@frontegg/nextjs 6.7.20 → 6.7.21-alpha.4441971157

package/utils/cookies/index.js

@@ -0,0 +1,239 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+var _serializer = _interopRequireDefault(require("./serializer"));
+var _config = _interopRequireDefault(require("../../config"));
+var _constants = require("./constants");
+var _helpers = require("./helpers");
+var _fronteggLogger = _interopRequireDefault(require("../fronteggLogger"));
+class CookieManager {
+  constructor() {
+    this.getCookieName = (cookieNumber, cookieName = _config.default.cookieName) => cookieNumber ? (0, _helpers.getIndexedCookieName)(cookieNumber, cookieName) : cookieName;
+    this.createEmptySingleCookie = (cookieName, isSecured, cookieDomain) => {
+      return this.create({
+        cookieName,
+        value: '',
+        expires: new Date(),
+        secure: isSecured,
+        domain: cookieDomain,
+        silent: true
+      });
+    };
+    this.createEmptyCookies = (isSecured, cookieDomain, _cookiesToRemove) => {
+      const allEmptyCookies = [];
+      const refreshTokenVariants = (0, _helpers.getRefreshTokenCookieNameVariants)();
+      const cookiesToRemove = [..._cookiesToRemove, ...refreshTokenVariants];
+      cookiesToRemove.forEach(name => {
+        allEmptyCookies.push(...this.createEmptySingleCookie(name, isSecured, cookieDomain));
+      });
+      return allEmptyCookies;
+    };
+    this.getCookiesToRemove = request => {
+      const logger = _fronteggLogger.default.child({
+        tag: 'getCookiesToRemove'
+      });
+      if (!request) {
+        return [];
+      }
+      try {
+        logger.info('extract cookie from request headers');
+        const cookieStr = (0, _helpers.getCookieHeader)(request);
+        const cookies = cookieStr && _serializer.default.parse(cookieStr);
+        if (!cookies) {
+          return [];
+        }
+        let cookieNumber = 1;
+        const cookieToRemove = [];
+        while (cookies[this.getCookieName(cookieNumber)]) {
+          cookieToRemove.push(this.getCookieName(cookieNumber));
+          cookieNumber++;
+        }
+        logger.info(`number of cookies to remove: ${cookieToRemove.length}`);
+        return cookieToRemove;
+      } catch (e) {
+        logger.error(e);
+        return [];
+      }
+    };
+    this.modifySetCookie = (setCookieValue, isSecured) => {
+      const logger = _fronteggLogger.default.child({
+        tag: 'CookieManager.modifySetCookie'
+      });
+      if (!setCookieValue || setCookieValue.length === 0) {
+        logger.info(`No headers to modify`);
+        return setCookieValue;
+      }
+      logger.info(`modifying cookie headers (count: ${setCookieValue.length})`);
+      return setCookieValue.map(c => {
+        let cookie = c.split('; ');
+        logger.debug(`modifying cookie ${cookie[0]}, isSecured: ${isSecured}`);
+        if (!isSecured) {
+          cookie = cookie.filter(property => property !== 'Secure' && property !== 'SameSite=None');
+        }
+        return cookie.map(property => {
+          if (property.toLowerCase() === `domain=${_config.default.baseUrlHost}`) {
+            return `Domain=${_config.default.cookieDomain}`;
+          }
+          return property;
+        }).join(';') + ';';
+      });
+    };
+  }
+  get refreshTokenKey() {
+    return `fe_refresh_${_config.default.clientId}`.replace(/-/g, '');
+  }
+
+  /**
+   * Validate and create new cookie headers.
+   * The default value of `cookieName` is {@link config.cookieName}
+   * @param {CreateCookieOptions} options - Create cookie options
+   */
+  create(options) {
+    var _options$cookieName, _options$httpOnly, _options$domain, _options$path;
+    const logger = _fronteggLogger.default.child({
+      tag: 'CookieManager.create',
+      level: options.silent ? 'error' : undefined
+    });
+    const cookieName = (_options$cookieName = options.cookieName) != null ? _options$cookieName : _config.default.cookieName;
+    const cookieValue = options.value;
+    logger.info(`Creating new cookie for '${cookieName}'`);
+    const serializeOptions = {
+      expires: options.expires,
+      httpOnly: (_options$httpOnly = options.httpOnly) != null ? _options$httpOnly : true,
+      domain: (_options$domain = options.domain) != null ? _options$domain : _config.default.cookieDomain,
+      path: (_options$path = options.path) != null ? _options$path : '/',
+      priority: 'high'
+    };
+    if (options.secure) {
+      logger.debug(`Set cookie '${cookieName}' as secure`);
+      serializeOptions.secure = options.secure;
+      serializeOptions.sameSite = 'none';
+    }
+    const serializedCookie = _serializer.default.serialize(cookieName, cookieValue, serializeOptions);
+    if (serializedCookie.length <= _constants.COOKIE_MAX_LENGTH) {
+      logger.info(`Successfully create a cookie header, '${cookieName}'`);
+      return [serializedCookie];
+    } else {
+      logger.debug('Going to split cookie into chunks');
+      /** Create chunked cookie headers and store value as array of headers */
+      const cookies = (0, _helpers.splitValueToChunks)(cookieName, cookieValue, serializeOptions);
+      logger.info(`Successfully create chunked cookie headers, '${cookieName}' (count: ${cookies.length})`);
+      return cookies;
+    }
+  }
+
+  /**
+   * Receive incoming http request, and extract the cookie header.
+   * @return cookie as string if exists, else empty string
+   *
+   * @param {RequestType} request - Incoming HTTP Request
+   */
+  parseCookieHeader(request) {
+    const logger = _fronteggLogger.default.child({
+      tag: 'CookieManager.parseCookieHeader'
+    });
+    logger.info('Going to extract all cookies header from request');
+    const cookieHeader = (0, _helpers.getCookieHeader)(request);
+    logger.info('Parsing cookie header to map');
+    return _serializer.default.parse(cookieHeader);
+  }
+
+  /**
+   * Loop over cookie headers, extract, parse cookies and merged divided cookies from incoming http request,
+   * @return full session cookie headers if exists, else return undefined
+   * @param {RequestType} request - Incoming HTTP Request
+   */
+  getSessionCookieFromRequest(request) {
+    const logger = _fronteggLogger.default.child({
+      tag: 'CookieManager.getSessionCookieFromRequest'
+    });
+    logger.info('Going to extract session cookies header from request');
+    if (!request) {
+      logger.info(`'request' argument is null, Cookie header not found`);
+      return undefined;
+    }
+    logger.debug('Getting cookie header');
+    const cookieStr = (0, _helpers.getCookieHeader)(request);
+    logger.debug('Parsing cookie header string');
+    const cookies = _serializer.default.parse(cookieStr);
+    logger.debug('Loop over session cookie headers');
+    let i = 1;
+    let sessionCookies = '';
+    let sessionCookieChunk = cookies[this.getCookieName()];
+    if (sessionCookieChunk === undefined) {
+      do {
+        sessionCookieChunk = cookies[(0, _helpers.getIndexedCookieName)(i++)];
+        if (sessionCookieChunk) {
+          sessionCookies += sessionCookieChunk;
+        }
+      } while (sessionCookieChunk);
+    }
+    if (sessionCookies.length === 0) {
+      logger.info('Session cookie NOT found');
+      return undefined;
+    }
+    logger.info(`Session cookie found, (count: ${sessionCookies.length})`);
+    return sessionCookies;
+  }
+  parseCookieFromArray(cookies) {
+    const logger = _fronteggLogger.default.child({
+      tag: 'CookieManager.parseCookieFromArray'
+    });
+    const cookieChunks = cookies.filter(c => c.name.includes(this.getCookieName()));
+    logger.info('Parsing session cookie from RequestCookie for Next.JS 13+');
+    if (!cookieChunks || cookieChunks.length === 0) {
+      logger.info(`No session cookies found`);
+      return undefined;
+    }
+    logger.debug(`Found ${cookieChunks.length} chunks`);
+    cookieChunks.sort((a, b) => {
+      const firstCookieNumber = parseInt(a.name.slice(-1));
+      const secondCookieNumber = parseInt(b.name.slice(-1));
+      return firstCookieNumber > secondCookieNumber ? 1 : -1;
+    });
+    logger.info(`Concatenate session cookies chunks`);
+    return cookieChunks.map(c => c.value).join('');
+  }
+  /**
+   * Take a list of cookieNames and modify request/response headers
+   * to proxy the cookies from Next.js to Frontegg Services and vice-versa
+   * @param {string[]} setCookieValue - list of cookies to modify
+   * @param {boolean} isSecured - if the running application behind SSL
+   */
+  removeCookies({
+    cookieNames,
+    isSecured,
+    cookieDomain,
+    res,
+    req
+  }) {
+    var _ref;
+    const logger = _fronteggLogger.default.child({
+      tag: 'CookieManager.removeCookies'
+    });
+    logger.debug('Setting empty cookie headers remove cookies from client side');
+    const cookiesToRemove = this.getCookiesToRemove(req);
+    const cookieValue = this.createEmptyCookies(isSecured, cookieDomain, cookieNames != null ? cookieNames : cookiesToRemove);
+    let existingSetCookie = (_ref = res.getHeader('set-cookie')) != null ? _ref : [];
+    if (typeof existingSetCookie === 'string') {
+      existingSetCookie = [existingSetCookie];
+    }
+    const setCookieHeaders = [...existingSetCookie, ...cookieValue];
+    logger.debug(`removing headers (count: ${setCookieHeaders.length})`);
+    res.setHeader('set-cookie', setCookieHeaders);
+  }
+
+  /**
+   * Take a list of cookie headers and modify the Domain / Secure / SameSite
+   * to proxy the cookies to Frontegg Services and vice-versa
+   * @param {string[]} setCookieValue - list of cookies to modify
+   * @param {boolean} isSecured - if the running application behind SSL
+   */
+}
+var _default = new CookieManager();
+exports.default = _default;
+//# sourceMappingURL=index.js.map

