@frontegg/nextjs 6.7.3-alpha.3385017971 → 6.7.3-alpha.3417849294

package/helpers.d.ts

@@ -1,11 +1,24 @@
 /// <reference types="node" />
 import { ServerResponse } from 'http';
+import { CookieSerializeOptions } from 'cookie';
 import { NextPageContext } from 'next/dist/shared/lib/utils';
 import { FronteggNextJSSession } from './types';
 export declare function refreshToken(ctx: NextPageContext): Promise<FronteggNextJSSession | null>;
-export declare function addToCookies(cookieValue: string, res: ServerResponse): void;
+declare type CreateCookieArguments = {
+    cookieName?: string;
+    session: string;
+    expires: CookieSerializeOptions['expires'];
+    isSecured: CookieSerializeOptions['secure'];
+    cookieDomain?: CookieSerializeOptions['domain'];
+    httpOnly?: CookieSerializeOptions['httpOnly'];
+    path?: CookieSerializeOptions['path'];
+};
+export declare function createCookie({ cookieName, session, expires, isSecured, cookieDomain, httpOnly, path }: CreateCookieArguments): string[];
+export declare function parseCookie(cookieStr: string): string | undefined;
+export declare function addToCookies(newCookies: string[], res: ServerResponse): void;
 export declare function removeCookies(cookieName: string, isSecured: boolean, cookieDomain: string, res: ServerResponse): void;
 export declare function compress(input: string): Promise<string>;
 export declare function uncompress(input: string): Promise<string>;
 export declare function createSessionFromAccessToken(output: string): Promise<[string, any] | []>;
 export declare const modifySetCookieIfUnsecure: (setCookieValue: string[] | undefined, isSecured: boolean) => string[] | undefined;
+export {};

package/index.cjs.js

@@ -1375,7 +1375,7 @@ function getSession(req) {
           case 0:
             _context.prev = 0;
             cookieStr = "credentials" in req ? req.headers.get("cookie") || "" : req.headers.cookie || "";
-            sealFromCookies = cookie__default["default"].parse(cookieStr)[fronteggConfig.cookieName];
+            sealFromCookies = parseCookie(cookieStr);
 
             if (sealFromCookies) {
               _context.next = 5;
@@ -1519,7 +1519,7 @@ function refreshToken(ctx) {
   var _a;
 
   return __awaiter(this, void 0, void 0, /*#__PURE__*/regenerator.mark(function _callee() {
-    var request, session, headers, cookies, refreshTokenKey, cookieKey, response, data, rewriteCookieDomainConfig, cookieHeader, newSetCookie, _yield$createSessionF, _yield$createSessionF2, _session, decodedJwt, isSecured, cookieValue;
+    var request, session, headers, cookies, refreshTokenKey, cookieKey, response, _newSetCookie, data, rewriteCookieDomainConfig, cookieHeader, newSetCookie, _yield$createSessionF, _yield$createSessionF2, _session, decodedJwt, isSecured, cookieValue;
 
     return regenerator.wrap(function _callee$(_context) {
       while (1) {
@@ -1567,7 +1567,7 @@ function refreshToken(ctx) {
             });
 
             if (!cookieKey) {
-              _context.next = 46;
+              _context.next = 45;
               break;
             }
 
@@ -1591,7 +1591,7 @@ function refreshToken(ctx) {
             response = _context.sent;
 
             if (!response.ok) {
-              _context.next = 46;
+              _context.next = 45;
               break;
             }
 
@@ -1622,48 +1622,112 @@ function refreshToken(ctx) {
 
           case 37:
             isSecured = new URL(fronteggConfig.appUrl).protocol === 'https:';
-            cookieValue = cookie__default["default"].serialize(fronteggConfig.cookieName, _session, {
+            cookieValue = createCookie({
+              session: _session,
               expires: new Date(decodedJwt.exp * 1000),
-              httpOnly: true,
-              domain: fronteggConfig.cookieDomain,
-              path: '/',
-              sameSite: isSecured ? 'none' : undefined,
-              secure: isSecured
+              isSecured: isSecured
             });
 
