@descope/nextjs-sdk 0.0.0-alpha.1

package/dist/esm/server/utils.js

@@ -0,0 +1,22 @@
+/* eslint-disable import/prefer-default-export */
+/*
+Merges multiple search params into one.
+It will override according to the order of the search params
+Examples:
+ - mergeSearchParams('?a=1', '?b=2') => 'a=1&b=2'
+ - mergeSearchParams('?a=1', '?a=2') => 'a=2'
+ - mergeSearchParams('?a=1', '?a=2', '?b=3') => 'a=2&b=3'
+*/
+const mergeSearchParams = (...searchParams) => {
+    const res = searchParams.reduce((acc, curr) => {
+        const currParams = new URLSearchParams(curr);
+        currParams.forEach((value, key) => {
+            acc.set(key, value);
+        });
+        return acc;
+    }, new URLSearchParams());
+    return res.toString();
+};
+
+export { mergeSearchParams };
+//# sourceMappingURL=utils.js.map

package/dist/esm/server/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sources":["../../../src/server/utils.ts"],"sourcesContent":["/* eslint-disable import/prefer-default-export */\n\n/*\nMerges multiple search params into one.\nIt will override according to the order of the search params\nExamples:\n - mergeSearchParams('?a=1', '?b=2') => 'a=1&b=2'\n - mergeSearchParams('?a=1', '?a=2') => 'a=2'\n - mergeSearchParams('?a=1', '?a=2', '?b=3') => 'a=2&b=3'\n*/\nexport const mergeSearchParams = (...searchParams: string[]): string => {\n\tconst res = searchParams.reduce((acc, curr) => {\n\t\tconst currParams = new URLSearchParams(curr);\n\t\tcurrParams.forEach((value, key) => {\n\t\t\tacc.set(key, value);\n\t\t});\n\t\treturn acc;\n\t}, new URLSearchParams());\n\n\treturn res.toString();\n};\n"],"names":[],"mappings":"AAAA;AAEA;;;;;;;AAOE;MACW,iBAAiB,GAAG,CAAC,GAAG,YAAsB,KAAY;IACtE,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,KAAI;AAC7C,QAAA,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7C,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,KAAI;AACjC,YAAA,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrB,SAAC,CAAC,CAAC;AACH,QAAA,OAAO,GAAG,CAAC;AACZ,KAAC,EAAE,IAAI,eAAe,EAAE,CAAC,CAAC;AAE1B,IAAA,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB;;;;"}

package/dist/esm/shared/AuthProvider.js

@@ -0,0 +1,13 @@
+"use client";
+import { baseHeaders, AuthProvider as AuthProvider$1 } from '@descope/react-sdk';
+import React from 'react';
+import { baseHeaders as baseHeaders$1 } from './constants.js';
+
+// Override baseHeaders
+Object.assign(baseHeaders, baseHeaders$1);
+const AuthProvider = ({ ...props }) => (
+// by default we use sessionTokenViaCookie, so middleware will work out of the box
+React.createElement(AuthProvider$1, { sessionTokenViaCookie: true, ...props }));
+
+export { AuthProvider as default };
+//# sourceMappingURL=AuthProvider.js.map

package/dist/esm/shared/AuthProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthProvider.js","sources":["../../../src/shared/AuthProvider.tsx"],"sourcesContent":["'use client';\n\nimport {\n\tAuthProvider as AuthProviderComp,\n\tbaseHeaders\n} from '@descope/react-sdk';\nimport React from 'react';\nimport { baseHeaders as nextBaseHeaders } from './constants';\n\n// Override baseHeaders\nObject.assign(baseHeaders, nextBaseHeaders);\n\nconst AuthProvider: typeof AuthProviderComp = ({ ...props }) => (\n\t// by default we use sessionTokenViaCookie, so middleware will work out of the box\n\t<AuthProviderComp sessionTokenViaCookie {...props} />\n);\n\nexport default AuthProvider;\n"],"names":[],"mappings":";;;;;AASA;AACA;AAEM;AACL;AACA;;"}

package/dist/esm/shared/DescopeFlows.js

@@ -0,0 +1,45 @@
+"use client";
+import React from 'react';
+import dynamic from 'next/dynamic.js';
+import { useRouter } from 'next/navigation.js';
+import { baseHeaders } from './constants.js';
+
+// Generalized function to dynamically import components from @descope/react-sdk
+// Dynamic is needed because the Descope components has a side effect us
+// and NextJS will load the page on the server even if it is a client side only page
+const dynamicDescopeComponent = (componentName) => dynamic(async () => {
+    const DescopeComponents = await import('@descope/react-sdk');
+    // Override baseHeaders
+    Object.assign(DescopeComponents.baseHeaders, baseHeaders);
+    const Component = DescopeComponents[componentName];
+    return ({ redirectAfterSuccess = '', redirectAfterError = '', ...props }) => {
+        const router = useRouter();
+        const modifiedProps = { ...props };
+        if (redirectAfterSuccess) {
+            modifiedProps.onSuccess = (...args) => {
+                if (props.onSuccess) {
+                    props.onSuccess(...args);
+                }
+                router.push(redirectAfterSuccess);
+            };
+        }
+        if (redirectAfterError) {
+            modifiedProps.onError = (...args) => {
+                if (props.onError) {
+                    props.onError(...args);
+                }
+                router.push(redirectAfterError);
+            };
+        }
+        return React.createElement(Component, { ...modifiedProps });
+    };
+}, {
+    ssr: false
+});
+const Descope = dynamicDescopeComponent('Descope');
+const SignInFlow = dynamicDescopeComponent('SignInFlow');
+const SignUpFlow = dynamicDescopeComponent('SignUpFlow');
+const SignUpOrInFlow = dynamicDescopeComponent('SignUpOrInFlow');
+
+export { Descope, SignInFlow, SignUpFlow, SignUpOrInFlow };
+//# sourceMappingURL=DescopeFlows.js.map

