@frontegg/nextjs 6.7.20 → 6.7.21-alpha.4441971157

package/utils/jwt/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["JwtUtils","publicKey","loadPublicKey","logger","fronteggLogger","child","tag","JSON","parse","config","jwtPublicKeyJson","info","e","api","importJWK","alg","getPublicKey","undefined","verify","jwt","jwtVerify"],"sources":["../../../../../packages/nextjs/src/utils/jwt/index.ts"],"sourcesContent":["import type { KeyLike } from 'jose';\nimport { importJWK, jwtVerify } from 'jose';\nimport api from '../../api';\nimport type { JWTVerifyResult } from 'jose/dist/types/types';\nimport fronteggLogger from '../fronteggLogger';\nimport config from '../../config';\n\nclass JwtUtils {\n  private publicKey: (KeyLike | Uint8Array) | undefined;\n\n  /**\n   * Get the JWT public key from Frontegg service\n   * to verify user's access token when calling getSession\n   * in getServerSideProps and ServerComponents\n   * @private\n   */\n  private async loadPublicKey(): Promise<KeyLike | Uint8Array> {\n    const logger = fronteggLogger.child({ tag: 'JwtManager.loadPublicKey' });\n\n    let publicKey;\n    try {\n      publicKey = JSON.parse(config.jwtPublicKeyJson ?? '{}');\n      logger.info('Public key loaded from env variable');\n    } catch (e) {\n      logger.info('Going to load public key from frontegg jwks');\n      publicKey = await api.loadPublicKey();\n    }\n    logger.info('Importing Public key into jose');\n    this.publicKey = await importJWK(publicKey, publicKey.alg);\n    return this.publicKey;\n  }\n\n  /**\n   * Load public key from Frontegg services if not cached\n   * @private\n   */\n  private async getPublicKey(): Promise<KeyLike | Uint8Array> {\n    if (this.publicKey === undefined) {\n      return await this.loadPublicKey();\n    }\n    return this.publicKey;\n  }\n\n  /**\n   * verify JWT token with current loaded public key from Frontegg services\n   */\n  async verify(jwt: string | Uint8Array): Promise<JWTVerifyResult> {\n    const publicKey = await this.getPublicKey();\n    return await jwtVerify(jwt, publicKey);\n  }\n}\n\nexport default new JwtUtils();\n"],"mappings":";;;;;;;AACA;AACA;AAEA;AACA;AAEA,MAAMA,QAAQ,CAAC;EAAA;IAAA,KACLC,SAAS;EAAA;EAEjB;AACF;AACA;AACA;AACA;AACA;EACE,MAAcC,aAAa,GAAkC;IAC3D,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAA2B,CAAC,CAAC;IAExE,IAAIL,SAAS;IACb,IAAI;MAAA;MACFA,SAAS,GAAGM,IAAI,CAACC,KAAK,0BAACC,eAAM,CAACC,gBAAgB,oCAAI,IAAI,CAAC;MACvDP,MAAM,CAACQ,IAAI,CAAC,qCAAqC,CAAC;IACpD,CAAC,CAAC,OAAOC,CAAC,EAAE;MACVT,MAAM,CAACQ,IAAI,CAAC,6CAA6C,CAAC;MAC1DV,SAAS,GAAG,MAAMY,YAAG,CAACX,aAAa,EAAE;IACvC;IACAC,MAAM,CAACQ,IAAI,CAAC,gCAAgC,CAAC;IAC7C,IAAI,CAACV,SAAS,GAAG,MAAM,IAAAa,eAAS,EAACb,SAAS,EAAEA,SAAS,CAACc,GAAG,CAAC;IAC1D,OAAO,IAAI,CAACd,SAAS;EACvB;;EAEA;AACF;AACA;AACA;EACE,MAAce,YAAY,GAAkC;IAC1D,IAAI,IAAI,CAACf,SAAS,KAAKgB,SAAS,EAAE;MAChC,OAAO,MAAM,IAAI,CAACf,aAAa,EAAE;IACnC;IACA,OAAO,IAAI,CAACD,SAAS;EACvB;;EAEA;AACF;AACA;EACE,MAAMiB,MAAM,CAACC,GAAwB,EAA4B;IAC/D,MAAMlB,SAAS,GAAG,MAAM,IAAI,CAACe,YAAY,EAAE;IAC3C,OAAO,MAAM,IAAAI,eAAS,EAACD,GAAG,EAAElB,SAAS,CAAC;EACxC;AACF;AAAC,eAEc,IAAID,QAAQ,EAAE;AAAA"}

package/utils/jwt/package.json

@@ -0,0 +1,6 @@
+{
+  "sideEffects": false,
+  "module": "./index.js",
+  "main": "./index.js",
+  "types": "./index.d.ts"
+}