-            if (cookieValue.length > 4096) {
-              console.error("@frontegg/nextjs: Cookie length is too big ".concat(cookieValue.length, ", browsers will refuse it. Try to remove some data."));
-            }
-
             if (typeof newSetCookie === 'string') {
               newSetCookie = [newSetCookie];
             }
 
-            newSetCookie.push(cookieValue);
+            (_newSetCookie = newSetCookie).push.apply(_newSetCookie, _toConsumableArray(cookieValue));
+
             (_a = ctx.res) === null || _a === void 0 ? void 0 : _a.setHeader('set-cookie', newSetCookie);
             return _context.abrupt("return", {
               accessToken: JSON.parse(data).accessToken,
               user: decodedJwt
             });
 
-          case 46:
+          case 45:
             return _context.abrupt("return", null);
 
-          case 49:
-            _context.prev = 49;
+          case 48:
+            _context.prev = 48;
             _context.t1 = _context["catch"](0);
             console.log(_context.t1);
             return _context.abrupt("return", null);
 
-          case 53:
+          case 52:
           case "end":
             return _context.stop();
         }
       }
-    }, _callee, null, [[0, 49], [4, 12]]);
+    }, _callee, null, [[0, 48], [4, 12]]);
   }));
 }
-function addToCookies(cookieValue, res) {
+var COOKIE_MAX_LENGTH = 4096;
+function createCookie(_ref) {
+  var _ref$cookieName = _ref.cookieName,
+      cookieName = _ref$cookieName === void 0 ? fronteggConfig.cookieName : _ref$cookieName,
+      session = _ref.session,
+      expires = _ref.expires,
+      isSecured = _ref.isSecured,
+      _ref$cookieDomain = _ref.cookieDomain,
+      cookieDomain = _ref$cookieDomain === void 0 ? fronteggConfig.cookieDomain : _ref$cookieDomain,
+      _ref$httpOnly = _ref.httpOnly,
+      httpOnly = _ref$httpOnly === void 0 ? true : _ref$httpOnly,
+      _ref$path = _ref.path,
+      path = _ref$path === void 0 ? '/' : _ref$path;
+  var options = {
+    expires: expires,
+    httpOnly: httpOnly,
+    domain: cookieDomain,
+    path: path,
+    sameSite: isSecured ? 'none' : undefined,
+    secure: isSecured
+  };
+  var cookieValue = cookie__default["default"].serialize(cookieName, session, options);
+
+  if (cookieValue.length < COOKIE_MAX_LENGTH) {
+    return [cookieValue];
+  }
+
+  return createSplitCookie(cookieName, session, options, cookieValue.length);
+}
+
+function createSplitCookie(cookieName, session, options, cookieLength) {
+  var numberOfCookies = Math.ceil(cookieLength / COOKIE_MAX_LENGTH);
+  var splitSession = chunkString(session, numberOfCookies);
+  var allCookies = [];
+
+  for (var i = 1; i <= numberOfCookies; i++) {
+    allCookies.push(cookie__default["default"].serialize("".concat(cookieName, "-").concat(i), splitSession[i - 1], options));
+  }
+
+  return allCookies;
+}
+
+function chunkString(str, numChunks) {
+  var chunkSize = Math.ceil(str.length / numChunks);
+  var chunks = [];
+
+  for (var i = 0; i < numChunks; i + chunkSize) {
+    var limit = i + chunkSize;
+    chunks.push(str.substring(i, limit < str.length ? limit : str.length));
+  }
+
+  return chunks;
+}
+
+function parseCookie(cookieStr) {
+  var sealFromCookies = '';
+
+  if (cookie__default["default"].parse(cookieStr)[fronteggConfig.cookieName]) {
+    sealFromCookies = cookie__default["default"].parse(cookieStr)[fronteggConfig.cookieName];
+  } else {
+    var i = 1;
+
+    while (cookie__default["default"].parse(cookieStr)["".concat(fronteggConfig.cookieName, "-").concat(i)]) {
+      sealFromCookies += cookie__default["default"].parse(cookieStr)["".concat(fronteggConfig.cookieName, "-").concat(i)];
+      i++;
+    }
+  }
+
+  return sealFromCookies !== '' ? sealFromCookies : undefined;
+}
+function addToCookies(newCookies, res) {
   var _a;
 
   var existingSetCookie = (_a = res.getHeader('set-cookie')) !== null && _a !== void 0 ? _a : [];
@@ -1672,18 +1736,17 @@ function addToCookies(cookieValue, res) {
     existingSetCookie = [existingSetCookie];
   }
 
