@frontegg/nextjs 9.0.3 → 9.0.4-alpha.11358351428

package/README.md

@@ -126,8 +126,14 @@ FRONTEGG_CLIENT_SECRET='{YOUR_APPLICATION_CLIENT_SECRET}'
 #    node -e "console.log(crypto.randomBytes(32).toString('hex'))"
 FRONTEGG_ENCRYPTION_PASSWORD='{SESSION_ENCRYPTION_PASSWORD}'
 
-# The stateless session cookie name
-FRONTEGG_COOKIE_NAME='fe_session'
+# The stateless cookie name for storing the encrypted JWT
+# value as session cookies for supporting getServerSideProps and ServerComponents
+FRONTEGG_COOKIE_NAME='FRONTEGG_COOKIE_NAME'
+
+# Specifies the domain for storing the encrypted JWT as session cookies, 
+# enabling support for `getServerSideProps` and `ServerComponents`.  
+# If not provided, the domain will be the same as the `APP_URL` environment variable.
+FRONTEGG_COOKIE_DOMAIN='FRONTEGG_COOKIE_DOMAIN'
 
 # The JWT public key generated by Frontegg to verify JWT before creating a session.
 # Retrieve it by visiting: https://[YOUR_FRONTEGG_DOMAIN]/.well-known/jwks.json.

package/api/utils.js

@@ -66,6 +66,7 @@ function removeInvalidHeaders(headers) {
  * These header is used to identify the tenant for login per tenant feature
  */
 const CUSTOM_LOGIN_HEADER = 'frontegg-login-alias';
+
 /**
  * Build fetch request headers, remove invalid http headers
  * @param headers - Incoming request headers
@@ -75,9 +76,18 @@ function buildRequestHeaders(headers) {
   let cookie = headers['cookie'];
   if (cookie != null && typeof cookie === 'string') {
     cookie = cookie.replace(/fe_session-[^=]*=[^;]*$/, '').replace(/fe_session-[^=]*=[^;]*;/, '');
+    if (_config.default.rewriteCookieByAppId && _config.default.appId) {
+      cookie = cookie.replace(`fe_refresh_${_config.default.appId.replace('-', '')}`, `fe_refresh_${_config.default.clientId.replace('-', '')}`);
+    }
   }
   if (cookie != null && typeof cookie === 'object') {
-    cookie = Object.entries(cookie).map(([key, value]) => `${key}=${value}`).join('; ');
+    cookie = Object.entries(cookie).map(([key, value]) => {
+      if (_config.default.rewriteCookieByAppId && _config.default.appId && key === `fe_refresh_${_config.default.appId.replace('-', '')}`) {
+        return `fe_refresh_${_config.default.clientId.replace('-', '')}=${value}`;
+      } else {
+        return `${key}=${value}`;
+      }
+    }).join('; ');
   }
   const preparedHeaders = {
     authorization: headers['authorization'],
@@ -92,6 +102,9 @@ function buildRequestHeaders(headers) {
     'x-frontegg-framework': `next@${_package.default.version}`,
     'x-frontegg-sdk': `@frontegg/nextjs@${_sdkVersion.default.version}`
   };
+  if (headers['frontegg-requested-application-id']) {
+    preparedHeaders['frontegg-requested-application-id'] = headers['frontegg-requested-application-id'];
+  }
   if (headers[CUSTOM_LOGIN_HEADER]) {
     preparedHeaders[CUSTOM_LOGIN_HEADER] = headers[CUSTOM_LOGIN_HEADER];
   }

