@descope/nextjs-sdk 0.15.56 → 0.15.57

package/dist/cjs/server/constants.js

@@ -3,7 +3,7 @@
 const DESCOPE_SESSION_HEADER = 'x-descope-session';
 const baseHeaders = {
     'x-descope-sdk-name': 'nextjs',
-    'x-descope-sdk-version': "0.15.56"
+    'x-descope-sdk-version': "0.15.57"
 };
 const DEFAULT_PUBLIC_ROUTES = {
     signIn: process.env.SIGN_IN_ROUTE || '/sign-in',

package/dist/cjs/server/session.js

@@ -5,25 +5,10 @@ var headers_js = require('next/headers.js');
 var sdk = require('./sdk.js');
 var logger = require('./logger.js');
 
-const getSessionFromCookie = async (config) => {
-    logger.logger.debug('attempting to get session from cookie');
-    try {
-        const sessionCookie = (await headers_js.cookies()).get(config?.sessionCookieName || descopeSdk.SessionTokenCookieName);
-        if (!sessionCookie?.value) {
-            logger.logger.debug('Session cookie not found');
-            return undefined;
-        }
-        const sdk$1 = sdk.getGlobalSdk(config);
-        return await sdk$1.validateJwt(sessionCookie.value);
-    }
-    catch (err) {
-        logger.logger.debug('Error getting session from cookie', err);
-        return undefined;
-    }
-};
+const getSessionCookieName = (config) => config?.sessionCookieName || descopeSdk.SessionTokenCookieName;
 // tries to validate the Authorization header,
-// if it doesn't exist or is invalid, it will attempt to get the session from the cookie
-const getSessionFromAuthorizationOrCookie = async (authorization, config) => {
+// if it doesn't exist or is invalid, it will attempt to validate the session cookie
+const getSessionFromAuthorizationOrCookie = async (authorization, cookieJwt, config) => {
     const sessionJwt = authorization?.split(' ')[1];
     if (sessionJwt) {
         try {
@@ -34,19 +19,35 @@ const getSessionFromAuthorizationOrCookie = async (authorization, config) => {
             logger.logger.debug('Error validating session from Authorization header', err);
         }
     }
-    return getSessionFromCookie(config);
+    logger.logger.debug('attempting to get session from cookie');
+    if (!cookieJwt) {
+        logger.logger.debug('Session cookie not found');
+        return undefined;
+    }
+    try {
+        const sdk$1 = sdk.getGlobalSdk(config);
+        return await sdk$1.validateJwt(cookieJwt);
+    }
+    catch (err) {
+        logger.logger.debug('Error getting session from cookie', err);
+        return undefined;
+    }
 };
 // returns the session token if it exists in the Authorization header or cookie
 const session = async (config) => {
     logger.setLogger(config?.logLevel);
     const reqHeaders = await headers_js.headers();
-    return getSessionFromAuthorizationOrCookie(reqHeaders.get('Authorization'), config);
+    const cookieJwt = (await headers_js.cookies()).get(getSessionCookieName(config))?.value;
+    return getSessionFromAuthorizationOrCookie(reqHeaders.get('Authorization'), cookieJwt, config);
 };
 // returns the session token if it exists in the request Authorization header or cookie
 const getSession = async (req, config) => {
     logger.setLogger(config?.logLevel);
     const { authorization } = req.headers;
-    return getSessionFromAuthorizationOrCookie(typeof authorization === 'string' ? authorization : undefined, config);
+    return getSessionFromAuthorizationOrCookie(typeof authorization === 'string' ? authorization : undefined, 
+    // Pages Router request - next/headers cookies() is not available here,
+    // so the session cookie must be read directly from the request
+    req.cookies?.[getSessionCookieName(config)], config);
 };
 
 exports.getSession = getSession;