package/utils/refreshAccessToken/helpers.d.ts

@@ -0,0 +1,16 @@
+import { IncomingMessage } from 'http';
+export declare function hasRefreshTokenCookie(cookies: Record<string, any>): boolean;
+export declare function refreshAccessTokenEmbedded(request: IncomingMessage): Promise<Response | null>;
+export declare function refreshAccessTokenHostedLogin(request: IncomingMessage): Promise<Response | null>;
+/**
+ * If url starts with /_next/ means that the user trying to navigate
+ * to a new nextjs page, in this scenario no need to refresh token
+ * we can just return the actual stateless session from
+ * the encrypted cookie
+ */
+export declare function isRuntimeNextRequest(url: string): boolean;
+/**
+ * If url starts with '/oauth/callback' means that the user navigated back
+ * from frontegg hosted login, in this scenario no need to refresh token
+ */
+export declare function isOauthCallback(url: string): boolean;

package/utils/refreshAccessToken/helpers.js

@@ -0,0 +1,80 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.hasRefreshTokenCookie = hasRefreshTokenCookie;
+exports.isOauthCallback = isOauthCallback;
+exports.isRuntimeNextRequest = isRuntimeNextRequest;
+exports.refreshAccessTokenEmbedded = refreshAccessTokenEmbedded;
+exports.refreshAccessTokenHostedLogin = refreshAccessTokenHostedLogin;
+var _fronteggLogger = _interopRequireDefault(require("../fronteggLogger"));
+var _cookies = _interopRequireDefault(require("../cookies"));
+var _api = _interopRequireDefault(require("../../api"));
+var _common = require("../../common");
+function hasRefreshTokenCookie(cookies) {
+  const logger = _fronteggLogger.default.child({
+    tag: 'refreshToken.hasRefreshTokenCookie'
+  });
+  const refreshTokenKey = _cookies.default.refreshTokenKey;
+  logger.debug(`Checking if '${refreshTokenKey}' exists in cookies`);
+  const cookieKey = Object.keys(cookies).find(cookie => {
+    return cookie.replace(/-/g, '') === refreshTokenKey;
+  });
+  const exists = cookieKey != null;
+  logger.debug(`Cookie '${refreshTokenKey}' ${exists ? 'exists' : 'NOT exists'} in cookies`);
+  return exists;
+}
+async function refreshAccessTokenEmbedded(request) {
+  const logger = _fronteggLogger.default.child({
+    tag: 'refreshToken.refreshAccessTokenEmbedded'
+  });
+  const headers = request.headers;
+  const cookies = request.cookies;
+  logger.info('check if has refresh token headers');
+  if (hasRefreshTokenCookie(cookies)) {
+    logger.info('going to refresh token (embedded mode)');
+    return await _api.default.refreshTokenEmbedded(headers);
+  }
+  return null;
+}
+async function refreshAccessTokenHostedLogin(request) {
+  const logger = _fronteggLogger.default.child({
+    tag: 'refreshToken.refreshAccessTokenHostedLogin'
+  });
+  const headers = request.headers;
+  logger.info('trying to get token from cookies');
+  const sealFromCookies = _cookies.default.getSessionCookieFromRequest(request);
+  try {
+    const tokens = await (0, _common.getTokensFromCookie)(sealFromCookies);
+    if (!(tokens != null && tokens.refreshToken)) {
+      logger.info('refresh token not found');
+      return null;
+    }
+    logger.info('going to refresh token (hosted-login mode)');
+    return await _api.default.refreshTokenHostedLogin(headers, tokens.refreshToken);
+  } catch (e) {
+    logger.error(e);
+    return null;
+  }
+}
+
+/**
+ * If url starts with /_next/ means that the user trying to navigate
+ * to a new nextjs page, in this scenario no need to refresh token
+ * we can just return the actual stateless session from
+ * the encrypted cookie
+ */
+function isRuntimeNextRequest(url) {
+  return url.startsWith('/_next/');
+}
+
+/**
+ * If url starts with '/oauth/callback' means that the user navigated back
+ * from frontegg hosted login, in this scenario no need to refresh token
+ */
+function isOauthCallback(url) {
+  return url.startsWith('/oauth/callback');
+}
+//# sourceMappingURL=helpers.js.map