-  res.setHeader('set-cookie', [].concat(_toConsumableArray(existingSetCookie), [cookieValue]));
+  res.setHeader('set-cookie', [].concat(_toConsumableArray(existingSetCookie), _toConsumableArray(newCookies)));
 }
 function removeCookies(cookieName, isSecured, cookieDomain, res) {
   var _a;
 
-  var cookieValue = cookie__default["default"].serialize(cookieName, '', {
+  var cookieValue = createCookie({
+    cookieName: cookieName,
+    session: '',
     expires: new Date(),
-    httpOnly: true,
-    domain: cookieDomain,
-    path: '/',
-    sameSite: isSecured ? 'none' : undefined,
-    secure: isSecured
+    isSecured: isSecured,
+    cookieDomain: cookieDomain
   });
   var existingSetCookie = (_a = res.getHeader('set-cookie')) !== null && _a !== void 0 ? _a : [];
 
@@ -1691,7 +1754,7 @@ function removeCookies(cookieName, isSecured, cookieDomain, res) {
     existingSetCookie = [existingSetCookie];
   }
 
-  res.setHeader('set-cookie', [].concat(_toConsumableArray(existingSetCookie), [cookieValue]));
+  res.setHeader('set-cookie', [].concat(_toConsumableArray(existingSetCookie), _toConsumableArray(cookieValue)));
 }
 function compress(input) {
   return new Promise(function (resolve, reject) {
@@ -2093,19 +2156,11 @@ function fronteggMiddleware(req, res) {
                   decodedJwt = _yield$createSessionF2[1];
 
                   if (session) {
-                    cookieValue = cookie__default["default"].serialize(fronteggConfig.cookieName, session, {
+                    cookieValue = createCookie({
+                      session: session,
                       expires: new Date(decodedJwt.exp * 1000),
-                      httpOnly: true,
-                      domain: fronteggConfig.cookieDomain,
-                      path: '/',
-                      sameSite: isSecured ? 'none' : undefined,
-                      secure: isSecured
+                      isSecured: isSecured
                     });
-
-                    if (cookieValue.length > 4096) {
-                      console.error("@frontegg/nextjs: Cookie length is too big ".concat(cookieValue.length, ", browsers will refuse it. Try to remove some data."));
-                    }
-
                     addToCookies(cookieValue, serverResponse);
                   }
 

package/index.esm.js

@@ -1349,7 +1349,7 @@ function getSession(req) {
           case 0:
             _context.prev = 0;
             cookieStr = "credentials" in req ? req.headers.get("cookie") || "" : req.headers.cookie || "";
-            sealFromCookies = cookie.parse(cookieStr)[fronteggConfig.cookieName];
+            sealFromCookies = parseCookie(cookieStr);
 
             if (sealFromCookies) {
               _context.next = 5;
@@ -1493,7 +1493,7 @@ function refreshToken(ctx) {
   var _a;
 
   return __awaiter(this, void 0, void 0, /*#__PURE__*/regenerator.mark(function _callee() {
-    var request, session, headers, cookies, refreshTokenKey, cookieKey, response, data, rewriteCookieDomainConfig, cookieHeader, newSetCookie, _yield$createSessionF, _yield$createSessionF2, _session, decodedJwt, isSecured, cookieValue;
+    var request, session, headers, cookies, refreshTokenKey, cookieKey, response, _newSetCookie, data, rewriteCookieDomainConfig, cookieHeader, newSetCookie, _yield$createSessionF, _yield$createSessionF2, _session, decodedJwt, isSecured, cookieValue;
 
     return regenerator.wrap(function _callee$(_context) {
       while (1) {
@@ -1541,7 +1541,7 @@ function refreshToken(ctx) {
             });
 
             if (!cookieKey) {
-              _context.next = 46;
+              _context.next = 45;
               break;
             }
 