package/api/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","names":["_config","_interopRequireDefault","require","_sdkVersion","_package","_restApi","_constants","Get","url","credentials","headers","fetch","method","exports","Post","body","removeInvalidHeaders","newHeaders","_extends2","default","Object","keys","forEach","key","val","Array","isArray","headerCharRegex","exec","undefined","length","CUSTOM_LOGIN_HEADER","buildRequestHeaders","cookie","replace","entries","map","value","join","preparedHeaders","authorization","accept","origin","config","baseUrl","nextjsPkg","version","sdkVersion","parseHttpResponse","res","ok","json","isMiddlewarePath","path","isAuthPath","fronteggAuthApiRoutesRegex","find","pathRegex","RegExp","test","isSocialLoginPath","endsWith"],"sources":["../../../../packages/nextjs/src/api/utils.ts"],"sourcesContent":["import config from '../config';\nimport sdkVersion from '../sdkVersion';\nimport nextjsPkg from 'next/package.json';\nimport { fronteggAuthApiRoutesRegex } from '@frontegg/rest-api';\nimport { headerCharRegex } from '../utils/common/constants';\n\ninterface GetRequestOptions {\n  url: string;\n  credentials?: RequestCredentials;\n  headers?: HeadersInit;\n}\n\nexport const Get = ({ url, credentials = 'include', headers }: GetRequestOptions) =>\n  fetch(url, { method: 'GET', credentials, headers });\n\ninterface PostRequestOptions extends GetRequestOptions {\n  body: string;\n}\n\nexport const Post = ({ url, credentials = 'include', headers, body }: PostRequestOptions) =>\n  fetch(url, { method: 'POST', credentials, headers, body });\n\n/**\n * NodeJS 18 start using undici as http request handler,\n * undici http request does not accept invalid headers\n * for more details see:\n * https://github.com/nodejs/undici/blob/2b260c997ad4efe4ed2064b264b4b546a59e7a67/lib/core/request.js#L282\n * @param headers\n */\nexport function removeInvalidHeaders(headers: Record<string, string>) {\n  const newHeaders = { ...headers };\n  Object.keys(newHeaders).forEach((key: string) => {\n    const val: any = headers[key];\n    if (val && typeof val === 'object' && !Array.isArray(val)) {\n      delete newHeaders[key];\n    } else if (headerCharRegex.exec(val) !== null) {\n      delete newHeaders[key];\n    } else if (val === undefined || val === null) {\n      delete newHeaders[key];\n    } else if (key.length === 10 && key === 'connection') {\n      delete newHeaders[key];\n    }\n  });\n  return newHeaders;\n}\n\n/**\n * These header is used to identify the tenant for login per tenant feature\n */\nexport const CUSTOM_LOGIN_HEADER = 'frontegg-login-alias';\n/**\n * Build fetch request headers, remove invalid http headers\n * @param headers - Incoming request headers\n */\nexport function buildRequestHeaders(headers: Record<string, any>): Record<string, string> {\n  let cookie = headers['cookie'];\n  if (cookie != null && typeof cookie === 'string') {\n    cookie = cookie.replace(/fe_session-[^=]*=[^;]*$/, '').replace(/fe_session-[^=]*=[^;]*;/, '');\n  }\n  if (cookie != null && typeof cookie === 'object') {\n    cookie = Object.entries(cookie)\n      .map(([key, value]) => `${key}=${value}`)\n      .join('; ');\n  }\n\n  const preparedHeaders: Record<string, string> = {\n    authorization: headers['authorization'],\n    'accept-encoding': headers['accept-encoding'],\n    'accept-language': headers['accept-language'],\n    