package/dist/esm/shared/DescopeFlows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DescopeFlows.js","sources":["../../../src/shared/DescopeFlows.tsx"],"sourcesContent":["'use client';\n\n// workaround for TS issue https://github.com/microsoft/TypeScript/issues/42873\n// eslint-disable-next-line\nimport type * as _1 from '@descope/react-sdk/node_modules/@types/react';\n// eslint-disable-next-line\nimport type * as _2 from '@descope/react-sdk/node_modules/@descope/web-component/dist';\n\nimport React, { ComponentType, ComponentProps } from 'react';\nimport dynamic from 'next/dynamic';\nimport { useRouter } from 'next/navigation';\nimport {\n\tDescope as DescopeWC,\n\tSignInFlow as SignInFlowWC,\n\tSignUpFlow as SignUpFlowWC,\n\tSignUpOrInFlow as SignUpOrInFlowWC\n} from '@descope/react-sdk';\nimport { baseHeaders as nextBaseHeaders } from './constants';\n\ntype DescopeWCProps = ComponentProps<typeof DescopeWC>;\ntype SignInFlowProps = ComponentProps<typeof SignInFlowWC>;\ntype SignUpFlowProps = ComponentProps<typeof SignUpFlowWC>;\ntype SignUpOrInFlowProps = ComponentProps<typeof SignUpOrInFlowWC>;\n\ntype AdditionalProps = {\n\tredirectAfterSuccess?: string;\n\tredirectAfterError?: string;\n};\n\ntype DynamicComponentProps = {\n\tonSuccess?: (...args: any[]) => void;\n\tonError?: (...args: any[]) => void;\n};\n\n// Generalized function to dynamically import components from @descope/react-sdk\n// Dynamic is needed because the Descope components has a side effect us\n// and NextJS will load the page on the server even if it is a client side only page\nconst dynamicDescopeComponent = <\n\tT extends ComponentType<DynamicComponentProps>\n>(\n\tcomponentName: string\n) =>\n\tdynamic<ComponentProps<T> & AdditionalProps>(\n\t\tasync () => {\n\t\t\tconst DescopeComponents = await import('@descope/react-sdk');\n\n\t\t\t// Override baseHeaders\n\t\t\tObject.assign(DescopeComponents.baseHeaders, nextBaseHeaders);\n\n\t\t\tconst Component = DescopeComponents[componentName];\n\t\t\treturn ({\n\t\t\t\tredirectAfterSuccess = '',\n\t\t\t\tredirectAfterError = '',\n\t\t\t\t...props\n\t\t\t}: ComponentProps<T> & AdditionalProps) => {\n\t\t\t\tconst router = useRouter();\n\t\t\t\tconst modifiedProps = { ...props };\n\n\t\t\t\tif (redirectAfterSuccess) {\n\t\t\t\t\tmodifiedProps.onSuccess = (...args) => {\n\t\t\t\t\t\tif (props.onSuccess) {\n\t\t\t\t\t\t\tprops.onSuccess(...args);\n\t\t\t\t\t\t}\n\t\t\t\t\t\trouter.push(redirectAfterSuccess);\n\t\t\t\t\t};\n\t\t\t\t}\n\n\t\t\t\tif (redirectAfterError) {\n\t\t\t\t\tmodifiedProps.onError = (...args) => {\n\t\t\t\t\t\tif (props.onError) {\n\t\t\t\t\t\t\tprops.onError(...args);\n\t\t\t\t\t\t}\n\t\t\t\t\t\trouter.push(redirectAfterError);\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\treturn <Component {...modifiedProps} />;\n\t\t\t};\n\t\t},\n\t\t{\n\t\t\tssr: false\n\t\t}\n\t);\n\nexport const Descope =\n\tdynamicDescopeComponent<React.ComponentType<DescopeWCProps>>('Descope');\nexport const SignInFlow =\n\tdynamicDescopeComponent<React.ComponentType<SignInFlowProps>>('SignInFlow');\nexport const SignUpFlow =\n\tdynamicDescopeComponent<React.ComponentType<SignUpFlowProps>>('SignUpFlow');\nexport const SignUpOrInFlow =\n\tdynamicDescopeComponent<React.ComponentType<SignUpOrInFlowProps>>(\n\t\t'SignUpOrInFlow'\n\t);\n"],"names":[],"mappings":";;;;;;AAkCA;AACA;AACA;AACA;AAOG;;;AAKA;AACA;AAKC;AACA;;AAGC;AACC;AACC;;AAED;AACD;;;AAIA;AACC;AACC;;AAED;AACD;;AAED;AACD;AACD;AAEC;AACA;;;;;;"}