package/utils/cookies/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["CookieManager","getCookieName","cookieNumber","cookieName","config","getIndexedCookieName","createEmptySingleCookie","isSecured","cookieDomain","create","value","expires","Date","secure","domain","silent","createEmptyCookies","_cookiesToRemove","allEmptyCookies","refreshTokenVariants","getRefreshTokenCookieNameVariants","cookiesToRemove","forEach","name","push","getCookiesToRemove","request","logger","fronteggLogger","child","tag","info","cookieStr","getCookieHeader","cookies","cookieSerializer","parse","cookieToRemove","length","e","error","modifySetCookie","setCookieValue","map","c","cookie","split","debug","filter","property","toLowerCase","baseUrlHost","join","refreshTokenKey","clientId","replace","options","level","undefined","cookieValue","serializeOptions","httpOnly","path","priority","sameSite","serializedCookie","serialize","COOKIE_MAX_LENGTH","splitValueToChunks","parseCookieHeader","cookieHeader","getSessionCookieFromRequest","i","sessionCookies","sessionCookieChunk","parseCookieFromArray","cookieChunks","includes","sort","a","b","firstCookieNumber","parseInt","slice","secondCookieNumber","removeCookies","cookieNames","res","req","existingSetCookie","getHeader","setCookieHeaders","setHeader"],"sources":["../../../../../packages/nextjs/src/utils/cookies/index.ts"],"sourcesContent":["import cookieSerializer from './serializer';\nimport type { RequestCookie } from 'next/dist/server/web/spec-extension/cookies';\nimport config from '../../config';\nimport { CookieSerializeOptions, CreateCookieOptions, RemoveCookiesOptions, RequestType } from './types';\nimport { COOKIE_MAX_LENGTH } from './constants';\n\nimport {\n  getCookieHeader,\n  getIndexedCookieName,\n  getRefreshTokenCookieNameVariants,\n  splitValueToChunks,\n} from './helpers';\nimport fronteggLogger from '../fronteggLogger';\n\nclass CookieManager {\n  getCookieName = (cookieNumber?: number, cookieName = config.cookieName) =>\n    cookieNumber ? getIndexedCookieName(cookieNumber, cookieName) : cookieName;\n\n  get refreshTokenKey(): string {\n    return `fe_refresh_${config.clientId}`.replace(/-/g, '');\n  }\n\n  /**\n   * Validate and create new cookie headers.\n   * The default value of `cookieName` is {@link config.cookieName}\n   * @param {CreateCookieOptions} options - Create cookie options\n   */\n  create(options: CreateCookieOptions): string[] {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.create', level: options.silent ? 'error' : undefined });\n    const cookieName = options.cookieName ?? config.cookieName;\n    const cookieValue = options.value;\n    logger.info(`Creating new cookie for '${cookieName}'`);\n\n    const serializeOptions: CookieSerializeOptions = {\n      expires: options.expires,\n      httpOnly: options.httpOnly ?? true,\n      domain: options.domain ?? config.cookieDomain,\n      path: options.path ?? '/',\n      priority: 'high',\n    };\n\n    if (options.secure) {\n      logger.debug(`Set cookie '${cookieName}' as secure`);\n      serializeOptions.secure = options.secure;\n      serializeOptions.sameSite = 'none';\n    }\n\n    const serializedCookie = cookieSerializer.serialize(cookieName, cookieValue, serializeOptions);\n\n    if (serializedCookie.length <= COOKIE_MAX_LENGTH) {\n      logger.info(`Successfully create a cookie header, '${cookieName}'`);\n      return [serializedCookie];\n    } else {\n      logger.debug('Going to split cookie into chunks');\n      /** Create chunked cookie headers and store value as array of headers */\n      const cookies = splitValueToChunks(cookieName, cookieValue, serializeOptions);\n      logger.info(`Successfully create chunked cookie headers, '${cookieName}' (count: ${cookies.length})`);\n      return cookies;\n    }\n  }\n\n  /**\n   * Receive incoming http request, and extract the cookie header.\n   * @return cookie as string if exists, else empty string\n   *\n   * @param {RequestType} request - Incoming HTTP Request\n   */\n  parseCookieHeader(request: RequestType): Record<string, string> {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.parseCookieHeader' });\n\n    logger.info('Going to extract all cookies header from request');\n    const cookieHeader = getCookieHeader(request);\n    logger.info('Parsing cookie header to map');\n    return cookieSerializer.parse(cookieHeader);\n  }\n\n  /**\n   * Loop over cookie headers, extract, parse cookies and merged divided cookies from incoming http request,\n   * @return full session cookie headers if exists, else return undefined\n   * @param {RequestType} request - Incoming HTTP Request\n   */\n  getSessionCookieFromRequest(request?: RequestType): string | undefined {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.getSessionCookieFromRequest' });\n    logger.info('Going to extract session cookies header from request');\n\n    if (!request) {\n      logger.info(`'request' argument is null, Cookie header not found`);\n      return undefined;\n    }\n\n    logger.debug('Getting cookie header');\n    const cookieStr = getCookieHeader(request);\n\n    logger.debug('Parsing cookie header string');\n    const cookies = cookieSerializer.parse(cookieStr);\n\n    logger.debug('Loop over session cookie headers');\n    let i = 1;\n    let sessionCookies = '';\n    let sessionCookieChunk: string | undefined = cookies[this.getCookieName()];\n    if (sessionCookieChunk === undefined) {\n      do {\n        sessionCookieChunk = cookies[getIndexedCookieName(i++)];\n        if (sessionCookieChunk) {\n          sessionCookies += sessionCookieChunk;\n        }\n      } while (sessionCookieChunk);\n    }\n\n    if (sessionCookies.length === 0) {\n      logger.info('Session cookie NOT found');\n      return undefined;\n    }\n\n    logger.info(`Session cookie found, (count: ${sessionCookies.length})`);\n    return sessionCookies;\n  }\n\n  parseCookieFromArray(cookies: RequestCookie[]): string | undefined {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.parseCookieFromArray' });\n    const cookieChunks = cookies.filter((c) => c.name.includes(this.getCookieName()));\n    logger.info('Parsing session cookie from RequestCookie for Next.JS 13+');\n\n    if (!cookieChunks || cookieChunks.length === 0) {\n      logger.info(`No session cookies found`);\n      return undefined;\n    }\n    logger.debug(`Found ${cookieChunks.length} chunks`);\n    cookieChunks.sort((a, b) => {\n      const firstCookieNumber = parseInt(a.name.slice(-1));\n      const secondCookieNumber = parseInt(b.name.slice(-1));\n      return firstCookieNumber > secondCookieNumber ? 