package/utils/refreshAccessToken/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","names":["hasRefreshTokenCookie","cookies","logger","fronteggLogger","child","tag","refreshTokenKey","CookieManager","debug","cookieKey","Object","keys","find","cookie","replace","exists","refreshAccessTokenEmbedded","request","headers","info","api","refreshTokenEmbedded","refreshAccessTokenHostedLogin","sealFromCookies","getSessionCookieFromRequest","tokens","getTokensFromCookie","refreshToken","refreshTokenHostedLogin","e","error","isRuntimeNextRequest","url","startsWith","isOauthCallback"],"sources":["../../../../../packages/nextjs/src/utils/refreshAccessToken/helpers.ts"],"sourcesContent":["import fronteggLogger from '../fronteggLogger';\nimport CookieManager from '../cookies';\nimport { NextApiRequest } from 'next/dist/shared/lib/utils';\nimport api from '../../api';\nimport { getTokensFromCookie } from '../../common';\nimport { IncomingMessage } from 'http';\n\nexport function hasRefreshTokenCookie(cookies: Record<string, any>): boolean {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.hasRefreshTokenCookie' });\n  const refreshTokenKey = CookieManager.refreshTokenKey;\n  logger.debug(`Checking if '${refreshTokenKey}' exists in cookies`);\n  const cookieKey = Object.keys(cookies).find((cookie) => {\n    return cookie.replace(/-/g, '') === refreshTokenKey;\n  });\n  const exists: boolean = cookieKey != null;\n  logger.debug(`Cookie '${refreshTokenKey}' ${exists ? 'exists' : 'NOT exists'} in cookies`);\n  return exists;\n}\n\nexport async function refreshAccessTokenEmbedded(request: IncomingMessage): Promise<Response | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.refreshAccessTokenEmbedded' });\n\n  const headers = request.headers as Record<string, string>;\n  const cookies = (request as NextApiRequest).cookies;\n\n  logger.info('check if has refresh token headers');\n  if (hasRefreshTokenCookie(cookies)) {\n    logger.info('going to refresh token (embedded mode)');\n    return await api.refreshTokenEmbedded(headers);\n  }\n  return null;\n}\n\nexport async function refreshAccessTokenHostedLogin(request: IncomingMessage): Promise<Response | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.refreshAccessTokenHostedLogin' });\n  const headers = request.headers as Record<string, string>;\n  logger.info('trying to get token from cookies');\n\n  const sealFromCookies = CookieManager.getSessionCookieFromRequest(request);\n  try {\n    const tokens = await getTokensFromCookie(sealFromCookies);\n    if (!tokens?.refreshToken) {\n      logger.info('refresh token not found');\n      return null;\n    }\n\n    logger.info('going to refresh token (hosted-login mode)');\n    return await api.refreshTokenHostedLogin(headers, tokens.refreshToken);\n  } catch (e) {\n    logger.error(e);\n    return null;\n  }\n}\n\n/**\n * If url starts with /_next/ means that the user trying to navigate\n * to a new nextjs page, in this scenario no need to refresh token\n * we can just return the actual stateless session from\n * the encrypted cookie\n */\nexport function isRuntimeNextRequest(url: string): boolean {\n  return url.startsWith('/_next/');\n}\n\n/**\n * If url starts with '/oauth/callback' means that the user navigated back\n * from frontegg hosted login, in this scenario no need to refresh token\n */\nexport function isOauthCallback(url: string): boolean {\n  return url.startsWith('/oauth/callback');\n}\n"],"mappings":";;;;;;;;;;;AAAA;AACA;AAEA;AACA;AAGO,SAASA,qBAAqB,CAACC,OAA4B,EAAW;EAC3E,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAAqC,CAAC,CAAC;EAClF,MAAMC,eAAe,GAAGC,gBAAa,CAACD,eAAe;EACrDJ,MAAM,CAACM,KAAK,CAAE,gBAAeF,eAAgB,qBAAoB,CAAC;EAClE,MAAMG,SAAS,GAAGC,MAAM,CAACC,IAAI,CAACV,OAAO,CAAC,CAACW,IAAI,CAAEC,MAAM,IAAK;IACtD,OAAOA,MAAM,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAKR,eAAe;EACrD,CAAC,CAAC;EACF,MAAMS,MAAe,GAAGN,SAAS,IAAI,IAAI;EACzCP,MAAM,CAACM,KAAK,CAAE,WAAUF,eAAgB,KAAIS,MAAM,GAAG,QAAQ,GAAG,YAAa,aAAY,CAAC;EAC1F,OAAOA,MAAM;AACf;AAEO,eAAeC,0BAA0B,CAACC,OAAwB,EAA4B;EACnG,MAAMf,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA0C,CAAC,CAAC;EAEvF,MAAMa,OAAO,GAAGD,OAAO,CAACC,OAAiC;EACzD,MAAMjB,OAAO,GAAIgB,OAAO,CAAoBhB,OAAO;EAEnDC,MAAM,CAACiB,IAAI,CAAC,oCAAoC,CAAC;EACjD,IAAInB,qBAAqB,CAACC,OAAO,CAAC,EAAE;IAClCC,MAAM,CAACiB,IAAI,CAAC,wCAAwC,CAAC;IACrD,OAAO,MAAMC,YAAG,CAACC,oBAAoB,CAACH,OAAO,CAAC;EAChD;EACA,OAAO,IAAI;AACb;AAEO,eAAeI,6BAA6B,CAACL,OAAwB,EAA4B;EACtG,MAAMf,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA6C,CAAC,CAAC;EAC1F,MAAMa,OAAO,GAAGD,OAAO,CAACC,OAAiC;EACzDhB,MAAM,CAACiB,IAAI,CAAC,kCAAkC,CAAC;EAE/C,MAAMI,eAAe,GAAGhB,gBAAa,CAACiB,2BAA2B,CAACP,OAAO,CAAC;EAC1E,IAAI;IACF,MAAMQ,MAAM,GAAG,MAAM,IAAAC,2BAAmB,EAACH,eAAe,CAAC;IACzD,IAAI,EAACE,MAAM,YAANA,MAAM,CAAEE,YAAY,GAAE;MACzBzB,MAAM,CAACiB,IAAI,CAAC,yBAAyB,CAAC;MACtC,OAAO,IAAI;IACb;IAEAjB,MAAM,CAACiB,IAAI,CAAC,4CAA4C,CAAC;IACzD,OAAO,MAAMC,YAAG,CAACQ,uBAAuB,CAACV,OAAO,EAAEO,MAAM,CAACE,YAAY,CAAC;EACxE,CAAC,CAAC,OAAOE,CAAC,EAAE;IACV3B,MAAM,CAAC4B,KAAK,CAACD,CAAC,CAAC;IACf,OAAO,IAAI;EACb;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,oBAAoB,CAACC,GAAW,EAAW;EACzD,OAAOA,GAAG,CAACC,UAAU,CAAC,SAAS,CAAC;AAClC;;AAEA;AACA;AACA;AACA;AACO,SAASC,eAAe,CAACF,GAAW,EAAW;EACpD,OAAOA,GAAG,CAACC,UAAU,CAAC,iBAAiB,CAAC;AAC1C"}