package/dist/esm/shared/DescopeWidgets.js

@@ -0,0 +1,20 @@
+"use client";
+import dynamic from 'next/dynamic.js';
+import { UserManagement as UserManagement$1, RoleManagement as RoleManagement$1, AccessKeyManagement as AccessKeyManagement$1, AuditManagement as AuditManagement$1, UserProfile as UserProfile$1, ApplicationsPortal as ApplicationsPortal$1 } from '@descope/react-sdk';
+
+// a helper function to dynamically load the components
+// This function prevents Next.js from trying to server-side render these components
+// Update the helper function to use generics for preserving component prop types
+const dynamicWidgetComponent = (Component) => dynamic(() => Promise.resolve(Component), {
+    ssr: false // Disable server-side rendering for this component
+});
+// Use the helper function to create dynamically loaded components
+const UserManagement = dynamicWidgetComponent(UserManagement$1);
+const RoleManagement = dynamicWidgetComponent(RoleManagement$1);
+const AccessKeyManagement = dynamicWidgetComponent(AccessKeyManagement$1);
+const AuditManagement = dynamicWidgetComponent(AuditManagement$1);
+const UserProfile = dynamicWidgetComponent(UserProfile$1);
+const ApplicationsPortal = dynamicWidgetComponent(ApplicationsPortal$1);
+
+export { AccessKeyManagement, ApplicationsPortal, AuditManagement, RoleManagement, UserManagement, UserProfile };
+//# sourceMappingURL=DescopeWidgets.js.map

package/dist/esm/shared/DescopeWidgets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DescopeWidgets.js","sources":["../../../src/shared/DescopeWidgets.tsx"],"sourcesContent":["'use client';\n\n// eslint-disable-next-line\nimport type * as _1 from '@descope/react-sdk/node_modules/@types/react';\n\nimport { ComponentType } from 'react';\nimport dynamic from 'next/dynamic';\nimport {\n\tUserManagement as UserManagementWC,\n\tRoleManagement as RoleManagementWC,\n\tAccessKeyManagement as AccessKeyManagementWC,\n\tAuditManagement as AuditManagementWC,\n\tUserProfile as UserProfileWc,\n\tApplicationsPortal as ApplicationsPortalWc\n} from '@descope/react-sdk';\n\n// a helper function to dynamically load the components\n// This function prevents Next.js from trying to server-side render these components\n// Update the helper function to use generics for preserving component prop types\nconst dynamicWidgetComponent = <P extends {}>(Component: ComponentType<P>) =>\n\tdynamic<P>(() => Promise.resolve(Component), {\n\t\tssr: false // Disable server-side rendering for this component\n\t});\n\n// Use the helper function to create dynamically loaded components\nexport const UserManagement = dynamicWidgetComponent(UserManagementWC);\nexport const RoleManagement = dynamicWidgetComponent(RoleManagementWC);\nexport const AccessKeyManagement = dynamicWidgetComponent(\n\tAccessKeyManagementWC\n);\nexport const AuditManagement = dynamicWidgetComponent(AuditManagementWC);\nexport const UserProfile = dynamicWidgetComponent(UserProfileWc);\nexport const ApplicationsPortal = dynamicWidgetComponent(ApplicationsPortalWc);\n"],"names":[],"mappings":";;;;AAgBA;AACA;AACA;AACA;;AAGE;AAEF;;;;;;;;"}

package/dist/esm/shared/constants.js

@@ -0,0 +1,8 @@
+// eslint-disable-next-line import/prefer-default-export
+const baseHeaders = {
+    'x-descope-sdk-name': 'nextjs',
+    'x-descope-sdk-version': "0.0.0-alpha.1"
+};
+
+export { baseHeaders };
+//# sourceMappingURL=constants.js.map

package/dist/esm/shared/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sources":["../../../src/shared/constants.ts"],"sourcesContent":["// Replaced in build time\ndeclare const BUILD_VERSION: string;\n\n// eslint-disable-next-line import/prefer-default-export\nexport const baseHeaders = {\n\t'x-descope-sdk-name': 'nextjs',\n\t'x-descope-sdk-version': BUILD_VERSION\n};\n"],"names":[],"mappings":"AAGA;AACa,MAAA,WAAW,GAAG;AAC1B,IAAA,oBAAoB,EAAE,QAAQ;AAC9B,IAAA,uBAAuB,EAAE,eAAa;;;;;"}