package/dist/cjs/server/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sources":["../../../src/server/session.ts"],"sourcesContent":["import descopeSdk, { AuthenticationInfo } from '@descope/node-sdk';\nimport { NextApiRequest } from 'next';\nimport { cookies, headers } from 'next/headers';\nimport { getGlobalSdk, CreateSdkParams } from './sdk';\nimport { LogLevel } from '../types';\nimport { logger, setLogger } from './logger';\n\ntype SessionConfig = CreateSdkParams & {\n\t// The log level to use for the middleware\n\t// Defaults to 'info'\n\tlogLevel?: LogLevel;\n\n\t// The name of the session cookie to look for the JWT\n\t// Defaults to 'DS'\n\t// Note: The middleware will also look for the JWT in the Authorization header\n\tsessionCookieName?: string;\n\n\t// The name of the refresh token cookie\n\t// Defaults to 'DSR'\n\trefreshTokenCookieName?: string;\n};\n\nconst getSessionFromCookie = async (\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tlogger.debug('attempting to get session from cookie');\n\ttry {\n\t\tconst sessionCookie = (await cookies()).get(\n\t\t\tconfig?.sessionCookieName || descopeSdk.SessionTokenCookieName\n\t\t);\n\t\tif (!sessionCookie?.value) {\n\t\t\tlogger.debug('Session cookie not found');\n\t\t\treturn undefined;\n\t\t}\n\t\tconst sdk = getGlobalSdk(config);\n\t\treturn await sdk.validateJwt(sessionCookie.value);\n\t} catch (err) {\n\t\tlogger.debug('Error getting session from cookie', err);\n\t\treturn undefined;\n\t}\n};\n\n// tries to validate the Authorization header,\n// if it doesn't exist or is invalid, it will attempt to get the session from the cookie\nconst getSessionFromAuthorizationOrCookie = async (\n\tauthorization?: string | null,\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tconst sessionJwt = authorization?.split(' ')[1];\n\tif (sessionJwt) {\n\t\ttry {\n\t\t\tconst sdk = getGlobalSdk(config);\n\t\t\treturn await sdk.validateJwt(sessionJwt);\n\t\t} catch (err) {\n\t\t\tlogger.debug('Error validating session from Authorization header', err);\n\t\t}\n\t}\n\n\treturn getSessionFromCookie(config);\n};\n\n// returns the session token if it exists in the Authorization header or cookie\nexport const session = async (\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tsetLogger(config?.logLevel);\n\tconst reqHeaders = await headers();\n\treturn getSessionFromAuthorizationOrCookie(\n\t\treqHeaders.get('Authorization'),\n\t\tconfig\n\t);\n};\n\n// returns the session token if it exists in the request Authorization header or cookie\nexport const getSession = async (\n\treq: NextApiRequest,\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tsetLogger(config?.logLevel);\n\tconst { authorization } = req.headers;\n\treturn getSessionFromAuthorizationOrCookie(\n\t\ttypeof authorization === 'string' ? authorization : undefined,\n\t\tconfig\n\t);\n};\n"],"names":["logger","cookies","sdk","getGlobalSdk","setLogger","headers"],"mappings":";;;;;;;AAsBA,MAAM,oBAAoB,GAAG,OAC5B,MAAsB,KACsB;AAC5C,IAAAA,aAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AACtD,IAAA,IAAI;AACH,QAAA,MAAM,aAAa,GAAG,CAAC,MAAMC,kBAAO,EAAE,EAAE,GAAG,CAC1C,MAAM,EAAE,iBAAiB,IAAI,UAAU,CAAC,sBAAsB,CAC9D,CAAC;AACF,QAAA,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE;AAC1B,YAAAD,aAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACzC,YAAA,OAAO,SAAS,CAAC;SACjB;AACD,QAAA,MAAME,KAAG,GAAGC,gBAAY,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,MAAMD,KAAG,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;KAClD;IAAC,OAAO,GAAG,EAAE;AACb,QAAAF,aAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;AACvD,QAAA,OAAO,SAAS,CAAC;KACjB;AACF,CAAC,CAAC;AAEF;AACA;AACA,MAAM,mCAAmC,GAAG,OAC3C,aAA6B,EAC7B,MAAsB,KACsB;IAC5C,MAAM,UAAU,GAAG,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,UAAU,EAAE;AACf,QAAA,IAAI;AACH,YAAA,MAAME,KAAG,GAAGC,gBAAY,CAAC,MAAM,CAAC,CAAC;AACjC,YAAA,OAAO,MAAMD,KAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;SACzC;QAAC,OAAO,GAAG,EAAE;AACb,YAAAF,aAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;SACxE;KACD;AAED,IAAA,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF;MACa,OAAO,GAAG,OACtB,MAAsB,KACsB;AAC5C,IAAAI,gBAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC5B,IAAA,MAAM,UAAU,GAAG,MAAMC,kBAAO,EAAE,CAAC;IACnC,OAAO,mCAAmC,CACzC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,EAC/B,MAAM,CACN,CAAC;AACH,EAAE;AAEF;AACa,MAAA,UAAU,GAAG,OACzB,GAAmB,EACnB,MAAsB,KACsB;AAC5C,IAAAD,gBAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC5B,IAAA,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;AACtC,IAAA,OAAO,mCAAmC,CACzC,OAAO,aAAa,KAAK,QAAQ,GAAG,aAAa,GAAG,SAAS,EAC7D,MAAM,CACN,CAAC;AACH;;;;;"}
+{"version":3,"file":"session.js","sources":["../../../src/server/session.ts"],"sourcesContent":["import descopeSdk, { AuthenticationInfo } from '@descope/node-sdk';\nimport { NextApiRequest } from 'next';\nimport { cookies, headers } from 'next/headers';\nimport { getGlobalSdk, CreateSdkParams } from './sdk';\nimport { LogLevel } from '../types';\nimport { logger, setLogger } from './logger';\n\ntype SessionConfig = CreateSdkParams & {\n\t// The log level to use for the middleware\n\t// Defaults to 'info'\n\tlogLevel?: LogLevel;\n\n\t// The name of the session cookie to look for the JWT\n\t// Defaults to 'DS'\n\t// Note: The middleware will also look for the JWT in the Authorization header\n\tsessionCookieName?: string;\n\n\t// The name of the refresh token cookie\n\t// Defaults to 'DSR'\n\trefreshTokenCookieName?: string;\n};\n\nconst getSessionCookieName = (config?: SessionConfig) =>\n\tconfig?.sessionCookieName || descopeSdk.SessionTokenCookieName;\n\n// tries to validate the Authorization header,\n// if it doesn't exist or is invalid, it will attempt to validate the session cookie\nconst getSessionFromAuthorizationOrCookie = async (\n\tauthorization: string | null | undefined,\n\tcookieJwt: string | undefined,\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tconst sessionJwt = authorization?.split(' ')[1];\n\tif (sessionJwt) {\n\t\ttry {\n\t\t\tconst sdk = getGlobalSdk(config);\n\t\t\treturn await sdk.validateJwt(sessionJwt);\n\t\t} catch (err) {\n\t\t\tlogger.debug('Error validating session from Authorization header', err);\n\t\t}\n\t}\n\n\tlogger.debug('attempting to get session from cookie');\n\tif (!cookieJwt) {\n\t\tlogger.debug('Session cookie not found');\n\t\treturn undefined;\n\t}\n\ttry {\n\t\tconst sdk = getGlobalSdk(config);\n\t\treturn await sdk.validateJwt(cookieJwt);\n\t} catch (err) {\n\t\tlogger.debug('Error getting session from cookie', err);\n\t\treturn undefined;\n\t}\n};\n\n// returns the session token if it exists in the Authorization header or cookie\nexport const session = async (\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tsetLogger(config?.logLevel);\n\tconst reqHeaders = await headers();\n\tconst cookieJwt = (await cookies()).get(getSessionCookieName(config))?.value;\n\treturn getSessionFromAuthorizationOrCookie(\n\t\treqHeaders.get('Authorization'),\n\t\tcookieJwt,\n\t\tconfig\n\t);\n};\n\n// returns the session token if it exists in the request Authorization header or cookie\nexport const getSession = async (\n\treq: NextApiRequest,\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tsetLogger(config?.logLevel);\n\tconst { authorization } = req.headers;\n\treturn getSessionFromAuthorizationOrCookie(\n\t\ttypeof authorization === 'string' ? authorization : undefined,\n\t\t// Pages Router request - next/headers cookies() is not available here,\n\t\t// so the session cookie must be read directly from the request\n\t\treq.cookies?.[getSessionCookieName(config)],\n\t\tconfig\n\t);\n};\n"],"names":["sdk","getGlobalSdk","logger","setLogger","headers","cookies"],"mappings":";;;;;;;AAsBA,MAAM,oBAAoB,GAAG,CAAC,MAAsB,KACnD,MAAM,EAAE,iBAAiB,IAAI,UAAU,CAAC,sBAAsB,CAAC;AAEhE;AACA;AACA,MAAM,mCAAmC,GAAG,OAC3C,aAAwC,EACxC,SAA6B,EAC7B,MAAsB,KACsB;IAC5C,MAAM,UAAU,GAAG,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,UAAU,EAAE;AACf,QAAA,IAAI;AACH,YAAA,MAAMA,KAAG,GAAGC,gBAAY,CAAC,MAAM,CAAC,CAAC;AACjC,YAAA,OAAO,MAAMD,KAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;SACzC;QAAC,OAAO,GAAG,EAAE;AACb,YAAAE,aAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;SACxE;KACD;AAED,IAAAA,aAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,EAAE;AACf,QAAAA,aAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACzC,QAAA,OAAO,SAAS,CAAC;KACjB;AACD,IAAA,IAAI;AACH,QAAA,MAAMF,KAAG,GAAGC,gBAAY,CAAC,MAAM,CAAC,CAAC;AACjC,QAAA,OAAO,MAAMD,KAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;KACxC;IAAC,OAAO,GAAG,EAAE;AACb,QAAAE,aAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;AACvD,QAAA,OAAO,SAAS,CAAC;KACjB;AACF,CAAC,CAAC;AAEF;MACa,OAAO,GAAG,OACtB,MAAsB,KACsB;AAC5C,IAAAC,gBAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC5B,IAAA,MAAM,UAAU,GAAG,MAAMC,kBAAO,EAAE,CAAC;AACnC,IAAA,MAAM,SAAS,GAAG,CAAC,MAAMC,kBAAO,EAAE,EAAE,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC;AAC7E,IAAA,OAAO,mCAAmC,CACzC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,EAC/B,SAAS,EACT,MAAM,CACN,CAAC;AACH,EAAE;AAEF;AACa,MAAA,UAAU,GAAG,OACzB,GAAmB,EACnB,MAAsB,KACsB;AAC5C,IAAAF,gBAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC5B,IAAA,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;AACtC,IAAA,OAAO,mCAAmC,CACzC,OAAO,aAAa,KAAK,QAAQ,GAAG,aAAa,GAAG,SAAS;;;AAG7D,IAAA,GAAG,CAAC,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,EAC3C,MAAM,CACN,CAAC;AACH;;;;;"}