package/utils/refreshAccessToken/index.d.ts

@@ -0,0 +1,9 @@
+import type { NextPageContext } from 'next/dist/shared/lib/utils';
+import type { FronteggNextJSSession } from '../../types';
+/**
+ * Refreshes the access token for the current session.
+ *
+ * @param {NextPageContext} ctx - The Next.js Page Context object.
+ * @returns {Promise<FronteggNextJSSession | null>} A Promise that resolves to the updated session object, or `null` if the refresh failed.
+ */
+export default function refreshAccessToken(ctx: NextPageContext): Promise<FronteggNextJSSession | null>;

package/utils/refreshAccessToken/index.js

@@ -0,0 +1,94 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = refreshAccessToken;
+var _common = require("../../common");
+var _config = _interopRequireDefault(require("../../config"));
+var _cookies = _interopRequireDefault(require("../cookies"));
+var _helpers = require("./helpers");
+var _fronteggLogger = _interopRequireDefault(require("../fronteggLogger"));
+var _encryption = _interopRequireDefault(require("../encryption"));
+var _createSession = _interopRequireDefault(require("../createSession"));
+/**
+ * Refreshes the access token for the current session.
+ *
+ * @param {NextPageContext} ctx - The Next.js Page Context object.
+ * @returns {Promise<FronteggNextJSSession | null>} A Promise that resolves to the updated session object, or `null` if the refresh failed.
+ */
+async function refreshAccessToken(ctx) {
+  const logger = _fronteggLogger.default.child({
+    tag: 'refreshAccessToken'
+  });
+  logger.info(`Refreshing token by for PageContext ${ctx.pathname}`);
+  const nextJsRequest = ctx.req;
+  const nextJsResponse = ctx.res;
+  const url = nextJsRequest == null ? void 0 : nextJsRequest.url;
+  if (!nextJsResponse || !nextJsRequest || !url) {
+    logger.debug(`abandon refreshToken due to PageContext.req = null`);
+    return null;
+  }
+  try {
+    var _response$headers, _response$headers$raw, _CookieManager$modify, _ctx$res, _data$accessToken;
+    logger.info(`Check if should request made from first application load`);
+    if ((0, _helpers.isRuntimeNextRequest)(url)) {
+      logger.debug(`Detect runtime next.js request, resolving existing session from cookies if exists`);
+      const cookies = _cookies.default.getSessionCookieFromRequest(nextJsRequest);
+      const session = await (0, _createSession.default)(cookies, _encryption.default);
+      if (session) {
+        logger.debug(`session resolved from session cookie`);
+        return session;
+      } else {
+        logger.info('Failed to resolve session from cookie, going to refresh token');
+      }
+    }
+    if ((0, _helpers.isOauthCallback)(url)) {
+      /* Prevent refresh token due to oauth login callback */
+      logger.debug(`abandon refreshToken for url='/oauth/callback'`);
+      return null;
+    }
+    let response;
+    if (_config.default.isHostedLogin) {
+      response = await (0, _helpers.refreshAccessTokenHostedLogin)(nextJsRequest);
+    } else {
+      response = await (0, _helpers.refreshAccessTokenEmbedded)(nextJsRequest);
+    }
+    const isSecured = _config.default.isSSL;
+    if (response === null || !response.ok) {
+      _cookies.default.removeCookies({
+        cookieDomain: _config.default.cookieDomain,
+        isSecured,
+        req: nextJsRequest,
+        res: nextJsResponse
+      });
+      return null;
+    }
+    const data = await response.json();
+
+    // @ts-ignore
+    const cookieHeader = (_response$headers = response.headers) == null ? void 0 : (_response$headers$raw = _response$headers.raw) == null ? void 0 : _response$headers$raw.call(_response$headers)['set-cookie'];
+    const newSetCookie = (_CookieManager$modify = _cookies.default.modifySetCookie(cookieHeader, isSecured)) != null ? _CookieManager$modify : [];
+    const [session, decodedJwt, refreshToken] = await (0, _common.createSessionFromAccessToken)(data);
+    if (!session) {
+      return null;
+    }
+    const cookieValue = _cookies.default.create({
+      value: session,
+      expires: new Date(decodedJwt.exp * 1000),
+      secure: isSecured
+    });
+    newSetCookie.push(...cookieValue);
+    (_ctx$res = ctx.res) == null ? void 0 : _ctx$res.setHeader('set-cookie', newSetCookie);
+    return {
+      accessToken: (_data$accessToken = data.accessToken) != null ? _data$accessToken : data.access_token,
+      user: decodedJwt,
+      refreshToken
+    };
+  } catch (e) {
+    logger.error('[refreshToken] Failed to create session e', e);
+    return null;
+  }
+}
+//# sourceMappingURL=index.js.map