package/dist/index.d.ts

@@ -0,0 +1,212 @@
+/// <reference types="react" />
+import { AuthProvider as AuthProvider$1 } from '@descope/react-sdk';
+import * as _descope_core_js_sdk from '@descope/core-js-sdk';
+import * as _1 from '@descope/react-sdk/node_modules/@types/react';
+import * as _2 from '@descope/react-sdk/node_modules/@descope/web-component/dist';
+import * as _descope_web_component from '@descope/web-component';
+
+declare const AuthProvider: typeof AuthProvider$1;
+
+type AdditionalProps = {
+	redirectAfterSuccess?: string;
+	redirectAfterError?: string;
+};
+declare const Descope: _1.ComponentType<
+	{
+		flowId: string;
+		onSuccess?: (e: CustomEvent<_descope_core_js_sdk.JWTResponse>) => void;
+		onError?: (
+			e: CustomEvent<{
+				errorCode: string;
+				errorDescription: string;
+				errorMessage?: string;
+				retryAfter?: string;
+			}>
+		) => void;
+		onReady?: (e: CustomEvent<{}>) => void;
+		logger?: Partial<any>;
+		tenant?: string;
+		theme?: _2.ThemeOptions;
+		locale?: string;
+		autoFocus?: _2.AutoFocusOptions;
+		validateOnBlur?: boolean;
+		restartOnError?: boolean;
+		debug?: boolean;
+		telemetryKey?: string;
+		redirectUrl?: string;
+		errorTransformer?: (error: { text: string; type: string }) => string;
+		form?: Record<string, any>;
+		client?: Record<string, any>;
+		styleId?: string;
+	} & _1.RefAttributes<HTMLElement> &
+		AdditionalProps
+>;
+declare const SignInFlow: _1.ComponentType<
+	{
+		form?: Record<string, any>;
+		onSuccess?: (e: CustomEvent<_descope_core_js_sdk.JWTResponse>) => void;
+		onError?: (
+			e: CustomEvent<{
+				errorCode: string;
+				errorDescription: string;
+				errorMessage?: string;
+				retryAfter?: string;
+			}>
+		) => void;
+		onReady?: (e: CustomEvent<{}>) => void;
+		logger?: Partial<any>;
+		tenant?: string;
+		theme?: _2.ThemeOptions;
+		locale?: string;
+		autoFocus?: _2.AutoFocusOptions;
+		validateOnBlur?: boolean;
+		restartOnError?: boolean;
+		debug?: boolean;
+		telemetryKey?: string;
+		redirectUrl?: string;
+		errorTransformer?: (error: { text: string; type: string }) => string;
+		client?: Record<string, any>;
+		styleId?: string;
+	} & AdditionalProps
+>;
+declare const SignUpFlow: _1.ComponentType<
+	{
+		form?: Record<string, any>;
+		onSuccess?: (e: CustomEvent<_descope_core_js_sdk.JWTResponse>) => void;
+		onError?: (
+			e: CustomEvent<{
+				errorCode: string;
+				errorDescription: string;
+				errorMessage?: string;
+				retryAfter?: string;
+			}>
+		) => void;
+		onReady?: (e: CustomEvent<{}>) => void;
+		logger?: Partial<any>;
+		tenant?: string;
+		theme?: _2.ThemeOptions;
+		locale?: string;
+		autoFocus?: _2.AutoFocusOptions;
+		validateOnBlur?: boolean;
+		restartOnError?: boolean;
+		debug?: boolean;
+		telemetryKey?: string;
+		redirectUrl?: string;
+		errorTransformer?: (error: { text: string; type: string }) => string;
+		client?: Record<string, any>;
+		styleId?: string;
+	} & AdditionalProps
+>;
+declare const SignUpOrInFlow: _1.ComponentType<
+	{
+		form?: Record<string, any>;
+		onSuccess?: (e: CustomEvent<_descope_core_js_sdk.JWTResponse>) => void;
+		onError?: (
+			e: CustomEvent<{
+				errorCode: string;
+				errorDescription: string;
+				errorMessage?: string;
+				retryAfter?: string;
+			}>
+		) => void;
+		onReady?: (e: CustomEvent<{}>) => void;
+		logger?: Partial<any>;
+		tenant?: string;
+		theme?: _2.ThemeOptions;
+		locale?: string;
+		autoFocus?: _2.AutoFocusOptions;
+		validateOnBlur?: boolean;
+		restartOnError?: boolean;
+		debug?: boolean;
+		telemetryKey?: string;
+		redirectUrl?: string;
+		errorTransformer?: (error: { text: string; type: string }) => string;
+		client?: Record<string, any>;
+		styleId?: string;
+	} & AdditionalProps
+>;
+
+declare const UserManagement: _1.ComponentType<
+	{
+		logger?: Partial<any>;
+		tenant: string;
+		widgetId: string;
+		theme?: _descope_web_component.ThemeOptions;
+		debug?: boolean;
+		styleId?: string;
+	} & _1.RefAttributes<HTMLElement>
+>;
+declare const RoleManagement: _1.ComponentType<
+	{
+		logger?: Partial<any>;
+		tenant: string;
+		widgetId: string;
+		theme?: _descope_web_component.ThemeOptions;
+		debug?: boolean;
+		styleId?: string;
+	} & _1.RefAttributes<HTMLElement>
+>;
+declare const AccessKeyManagement: _1.ComponentType<
+	{
+		logger?: Partial<any>;
+		tenant: string;
+		widgetId: string;
+		theme?: _descope_web_component.ThemeOptions;
+		debug?: boolean;
+		styleId?: string;
+	} & _1.RefAttributes<HTMLElement>
+>;
+declare const AuditManagement: _1.ComponentType<
+	{
+		logger?: Partial<any>;
+		tenant: string;
+		widgetId: string;
+		theme?: _descope_web_component.ThemeOptions;
+		debug?: boolean;
+		styleId?: string;
+	} & _1.RefAttributes<HTMLElement>
+>;
+declare const UserProfile: _1.ComponentType<
+	Omit<
+		{
+			logger?: Partial<any>;
+			tenant: string;
+			widgetId: string;
+			theme?: _descope_web_component.ThemeOptions;
+			debug?: boolean;
+			styleId?: string;
+		},
+		'tenant'
+	> & {
+		onLogout?: (e: CustomEvent<any>) => void;
+	} & _1.RefAttributes<HTMLElement>
+>;
+declare const ApplicationsPortal: _1.ComponentType<
+	Omit<
+		{
+			logger?: Partial<any>;
+			tenant: string;
+			widgetId: string;
+			theme?: _descope_web_component.ThemeOptions;
+			debug?: boolean;
+			styleId?: string;
+		},
+		'tenant'
+	> & {
+		onLogout?: (e: CustomEvent<any>) => void;
+	} & _1.RefAttributes<HTMLElement>
+>;
+
+export {
+	AccessKeyManagement,
+	ApplicationsPortal,
+	AuditManagement,
+	AuthProvider,
+	Descope,
+	RoleManagement,
+	SignInFlow,
+	SignUpFlow,
+	SignUpOrInFlow,
+	UserManagement,
+	UserProfile
+};