@@ -1565,7 +1565,7 @@ function refreshToken(ctx) {
             response = _context.sent;
 
             if (!response.ok) {
-              _context.next = 46;
+              _context.next = 45;
               break;
             }
 
@@ -1596,48 +1596,112 @@ function refreshToken(ctx) {
 
           case 37:
             isSecured = new URL(fronteggConfig.appUrl).protocol === 'https:';
-            cookieValue = cookie.serialize(fronteggConfig.cookieName, _session, {
+            cookieValue = createCookie({
+              session: _session,
               expires: new Date(decodedJwt.exp * 1000),
-              httpOnly: true,
-              domain: fronteggConfig.cookieDomain,
-              path: '/',
-              sameSite: isSecured ? 'none' : undefined,
-              secure: isSecured
+              isSecured: isSecured
             });
 
-            if (cookieValue.length > 4096) {
-              console.error("@frontegg/nextjs: Cookie length is too big ".concat(cookieValue.length, ", browsers will refuse it. Try to remove some data."));
-            }
-
             if (typeof newSetCookie === 'string') {
               newSetCookie = [newSetCookie];
             }
 
-            newSetCookie.push(cookieValue);
+            (_newSetCookie = newSetCookie).push.apply(_newSetCookie, _toConsumableArray(cookieValue));
+
             (_a = ctx.res) === null || _a === void 0 ? void 0 : _a.setHeader('set-cookie', newSetCookie);
             return _context.abrupt("return", {
               accessToken: JSON.parse(data).accessToken,
               user: decodedJwt
             });
 
-          case 46:
+          case 45:
             return _context.abrupt("return", null);
 
-          case 49:
-            _context.prev = 49;
+          case 48:
+            _context.prev = 48;
             _context.t1 = _context["catch"](0);
             console.log(_context.t1);
             return _context.abrupt("return", null);
 
-          case 53:
+          case 52:
           case "end":
             return _context.stop();
         }
       }
-    }, _callee, null, [[0, 49], [4, 12]]);
+    }, _callee, null, [[0, 48], [4, 12]]);
   }));
 }
-function addToCookies(cookieValue, res) {
+var COOKIE_MAX_LENGTH = 4096;
+function createCookie(_ref) {
+  var _ref$cookieName = _ref.cookieName,
+      cookieName = _ref$cookieName === void 0 ? fronteggConfig.cookieName : _ref$cookieName,
+      session = _ref.session,
+      expires = _ref.expires,
+      isSecured = _ref.isSecured,
+      _ref$cookieDomain = _ref.cookieDomain,
+      cookieDomain = _ref$cookieDomain === void 0 ? fronteggConfig.cookieDomain : _ref$cookieDomain,
+      _ref$httpOnly = _ref.httpOnly,
+      httpOnly = _ref$httpOnly === void 0 ? true : _ref$httpOnly,
+      _ref$path = _ref.path,
+      path = _ref$path === void 0 ? '/' : _ref$path;
+  var options = {
+    expires: expires,
+    httpOnly: httpOnly,
+    domain: cookieDomain,
+    path: path,
+    sameSite: isSecured ? 'none' : undefined,
+    secure: isSecured
+  };
+  var cookieValue = cookie.serialize(cookieName, session, options);
+
+  if (cookieValue.length < COOKIE_MAX_LENGTH) {
+    return [cookieValue];
+  }
+
+  return createSplitCookie(cookieName, session, options, cookieValue.length);
+}
+
+function createSplitCookie(cookieName, session, options, cookieLength) {
+  var numberOfCookies = Math.ceil(cookieLength / COOKIE_MAX_LENGTH);
+  var splitSession = chunkString(session, numberOfCookies);
+  var allCookies = [];
+
+  for (var i = 1; i <= numberOfCookies; i++) {
+    allCookies.push(cookie.serialize("".concat(cookieName, "-").concat(i), splitSession[i - 1], options));
+  }
+
+  return allCookies;
+}
+
+function chunkString(str, numChunks) {
+  var chunkSize = Math.ceil(str.length / numChunks);
+  var chunks = [];
+
+  for (var i = 0; i < numChunks; i + chunkSize) {
+    var limit = i + chunkSize;
+    chunks.push(str.substring(i, limit < str.length ? limit : str.length));
+  }
+
+  return chunks;
+}
+
+function parseCookie(cookieStr) {
+  var sealFromCookies = '';
+
+  if (cookie.parse(cookieStr)[fronteggConfig.cookieName]) {
+    sealFromCookies = cookie.parse(cookieStr)[fronteggConfig.cookieName];
+  } else {
+    var i = 1;
+
+    while (cookie.parse(cookieStr)["".concat(fronteggConfig.cookieName, "-").concat(i)]) {
+      sealFromCookies += cookie.parse(cookieStr)["".concat(fronteggConfig.cookieName, "-").concat(i)];
+      i++;
+    }
+  }
+
+  return sealFromCookies !== '' ? sealFromCookies : undefined;
+}
+function addToCookies(newCookies, res) {
   var _a;
 
