@descope/nextjs-sdk 0.10.0 → 0.11.0

package/README.md

@@ -1,13 +1,13 @@
-# Descope SDK for NextJS
+# Descope SDK for Next.js
 
-The Descope SDK for NextJS provides convenient access to the Descope for an application written on top of NextJS. You can read more on the [Descope Website](https://descope.com).
+The Descope SDK for Next.js provides convenient access to the Descope for an application written on top of Next.js. You can read more on the [Descope Website](https://descope.com).
 
 This SDK uses under the hood the Descope React SDK and Descope Node SDK
 Refer to the [Descope React SDK](https://github.com/descope/descope-js/tree/main/packages/sdks/react-sdk) and [Descope Node SDK](https://github.com/descope/node-sdk) for more details.
 
 ## Requirements
 
-- The SDK supports NextJS version 13 and above.
+- The SDK supports Next.js version 13 and above.
 - A Descope `Project ID` is required for using the SDK. Find it on the [project page in the Descope Console](https://app.descope.com/settings/project).
 
 ## Installing the SDK
@@ -47,9 +47,9 @@ export default function RootLayout({
 }
 ```
 
-Note: `AuthProvider` uses `sessionTokenViaCookie` by default, in order that the [AuthMiddleware](<#Require-authentication-for-application-(Middleware)>) will work out of the box.
-The session token cookie is set to [`SameSite=Strict`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value) by default.
-If you need to customize this, you can set `sessionTokenViaCookie={sameSite: 'Lax'}`
+Note: `AuthProvider` uses `sessionTokenViaCookie={true}` by default, in order that the [AuthMiddleware](<#Require-authentication-for-application-(Middleware)>) will work out of the box.
+The session token cookie is set to [`SameSite=Strict; Secure;`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie) by default.
+If you need to customize this, you can set `sessionTokenViaCookie={sameSite: 'Lax', secure: false}` (if you pass only `sameSite`, `secure` will be set to `true` by default).
 
 #### Use Descope to render Flow
 
@@ -131,7 +131,7 @@ const App = () => {
 
 ##### Require authentication for application (Middleware)
 
-You can use NextJS Middleware to require authentication for a page/route or a group of pages/routes.
+You can use Next.js Middleware to require authentication for a page/route or a group of pages/routes.
 
 Descope SDK provides a middleware function that can be used to require authentication for a page/route or a group of pages/routes.
 
@@ -229,7 +229,7 @@ Route handler:
 // src/pages/api/routes.ts
 export async function GET() {
 	const currSession = await session();
-	if (!currSession.isAuthenticated) {
+	if (!currSession) {
 		// ...
 	}
 
@@ -238,6 +238,18 @@ export async function GET() {
 }
 ```
 
+The `session()` function uses Next.js's `cookies()` and `headers()` functions to retrieve the session token. If you are using Next.js Version 13, you can use the `getSession(req)` instead.
+
+```js
+import { getSession } from '@descope/nextjs-sdk/server';
+
+export async function GET(req) {
+	const currSession = await getSession(req);
+
+	// ...
+}
+```
+
 ##### Optional Parameters
 
 If the middleware did not set a session, The `session()` function will attempt to retrieve the session token from cookies and validates it, this requires the project ID to be either set in the environment variables or passed as a parameter to the function.

package/dist/cjs/server/constants.js

@@ -3,7 +3,7 @@
 const DESCOPE_SESSION_HEADER = 'x-descope-session';
 const baseHeaders = {
     'x-descope-sdk-name': 'nextjs',
-    'x-descope-sdk-version': "0.10.0"
+    'x-descope-sdk-version': "0.11.0"
 };
 const DEFAULT_PUBLIC_ROUTES = {
     signIn: process.env.SIGN_IN_ROUTE || '/sign-in',

package/dist/cjs/shared/constants.js

@@ -3,7 +3,7 @@
 // eslint-disable-next-line import/prefer-default-export
 const baseHeaders = {
     'x-descope-sdk-name': 'nextjs',
-    'x-descope-sdk-version': "0.10.0"
+    'x-descope-sdk-version': "0.11.0"
 };
 
 exports.baseHeaders = baseHeaders;

package/dist/esm/server/constants.js

@@ -1,7 +1,7 @@
 const DESCOPE_SESSION_HEADER = 'x-descope-session';
 const baseHeaders = {
     'x-descope-sdk-name': 'nextjs',
-    'x-descope-sdk-version': "0.10.0"
+    'x-descope-sdk-version': "0.11.0"
 };
 const DEFAULT_PUBLIC_ROUTES = {
     signIn: process.env.SIGN_IN_ROUTE || '/sign-in',

package/dist/esm/shared/constants.js

@@ -1,7 +1,7 @@
 // eslint-disable-next-line import/prefer-default-export
 const baseHeaders = {
     'x-descope-sdk-name': 'nextjs',
-    'x-descope-sdk-version': "0.10.0"
+    'x-descope-sdk-version': "0.11.0"
 };
 
 export { baseHeaders };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@descope/nextjs-sdk",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Descope NextJS SDK",
   "author": "Descope Team <info@descope.com>",
   "homepage": "https://github.com/descope/descope-js",
@@ -64,9 +64,9 @@
   },
   "dependencies": {
     "@descope/node-sdk": "1.6.13",
-    "@descope/react-sdk": "2.10.0",
-    "@descope/web-component": "3.39.0",
-    "@descope/core-js-sdk": "2.38.0"
+    "@descope/core-js-sdk": "2.38.0",
+    "@descope/web-component": "3.39.1",
+    "@descope/react-sdk": "2.11.0"
   },
   "devDependencies": {
     "@babel/core": "7.26.0",