package/dist/index.js

@@ -0,0 +1,16 @@
+export { default as AuthProvider } from './shared/AuthProvider.js';
+export {
+	Descope,
+	SignInFlow,
+	SignUpFlow,
+	SignUpOrInFlow
+} from './shared/DescopeFlows.js';
+export {
+	AccessKeyManagement,
+	ApplicationsPortal,
+	AuditManagement,
+	RoleManagement,
+	UserManagement,
+	UserProfile
+} from './shared/DescopeWidgets.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;"}

package/dist/server/authMiddleware.js

@@ -0,0 +1,98 @@
+import { NextResponse } from 'next/server.js';
+import descopeSdk from '@descope/node-sdk';
+import { DEFAULT_PUBLIC_ROUTES, DESCOPE_SESSION_HEADER } from './constants.js';
+import { getGlobalSdk } from './sdk.js';
+import { mergeSearchParams } from './utils.js';
+
+/* eslint-disable no-console */
+const getSessionJwt = (req) => {
+	let jwt = req.headers?.get('Authorization')?.split(' ')[1];
+	if (jwt) {
+		return jwt;
+	}
+	jwt = req.cookies?.get(descopeSdk.SessionTokenCookieName)?.value;
+	if (jwt) {
+		return jwt;
+	}
+	return undefined;
+};
+const isPublicRoute = (req, options) => {
+	// Ensure publicRoutes and privateRoutes are arrays, defaulting to empty arrays if not defined
+	const publicRoutes = options.publicRoutes || [];
+	const privateRoutes = options.privateRoutes || [];
+	const isDefaultPublicRoute = Object.values(DEFAULT_PUBLIC_ROUTES).includes(
+		req.nextUrl.pathname
+	);
+	if (publicRoutes.length > 0) {
+		if (privateRoutes.length > 0) {
+			console.warn(
+				'Both publicRoutes and privateRoutes are defined. Ignoring privateRoutes.'
+			);
+		}
+		return isDefaultPublicRoute || publicRoutes.includes(req.nextUrl.pathname);
+	}
+	if (privateRoutes.length > 0) {
+		return (
+			isDefaultPublicRoute || !privateRoutes.includes(req.nextUrl.pathname)
+		);
+	}
+	// If no routes are provided, all routes are private
+	return isDefaultPublicRoute;
+};
+const addSessionToHeadersIfExists = (headers, session) => {
+	if (session) {
+		const requestHeaders = new Headers(headers);
+		requestHeaders.set(
+			DESCOPE_SESSION_HEADER,
+			Buffer.from(JSON.stringify(session)).toString('base64')
+		);
+		return requestHeaders;
+	}
+	return headers;
+};
+// returns a Middleware that checks if the user is authenticated
+// if the user is not authenticated, it redirects to the redirectUrl
+// if the user is authenticated, it adds the session to the headers
+const createAuthMiddleware =
+	(options = {}) =>
+	async (req) => {
+		console.debug('Auth middleware starts');
+		const jwt = getSessionJwt(req);
+		// check if the user is authenticated
+		let session;
+		try {
+			session = await getGlobalSdk({
+				projectId: options.projectId,
+				baseUrl: options.baseUrl
+			}).validateJwt(jwt);
+		} catch (err) {
+			console.debug('Auth middleware, Failed to validate JWT', err);
+			if (!isPublicRoute(req, options)) {
+				const redirectUrl = options.redirectUrl || DEFAULT_PUBLIC_ROUTES.signIn;
+				const url = req.nextUrl.clone();
+				// Create a URL object for redirectUrl. 'http://example.com' is just a placeholder.
+				const parsedRedirectUrl = new URL(redirectUrl, 'http://example.com');
+				url.pathname = parsedRedirectUrl.pathname;
+				const searchParams = mergeSearchParams(
+					url.search,
+					parsedRedirectUrl.search
+				);
+				if (searchParams) {
+					url.search = searchParams;
+				}
+				console.debug(`Auth middleware, Redirecting to ${redirectUrl}`);
+				return NextResponse.redirect(url);
+			}
+		}
+		console.debug('Auth middleware finishes');
+		// add the session to the request, if it exists
+		const headers = addSessionToHeadersIfExists(req.headers, session);
+		return NextResponse.next({
+			request: {
+				headers
+			}
+		});
+	};
+
+export { createAuthMiddleware as default };
+//# sourceMappingURL=authMiddleware.js.map