package/utils/refreshAccessToken/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["refreshAccessToken","ctx","logger","fronteggLogger","child","tag","info","pathname","nextJsRequest","req","nextJsResponse","res","url","debug","isRuntimeNextRequest","cookies","CookieManager","getSessionCookieFromRequest","session","createSession","encryption","isOauthCallback","response","config","isHostedLogin","refreshAccessTokenHostedLogin","refreshAccessTokenEmbedded","isSecured","isSSL","ok","removeCookies","cookieDomain","data","json","cookieHeader","headers","raw","newSetCookie","modifySetCookie","decodedJwt","refreshToken","createSessionFromAccessToken","cookieValue","create","value","expires","Date","exp","secure","push","setHeader","accessToken","access_token","user","e","error"],"sources":["../../../../../packages/nextjs/src/utils/refreshAccessToken/index.ts"],"sourcesContent":["import type { NextPageContext } from 'next/dist/shared/lib/utils';\nimport type { FronteggNextJSSession } from '../../types';\nimport { createSessionFromAccessToken } from '../../common';\nimport config from '../../config';\nimport CookieManager from '../cookies';\nimport {\n  isOauthCallback,\n  isRuntimeNextRequest,\n  refreshAccessTokenEmbedded,\n  refreshAccessTokenHostedLogin,\n} from './helpers';\nimport fronteggLogger from '../fronteggLogger';\nimport encryption from '../encryption';\nimport createSession from '../createSession';\n\n/**\n * Refreshes the access token for the current session.\n *\n * @param {NextPageContext} ctx - The Next.js Page Context object.\n * @returns {Promise<FronteggNextJSSession | null>} A Promise that resolves to the updated session object, or `null` if the refresh failed.\n */\nexport default async function refreshAccessToken(ctx: NextPageContext): Promise<FronteggNextJSSession | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshAccessToken' });\n  logger.info(`Refreshing token by for PageContext ${ctx.pathname}`);\n  const nextJsRequest = ctx.req;\n  const nextJsResponse = ctx.res;\n  const url = nextJsRequest?.url;\n  if (!nextJsResponse || !nextJsRequest || !url) {\n    logger.debug(`abandon refreshToken due to PageContext.req = null`);\n    return null;\n  }\n\n  try {\n    logger.info(`Check if should request made from first application load`);\n\n    if (isRuntimeNextRequest(url)) {\n      logger.debug(`Detect runtime next.js request, resolving existing session from cookies if exists`);\n\n      const cookies = CookieManager.getSessionCookieFromRequest(nextJsRequest);\n      const session = await createSession(cookies, encryption);\n\n      if (session) {\n        logger.debug(`session resolved from session cookie`);\n        return session;\n      } else {\n        logger.info('Failed to resolve session from cookie, going to refresh token');\n      }\n    }\n\n    if (isOauthCallback(url)) {\n      /* Prevent refresh token due to oauth login callback */\n      logger.debug(`abandon refreshToken for url='/oauth/callback'`);\n      return null;\n    }\n\n    let response: Response | null;\n    if (config.isHostedLogin) {\n      response = await refreshAccessTokenHostedLogin(nextJsRequest);\n    } else {\n      response = await refreshAccessTokenEmbedded(nextJsRequest);\n    }\n\n    const isSecured = config.isSSL;\n    if (response === null || !response.ok) {\n      CookieManager.removeCookies({\n        cookieDomain: config.cookieDomain,\n        isSecured,\n        req: nextJsRequest,\n        res: nextJsResponse,\n      });\n      return null;\n    }\n\n    const data = await response.json();\n\n    // @ts-ignore\n    const cookieHeader = response.headers?.raw?.