@frontegg/nextjs 6.4.0-alpha.3046622071 → 6.4.0-alpha.3053987472

package/README.md

@@ -16,6 +16,7 @@ and integrate them into their SaaS portals in up to 5 lines of code.
   - [Frontegg Provider Options](#frontegg-provider-options)
   - [getSession](#getsession)
   - [withSSRSession](#withssrsession)
+  - [Next.js middlewares usage](#nextjs-middlewares-usage)
   - for more [visit](https://docs.frontegg.com/docs/self-service-introduction)
 
 ## Installation
@@ -215,3 +216,33 @@ export const getServerSideProps: GetServerSideProps = withSSRSession(
   }
 );
 ```
+
+## Next.js middlewares usage
+
+To prevent access unauthenticated user to all routes, use [Next.js middlewares](https://nextjs.org/docs/advanced-features/middleware).
+
+**Note: If you were using Middleware prior to 12.2, please see the [upgrade guide](https://nextjs.org/docs/messages/middleware-upgrade-guide).**
+
+```ts
+// /middleware.ts
+import { NextResponse } from "next/server";
+import type { NextRequest } from "next/server";
+import { getSession } from '@frontegg/nextjs';
+
+export const middleware = async (request: NextRequest) => {
+  const session = await getSession(request);
+
+  console.log("middleware session", session);
+  
+  if(!session){
+    // redirect unauthenticated user to /account/login page
+    return NextResponse.redirect(new URL('/account/login', req.url))
+  }
+  
+  return NextResponse.next();
+};
+
+export const config = {
+  matcher: "/(.*)",
+};
+```

package/index.cjs.js

@@ -1367,44 +1367,45 @@ function _defineProperty(obj, key, value) {
 
 function getSession(req) {
   return __awaiter(this, void 0, void 0, /*#__PURE__*/regenerator.mark(function _callee() {
-    var sealFromCookies, compressedJwt, jwt, publicKey, _yield$jwtVerify, payload, session;
+    var cookieStr, sealFromCookies, compressedJwt, jwt, publicKey, _yield$jwtVerify, payload, session;
 
     return regenerator.wrap(function _callee$(_context) {
       while (1) {
         switch (_context.prev = _context.next) {
           case 0:
             _context.prev = 0;
-            sealFromCookies = cookie__default["default"].parse(req.headers.cookie || '')[fronteggConfig.cookieName];
+            cookieStr = "credentials" in req ? req.headers.get("cookie") || "" : req.headers.cookie || "";
+            sealFromCookies = cookie__default["default"].parse(cookieStr)[fronteggConfig.cookieName];
 
             if (sealFromCookies) {
-              _context.next = 4;
+              _context.next = 5;
               break;
             }
 
             return _context.abrupt("return", undefined);
 
-          case 4:
-            _context.next = 6;
+          case 5:
+            _context.next = 7;
             return ironSession.unsealData(sealFromCookies, {
               password: fronteggConfig.passwordsAsMap
             });
 
-          case 6:
+          case 7:
             compressedJwt = _context.sent;
-            _context.next = 9;
+            _context.next = 10;
             return uncompress(compressedJwt);
 
-          case 9:
+          case 10:
             jwt = _context.sent;
-            _context.next = 12;
+            _context.next = 13;
             return fronteggConfig.getJwtPublicKey();
 
-          case 12:
+          case 13:
             publicKey = _context.sent;
-            _context.next = 15;
+            _context.next = 16;
             return jose.jwtVerify(jwt, publicKey);
 
-          case 15:
+          case 16:
             _yield$jwtVerify = _context.sent;
             payload = _yield$jwtVerify.payload;
             session = {
@@ -1413,27 +1414,27 @@ function getSession(req) {
             };
 
             if (!(session.user.exp * 1000 < Date.now())) {
-              _context.next = 20;
+              _context.next = 21;
               break;
             }
 
             return _context.abrupt("return", undefined);
 
-          case 20:
+          case 21:
             return _context.abrupt("return", session);
 
-          case 23:
-            _context.prev = 23;
+          case 24:
+            _context.prev = 24;
             _context.t0 = _context["catch"](0);
             console.error(_context.t0);
             return _context.abrupt("return", undefined);
 
-          case 27:
+          case 28:
           case "end":
             return _context.stop();
         }
       }
-    }, _callee, null, [[0, 23]]);
+    }, _callee, null, [[0, 24]]);