package/dist/server/authMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMiddleware.js","sources":["../../src/server/authMiddleware.ts"],"sourcesContent":["/* eslint-disable no-console */\nimport { NextRequest, NextResponse } from 'next/server';\nimport descopeSdk from '@descope/node-sdk';\nimport type { AuthenticationInfo } from '@descope/node-sdk';\nimport { DEFAULT_PUBLIC_ROUTES, DESCOPE_SESSION_HEADER } from './constants';\nimport { getGlobalSdk } from './sdk';\nimport { mergeSearchParams } from './utils';\n\ntype MiddlewareOptions = {\n\t// The Descope project ID to use for authentication\n\t// Defaults to process.env.DESCOPE_PROJECT_ID\n\tprojectId?: string;\n\n\t// The base URL to use for authentication\n\t// Defaults to process.env.DESCOPE_BASE_URL\n\tbaseUrl?: string;\n\n\t// The URL to redirect to if the user is not authenticated\n\t// Defaults to process.env.SIGN_IN_ROUTE or '/sign-in' if not provided\n\t// NOTE: In case it contains query parameters that exist in the original URL, they will override the original query parameters. e.g. if the original URL is /page?param1=1&param2=2 and the redirect URL is /sign-in?param1=3, the final redirect URL will be /sign-in?param1=3&param2=2\n\tredirectUrl?: string;\n\n\t// An array of public routes that do not require authentication\n\t// In addition to the default public routes:\n\t// - process.env.SIGN_IN_ROUTE or /sign-in if not provided\n\t// - process.env.SIGN_UP_ROUTE or /sign-up if not provided\n\tpublicRoutes?: string[];\n\n\t// An array of private routes that require authentication\n\t// If privateRoutes is defined, routes not listed in this array will default to public routes\n\tprivateRoutes?: string[];\n};\n\nconst getSessionJwt = (req: NextRequest): string | undefined => {\n\tlet jwt = req.headers?.get('Authorization')?.split(' ')[1];\n\tif (jwt) {\n\t\treturn jwt;\n\t}\n\n\tjwt = req.cookies?.get(descopeSdk.SessionTokenCookieName)?.value;\n\tif (jwt) {\n\t\treturn jwt;\n\t}\n\treturn undefined;\n};\n\nconst isPublicRoute = (req: NextRequest, options: MiddlewareOptions) => {\n\t// Ensure publicRoutes and privateRoutes are arrays, defaulting to empty arrays if not defined\n\tconst publicRoutes = options.publicRoutes || [];\n\tconst privateRoutes = options.privateRoutes || [];\n\n\tconst isDefaultPublicRoute = Object.values(DEFAULT_PUBLIC_ROUTES).includes(\n\t\treq.nextUrl.pathname\n\t);\n\n\tif (publicRoutes.length > 0) {\n\t\tif (privateRoutes.length > 0) {\n\t\t\tconsole.warn(\n\t\t\t\t'Both publicRoutes and privateRoutes are defined. Ignoring privateRoutes.'\n\t\t\t);\n\t\t}\n\t\treturn isDefaultPublicRoute || publicRoutes.includes(req.nextUrl.pathname);\n\t}\n\n\tif (privateRoutes.length > 0) {\n\t\treturn (\n\t\t\tisDefaultPublicRoute || !privateRoutes.includes(req.nextUrl.pathname)\n\t\t);\n\t}\n\n\t// If no routes are provided, all routes are private\n\treturn isDefaultPublicRoute;\n};\n\nconst addSessionToHeadersIfExists = (\n\theaders: Headers,\n\tsession: AuthenticationInfo | undefined\n): Headers => {\n\tif (session) {\n\t\tconst requestHeaders = new Headers(headers);\n\t\trequestHeaders.set(\n\t\t\tDESCOPE_SESSION_HEADER,\n\t\t\tBuffer.from(JSON.stringify(session)).toString('base64')\n\t\t);\n\t\treturn requestHeaders;\n\t}\n\treturn headers;\n};\n\n// returns a Middleware that checks if the user is authenticated\n// if the user is not authenticated, it redirects to the redirectUrl\n// if the user is authenticated, it adds the session to the headers\nconst createAuthMiddleware =\n\t(options: MiddlewareOptions = {}) =>\n\tasync (req: NextRequest) => {\n\t\tconsole.debug('Auth middleware starts');\n\n\t\tconst jwt = getSessionJwt(req);\n\n\t\t// check if the user is authenticated\n\t\tlet session: AuthenticationInfo | undefined;\n\t\ttry {\n\t\t\tsession = await getGlobalSdk({\n\t\t\t\tprojectId: options.projectId,\n\t\t\t\tbaseUrl: options.baseUrl\n\t\t\t}).validateJwt(jwt);\n\t\t} catch (err) {\n\t\t\tconsole.debug('Auth middleware, Failed to validate JWT', err);\n\t\t\tif (!isPublicRoute(req, options)) {\n\t\t\t\tconst redirectUrl = options.redirectUrl || DEFAULT_PUBLIC_ROUTES.signIn;\n\t\t\t\tconst url = req.nextUrl.clone();\n\t\t\t\t// Create a URL object for redirectUrl. 