1 : -1;\n    });\n\n    logger.info(`Concatenate session cookies chunks`);\n    return cookieChunks.map((c) => c.value).join('');\n  }\n\n  private createEmptySingleCookie = (cookieName: string, isSecured: boolean, cookieDomain: string) => {\n    return this.create({\n      cookieName,\n      value: '',\n      expires: new Date(),\n      secure: isSecured,\n      domain: cookieDomain,\n      silent: true,\n    });\n  };\n\n  createEmptyCookies = (isSecured: boolean, cookieDomain: string, _cookiesToRemove: string[]): string[] => {\n    const allEmptyCookies: string[] = [];\n\n    const refreshTokenVariants = getRefreshTokenCookieNameVariants();\n    const cookiesToRemove = [..._cookiesToRemove, ...refreshTokenVariants];\n\n    cookiesToRemove.forEach((name: string) => {\n      allEmptyCookies.push(...this.createEmptySingleCookie(name, isSecured, cookieDomain));\n    });\n\n    return allEmptyCookies;\n  };\n\n  private getCookiesToRemove = (request?: RequestType): string[] => {\n    const logger = fronteggLogger.child({ tag: 'getCookiesToRemove' });\n    if (!request) {\n      return [];\n    }\n    try {\n      logger.info('extract cookie from request headers');\n      const cookieStr = getCookieHeader(request);\n      const cookies = cookieStr && cookieSerializer.parse(cookieStr);\n      if (!cookies) {\n        return [];\n      }\n      let cookieNumber = 1;\n      const cookieToRemove = [];\n      while (cookies[this.getCookieName(cookieNumber)]) {\n        cookieToRemove.push(this.getCookieName(cookieNumber));\n        cookieNumber++;\n      }\n      logger.info(`number of cookies to remove: ${cookieToRemove.length}`);\n      return cookieToRemove;\n    } catch (e) {\n      logger.error(e);\n      return [];\n    }\n  };\n\n  /**\n   * Take a list of cookieNames and modify request/response headers\n   * to proxy the cookies from Next.js to Frontegg Services and vice-versa\n   * @param {string[]} setCookieValue - list of cookies to modify\n   * @param {boolean} isSecured - if the running application behind SSL\n   */\n  removeCookies({ cookieNames, isSecured, cookieDomain, res, req }: RemoveCookiesOptions): void {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.removeCookies' });\n    logger.debug('Setting empty cookie headers remove cookies from client side');\n    const cookiesToRemove = this.getCookiesToRemove(req);\n    const cookieValue = this.createEmptyCookies(isSecured, cookieDomain, cookieNames ?? cookiesToRemove);\n    let existingSetCookie = (res.getHeader('set-cookie') as string[] | string) ?? [];\n    if (typeof existingSetCookie === 'string') {\n      existingSetCookie = [existingSetCookie];\n    }\n\n    const setCookieHeaders = [...existingSetCookie, ...cookieValue];\n    logger.debug(`removing headers (count: ${setCookieHeaders.length})`);\n    res.setHeader('set-cookie', setCookieHeaders);\n  }\n\n  /**\n   * Take a list of cookie headers and modify the Domain / Secure / SameSite\n   * to proxy the cookies to Frontegg Services and vice-versa\n   * @param {string[]} setCookieValue - list of cookies to modify\n   * @param {boolean} isSecured - if the running application behind SSL\n   */\n  modifySetCookie = (setCookieValue: string[] | undefined, isSecured: boolean): string[] | undefined => {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.modifySetCookie' });\n    if (!setCookieValue || setCookieValue.length === 0) {\n      logger.info(`No headers to modify`);\n      return setCookieValue;\n    }\n    logger.info(`modifying cookie headers (count: ${setCookieValue.length})`);\n    return setCookieValue.map((c) => {\n      let cookie = c.split('; ');\n\n      logger.debug(`modifying cookie ${cookie[0]}, isSecured: ${isSecured}`);\n      if (!isSecured) {\n        cookie = cookie.filter((property) => property !== 'Secure' && property !== 'SameSite=None');\n      }\n\n      return (\n        cookie\n          .map((property) => {\n            if (property.toLowerCase() === `domain=${config.baseUrlHost}`) {\n              return `Domain=${config.cookieDomain}`;\n            }\n            return property;\n          })\n          .join(';') + ';'\n      );\n    });\n  };\n}\n\nexport default new CookieManager();\n"],"mappings":";;;;;;;AAAA;AAEA;AAEA;AAEA;AAMA;AAEA,MAAMA,aAAa,CAAC;EAAA;IAAA,KAClBC,aAAa,GAAG,CAACC,YAAqB,EAAEC,UAAU,GAAGC,eAAM,CAACD,UAAU,KACpED,YAAY,GAAG,IAAAG,6BAAoB,EAACH,YAAY,EAAEC,UAAU,CAAC,GAAGA,UAAU;IAAA,KA0HpEG,uBAAuB,GAAG,CAACH,UAAkB,EAAEI,SAAkB,EAAEC,YAAoB,KAAK;MAClG,OAAO,IAAI,CAACC,MAAM,CAAC;QACjBN,UAAU;QACVO,KAAK,EAAE,EAAE;QACTC,OAAO,EAAE,IAAIC,IAAI,EAAE;QACnBC,MAAM,EAAEN,SAAS;QACjBO,MAAM,EAAEN,YAAY;QACpBO,MAAM,EAAE;MACV,CAAC,CAAC;IACJ,CAAC;IAAA,KAEDC,kBAAkB,GAAG,CAACT,SAAkB,EAAEC,YAAoB,EAAES,gBAA0B,KAAe;MACvG,MAAMC,eAAyB,GAAG,EAAE;MAEpC,MAAMC,oBAAoB,GAAG,IAAAC,0CAAiC,GAAE;MAChE,MAAMC,eAAe,GAAG,CAAC,GAAGJ,gBAAgB,EAAE,GAAGE,oBAAoB,CAAC;MAEtEE,eAAe,CAACC,OAAO,CAAEC,IAAY,IAAK;QACxCL,eAAe,CAACM,IAAI,CAAC,GAAG,IAAI,CAAClB,uBAAuB,CAACiB,IAAI,EAAEhB,SAAS,EAAEC,YAAY,CAAC,CAAC;MACtF,CAAC,CAAC;MAEF,OAAOU,eAAe;IACxB,CAAC;IAAA,KAEOO,kBAAkB,GAAIC,OAAqB,IAAe;MAChE,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;QAAEC,GAAG,EAAE;MAAqB,CAAC,CAAC;MAClE,IAAI,CAACJ,OAAO,EAAE;QACZ,OAAO,EAAE;MACX;MACA,IAAI;QACFC,MAAM,CAACI,IAAI,CAAC,qCAAqC,CAAC;QAClD,MAAMC,SAAS,GAAG,IAAAC,wBAAe,EAACP,OAAO,CAAC;QAC1C,MAAMQ,OAAO,GAAGF,SAAS,IAAIG,mBAAgB,CAACC,KAAK,CAACJ,SAAS,CAAC;QAC9D,IAAI,CAACE,OAAO,EAAE;UACZ,OAAO,EAAE;QACX;QACA,IAAIhC,YAAY,GAAG,CAAC;QACpB,MAAMmC,cAAc,GAAG,EAAE;QACzB,OAAOH,OAAO,CAAC,IAAI,CAACjC,aAAa,CAACC,YAAY,CAAC,CAAC,EAAE;UAChDmC,cAAc,CAACb,IAAI,CAAC,IAAI,CAACvB,aAAa,CAACC,YAAY,CAAC,CAAC;UACrDA,YAAY,EAAE;QAChB;QACAyB,MAAM,CAACI,IAAI,CAAE,gCAA+BM,cAAc,CAACC,MAAO,EAAC,CAAC;QACpE,OAAOD,cAAc;MACvB,CAAC,CAAC,OAAOE,CAAC,EAAE;QACVZ,MAAM,CAACa,KAAK,CAACD,CAAC,CAAC;QACf,OAAO,EAAE;MACX;IACF,CAAC;IAAA,KA6BDE,eAAe,GAAG,CAACC,cAAoC,EAAEnC,SAAkB,KAA2B;MACpG,MAAMoB,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;QAAEC,GAAG,EAAE;MAAgC,CAAC,CAAC;MAC7E,IAAI,CAACY,cAAc,IAAIA,cAAc,CAACJ,MAAM,KAAK,CAAC,EAAE;QAClDX,MAAM,CAACI,IAAI,CAAE,sBAAqB,CAAC;QACnC,OAAOW,cAAc;MACvB;MACAf,MAAM,CAACI,IAAI,CAAE,oCAAmCW,cAAc,CAACJ,MAAO,GAAE,CAAC;MACzE,OAAOI,cAAc,CAACC,GAAG,CAAEC,CAAC,IAAK;QAC/B,IAAIC,MAAM,GAAGD,CAAC,CAACE,KAAK,CAAC,IAAI,CAAC;QAE1BnB,MAAM,CAACoB,KAAK,CAAE,oBAAmBF,MAAM,CAAC,CAAC,CAAE,gBAAetC,SAAU,EAAC,CAAC;QACtE,IAAI,CAACA,SAAS,EAAE;UACdsC,MAAM,GAAGA,MAAM,CAACG,MAAM,CAAEC,QAAQ,IAAKA,QAAQ,KAAK,QAAQ,IAAIA,QAAQ,KAAK,eAAe,CAAC;QAC7F;QAEA,OACEJ,MAAM,CACHF,GAAG,CAAEM,QAAQ,IAAK;UACjB,IAAIA,QAAQ,CAACC,WAAW,EAAE,KAAM,UAAS9C,eAAM,CAAC+C,WAAY,EAAC,EAAE;YAC7D,OAAQ,UAAS/C,eAAM,CAACI,YAAa,EAAC;UACxC;UACA,OAAOyC,QAAQ;QACjB,CAAC,CAAC,CACDG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG;MAEtB,CAAC,CAAC;IACJ,CAAC;EAAA;EA/ND,IAAIC,eAAe,GAAW;IAC5B,OAAQ,cAAajD,eAAM,CAACkD,QAAS,EAAC,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;EAC1D;;EAEA;AACF;AACA;AACA;AACA;EACE9C,MAAM,CAAC+C,OAA4B,EAAY;IAAA;IAC7C,MAAM7B,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE,sBAAsB;MAAE2B,KAAK,EAAED,OAAO,CAACzC,MAAM,GAAG,OAAO,GAAG2C;IAAU,CAAC,CAAC;IACjH,MAAMvD,UAAU,0BAAGqD,OAAO,CAACrD,UAAU,kCAAIC,eAAM,CAACD,UAAU;IAC1D,MAAMwD,WAAW,GAAGH,OAAO,CAAC9C,KAAK;IACjCiB,MAAM,CAACI,IAAI,CAAE,4BAA2B5B,UAAW,GAAE,CAAC;IAEtD,MAAMyD,gBAAwC,GAAG;MAC/CjD,OAAO,EAAE6C,OAAO,CAAC7C,OAAO;MACxBkD,QAAQ,uBAAEL,OAAO,CAACK,QAAQ,gCAAI,IAAI;MAClC/C,MAAM,qBAAE0C,OAAO,CAAC1C,MAAM,8BAAIV,eAAM,CAACI,YAAY;MAC7CsD,IAAI,mBAAEN,OAAO,CAACM,IAAI,4BAAI,GAAG;MACzBC,QAAQ,EAAE;IACZ,CAAC;IAED,IAAIP,OAAO,CAAC3C,MAAM,EAAE;MAClBc,MAAM,CAACoB,KAAK,CAAE,eAAc5C,UAAW,aAAY,CAAC;MACpDyD,gBAAgB,CAAC/C,MAAM,GAAG2C,OAAO,CAAC3C,MAAM;MACxC+C,gBAAgB,CAACI,QAAQ,GAAG,MAAM;IACpC;IAEA,MAAMC,gBAAgB,GAAG9B,mBAAgB,CAAC+B,SAAS,CAAC/D,UAAU,EAAEwD,WAAW,EAAEC,gBAAgB,CAAC;IAE9F,IAAIK,gBAAgB,CAAC3B,MAAM,IAAI6B,4BAAiB,EAAE;MAChDxC,MAAM,CAACI,IAAI,CAAE,yCAAwC5B,UAAW,GAAE,CAAC;MACnE,OAAO,CAAC8D,gBAAgB,CAAC;IAC3B,CAAC,MAAM;MACLtC,MAAM,CAACoB,KAAK,CAAC,mCAAmC,CAAC;MACjD;MACA,MAAMb,OAAO,GAAG,IAAAkC,2BAAkB,EAACjE,UAAU,EAAEwD,WAAW,EAAEC,gBAAgB,CAAC;MAC7EjC,MAAM,CAACI,IAAI,CAAE,gDAA+C5B,UAAW,aAAY+B,OAAO,CAACI,MAAO,GAAE,CAAC;MACrG,OAAOJ,OAAO;IAChB;EACF;;EAEA;AACF;AACA;AACA;AACA;AACA;EACEmC,iBAAiB,CAAC3C,OAAoB,EAA0B;IAC9D,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAAkC,CAAC,CAAC;IAE/EH,MAAM,CAACI,IAAI,CAAC,kDAAkD,CAAC;IAC/D,MAAMuC,YAAY,GAAG,IAAArC,wBAAe,EAACP,OAAO,CAAC;IAC7CC,MAAM,CAACI,IAAI,CAAC,8BAA8B,CAAC;IAC3C,OAAOI,mBAAgB,CAACC,KAAK,CAACkC,YAAY,CAAC;EAC7C;;EAEA;AACF;AACA;AACA;AACA;EACEC,2BAA2B,CAAC7C,OAAqB,EAAsB;IACrE,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAA4C,CAAC,CAAC;IACzFH,MAAM,CAACI,IAAI,CAAC,sDAAsD,CAAC;IAEnE,IAAI,CAACL,OAAO,EAAE;MACZC,MAAM,CAACI,IAAI,CAAE,qDAAoD,CAAC;MAClE,OAAO2B,SAAS;IAClB;IAEA/B,MAAM,CAACoB,KAAK,CAAC,uBAAuB,CAAC;IACrC,MAAMf,SAAS,GAAG,IAAAC,wBAAe,EAACP,OAAO,CAAC;IAE1CC,MAAM,CAACoB,KAAK,CAAC,8BAA8B,CAAC;IAC5C,MAAMb,OAAO,GAAGC,mBAAgB,CAACC,KAAK,CAACJ,SAAS,CAAC;IAEjDL,MAAM,CAACoB,KAAK,CAAC,kCAAkC,CAAC;IAChD,IAAIyB,CAAC,GAAG,CAAC;IACT,IAAIC,cAAc,GAAG,EAAE;IACvB,IAAIC,kBAAsC,GAAGxC,OAAO,CAAC,IAAI,CAACjC,aAAa,EAAE,CAAC;IAC1E,IAAIyE,kBAAkB,KAAKhB,SAAS,EAAE;MACpC,GAAG;QACDgB,kBAAkB,GAAGxC,OAAO,CAAC,IAAA7B,6BAAoB,EAACmE,CAAC,EAAE,CAAC,CAAC;QACvD,IAAIE,kBAAkB,EAAE;UACtBD,cAAc,IAAIC,kBAAkB;QACtC;MACF,CAAC,QAAQA,kBAAkB;IAC7B;IAEA,IAAID,cAAc,CAACnC,MAAM,KAAK,CAAC,EAAE;MAC/BX,MAAM,CAACI,IAAI,CAAC,0BAA0B,CAAC;MACvC,OAAO2B,SAAS;IAClB;IAEA/B,MAAM,CAACI,IAAI,CAAE,iCAAgC0C,cAAc,CAACnC,MAAO,GAAE,CAAC;IACtE,OAAOmC,cAAc;EACvB;EAEAE,oBAAoB,CAACzC,OAAwB,EAAsB;IACjE,MAAMP,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAAqC,CAAC,CAAC;IAClF,MAAM8C,YAAY,GAAG1C,OAAO,CAACc,MAAM,CAAEJ,CAAC,IAAKA,CAAC,CAACrB,IAAI,CAACsD,QAAQ,CAAC,IAAI,CAAC5E,aAAa,EAAE,CAAC,CAAC;IACjF0B,MAAM,CAACI,IAAI,CAAC,2DAA2D,CAAC;IAExE,IAAI,CAAC6C,YAAY,IAAIA,YAAY,CAACtC,MAAM,KAAK,CAAC,EAAE;MAC9CX,MAAM,CAACI,IAAI,CAAE,0BAAyB,CAAC;MACvC,OAAO2B,SAAS;IAClB;IACA/B,MAAM,CAACoB,KAAK,CAAE,SAAQ6B,YAAY,CAACtC,MAAO,SAAQ,CAAC;IACnDsC,YAAY,CAACE,IAAI,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAK;MAC1B,MAAMC,iBAAiB,GAAGC,QAAQ,CAACH,CAAC,CAACxD,IAAI,CAAC4D,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;MACpD,MAAMC,kBAAkB,GAAGF,QAAQ,CAACF,CAAC,CAACzD,IAAI,CAAC4D,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;MACrD,OAAOF,iBAAiB,GAAGG,kBAAkB,GAAG,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC;IAEFzD,MAAM,CAACI,IAAI,CAAE,oCAAmC,CAAC;IACjD,OAAO6C,YAAY,CAACjC,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAAClC,KAAK,CAAC,CAAC0C,IAAI,CAAC,EAAE,CAAC;EAClD;EAoDA;AACF;AACA;AACA;AACA;AACA;EACEiC,aAAa,CAAC;IAAEC,WAAW;IAAE/E,SAAS;IAAEC,YAAY;IAAE+E,GAAG;IAAEC;EAA0B,CAAC,EAAQ;IAAA;IAC5F,MAAM7D,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAA8B,CAAC,CAAC;IAC3EH,MAAM,CAACoB,KAAK,CAAC,8DAA8D,CAAC;IAC5E,MAAM1B,eAAe,GAAG,IAAI,CAACI,kBAAkB,CAAC+D,GAAG,CAAC;IACpD,MAAM7B,WAAW,GAAG,IAAI,CAAC3C,kBAAkB,CAACT,SAAS,EAAEC,YAAY,EAAE8E,WAAW,WAAXA,WAAW,GAAIjE,eAAe,CAAC;IACpG,IAAIoE,iBAAiB,WAAIF,GAAG,CAACG,SAAS,CAAC,YAAY,CAAC,mBAA0B,EAAE;IAChF,IAAI,OAAOD,iBAAiB,KAAK,QAAQ,EAAE;MACzCA,iBAAiB,GAAG,CAACA,iBAAiB,CAAC;IACzC;IAEA,MAAME,gBAAgB,GAAG,CAAC,GAAGF,iBAAiB,EAAE,GAAG9B,WAAW,CAAC;IAC/DhC,MAAM,CAACoB,KAAK,CAAE,4BAA2B4C,gBAAgB,CAACrD,MAAO,GAAE,CAAC;IACpEiD,GAAG,CAACK,SAAS,CAAC,YAAY,EAAED,gBAAgB,CAAC;EAC/C;;EAEA;AACF;AACA;AACA;AACA;AACA;AA4BA;AAAC,eAEc,IAAI3F,aAAa,EAAE;AAAA"}