   }));
 }
 function withSSRSession(handler) {

package/index.esm.js

@@ -1341,44 +1341,45 @@ function _defineProperty(obj, key, value) {
 
 function getSession(req) {
   return __awaiter(this, void 0, void 0, /*#__PURE__*/regenerator.mark(function _callee() {
-    var sealFromCookies, compressedJwt, jwt, publicKey, _yield$jwtVerify, payload, session;
+    var cookieStr, sealFromCookies, compressedJwt, jwt, publicKey, _yield$jwtVerify, payload, session;
 
     return regenerator.wrap(function _callee$(_context) {
       while (1) {
         switch (_context.prev = _context.next) {
           case 0:
             _context.prev = 0;
-            sealFromCookies = cookie.parse(req.headers.cookie || '')[fronteggConfig.cookieName];
+            cookieStr = "credentials" in req ? req.headers.get("cookie") || "" : req.headers.cookie || "";
+            sealFromCookies = cookie.parse(cookieStr)[fronteggConfig.cookieName];
 
             if (sealFromCookies) {
-              _context.next = 4;
+              _context.next = 5;
               break;
             }
 
             return _context.abrupt("return", undefined);
 
-          case 4:
-            _context.next = 6;
+          case 5:
+            _context.next = 7;
             return unsealData(sealFromCookies, {
               password: fronteggConfig.passwordsAsMap
             });
 
-          case 6:
+          case 7:
             compressedJwt = _context.sent;
-            _context.next = 9;
+            _context.next = 10;
             return uncompress(compressedJwt);
 
-          case 9:
+          case 10:
             jwt = _context.sent;
-            _context.next = 12;
+            _context.next = 13;
             return fronteggConfig.getJwtPublicKey();
 
-          case 12:
+          case 13:
             publicKey = _context.sent;
-            _context.next = 15;
+            _context.next = 16;
             return jwtVerify(jwt, publicKey);
 
-          case 15:
+          case 16:
             _yield$jwtVerify = _context.sent;
             payload = _yield$jwtVerify.payload;
             session = {
@@ -1387,27 +1388,27 @@ function getSession(req) {
             };
 
             if (!(session.user.exp * 1000 < Date.now())) {
-              _context.next = 20;
+              _context.next = 21;
               break;
             }
 
             return _context.abrupt("return", undefined);
 
-          case 20:
+          case 21:
             return _context.abrupt("return", session);
 
-          case 23:
-            _context.prev = 23;
+          case 24:
+            _context.prev = 24;
             _context.t0 = _context["catch"](0);
             console.error(_context.t0);
             return _context.abrupt("return", undefined);
 
-          case 27:
+          case 28:
           case "end":
             return _context.stop();
         }
       }
-    }, _callee, null, [[0, 23]]);
+    }, _callee, null, [[0, 24]]);
   }));
 }
 function withSSRSession(handler) {

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@frontegg/nextjs",
-  "version": "6.4.0-alpha.3046622071",
+  "version": "6.4.0-alpha.3053987472",
   "dependencies": {
-    "@frontegg/js": "6.6.1",
-    "@frontegg/react-hooks": "6.6.1",
+    "@frontegg/js": "6.7.0",
+    "@frontegg/react-hooks": "6.7.0",
     "jose": "^4.8.0",
-    "iron-session": "^6.1.2",
+    "iron-session": "^6.2.1",
     "http-proxy": "^1.18.1",
     "cookie": "^0.5.0"
   },

package/session.d.ts

@@ -3,9 +3,11 @@ import { IncomingMessage } from 'http';
 import { FronteggNextJSSession } from './types';
 import { ParsedUrlQuery } from 'querystring';
 import { GetServerSidePropsContext, GetServerSidePropsResult, PreviewData } from 'next';
-export declare function getSession(req: IncomingMessage): Promise<FronteggNextJSSession | undefined>;
+declare type RequestType = IncomingMessage | Request;
+export declare function getSession(req: RequestType): Promise<FronteggNextJSSession | undefined>;
 export declare function withSSRSession<P extends {
     [key: string]: any;
 } = {
     [key: string]: any;
 }, Q extends ParsedUrlQuery = ParsedUrlQuery, D extends PreviewData = PreviewData>(handler: (context: GetServerSidePropsContext<Q>, session: FronteggNextJSSession) => GetServerSidePropsResult<P> | Promise<GetServerSidePropsResult<P>>): (context: GetServerSidePropsContext<Q>) => Promise<GetServerSidePropsResult<P>>;
+export {};