package/dist/cjs/shared/constants.js

@@ -3,7 +3,7 @@
 // eslint-disable-next-line import/prefer-default-export
 const baseHeaders = {
     'x-descope-sdk-name': 'nextjs',
-    'x-descope-sdk-version': "0.15.56"
+    'x-descope-sdk-version': "0.15.57"
 };
 
 exports.baseHeaders = baseHeaders;

package/dist/esm/server/constants.js

@@ -1,7 +1,7 @@
 const DESCOPE_SESSION_HEADER = 'x-descope-session';
 const baseHeaders = {
     'x-descope-sdk-name': 'nextjs',
-    'x-descope-sdk-version': "0.15.56"
+    'x-descope-sdk-version': "0.15.57"
 };
 const DEFAULT_PUBLIC_ROUTES = {
     signIn: process.env.SIGN_IN_ROUTE || '/sign-in',

package/dist/esm/server/session.js

@@ -3,25 +3,10 @@ import { headers, cookies } from 'next/headers.js';
 import { getGlobalSdk } from './sdk.js';
 import { setLogger, logger } from './logger.js';
 
-const getSessionFromCookie = async (config) => {
-    logger.debug('attempting to get session from cookie');
-    try {
-        const sessionCookie = (await cookies()).get(config?.sessionCookieName || descopeSdk.SessionTokenCookieName);
-        if (!sessionCookie?.value) {
-            logger.debug('Session cookie not found');
-            return undefined;
-        }
-        const sdk = getGlobalSdk(config);
-        return await sdk.validateJwt(sessionCookie.value);
-    }
-    catch (err) {
-        logger.debug('Error getting session from cookie', err);
-        return undefined;
-    }
-};
+const getSessionCookieName = (config) => config?.sessionCookieName || descopeSdk.SessionTokenCookieName;
 // tries to validate the Authorization header,
-// if it doesn't exist or is invalid, it will attempt to get the session from the cookie
-const getSessionFromAuthorizationOrCookie = async (authorization, config) => {
+// if it doesn't exist or is invalid, it will attempt to validate the session cookie
+const getSessionFromAuthorizationOrCookie = async (authorization, cookieJwt, config) => {
     const sessionJwt = authorization?.split(' ')[1];
     if (sessionJwt) {
         try {
@@ -32,19 +17,35 @@ const getSessionFromAuthorizationOrCookie = async (authorization, config) => {
             logger.debug('Error validating session from Authorization header', err);
         }
     }
-    return getSessionFromCookie(config);
+    logger.debug('attempting to get session from cookie');
+    if (!cookieJwt) {
+        logger.debug('Session cookie not found');
+        return undefined;
+    }
+    try {
+        const sdk = getGlobalSdk(config);
+        return await sdk.validateJwt(cookieJwt);
+    }
+    catch (err) {
+        logger.debug('Error getting session from cookie', err);
+        return undefined;
+    }
 };
 // returns the session token if it exists in the Authorization header or cookie
 const session = async (config) => {
     setLogger(config?.logLevel);
     const reqHeaders = await headers();
-    return getSessionFromAuthorizationOrCookie(reqHeaders.get('Authorization'), config);
+    const cookieJwt = (await cookies()).get(getSessionCookieName(config))?.value;
+    return getSessionFromAuthorizationOrCookie(reqHeaders.get('Authorization'), cookieJwt, config);
 };
 // returns the session token if it exists in the request Authorization header or cookie
 const getSession = async (req, config) => {
     setLogger(config?.logLevel);
     const { authorization } = req.headers;
-    return getSessionFromAuthorizationOrCookie(typeof authorization === 'string' ? authorization : undefined, config);
+    return getSessionFromAuthorizationOrCookie(typeof authorization === 'string' ? authorization : undefined, 
+    // Pages Router request - next/headers cookies() is not available here,
+    // so the session cookie must be read directly from the request
+    req.cookies?.[getSessionCookieName(config)], config);
 };
 
 export { getSession, session };