package/utils/cookies/package.json

@@ -0,0 +1,6 @@
+{
+  "sideEffects": false,
+  "module": "./index.js",
+  "main": "./index.js",
+  "types": "./index.d.ts"
+}

package/utils/cookies/serializer.d.ts

@@ -0,0 +1,22 @@
+import { CookieSerializeOptions } from './types';
+/**
+ * Parse an HTTP Cookie header string and returning an object of all cookie
+ * name-value pairs.
+ *
+ * @param str the string representing a `Cookie` header value
+ */
+declare function parse(str: any): Record<string, string>;
+/**
+ * Serialize a cookie name-value pair into a `Set-Cookie` header string.
+ *
+ * @param name the name for the cookie
+ * @param val value to set the cookie to
+ * @param [options] object containing serialization options
+ * @throws {TypeError} when `maxAge` options is invalid
+ */
+declare function serialize(name: string, val: string, options?: CookieSerializeOptions): string;
+declare const _default: {
+    serialize: typeof serialize;
+    parse: typeof parse;
+};
+export default _default;

package/utils/cookies/serializer.js

@@ -0,0 +1,161 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+var _constants = require("../common/constants");
+/**
+ * Determine if value is a Date.
+ *
+ * @param {*} val
+ * @private
+ */
+
+function isDate(val) {
+  return Object.prototype.toString.call(val) === '[object Date]' || val instanceof Date;
+}
+
+/**
+ * Parse an HTTP Cookie header string and returning an object of all cookie
+ * name-value pairs.
+ *
+ * @param str the string representing a `Cookie` header value
+ */
+function parse(str) {
+  if (typeof str !== 'string') {
+    throw new TypeError('argument str must be a string');
+  }
+  const obj = {};
+  let index = 0;
+  while (index < str.length) {
+    const eqIdx = str.indexOf('=', index);
+
+    // no more cookie pairs
+    if (eqIdx === -1) {
+      break;
+    }
+    let endIdx = str.indexOf(';', index);
+    if (endIdx === -1) {
+      endIdx = str.length;
+    } else if (endIdx < eqIdx) {
+      // backtrack on prior semicolon
+      index = str.lastIndexOf(';', eqIdx - 1) + 1;
+      continue;
+    }
+    const key = str.slice(index, eqIdx).trim();
+
+    // only assign once
+    if (undefined === obj[key]) {
+      let val = str.slice(eqIdx + 1, endIdx).trim();
+
+      // quoted values
+      if (val.charCodeAt(0) === 0x22) {
+        val = val.slice(1, -1);
+      }
+      try {
+        obj[key] = val.indexOf('%') !== -1 ? decodeURIComponent(val) : val;
+      } catch (e) {
+        obj[key] = val;
+      }
+    }
+    index = endIdx + 1;
+  }
+  return obj;
+}
+
+/**
+ * Serialize a cookie name-value pair into a `Set-Cookie` header string.
+ *
+ * @param name the name for the cookie
+ * @param val value to set the cookie to
+ * @param [options] object containing serialization options
+ * @throws {TypeError} when `maxAge` options is invalid
+ */
+function serialize(name, val, options) {
+  const opt = options || {};
+  if (!_constants.cookieContentRegExp.test(name)) {
+    throw new TypeError('argument name is invalid: ' + name);
+  }
+  const value = encodeURIComponent(val);
+  if (value && !_constants.cookieContentRegExp.test(value)) {
+    throw new TypeError('argument val is invalid');
+  }
+  let str = name + '=' + value;
+  if (null != opt.maxAge) {
+    // noinspection PointlessArithmeticExpressionJS
+    const maxAge = opt.maxAge - 0;
+    if (isNaN(maxAge) || !isFinite(maxAge)) {
+      throw new TypeError('option maxAge is invalid');
+    }
+    str += '; Max-Age=' + Math.floor(maxAge);
+  }
+  if (opt.domain) {
+    if (!_constants.cookieContentRegExp.test(opt.domain)) {
+      throw new TypeError('option domain is invalid');
+    }
+    str += '; Domain=' + opt.domain;
+  }
+  if (opt.path) {
+    if (!_constants.cookieContentRegExp.test(opt.path)) {
+      throw new TypeError('option path is invalid');
+    }
+    str += '; Path=' + opt.path;
+  }
+  if (opt.expires) {
+    const expires = opt.expires;
+    if (!isDate(expires) || isNaN(expires.valueOf())) {
+      throw new TypeError('option expires is invalid');
+    }
+    str += '; Expires=' + expires.toUTCString();
+  }
+  if (opt.httpOnly) {
+    str += '; HttpOnly';
+  }
+  if (opt.secure) {
+    str += '; Secure';
+  }
+  if (opt.priority) {
+    // noinspection SuspiciousTypeOfGuard
+    const priority = typeof opt.priority === 'string' ? opt.priority.toLowerCase() : opt.priority;
+    switch (priority) {
+      case 'low':
+        str += '; Priority=Low';
+        break;
+      case 'medium':
+        str += '; Priority=Medium';
+        break;
+      case 'high':
+        str += '; Priority=High';
+        break;
+      default:
+        throw new TypeError('option priority is invalid');
+    }
+  }
+  if (opt.sameSite) {
+    const sameSite = typeof opt.sameSite === 'string' ? opt.sameSite.toLowerCase() : opt.sameSite;
+    switch (sameSite) {
+      case true:
+        str += '; SameSite=Strict';
+        break;
+      case 'lax':
+        str += '; SameSite=Lax';
+        break;
+      case 'strict':
+        str += '; SameSite=Strict';
+        break;
+      case 'none':
+        str += '; SameSite=None';
+        break;
+      default:
+        throw new TypeError('option sameSite is invalid');
+    }
+  }
+  return str;
+}
+var _default = {
+  serialize,
+  parse
+};
+exports.default = _default;
+//# sourceMappingURL=serializer.js.map