'http://example.com' is just a placeholder.\n\t\t\t\tconst parsedRedirectUrl = new URL(redirectUrl, 'http://example.com');\n\t\t\t\turl.pathname = parsedRedirectUrl.pathname;\n\n\t\t\t\tconst searchParams = mergeSearchParams(\n\t\t\t\t\turl.search,\n\t\t\t\t\tparsedRedirectUrl.search\n\t\t\t\t);\n\t\t\t\tif (searchParams) {\n\t\t\t\t\turl.search = searchParams;\n\t\t\t\t}\n\t\t\t\tconsole.debug(`Auth middleware, Redirecting to ${redirectUrl}`);\n\t\t\t\treturn NextResponse.redirect(url);\n\t\t\t}\n\t\t}\n\n\t\tconsole.debug('Auth middleware finishes');\n\t\t// add the session to the request, if it exists\n\t\tconst headers = addSessionToHeadersIfExists(req.headers, session);\n\t\treturn NextResponse.next({\n\t\t\trequest: {\n\t\t\t\theaders\n\t\t\t}\n\t\t});\n\t};\n\nexport default createAuthMiddleware;\n"],"names":[],"mappings":";;;;;;AAAA;AAiCA,MAAM,aAAa,GAAG,CAAC,GAAgB,KAAwB;AAC9D,IAAA,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,GAAG,EAAE;AACR,QAAA,OAAO,GAAG;;AAGX,IAAA,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,KAAK;IAChE,IAAI,GAAG,EAAE;AACR,QAAA,OAAO,GAAG;;AAEX,IAAA,OAAO,SAAS;AACjB,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,GAAgB,EAAE,OAA0B,KAAI;;AAEtE,IAAA,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE;AAC/C,IAAA,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE;AAEjD,IAAA,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CACzE,GAAG,CAAC,OAAO,CAAC,QAAQ,CACpB;AAED,IAAA,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE;AAC5B,QAAA,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,YAAA,OAAO,CAAC,IAAI,CACX,0EAA0E,CAC1E;;AAEF,QAAA,OAAO,oBAAoB,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;;AAG3E,IAAA,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,QAAA,QACC,oBAAoB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;;;AAKvE,IAAA,OAAO,oBAAoB;AAC5B,CAAC;AAED,MAAM,2BAA2B,GAAG,CACnC,OAAgB,EAChB,OAAuC,KAC3B;IACZ,IAAI,OAAO,EAAE;AACZ,QAAA,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;QAC3C,cAAc,CAAC,GAAG,CACjB,sBAAsB,EACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACvD;AACD,QAAA,OAAO,cAAc;;AAEtB,IAAA,OAAO,OAAO;AACf,CAAC;AAED;AACA;AACA;AACA,MAAM,oBAAoB,GACzB,CAAC,OAAA,GAA6B,EAAE,KAChC,OAAO,GAAgB,KAAI;AAC1B,IAAA,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC;AAEvC,IAAA,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC;;AAG9B,IAAA,IAAI,OAAuC;AAC3C,IAAA,IAAI;QACH,OAAO,GAAG,MAAM,YAAY,CAAC;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC;AACjB,SAAA,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;;IAClB,OAAO,GAAG,EAAE;AACb,QAAA,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC;QAC7D,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE;YACjC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC,MAAM;YACvE,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE;;YAE/B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,oBAAoB,CAAC;AACpE,YAAA,GAAG,CAAC,QAAQ,GAAG,iBAAiB,CAAC,QAAQ;AAEzC,YAAA,MAAM,YAAY,GAAG,iBAAiB,CACrC,GAAG,CAAC,MAAM,EACV,iBAAiB,CAAC,MAAM,CACxB;YACD,IAAI,YAAY,EAAE;AACjB,gBAAA,GAAG,CAAC,MAAM,GAAG,YAAY;;AAE1B,YAAA,OAAO,CAAC,KAAK,CAAC,mCAAmC,WAAW,CAAA,CAAE,CAAC;AAC/D,YAAA,OAAO,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;;;AAInC,IAAA,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC;;IAEzC,MAAM,OAAO,GAAG,2BAA2B,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;IACjE,OAAO,YAAY,CAAC,IAAI,CAAC;AACxB,QAAA,OAAO,EAAE;YACR;AACA;AACD,KAAA,CAAC;AACH;;;;"}