package/dist/esm/server/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sources":["../../../src/server/session.ts"],"sourcesContent":["import descopeSdk, { AuthenticationInfo } from '@descope/node-sdk';\nimport { NextApiRequest } from 'next';\nimport { cookies, headers } from 'next/headers';\nimport { getGlobalSdk, CreateSdkParams } from './sdk';\nimport { LogLevel } from '../types';\nimport { logger, setLogger } from './logger';\n\ntype SessionConfig = CreateSdkParams & {\n\t// The log level to use for the middleware\n\t// Defaults to 'info'\n\tlogLevel?: LogLevel;\n\n\t// The name of the session cookie to look for the JWT\n\t// Defaults to 'DS'\n\t// Note: The middleware will also look for the JWT in the Authorization header\n\tsessionCookieName?: string;\n\n\t// The name of the refresh token cookie\n\t// Defaults to 'DSR'\n\trefreshTokenCookieName?: string;\n};\n\nconst getSessionFromCookie = async (\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tlogger.debug('attempting to get session from cookie');\n\ttry {\n\t\tconst sessionCookie = (await cookies()).get(\n\t\t\tconfig?.sessionCookieName || descopeSdk.SessionTokenCookieName\n\t\t);\n\t\tif (!sessionCookie?.value) {\n\t\t\tlogger.debug('Session cookie not found');\n\t\t\treturn undefined;\n\t\t}\n\t\tconst sdk = getGlobalSdk(config);\n\t\treturn await sdk.validateJwt(sessionCookie.value);\n\t} catch (err) {\n\t\tlogger.debug('Error getting session from cookie', err);\n\t\treturn undefined;\n\t}\n};\n\n// tries to validate the Authorization header,\n// if it doesn't exist or is invalid, it will attempt to get the session from the cookie\nconst getSessionFromAuthorizationOrCookie = async (\n\tauthorization?: string | null,\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tconst sessionJwt = authorization?.split(' ')[1];\n\tif (sessionJwt) {\n\t\ttry {\n\t\t\tconst sdk = getGlobalSdk(config);\n\t\t\treturn await sdk.validateJwt(sessionJwt);\n\t\t} catch (err) {\n\t\t\tlogger.debug('Error validating session from Authorization header', err);\n\t\t}\n\t}\n\n\treturn getSessionFromCookie(config);\n};\n\n// returns the session token if it exists in the Authorization header or cookie\nexport const session = async (\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tsetLogger(config?.logLevel);\n\tconst reqHeaders = await headers();\n\treturn getSessionFromAuthorizationOrCookie(\n\t\treqHeaders.get('Authorization'),\n\t\tconfig\n\t);\n};\n\n// returns the session token if it exists in the request Authorization header or cookie\nexport const getSession = async (\n\treq: NextApiRequest,\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tsetLogger(config?.logLevel);\n\tconst { authorization } = req.headers;\n\treturn getSessionFromAuthorizationOrCookie(\n\t\ttypeof authorization === 'string' ? authorization : undefined,\n\t\tconfig\n\t);\n};\n"],"names":[],"mappings":";;;;;AAsBA,MAAM,oBAAoB,GAAG,OAC5B,MAAsB,KACsB;AAC5C,IAAA,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AACtD,IAAA,IAAI;AACH,QAAA,MAAM,aAAa,GAAG,CAAC,MAAM,OAAO,EAAE,EAAE,GAAG,CAC1C,MAAM,EAAE,iBAAiB,IAAI,UAAU,CAAC,sBAAsB,CAC9D,CAAC;AACF,QAAA,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE;AAC1B,YAAA,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACzC,YAAA,OAAO,SAAS,CAAC;SACjB;AACD,QAAA,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;KAClD;IAAC,OAAO,GAAG,EAAE;AACb,QAAA,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;AACvD,QAAA,OAAO,SAAS,CAAC;KACjB;AACF,CAAC,CAAC;AAEF;AACA;AACA,MAAM,mCAAmC,GAAG,OAC3C,aAA6B,EAC7B,MAAsB,KACsB;IAC5C,MAAM,UAAU,GAAG,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,UAAU,EAAE;AACf,QAAA,IAAI;AACH,YAAA,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AACjC,YAAA,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;SACzC;QAAC,OAAO,GAAG,EAAE;AACb,YAAA,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;SACxE;KACD;AAED,IAAA,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF;MACa,OAAO,GAAG,OACtB,MAAsB,KACsB;AAC5C,IAAA,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC5B,IAAA,MAAM,UAAU,GAAG,MAAM,OAAO,EAAE,CAAC;IACnC,OAAO,mCAAmC,CACzC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,EAC/B,MAAM,CACN,CAAC;AACH,EAAE;AAEF;AACa,MAAA,UAAU,GAAG,OACzB,GAAmB,EACnB,MAAsB,KACsB;AAC5C,IAAA,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC5B,IAAA,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;AACtC,IAAA,OAAO,mCAAmC,CACzC,OAAO,aAAa,KAAK,QAAQ,GAAG,aAAa,GAAG,SAAS,EAC7D,MAAM,CACN,CAAC;AACH;;;;"}
