});
+Object.defineProperty(exports, "isRefreshTokenExpired", {
+	enumerable: true,
+	get: function () { return reactSdk.isRefreshTokenExpired; }
+});
+Object.defineProperty(exports, "isSessionTokenExpired", {
+	enumerable: true,
+	get: function () { return reactSdk.isSessionTokenExpired; }
+});
+Object.defineProperty(exports, "refresh", {
+	enumerable: true,
+	get: function () { return reactSdk.refresh; }
+});
+Object.defineProperty(exports, "useDescope", {
+	enumerable: true,
+	get: function () { return reactSdk.useDescope; }
+});
+Object.defineProperty(exports, "useSession", {
+	enumerable: true,
+	get: function () { return reactSdk.useSession; }
+});
+Object.defineProperty(exports, "useUser", {
+	enumerable: true,
+	get: function () { return reactSdk.useUser; }
+});
+//# sourceMappingURL=index.js.map

package/dist/cjs/client/index.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/cjs/index.js ADDED Viewed

@@ -0,0 +1,20 @@
+'use strict';
+var AuthProvider = require('./shared/AuthProvider.js');
+var DescopeFlows = require('./shared/DescopeFlows.js');
+var DescopeWidgets = require('./shared/DescopeWidgets.js');
+exports.AuthProvider = AuthProvider;
+exports.Descope = DescopeFlows.Descope;
+exports.SignInFlow = DescopeFlows.SignInFlow;
+exports.SignUpFlow = DescopeFlows.SignUpFlow;
+exports.SignUpOrInFlow = DescopeFlows.SignUpOrInFlow;
+exports.AccessKeyManagement = DescopeWidgets.AccessKeyManagement;
+exports.ApplicationsPortal = DescopeWidgets.ApplicationsPortal;
+exports.AuditManagement = DescopeWidgets.AuditManagement;
+exports.RoleManagement = DescopeWidgets.RoleManagement;
+exports.UserManagement = DescopeWidgets.UserManagement;
+exports.UserProfile = DescopeWidgets.UserProfile;
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;"}

package/dist/cjs/server/authMiddleware.js ADDED Viewed

@@ -0,0 +1,97 @@
+'use strict';
+var server_js = require('next/server.js');
+var descopeSdk = require('@descope/node-sdk');
+var constants = require('./constants.js');
+var sdk = require('./sdk.js');
+var utils = require('./utils.js');
+var logger = require('./logger.js');
+const getSessionJwt = (req) => {
+    let jwt = req.headers?.get('Authorization')?.split(' ')[1];
+    if (jwt) {
+        return jwt;
+    }
+    jwt = req.cookies?.get(descopeSdk.SessionTokenCookieName)?.value;
+    if (jwt) {
+        return jwt;
+    }
+    return undefined;
+};
+const matchWildcardRoute = (route, path) => {
+    let regexPattern = route.replace(/[.+?^${}()|[\]\\]/g, '\\$&');
+    // Convert wildcard (*) to match path segments only
+    regexPattern = regexPattern.replace(/\*/g, '[^/]*');
+    const regex = new RegExp(`^${regexPattern}$`);
+    return regex.test(path);
+};
+const isPublicRoute = (req, options) => {
+    // Ensure publicRoutes and privateRoutes are arrays, defaulting to empty arrays if not defined
+    const { publicRoutes = [], privateRoutes = [] } = options;
+    const { pathname } = req.nextUrl;
+    const isDefaultPublicRoute = Object.values(constants.DEFAULT_PUBLIC_ROUTES).includes(pathname);
+    if (publicRoutes.length > 0) {
+        if (privateRoutes.length > 0) {
+            logger.logger.warn('Both publicRoutes and privateRoutes are defined. Ignoring privateRoutes.');
+        }
+        return (isDefaultPublicRoute ||
+            publicRoutes.some((route) => matchWildcardRoute(route, pathname)));
+    }
+    if (privateRoutes.length > 0) {
+        return (isDefaultPublicRoute ||
+            !privateRoutes.some((route) => matchWildcardRoute(route, pathname)));
+    }
+    // If no routes are provided, all routes are private
+    return isDefaultPublicRoute;
+};
+const addSessionToHeadersIfExists = (headers, session) => {
+    if (session) {
+        const requestHeaders = new Headers(headers);
+        requestHeaders.set(constants.DESCOPE_SESSION_HEADER, Buffer.from(JSON.stringify(session)).toString('base64'));
+        return requestHeaders;
+    }
+    return headers;
+};
+// returns a Middleware that checks if the user is authenticated
+// if the user is not authenticated, it redirects to the redirectUrl
+// if the user is authenticated, it adds the session to the headers
+const createAuthMiddleware = (options = {}) => async (req) => {
+    logger.setLogger(options.logLevel);
+    logger.logger.debug('Auth middleware starts');
+    const jwt = getSessionJwt(req);
+    // check if the user is authenticated
+    let session;
+    try {
+        session = await sdk.getGlobalSdk({
+            projectId: options.projectId,
+            baseUrl: options.baseUrl
+        }).validateJwt(jwt);
+    }
+    catch (err) {
+        logger.logger.debug('Auth middleware, Failed to validate JWT', err);
+        if (!isPublicRoute(req, options)) {
+            const redirectUrl = options.redirectUrl || constants.DEFAULT_PUBLIC_ROUTES.signIn;
+            const url = req.nextUrl.clone();
+            // Create a URL object for redirectUrl. 'http://example.com' is just a placeholder.
+            const parsedRedirectUrl = new URL(redirectUrl, 'http://example.com');
+            url.pathname = parsedRedirectUrl.pathname;
+            const searchParams = utils.mergeSearchParams(url.search, parsedRedirectUrl.search);
+            if (searchParams) {
+                url.search = searchParams;
+            }
+            logger.logger.debug(`Auth middleware, Redirecting to ${redirectUrl}`);
+            return server_js.NextResponse.redirect(url);
+        }
+    }
+    logger.logger.debug('Auth middleware finishes');
+    // add the session to the request, if it exists
+    const headers = addSessionToHeadersIfExists(req.headers, session);
+    return server_js.NextResponse.next({
+        request: {
+            headers
+        }
+    });
+};
+module.exports = createAuthMiddleware;
+//# sourceMappingURL=authMiddleware.js.map