package/dist/server/constants.js

@@ -0,0 +1,12 @@
+const DESCOPE_SESSION_HEADER = 'x-descope-session';
+const baseHeaders = {
+	'x-descope-sdk-name': 'nextjs',
+	'x-descope-sdk-version': '0.3.36'
+};
+const DEFAULT_PUBLIC_ROUTES = {
+	signIn: process.env.SIGN_IN_ROUTE || '/sign-in',
+	signUp: process.env.SIGN_UP_ROUTE || '/sign-up'
+};
+
+export { DEFAULT_PUBLIC_ROUTES, DESCOPE_SESSION_HEADER, baseHeaders };
+//# sourceMappingURL=constants.js.map

package/dist/server/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sources":["../../src/server/constants.ts"],"sourcesContent":["// Replaced in build time\ndeclare const BUILD_VERSION: string;\n\nexport const DESCOPE_SESSION_HEADER = 'x-descope-session';\n\nexport const baseHeaders = {\n\t'x-descope-sdk-name': 'nextjs',\n\t'x-descope-sdk-version': BUILD_VERSION\n};\n\nexport const DEFAULT_PUBLIC_ROUTES = {\n\tsignIn: process.env.SIGN_IN_ROUTE || '/sign-in',\n\tsignUp: process.env.SIGN_UP_ROUTE || '/sign-up'\n};\n"],"names":[],"mappings":"AAGO,MAAM,sBAAsB,GAAG;AAEzB,MAAA,WAAW,GAAG;AAC1B,IAAA,oBAAoB,EAAE,QAAQ;AAC9B,IAAA,uBAAuB,EAAE;;AAGb,MAAA,qBAAqB,GAAG;AACpC,IAAA,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,UAAU;AAC/C,IAAA,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI;;;;;"}

package/dist/server/dts/src/client/index.d.ts

@@ -0,0 +1,12 @@
+export {
+	useDescope,
+	useSession,
+	useUser,
+	getSessionToken,
+	getRefreshToken,
+	isSessionTokenExpired,
+	isRefreshTokenExpired,
+	getJwtPermissions,
+	getJwtRoles,
+	refresh
+} from '@descope/react-sdk';

package/dist/server/dts/src/index.d.ts

@@ -0,0 +1 @@
+export * from './shared';

package/dist/server/dts/src/server/authMiddleware.d.ts

@@ -0,0 +1,12 @@
+import { NextRequest, NextResponse } from 'next/server';
+type MiddlewareOptions = {
+	projectId?: string;
+	baseUrl?: string;
+	redirectUrl?: string;
+	publicRoutes?: string[];
+	privateRoutes?: string[];
+};
+declare const createAuthMiddleware: (
+	options?: MiddlewareOptions
+) => (req: NextRequest) => Promise<NextResponse<unknown>>;
+export default createAuthMiddleware;

package/dist/server/dts/src/server/constants.d.ts

@@ -0,0 +1,9 @@
+export declare const DESCOPE_SESSION_HEADER = 'x-descope-session';
+export declare const baseHeaders: {
+	'x-descope-sdk-name': string;
+	'x-descope-sdk-version': string;
+};
+export declare const DEFAULT_PUBLIC_ROUTES: {
+	signIn: string;
+	signUp: string;
+};

package/dist/server/dts/src/server/index.d.ts

@@ -0,0 +1,3 @@
+export { default as authMiddleware } from './authMiddleware';
+export { session, getSession } from './session';
+export { createSdk } from './sdk';

package/dist/server/dts/src/server/sdk.d.ts

@@ -0,0 +1,10 @@
+import descopeSdk from '@descope/node-sdk';
+type Sdk = ReturnType<typeof descopeSdk>;
+type CreateSdkParams = Omit<Parameters<typeof descopeSdk>[0], 'projectId'> & {
+	projectId?: string | undefined;
+};
+export declare const createSdk: (config?: CreateSdkParams) => Sdk;
+export declare const getGlobalSdk: (
+	config?: Pick<CreateSdkParams, 'projectId' | 'baseUrl'>
+) => Sdk;
+export {};

package/dist/server/dts/src/server/session.d.ts

@@ -0,0 +1,6 @@
+import { AuthenticationInfo } from '@descope/node-sdk';
+import { NextApiRequest } from 'next';
+export declare const session: () => AuthenticationInfo | undefined;
+export declare const getSession: (
+	req: NextApiRequest
+) => AuthenticationInfo | undefined;

package/dist/server/dts/src/server/utils.d.ts

@@ -0,0 +1 @@
+export declare const mergeSearchParams: (...searchParams: string[]) => string;

package/dist/server/dts/src/shared/AuthProvider.d.ts

@@ -0,0 +1,3 @@
+import { AuthProvider as AuthProviderComp } from '@descope/react-sdk';
+declare const AuthProvider: typeof AuthProviderComp;
+export default AuthProvider;