package/utils/cookies/serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializer.js","names":["isDate","val","Object","prototype","toString","call","Date","parse","str","TypeError","obj","index","length","eqIdx","indexOf","endIdx","lastIndexOf","key","slice","trim","undefined","charCodeAt","decodeURIComponent","e","serialize","name","options","opt","cookieContentRegExp","test","value","encodeURIComponent","maxAge","isNaN","isFinite","Math","floor","domain","path","expires","valueOf","toUTCString","httpOnly","secure","priority","toLowerCase","sameSite"],"sources":["../../../../../packages/nextjs/src/utils/cookies/serializer.ts"],"sourcesContent":["import { cookieContentRegExp } from '../common/constants';\nimport { CookieSerializeOptions } from './types';\n\n/**\n * Determine if value is a Date.\n *\n * @param {*} val\n * @private\n */\n\nfunction isDate(val: any) {\n  return Object.prototype.toString.call(val) === '[object Date]' || val instanceof Date;\n}\n\n/**\n * Parse an HTTP Cookie header string and returning an object of all cookie\n * name-value pairs.\n *\n * @param str the string representing a `Cookie` header value\n */\nfunction parse(str: any): Record<string, string> {\n  if (typeof str !== 'string') {\n    throw new TypeError('argument str must be a string');\n  }\n\n  const obj: Record<string, string> = {};\n\n  let index = 0;\n  while (index < str.length) {\n    const eqIdx = str.indexOf('=', index);\n\n    // no more cookie pairs\n    if (eqIdx === -1) {\n      break;\n    }\n\n    let endIdx = str.indexOf(';', index);\n\n    if (endIdx === -1) {\n      endIdx = str.length;\n    } else if (endIdx < eqIdx) {\n      // backtrack on prior semicolon\n      index = str.lastIndexOf(';', eqIdx - 1) + 1;\n      continue;\n    }\n\n    const key = str.slice(index, eqIdx).trim();\n\n    // only assign once\n    if (undefined === obj[key]) {\n      let val = str.slice(eqIdx + 1, endIdx).trim();\n\n      // quoted values\n      if (val.charCodeAt(0) === 0x22) {\n        val = val.slice(1, -1);\n      }\n\n      try {\n        obj[key] = val.indexOf('%') !== -1 ? decodeURIComponent(val) : val;\n      } catch (e) {\n        obj[key] = val;\n      }\n    }\n\n    index = endIdx + 1;\n  }\n\n  return obj;\n}\n\n/**\n * Serialize a cookie name-value pair into a `Set-Cookie` header string.\n *\n * @param name the name for the cookie\n * @param val value to set the cookie to\n * @param [options] object containing serialization options\n * @throws {TypeError} when `maxAge` options is invalid\n */\nfunction serialize(name: string, val: string, options?: CookieSerializeOptions): string {\n  const opt = options || {};\n\n  if (!cookieContentRegExp.test(name)) {\n    throw new TypeError('argument name is invalid: ' + name);\n  }\n\n  const value = encodeURIComponent(val);\n\n  if (value && !cookieContentRegExp.test(value)) {\n    throw new TypeError('argument val is invalid');\n  }\n\n  let str = name + '=' + value;\n\n  if (null != opt.maxAge) {\n    // noinspection PointlessArithmeticExpressionJS\n    const maxAge = opt.maxAge - 0;\n\n    if (isNaN(maxAge) || !isFinite(maxAge)) {\n      throw new TypeError('option maxAge is invalid');\n    }\n\n    str += '; Max-Age=' + Math.floor(maxAge);\n  }\n\n  if (opt.domain) {\n    if (!cookieContentRegExp.test(opt.domain)) {\n      throw new TypeError('option domain is invalid');\n    }\n\n    str += '; Domain=' + opt.domain;\n  }\n\n  if (opt.path) {\n    if (!cookieContentRegExp.test(opt.path)) {\n      throw new TypeError('option path is invalid');\n    }\n\n    str += '; Path=' + opt.path;\n  }\n\n  if (opt.expires) {\n    const expires = opt.expires;\n\n    if (!isDate(expires) || isNaN(expires.valueOf())) {\n      throw new TypeError('option expires is invalid');\n    }\n\n    str += '; Expires=' + expires.toUTCString();\n  }\n\n  if (opt.httpOnly) {\n    str += '; HttpOnly';\n  }\n\n  if (opt.secure) {\n    str += '; Secure';\n  }\n\n  if (opt.priority) {\n    // noinspection SuspiciousTypeOfGuard\n    const priority = typeof opt.priority === 'string' ? opt.priority.toLowerCase() : opt.priority;\n\n    switch (priority) {\n      case 'low':\n        str += '; Priority=Low';\n        break;\n      case 'medium':\n        str += '; Priority=Medium';\n        break;\n      case 'high':\n        str += '; Priority=High';\n        break;\n      default:\n        throw new TypeError('option priority is invalid');\n    }\n  }\n\n  if (opt.sameSite) {\n    const sameSite = typeof opt.sameSite === 'string' ? opt.sameSite.toLowerCase() : opt.sameSite;\n\n    switch (sameSite) {\n      case true:\n        str += '; SameSite=Strict';\n        break;\n      case 'lax':\n        str += '; SameSite=Lax';\n        break;\n      case 'strict':\n        str += '; SameSite=Strict';\n        break;\n      case 'none':\n        str += '; SameSite=None';\n        break;\n      default:\n        throw new TypeError('option sameSite is invalid');\n    }\n  }\n\n  return str;\n}\n\nexport default {\n  serialize,\n  parse,\n};\n"],"mappings":";;;;;;AAAA;AAGA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,MAAM,CAACC,GAAQ,EAAE;EACxB,OAAOC,MAAM,CAACC,SAAS,CAACC,QAAQ,CAACC,IAAI,CAACJ,GAAG,CAAC,KAAK,eAAe,IAAIA,GAAG,YAAYK,IAAI;AACvF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,KAAK,CAACC,GAAQ,EAA0B;EAC/C,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE;IAC3B,MAAM,IAAIC,SAAS,CAAC,+BAA+B,CAAC;EACtD;EAEA,MAAMC,GAA2B,GAAG,CAAC,CAAC;EAEtC,IAAIC,KAAK,GAAG,CAAC;EACb,OAAOA,KAAK,GAAGH,GAAG,CAACI,MAAM,EAAE;IACzB,MAAMC,KAAK,GAAGL,GAAG,CAACM,OAAO,CAAC,GAAG,EAAEH,KAAK,CAAC;;IAErC;IACA,IAAIE,KAAK,KAAK,CAAC,CAAC,EAAE;MAChB;IACF;IAEA,IAAIE,MAAM,GAAGP,GAAG,CAACM,OAAO,CAAC,GAAG,EAAEH,KAAK,CAAC;IAEpC,IAAII,MAAM,KAAK,CAAC,CAAC,EAAE;MACjBA,MAAM,GAAGP,GAAG,CAACI,MAAM;IACrB,CAAC,MAAM,IAAIG,MAAM,GAAGF,KAAK,EAAE;MACzB;MACAF,KAAK,GAAGH,GAAG,CAACQ,WAAW,CAAC,GAAG,EAAEH,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC;MAC3C;IACF;IAEA,MAAMI,GAAG,GAAGT,GAAG,CAACU,KAAK,CAACP,KAAK,EAAEE,KAAK,CAAC,CAACM,IAAI,EAAE;;IAE1C;IACA,IAAIC,SAAS,KAAKV,GAAG,CAACO,GAAG,CAAC,EAAE;MAC1B,IAAIhB,GAAG,GAAGO,GAAG,CAACU,KAAK,CAACL,KAAK,GAAG,CAAC,EAAEE,MAAM,CAAC,CAACI,IAAI,EAAE;;MAE7C;MACA,IAAIlB,GAAG,CAACoB,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;QAC9BpB,GAAG,GAAGA,GAAG,CAACiB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;MACxB;MAEA,IAAI;QACFR,GAAG,CAACO,GAAG,CAAC,GAAGhB,GAAG,CAACa,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAGQ,kBAAkB,CAACrB,GAAG,CAAC,GAAGA,GAAG;MACpE,CAAC,CAAC,OAAOsB,CAAC,EAAE;QACVb,GAAG,CAACO,GAAG,CAAC,GAAGhB,GAAG;MAChB;IACF;IAEAU,KAAK,GAAGI,MAAM,GAAG,CAAC;EACpB;EAEA,OAAOL,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASc,SAAS,CAACC,IAAY,EAAExB,GAAW,EAAEyB,OAAgC,EAAU;EACtF,MAAMC,GAAG,GAAGD,OAAO,IAAI,CAAC,CAAC;EAEzB,IAAI,CAACE,8BAAmB,CAACC,IAAI,CAACJ,IAAI,CAAC,EAAE;IACnC,MAAM,IAAIhB,SAAS,CAAC,4BAA4B,GAAGgB,IAAI,CAAC;EAC1D;EAEA,MAAMK,KAAK,GAAGC,kBAAkB,CAAC9B,GAAG,CAAC;EAErC,IAAI6B,KAAK,IAAI,CAACF,8BAAmB,CAACC,IAAI,CAACC,KAAK,CAAC,EAAE;IAC7C,MAAM,IAAIrB,SAAS,CAAC,yBAAyB,CAAC;EAChD;EAEA,IAAID,GAAG,GAAGiB,IAAI,GAAG,GAAG,GAAGK,KAAK;EAE5B,IAAI,IAAI,IAAIH,GAAG,CAACK,MAAM,EAAE;IACtB;IACA,MAAMA,MAAM,GAAGL,GAAG,CAACK,MAAM,GAAG,CAAC;IAE7B,IAAIC,KAAK,CAACD,MAAM,CAAC,IAAI,CAACE,QAAQ,CAACF,MAAM,CAAC,EAAE;MACtC,MAAM,IAAIvB,SAAS,CAAC,0BAA0B,CAAC;IACjD;IAEAD,GAAG,IAAI,YAAY,GAAG2B,IAAI,CAACC,KAAK,CAACJ,MAAM,CAAC;EAC1C;EAEA,IAAIL,GAAG,CAACU,MAAM,EAAE;IACd,IAAI,CAACT,8BAAmB,CAACC,IAAI,CAACF,GAAG,CAACU,MAAM,CAAC,EAAE;MACzC,MAAM,IAAI5B,SAAS,CAAC,0BAA0B,CAAC;IACjD;IAEAD,GAAG,IAAI,WAAW,GAAGmB,GAAG,CAACU,MAAM;EACjC;EAEA,IAAIV,GAAG,CAACW,IAAI,EAAE;IACZ,IAAI,CAACV,8BAAmB,CAACC,IAAI,CAACF,GAAG,CAACW,IAAI,CAAC,EAAE;MACvC,MAAM,IAAI7B,SAAS,CAAC,wBAAwB,CAAC;IAC/C;IAEAD,GAAG,IAAI,SAAS,GAAGmB,GAAG,CAACW,IAAI;EAC7B;EAEA,IAAIX,GAAG,CAACY,OAAO,EAAE;IACf,MAAMA,OAAO,GAAGZ,GAAG,CAACY,OAAO;IAE3B,IAAI,CAACvC,MAAM,CAACuC,OAAO,CAAC,IAAIN,KAAK,CAACM,OAAO,CAACC,OAAO,EAAE,CAAC,EAAE;MAChD,MAAM,IAAI/B,SAAS,CAAC,2BAA2B,CAAC;IAClD;IAEAD,GAAG,IAAI,YAAY,GAAG+B,OAAO,CAACE,WAAW,EAAE;EAC7C;EAEA,IAAId,GAAG,CAACe,QAAQ,EAAE;IAChBlC,GAAG,IAAI,YAAY;EACrB;EAEA,IAAImB,GAAG,CAACgB,MAAM,EAAE;IACdnC,GAAG,IAAI,UAAU;EACnB;EAEA,IAAImB,GAAG,CAACiB,QAAQ,EAAE;IAChB;IACA,MAAMA,QAAQ,GAAG,OAAOjB,GAAG,CAACiB,QAAQ,KAAK,QAAQ,GAAGjB,GAAG,CAACiB,QAAQ,CAACC,WAAW,EAAE,GAAGlB,GAAG,CAACiB,QAAQ;IAE7F,QAAQA,QAAQ;MACd,KAAK,KAAK;QACRpC,GAAG,IAAI,gBAAgB;QACvB;MACF,KAAK,QAAQ;QACXA,GAAG,IAAI,mBAAmB;QAC1B;MACF,KAAK,MAAM;QACTA,GAAG,IAAI,iBAAiB;QACxB;MACF;QACE,MAAM,IAAIC,SAAS,CAAC,4BAA4B,CAAC;IAAC;EAExD;EAEA,IAAIkB,GAAG,CAACmB,QAAQ,EAAE;IAChB,MAAMA,QAAQ,GAAG,OAAOnB,GAAG,CAACmB,QAAQ,KAAK,QAAQ,GAAGnB,GAAG,CAACmB,QAAQ,CAACD,WAAW,EAAE,GAAGlB,GAAG,CAACmB,QAAQ;IAE7F,QAAQA,QAAQ;MACd,KAAK,IAAI;QACPtC,GAAG,IAAI,mBAAmB;QAC1B;MACF,KAAK,KAAK;QACRA,GAAG,IAAI,gBAAgB;QACvB;MACF,KAAK,QAAQ;QACXA,GAAG,IAAI,mBAAmB;QAC1B;MACF,KAAK,MAAM;QACTA,GAAG,IAAI,iBAAiB;QACxB;MACF;QACE,MAAM,IAAIC,SAAS,CAAC,4BAA4B,CAAC;IAAC;EAExD;EAEA,OAAOD,GAAG;AACZ;AAAC,eAEc;EACbgB,SAAS;EACTjB;AACF,CAAC;AAAA"}