   var existingSetCookie = (_a = res.getHeader('set-cookie')) !== null && _a !== void 0 ? _a : [];
@@ -1646,18 +1710,17 @@ function addToCookies(cookieValue, res) {
     existingSetCookie = [existingSetCookie];
   }
 
-  res.setHeader('set-cookie', [].concat(_toConsumableArray(existingSetCookie), [cookieValue]));
+  res.setHeader('set-cookie', [].concat(_toConsumableArray(existingSetCookie), _toConsumableArray(newCookies)));
 }
 function removeCookies(cookieName, isSecured, cookieDomain, res) {
   var _a;
 
-  var cookieValue = cookie.serialize(cookieName, '', {
+  var cookieValue = createCookie({
+    cookieName: cookieName,
+    session: '',
     expires: new Date(),
-    httpOnly: true,
-    domain: cookieDomain,
-    path: '/',
-    sameSite: isSecured ? 'none' : undefined,
-    secure: isSecured
+    isSecured: isSecured,
+    cookieDomain: cookieDomain
   });
   var existingSetCookie = (_a = res.getHeader('set-cookie')) !== null && _a !== void 0 ? _a : [];
 
@@ -1665,7 +1728,7 @@ function removeCookies(cookieName, isSecured, cookieDomain, res) {
     existingSetCookie = [existingSetCookie];
   }
 
-  res.setHeader('set-cookie', [].concat(_toConsumableArray(existingSetCookie), [cookieValue]));
+  res.setHeader('set-cookie', [].concat(_toConsumableArray(existingSetCookie), _toConsumableArray(cookieValue)));
 }
 function compress(input) {
   return new Promise(function (resolve, reject) {
@@ -2067,19 +2130,11 @@ function fronteggMiddleware(req, res) {
                   decodedJwt = _yield$createSessionF2[1];
 
                   if (session) {
-                    cookieValue = cookie.serialize(fronteggConfig.cookieName, session, {
+                    cookieValue = createCookie({
+                      session: session,
                       expires: new Date(decodedJwt.exp * 1000),
-                      httpOnly: true,
-                      domain: fronteggConfig.cookieDomain,
-                      path: '/',
-                      sameSite: isSecured ? 'none' : undefined,
-                      secure: isSecured
+                      isSecured: isSecured
                     });
-
-                    if (cookieValue.length > 4096) {
-                      console.error("@frontegg/nextjs: Cookie length is too big ".concat(cookieValue.length, ", browsers will refuse it. Try to remove some data."));
-                    }
-
                     addToCookies(cookieValue, serverResponse);
                   }
 

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@frontegg/nextjs",
-  "version": "6.7.3-alpha.3385017971",
+  "version": "6.7.3-alpha.3417849294",
   "dependencies": {
-    "@frontegg/js": "6.36.0-alpha.4",
-    "@frontegg/react-hooks": "6.36.0-alpha.4",
+    "@frontegg/js": "6.36.0-alpha.5",
+    "@frontegg/react-hooks": "6.36.0-alpha.5",
     "jose": "^4.8.0",
     "iron-session": "^6.2.1",
     "http-proxy": "^1.18.1",