()['set-cookie'];\n    const newSetCookie = CookieManager.modifySetCookie(cookieHeader, isSecured) ?? [];\n    const [session, decodedJwt, refreshToken] = await createSessionFromAccessToken(data);\n\n    if (!session) {\n      return null;\n    }\n    const cookieValue = CookieManager.create({\n      value: session,\n      expires: new Date(decodedJwt.exp * 1000),\n      secure: isSecured,\n    });\n    newSetCookie.push(...cookieValue);\n    ctx.res?.setHeader('set-cookie', newSetCookie);\n\n    return {\n      accessToken: data.accessToken ?? data.access_token,\n      user: decodedJwt,\n      refreshToken,\n    };\n  } catch (e) {\n    logger.error('[refreshToken] Failed to create session e', e);\n    return null;\n  }\n}\n"],"mappings":";;;;;;;AAEA;AACA;AACA;AACA;AAMA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACe,eAAeA,kBAAkB,CAACC,GAAoB,EAAyC;EAC5G,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAAqB,CAAC,CAAC;EAClEH,MAAM,CAACI,IAAI,CAAE,uCAAsCL,GAAG,CAACM,QAAS,EAAC,CAAC;EAClE,MAAMC,aAAa,GAAGP,GAAG,CAACQ,GAAG;EAC7B,MAAMC,cAAc,GAAGT,GAAG,CAACU,GAAG;EAC9B,MAAMC,GAAG,GAAGJ,aAAa,oBAAbA,aAAa,CAAEI,GAAG;EAC9B,IAAI,CAACF,cAAc,IAAI,CAACF,aAAa,IAAI,CAACI,GAAG,EAAE;IAC7CV,MAAM,CAACW,KAAK,CAAE,oDAAmD,CAAC;IAClE,OAAO,IAAI;EACb;EAEA,IAAI;IAAA;IACFX,MAAM,CAACI,IAAI,CAAE,0DAAyD,CAAC;IAEvE,IAAI,IAAAQ,6BAAoB,EAACF,GAAG,CAAC,EAAE;MAC7BV,MAAM,CAACW,KAAK,CAAE,mFAAkF,CAAC;MAEjG,MAAME,OAAO,GAAGC,gBAAa,CAACC,2BAA2B,CAACT,aAAa,CAAC;MACxE,MAAMU,OAAO,GAAG,MAAM,IAAAC,sBAAa,EAACJ,OAAO,EAAEK,mBAAU,CAAC;MAExD,IAAIF,OAAO,EAAE;QACXhB,MAAM,CAACW,KAAK,CAAE,sCAAqC,CAAC;QACpD,OAAOK,OAAO;MAChB,CAAC,MAAM;QACLhB,MAAM,CAACI,IAAI,CAAC,+DAA+D,CAAC;MAC9E;IACF;IAEA,IAAI,IAAAe,wBAAe,EAACT,GAAG,CAAC,EAAE;MACxB;MACAV,MAAM,CAACW,KAAK,CAAE,gDAA+C,CAAC;MAC9D,OAAO,IAAI;IACb;IAEA,IAAIS,QAAyB;IAC7B,IAAIC,eAAM,CAACC,aAAa,EAAE;MACxBF,QAAQ,GAAG,MAAM,IAAAG,sCAA6B,EAACjB,aAAa,CAAC;IAC/D,CAAC,MAAM;MACLc,QAAQ,GAAG,MAAM,IAAAI,mCAA0B,EAAClB,aAAa,CAAC;IAC5D;IAEA,MAAMmB,SAAS,GAAGJ,eAAM,CAACK,KAAK;IAC9B,IAAIN,QAAQ,KAAK,IAAI,IAAI,CAACA,QAAQ,CAACO,EAAE,EAAE;MACrCb,gBAAa,CAACc,aAAa,CAAC;QAC1BC,YAAY,EAAER,eAAM,CAACQ,YAAY;QACjCJ,SAAS;QACTlB,GAAG,EAAED,aAAa;QAClBG,GAAG,EAAED;MACP,CAAC,CAAC;MACF,OAAO,IAAI;IACb;IAEA,MAAMsB,IAAI,GAAG,MAAMV,QAAQ,CAACW,IAAI,EAAE;;IAElC;IACA,MAAMC,YAAY,wBAAGZ,QAAQ,CAACa,OAAO,8CAAhB,kBAAkBC,GAAG,qBAArB,6CAAyB,CAAC,YAAY,CAAC;IAC5D,MAAMC,YAAY,4BAAGrB,gBAAa,CAACsB,eAAe,CAACJ,YAAY,EAAEP,SAAS,CAAC,oCAAI,EAAE;IACjF,MAAM,CAACT,OAAO,EAAEqB,UAAU,EAAEC,YAAY,CAAC,GAAG,MAAM,IAAAC,oCAA4B,EAACT,IAAI,CAAC;IAEpF,IAAI,CAACd,OAAO,EAAE;MACZ,OAAO,IAAI;IACb;IACA,MAAMwB,WAAW,GAAG1B,gBAAa,CAAC2B,MAAM,CAAC;MACvCC,KAAK,EAAE1B,OAAO;MACd2B,OAAO,EAAE,IAAIC,IAAI,CAACP,UAAU,CAACQ,GAAG,GAAG,IAAI,CAAC;MACxCC,MAAM,EAAErB;IACV,CAAC,CAAC;IACFU,YAAY,CAACY,IAAI,CAAC,GAAGP,WAAW,CAAC;IACjC,YAAAzC,GAAG,CAACU,GAAG,qBAAP,SAASuC,SAAS,CAAC,YAAY,EAAEb,YAAY,CAAC;IAE9C,OAAO;MACLc,WAAW,uBAAEnB,IAAI,CAACmB,WAAW,gCAAInB,IAAI,CAACoB,YAAY;MAClDC,IAAI,EAAEd,UAAU;MAChBC;IACF,CAAC;EACH,CAAC,CAAC,OAAOc,CAAC,EAAE;IACVpD,MAAM,CAACqD,KAAK,CAAC,2CAA2C,EAAED,CAAC,CAAC;IAC5D,OAAO,IAAI;EACb;AACF"}