package/utils/cookies/types.d.ts

@@ -0,0 +1,31 @@
+/// <reference types="node" />
+import { IncomingMessage, ServerResponse } from 'http';
+export type RequestType = IncomingMessage | Request;
+export type ResponseType = ServerResponse;
+export interface CreateCookieOptions extends Pick<CookieSerializeOptions, 'domain' | 'httpOnly' | 'path'> {
+    cookieName?: string;
+    value: string;
+    secure: boolean;
+    expires: Date;
+    silent?: boolean;
+}
+export interface RemoveCookiesOptions {
+    cookieNames?: string[];
+    isSecured: boolean;
+    cookieDomain: string;
+    res: ResponseType;
+    req?: RequestType;
+}
+/**
+ * Cookie serialization options
+ */
+export interface CookieSerializeOptions {
+    domain?: string | undefined;
+    expires?: Date | undefined;
+    httpOnly?: boolean | undefined;
+    maxAge?: number | undefined;
+    path?: string | undefined;
+    priority?: 'low' | 'medium' | 'high' | undefined;
+    sameSite?: true | false | 'lax' | 'strict' | 'none' | undefined;
+    secure?: boolean | undefined;
+}

package/utils/cookies/types.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=types.js.map

package/utils/cookies/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","names":[],"sources":["../../../../../packages/nextjs/src/utils/cookies/types.ts"],"sourcesContent":["import { IncomingMessage, ServerResponse } from 'http';\n\nexport type RequestType = IncomingMessage | Request;\nexport type ResponseType = ServerResponse;\n\nexport interface CreateCookieOptions extends Pick<CookieSerializeOptions, 'domain' | 'httpOnly' | 'path'> {\n  cookieName?: string;\n  value: string;\n  secure: boolean;\n  expires: Date;\n  silent?: boolean;\n}\n\nexport interface RemoveCookiesOptions {\n  cookieNames?: string[];\n  isSecured: boolean;\n  cookieDomain: string;\n  res: ResponseType;\n  req?: RequestType;\n}\n\n/**\n * Cookie serialization options\n */\nexport interface CookieSerializeOptions {\n  domain?: string | undefined;\n  expires?: Date | undefined;\n  httpOnly?: boolean | undefined;\n  maxAge?: number | undefined;\n  path?: string | undefined;\n  priority?: 'low' | 'medium' | 'high' | undefined;\n  sameSite?: true | false | 'lax' | 'strict' | 'none' | undefined;\n  secure?: boolean | undefined;\n}\n"],"mappings":""}

package/utils/createSession/index.d.ts

@@ -0,0 +1,2 @@
+import type { EncryptionUtils, FronteggNextJSSession } from '../../types';
+export default function createSession(cookie: string | undefined, encryption: EncryptionUtils): Promise<FronteggNextJSSession | undefined>;

package/utils/createSession/index.js

@@ -0,0 +1,51 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = createSession;
+var _jwt = _interopRequireDefault(require("../jwt"));
+var _fronteggLogger = _interopRequireDefault(require("../fronteggLogger"));
+async function createSession(cookie, encryption) {
+  const logger = _fronteggLogger.default.child({
+    tag: 'SessionCreator.createSession'
+  });
+  logger.info('Creating new session');
+  try {
+    if (!cookie) {
+      logger.info('no cookies');
+      return undefined;
+    }
+    logger.debug('decrypting Session cookie');
+    const tokens = await encryption.unsealTokens(cookie);
+    if (!(tokens != null && tokens.accessToken)) {
+      logger.info('no accessToken in session');
+      return undefined;
+    }
+    const {
+      accessToken,
+      refreshToken
+    } = tokens;
+    logger.debug('Going to verify accessToken');
+    const {
+      payload
+    } = await _jwt.default.verify(accessToken);
+    logger.debug('Access token verified successfully');
+    const session = {
+      accessToken,
+      user: payload,
+      refreshToken
+    };
+    logger.debug('Check if access token will expire soon');
+    if (session.user.exp * 1000 < Date.now()) {
+      return undefined;
+    }
+    logger.info('Successfully create session object');
+    return session;
+  } catch (e) {
+    logger.error('Failed to create session', e);
+    return undefined;
+  }
+}
+//# sourceMappingURL=index.js.map