+{"version":3,"file":"session.js","sources":["../../../src/server/session.ts"],"sourcesContent":["import descopeSdk, { AuthenticationInfo } from '@descope/node-sdk';\nimport { NextApiRequest } from 'next';\nimport { cookies, headers } from 'next/headers';\nimport { getGlobalSdk, CreateSdkParams } from './sdk';\nimport { LogLevel } from '../types';\nimport { logger, setLogger } from './logger';\n\ntype SessionConfig = CreateSdkParams & {\n\t// The log level to use for the middleware\n\t// Defaults to 'info'\n\tlogLevel?: LogLevel;\n\n\t// The name of the session cookie to look for the JWT\n\t// Defaults to 'DS'\n\t// Note: The middleware will also look for the JWT in the Authorization header\n\tsessionCookieName?: string;\n\n\t// The name of the refresh token cookie\n\t// Defaults to 'DSR'\n\trefreshTokenCookieName?: string;\n};\n\nconst getSessionCookieName = (config?: SessionConfig) =>\n\tconfig?.sessionCookieName || descopeSdk.SessionTokenCookieName;\n\n// tries to validate the Authorization header,\n// if it doesn't exist or is invalid, it will attempt to validate the session cookie\nconst getSessionFromAuthorizationOrCookie = async (\n\tauthorization: string | null | undefined,\n\tcookieJwt: string | undefined,\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tconst sessionJwt = authorization?.split(' ')[1];\n\tif (sessionJwt) {\n\t\ttry {\n\t\t\tconst sdk = getGlobalSdk(config);\n\t\t\treturn await sdk.validateJwt(sessionJwt);\n\t\t} catch (err) {\n\t\t\tlogger.debug('Error validating session from Authorization header', err);\n\t\t}\n\t}\n\n\tlogger.debug('attempting to get session from cookie');\n\tif (!cookieJwt) {\n\t\tlogger.debug('Session cookie not found');\n\t\treturn undefined;\n\t}\n\ttry {\n\t\tconst sdk = getGlobalSdk(config);\n\t\treturn await sdk.validateJwt(cookieJwt);\n\t} catch (err) {\n\t\tlogger.debug('Error getting session from cookie', err);\n\t\treturn undefined;\n\t}\n};\n\n// returns the session token if it exists in the Authorization header or cookie\nexport const session = async (\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tsetLogger(config?.logLevel);\n\tconst reqHeaders = await headers();\n\tconst cookieJwt = (await cookies()).get(getSessionCookieName(config))?.value;\n\treturn getSessionFromAuthorizationOrCookie(\n\t\treqHeaders.get('Authorization'),\n\t\tcookieJwt,\n\t\tconfig\n\t);\n};\n\n// returns the session token if it exists in the request Authorization header or cookie\nexport const getSession = async (\n\treq: NextApiRequest,\n\tconfig?: SessionConfig\n): Promise<AuthenticationInfo | undefined> => {\n\tsetLogger(config?.logLevel);\n\tconst { authorization } = req.headers;\n\treturn getSessionFromAuthorizationOrCookie(\n\t\ttypeof authorization === 'string' ? authorization : undefined,\n\t\t// Pages Router request - next/headers cookies() is not available here,\n\t\t// so the session cookie must be read directly from the request\n\t\treq.cookies?.[getSessionCookieName(config)],\n\t\tconfig\n\t);\n};\n"],"names":[],"mappings":";;;;;AAsBA,MAAM,oBAAoB,GAAG,CAAC,MAAsB,KACnD,MAAM,EAAE,iBAAiB,IAAI,UAAU,CAAC,sBAAsB,CAAC;AAEhE;AACA;AACA,MAAM,mCAAmC,GAAG,OAC3C,aAAwC,EACxC,SAA6B,EAC7B,MAAsB,KACsB;IAC5C,MAAM,UAAU,GAAG,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,UAAU,EAAE;AACf,QAAA,IAAI;AACH,YAAA,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AACjC,YAAA,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;SACzC;QAAC,OAAO,GAAG,EAAE;AACb,YAAA,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;SACxE;KACD;AAED,IAAA,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,EAAE;AACf,QAAA,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACzC,QAAA,OAAO,SAAS,CAAC;KACjB;AACD,IAAA,IAAI;AACH,QAAA,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AACjC,QAAA,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;KACxC;IAAC,OAAO,GAAG,EAAE;AACb,QAAA,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;AACvD,QAAA,OAAO,SAAS,CAAC;KACjB;AACF,CAAC,CAAC;AAEF;MACa,OAAO,GAAG,OACtB,MAAsB,KACsB;AAC5C,IAAA,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC5B,IAAA,MAAM,UAAU,GAAG,MAAM,OAAO,EAAE,CAAC;AACnC,IAAA,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,EAAE,EAAE,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC;AAC7E,IAAA,OAAO,mCAAmC,CACzC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,EAC/B,SAAS,EACT,MAAM,CACN,CAAC;AACH,EAAE;AAEF;AACa,MAAA,UAAU,GAAG,OACzB,GAAmB,EACnB,MAAsB,KACsB;AAC5C,IAAA,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC5B,IAAA,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;AACtC,IAAA,OAAO,mCAAmC,CACzC,OAAO,aAAa,KAAK,QAAQ,GAAG,aAAa,GAAG,SAAS;;;AAG7D,IAAA,GAAG,CAAC,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,EAC3C,MAAM,CACN,CAAC;AACH;;;;"}

package/dist/esm/shared/constants.js

@@ -1,7 +1,7 @@
 // eslint-disable-next-line import/prefer-default-export
 const baseHeaders = {
     'x-descope-sdk-name': 'nextjs',
-    'x-descope-sdk-version': "0.15.56"
+    'x-descope-sdk-version': "0.15.57"
 };
 
 export { baseHeaders };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@descope/nextjs-sdk",
-  "version": "0.15.56",
+  "version": "0.15.57",
   "description": "Descope NextJS SDK",
   "author": "Descope Team <info@descope.com>",
   "homepage": "https://github.com/descope/descope-js",