package/utils/refreshAccessToken/package.json

@@ -0,0 +1,6 @@
+{
+  "sideEffects": false,
+  "module": "./index.js",
+  "main": "./index.js",
+  "types": "./index.d.ts"
+}

package/utils/routing/index.d.ts

@@ -0,0 +1,5 @@
+export declare function getAuthRoutes(): {
+    routesArr: string[];
+    routesObj: Record<string, string>;
+};
+export declare function isAuthRoute(pathname: string): boolean;

package/utils/routing/index.js

@@ -0,0 +1,31 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAuthRoutes = getAuthRoutes;
+exports.isAuthRoute = isAuthRoute;
+var _extends2 = _interopRequireDefault(require("@babel/runtime/helpers/extends"));
+var _reduxStore = require("@frontegg/redux-store");
+var _config = _interopRequireDefault(require("../../config"));
+function getAuthRoutes() {
+  const routesObj = (0, _extends2.default)({}, _reduxStore.authInitialState.routes, _config.default.authRoutes);
+  const routesArr = Object.keys(routesObj).reduce((p, key) => [...p, routesObj[key]], []);
+  return {
+    routesArr,
+    routesObj
+  };
+}
+function isAuthRoute(pathname) {
+  const {
+    routesArr,
+    routesObj
+  } = getAuthRoutes();
+  if (_config.default.fronteggAppOptions.hostedLoginBox) {
+    return routesObj.loginUrl === pathname || routesObj.logoutUrl === pathname || routesObj.hostedLoginRedirectUrl === pathname;
+  } else {
+    return routesArr.indexOf(pathname) !== -1;
+  }
+}
+//# sourceMappingURL=index.js.map

package/utils/routing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["getAuthRoutes","routesObj","authInitialState","routes","config","authRoutes","routesArr","Object","keys","reduce","p","key","isAuthRoute","pathname","fronteggAppOptions","hostedLoginBox","loginUrl","logoutUrl","hostedLoginRedirectUrl","indexOf"],"sources":["../../../../../packages/nextjs/src/utils/routing/index.ts"],"sourcesContent":["import { authInitialState } from '@frontegg/redux-store';\nimport config from '../../config';\n\nexport function getAuthRoutes(): { routesArr: string[]; routesObj: Record<string, string> } {\n  const routesObj = {\n    ...authInitialState.routes,\n    ...config.authRoutes,\n  };\n  const routesArr: string[] = Object.keys(routesObj).reduce(\n    (p: string[], key: string) => [...p, (routesObj as any)[key]],\n    []\n  );\n  return { routesArr, routesObj };\n}\n\nexport function isAuthRoute(pathname: string): boolean {\n  const { routesArr, routesObj } = getAuthRoutes();\n\n  if (config.fronteggAppOptions.hostedLoginBox) {\n    return (\n      routesObj.loginUrl === pathname ||\n      routesObj.logoutUrl === pathname ||\n      routesObj.hostedLoginRedirectUrl === pathname\n    );\n  } else {\n    return routesArr.indexOf(pathname) !== -1;\n  }\n}\n"],"mappings":";;;;;;;;;AAAA;AACA;AAEO,SAASA,aAAa,GAA+D;EAC1F,MAAMC,SAAS,8BACVC,4BAAgB,CAACC,MAAM,EACvBC,eAAM,CAACC,UAAU,CACrB;EACD,MAAMC,SAAmB,GAAGC,MAAM,CAACC,IAAI,CAACP,SAAS,CAAC,CAACQ,MAAM,CACvD,CAACC,CAAW,EAAEC,GAAW,KAAK,CAAC,GAAGD,CAAC,EAAGT,SAAS,CAASU,GAAG,CAAC,CAAC,EAC7D,EAAE,CACH;EACD,OAAO;IAAEL,SAAS;IAAEL;EAAU,CAAC;AACjC;AAEO,SAASW,WAAW,CAACC,QAAgB,EAAW;EACrD,MAAM;IAAEP,SAAS;IAAEL;EAAU,CAAC,GAAGD,aAAa,EAAE;EAEhD,IAAII,eAAM,CAACU,kBAAkB,CAACC,cAAc,EAAE;IAC5C,OACEd,SAAS,CAACe,QAAQ,KAAKH,QAAQ,IAC/BZ,SAAS,CAACgB,SAAS,KAAKJ,QAAQ,IAChCZ,SAAS,CAACiB,sBAAsB,KAAKL,QAAQ;EAEjD,CAAC,MAAM;IACL,OAAOP,SAAS,CAACa,OAAO,CAACN,QAAQ,CAAC,KAAK,CAAC,CAAC;EAC3C;AACF"}