package/utils/createSession/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["createSession","cookie","encryption","logger","fronteggLogger","child","tag","info","undefined","debug","tokens","unsealTokens","accessToken","refreshToken","payload","JwtManager","verify","session","user","exp","Date","now","e","error"],"sources":["../../../../../packages/nextjs/src/utils/createSession/index.ts"],"sourcesContent":["import JwtManager from '../jwt';\nimport type { EncryptionUtils, FronteggNextJSSession } from '../../types';\nimport fronteggLogger from '../fronteggLogger';\n\nexport default async function createSession(\n  cookie: string | undefined,\n  encryption: EncryptionUtils\n): Promise<FronteggNextJSSession | undefined> {\n  const logger = fronteggLogger.child({ tag: 'SessionCreator.createSession' });\n  logger.info('Creating new session');\n  try {\n    if (!cookie) {\n      logger.info('no cookies');\n      return undefined;\n    }\n\n    logger.debug('decrypting Session cookie');\n    const tokens = await encryption.unsealTokens(cookie);\n    if (!tokens?.accessToken) {\n      logger.info('no accessToken in session');\n      return undefined;\n    }\n    const { accessToken, refreshToken } = tokens;\n\n    logger.debug('Going to verify accessToken');\n    const { payload }: any = await JwtManager.verify(accessToken);\n\n    logger.debug('Access token verified successfully');\n    const session: FronteggNextJSSession = {\n      accessToken,\n      user: payload,\n      refreshToken,\n    };\n\n    logger.debug('Check if access token will expire soon');\n    if (session.user.exp * 1000 < Date.now()) {\n      return undefined;\n    }\n\n    logger.info('Successfully create session object');\n    return session;\n  } catch (e) {\n    logger.error('Failed to create session', e);\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;AAAA;AAEA;AAEe,eAAeA,aAAa,CACzCC,MAA0B,EAC1BC,UAA2B,EACiB;EAC5C,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA+B,CAAC,CAAC;EAC5EH,MAAM,CAACI,IAAI,CAAC,sBAAsB,CAAC;EACnC,IAAI;IACF,IAAI,CAACN,MAAM,EAAE;MACXE,MAAM,CAACI,IAAI,CAAC,YAAY,CAAC;MACzB,OAAOC,SAAS;IAClB;IAEAL,MAAM,CAACM,KAAK,CAAC,2BAA2B,CAAC;IACzC,MAAMC,MAAM,GAAG,MAAMR,UAAU,CAACS,YAAY,CAACV,MAAM,CAAC;IACpD,IAAI,EAACS,MAAM,YAANA,MAAM,CAAEE,WAAW,GAAE;MACxBT,MAAM,CAACI,IAAI,CAAC,2BAA2B,CAAC;MACxC,OAAOC,SAAS;IAClB;IACA,MAAM;MAAEI,WAAW;MAAEC;IAAa,CAAC,GAAGH,MAAM;IAE5CP,MAAM,CAACM,KAAK,CAAC,6BAA6B,CAAC;IAC3C,MAAM;MAAEK;IAAa,CAAC,GAAG,MAAMC,YAAU,CAACC,MAAM,CAACJ,WAAW,CAAC;IAE7DT,MAAM,CAACM,KAAK,CAAC,oCAAoC,CAAC;IAClD,MAAMQ,OAA8B,GAAG;MACrCL,WAAW;MACXM,IAAI,EAAEJ,OAAO;MACbD;IACF,CAAC;IAEDV,MAAM,CAACM,KAAK,CAAC,wCAAwC,CAAC;IACtD,IAAIQ,OAAO,CAACC,IAAI,CAACC,GAAG,GAAG,IAAI,GAAGC,IAAI,CAACC,GAAG,EAAE,EAAE;MACxC,OAAOb,SAAS;IAClB;IAEAL,MAAM,CAACI,IAAI,CAAC,oCAAoC,CAAC;IACjD,OAAOU,OAAO;EAChB,CAAC,CAAC,OAAOK,CAAC,EAAE;IACVnB,MAAM,CAACoB,KAAK,CAAC,0BAA0B,EAAED,CAAC,CAAC;IAC3C,OAAOd,SAAS;EAClB;AACF"}

package/utils/createSession/package.json

@@ -0,0 +1,6 @@
+{
+  "sideEffects": false,
+  "module": "./index.js",
+  "main": "./index.js",
+  "types": "./index.d.ts"
+}

package/utils/encryption/index.d.ts

@@ -0,0 +1,3 @@
+import type { EncryptionUtils } from '../../types';
+declare const encryptionUtils: EncryptionUtils;
+export default encryptionUtils;

package/utils/encryption/index.js

@@ -0,0 +1,37 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+var _ironSession = require("iron-session");
+var _config = _interopRequireDefault(require("../../config"));
+// noinspection DuplicatedCode
+// duplicated code for standard iron-session and iron-session/edge
+
+/**
+ * IMPORTANT NOTE:
+ * This utils can be used only in server/client runtime, for edge runtime use the ./utils/encryption-edge
+ **/
+
+const unsealTokens = async data => {
+  const jwtData = await (0, _ironSession.unsealData)(data, {
+    password: _config.default.password
+  });
+  return JSON.parse(jwtData);
+};
+const sealTokens = async (tokens, ttl) => {
+  const dataToSeal = JSON.stringify(tokens);
+  return (0, _ironSession.sealData)(dataToSeal, {
+    password: _config.default.password,
+    ttl
+  });
+};
+const encryptionUtils = {
+  unsealTokens,
+  sealTokens
+};
+var _default = encryptionUtils;
+exports.default = _default;
+//# sourceMappingURL=index.js.map

package/utils/encryption/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["unsealTokens","data","jwtData","unsealData","password","config","JSON","parse","sealTokens","tokens","ttl","dataToSeal","stringify","sealData","encryptionUtils"],"sources":["../../../../../packages/nextjs/src/utils/encryption/index.ts"],"sourcesContent":["// noinspection DuplicatedCode\n// duplicated code for standard iron-session and iron-session/edge\n\nimport { unsealData, sealData } from 'iron-session';\nimport config from '../../config';\nimport type { EncryptionUtils, FronteggUserTokens } from '../../types';\n\n/**\n * IMPORTANT NOTE:\n * This utils can be used only in server/client runtime, for edge runtime use the ./utils/encryption-edge\n **/\n\nconst unsealTokens = async (data: string): Promise<FronteggUserTokens | undefined> => {\n  const jwtData: string = await unsealData(data, {\n    password: config.password,\n  });\n  return JSON.parse(jwtData);\n};\n\nconst sealTokens = async (tokens: FronteggUserTokens, ttl: number): Promise<string> => {\n  const dataToSeal = JSON.stringify(tokens);\n  return sealData(dataToSeal, {\n    password: config.password,\n    ttl,\n  });\n};\n\nconst encryptionUtils: EncryptionUtils = {\n  unsealTokens,\n  sealTokens,\n};\n\nexport default encryptionUtils;\n"],"mappings":";;;;;;;AAGA;AACA;AAJA;AACA;;AAMA;AACA;AACA;AACA;;AAEA,MAAMA,YAAY,GAAG,MAAOC,IAAY,IAA8C;EACpF,MAAMC,OAAe,GAAG,MAAM,IAAAC,uBAAU,EAACF,IAAI,EAAE;IAC7CG,QAAQ,EAAEC,eAAM,CAACD;EACnB,CAAC,CAAC;EACF,OAAOE,IAAI,CAACC,KAAK,CAACL,OAAO,CAAC;AAC5B,CAAC;AAED,MAAMM,UAAU,GAAG,OAAOC,MAA0B,EAAEC,GAAW,KAAsB;EACrF,MAAMC,UAAU,GAAGL,IAAI,CAACM,SAAS,CAACH,MAAM,CAAC;EACzC,OAAO,IAAAI,qBAAQ,EAACF,UAAU,EAAE;IAC1BP,QAAQ,EAAEC,eAAM,CAACD,QAAQ;IACzBM;EACF,CAAC,CAAC;AACJ,CAAC;AAED,MAAMI,eAAgC,GAAG;EACvCd,YAAY;EACZQ;AACF,CAAC;AAAC,eAEaM,eAAe;AAAA"}