package/utils/routing/package.json

@@ -0,0 +1,6 @@
+{
+  "sideEffects": false,
+  "module": "./index.js",
+  "main": "./index.js",
+  "types": "./index.d.ts"
+}

package/utils/useOnRedirectTo/index.d.ts

@@ -0,0 +1,5 @@
+import { RedirectOptions } from '@frontegg/rest-api';
+import type { NextRouter } from 'next/router';
+import type { AppRouterInstance } from 'next/dist/shared/lib/app-router-context';
+declare const useOnRedirectTo: (baseName: string, router: AppRouterInstance | NextRouter) => (_path: string, opts?: RedirectOptions) => void;
+export default useOnRedirectTo;

package/utils/useOnRedirectTo/index.js

@@ -0,0 +1,28 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+var _react = require("react");
+const useOnRedirectTo = (baseName, router) => {
+  return (0, _react.useCallback)((_path, opts) => {
+    const isSSR = typeof window == undefined;
+    let path = _path;
+    if (path.startsWith(baseName)) {
+      path = path.substring(baseName.length);
+    }
+    if (opts != null && opts.preserveQueryParams) {
+      path = `${path}${window.location.search}`;
+    }
+    if (opts != null && opts.refresh && !isSSR) {
+      // @ts-ignore
+      window.Cypress ? router.push(path) : window.location.href = path;
+    } else {
+      opts != null && opts.replace ? router.replace(path) : router.push(path);
+    }
+  }, []);
+};
+var _default = useOnRedirectTo;
+exports.default = _default;
+//# sourceMappingURL=index.js.map

package/utils/useOnRedirectTo/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["useOnRedirectTo","baseName","router","useCallback","_path","opts","isSSR","window","undefined","path","startsWith","substring","length","preserveQueryParams","location","search","refresh","Cypress","push","href","replace"],"sources":["../../../../../packages/nextjs/src/utils/useOnRedirectTo/index.ts"],"sourcesContent":["import { useCallback } from 'react';\nimport { RedirectOptions } from '@frontegg/rest-api';\nimport type { NextRouter } from 'next/router';\nimport type { AppRouterInstance } from 'next/dist/shared/lib/app-router-context';\n\nconst useOnRedirectTo = (baseName: string, router: AppRouterInstance | NextRouter) => {\n  return useCallback((_path: string, opts?: RedirectOptions) => {\n    const isSSR = typeof window == undefined;\n    let path = _path;\n    if (path.startsWith(baseName)) {\n      path = path.substring(baseName.length);\n    }\n    if (opts?.preserveQueryParams) {\n      path = `${path}${window.location.search}`;\n    }\n    if (opts?.refresh && !isSSR) {\n      // @ts-ignore\n      window.Cypress ? router.push(path) : (window.location.href = path);\n    } else {\n      opts?.replace ? router.replace(path) : router.push(path);\n    }\n  }, []);\n};\n\nexport default useOnRedirectTo;\n"],"mappings":";;;;;;AAAA;AAKA,MAAMA,eAAe,GAAG,CAACC,QAAgB,EAAEC,MAAsC,KAAK;EACpF,OAAO,IAAAC,kBAAW,EAAC,CAACC,KAAa,EAAEC,IAAsB,KAAK;IAC5D,MAAMC,KAAK,GAAG,OAAOC,MAAM,IAAIC,SAAS;IACxC,IAAIC,IAAI,GAAGL,KAAK;IAChB,IAAIK,IAAI,CAACC,UAAU,CAACT,QAAQ,CAAC,EAAE;MAC7BQ,IAAI,GAAGA,IAAI,CAACE,SAAS,CAACV,QAAQ,CAACW,MAAM,CAAC;IACxC;IACA,IAAIP,IAAI,YAAJA,IAAI,CAAEQ,mBAAmB,EAAE;MAC7BJ,IAAI,GAAI,GAAEA,IAAK,GAAEF,MAAM,CAACO,QAAQ,CAACC,MAAO,EAAC;IAC3C;IACA,IAAIV,IAAI,YAAJA,IAAI,CAAEW,OAAO,IAAI,CAACV,KAAK,EAAE;MAC3B;MACAC,MAAM,CAACU,OAAO,GAAGf,MAAM,CAACgB,IAAI,CAACT,IAAI,CAAC,GAAIF,MAAM,CAACO,QAAQ,CAACK,IAAI,GAAGV,IAAK;IACpE,CAAC,MAAM;MACLJ,IAAI,YAAJA,IAAI,CAAEe,OAAO,GAAGlB,MAAM,CAACkB,OAAO,CAACX,IAAI,CAAC,GAAGP,MAAM,CAACgB,IAAI,CAACT,IAAI,CAAC;IAC1D;EACF,CAAC,EAAE,EAAE,CAAC;AACR,CAAC;AAAC,eAEaT,eAAe;AAAA"}

package/utils/useOnRedirectTo/package.json

@@ -0,0 +1,6 @@
+{
+  "sideEffects": false,
+  "module": "./index.js",
+  "main": "./index.js",
+  "types": "./index.d.ts"
+}