accept: headers['accept'],\n    'content-type': 'application/json',\n    origin: config.baseUrl,\n    cookie,\n    'user-agent': headers['user-agent'],\n    'cache-control': headers['cache-control'],\n    'x-frontegg-framework': `next@${nextjsPkg.version}`,\n    'x-frontegg-sdk': `@frontegg/nextjs@${sdkVersion.version}`,\n  };\n\n  if (headers[CUSTOM_LOGIN_HEADER]) {\n    preparedHeaders[CUSTOM_LOGIN_HEADER] = headers[CUSTOM_LOGIN_HEADER];\n  }\n  return removeInvalidHeaders({ ...preparedHeaders });\n}\n\n/**\n * Return parsed json response if http status code = 200\n * @param res\n */\nexport const parseHttpResponse = async <T>(res: Response): Promise<T | undefined> => {\n  if (!res.ok) {\n    return undefined;\n  }\n  return await res.json();\n};\n\n/**\n * Checks if the given path should be forwarded to the Next.js server middleware.\n *\n *\n * @param {string} path - The path to check for authentication API routes.\n * @returns {boolean} Returns true if the path is a frontegg authentication API route or ends with '/postlogin' or '/prelogin'; otherwise, returns false.\n */\nexport function isMiddlewarePath(path: string): boolean {\n  let isAuthPath =\n    fronteggAuthApiRoutesRegex.find((pathRegex) => {\n      if (typeof pathRegex === 'string') {\n        return pathRegex === path;\n      } else {\n        return new RegExp(pathRegex).test(path);\n      }\n    }) != null;\n\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/user\\/sso\\/[^\\/]*\\/postlogin$/g.test(path)\n  // }\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/passwordless\\/[^\\/]*\\/prelogin$/g.test(path)\n  // }\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/[^\\/]*\\/prelogin$/g.test(path)\n  // }\n\n  if (!isAuthPath) {\n    const isSocialLoginPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/user\\/sso\\/default\\/[^\\/]*\\/prelogin$/.test(path);\n    isAuthPath = (path.endsWith('/postlogin') || path.endsWith('/prelogin')) && !isSocialLoginPath;\n  }\n\n  return isAuthPath;\n}\n"],"mappings":";;;;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,WAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,QAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AACA,IAAAI,UAAA,GAAAJ,OAAA;AAQO,MAAMK,GAAG,GAAGA,CAAC;EAAEC,GAAG;EAAEC,WAAW,GAAG,SAAS;EAAEC;AAA2B,CAAC,KAC9EC,KAAK,CAACH,GAAG,EAAE;EAAEI,MAAM,EAAE,KAAK;EAAEH,WAAW;EAAEC;AAAQ,CAAC,CAAC;AAACG,OAAA,CAAAN,GAAA,GAAAA,GAAA;AAM/C,MAAMO,IAAI,GAAGA,CAAC;EAAEN,GAAG;EAAEC,WAAW,GAAG,SAAS;EAAEC,OAAO;EAAEK;AAAyB,CAAC,KACtFJ,KAAK,CAACH,GAAG,EAAE;EAAEI,MAAM,EAAE,MAAM;EAAEH,WAAW;EAAEC,OAAO;EAAEK;AAAK,CAAC,CAAC;;AAE5D;AACA;AACA;AACA;AACA;AACA;AACA;AANAF,OAAA,CAAAC,IAAA,GAAAA,IAAA;AAOO,SAASE,oBAAoBA,CAACN,OAA+B,EAAE;EACpE,MAAMO,UAAU,OAAAC,SAAA,CAAAC,OAAA,MAAQT,OAAO,CAAE;EACjCU,MAAM,CAACC,IAAI,CAACJ,UAAU,CAAC,CAACK,OAAO,CAAEC,GAAW,IAAK;IAC/C,MAAMC,GAAQ,GAAGd,OAAO,CAACa,GAAG,CAAC;IAC7B,IAAIC,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,GAAG,CAAC,EAAE;MACzD,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAII,0BAAe,CAACC,IAAI,CAACJ,GAAG,CAAC,KAAK,IAAI,EAAE;MAC7C,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAIC,GAAG,KAAKK,SAAS,IAAIL,GAAG,KAAK,IAAI,EAAE;MAC5C,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAIA,GAAG,CAACO,MAAM,KAAK,EAAE,IAAIP,GAAG,KAAK,YAAY,EAAE;MACpD,OAAON,UAAU,CAACM,GAAG,CAAC;IACxB;EACF,CAAC,CAAC;EACF,OAAON,UAAU;AACnB;;AAEA;AACA;AACA;AACO,MAAMc,mBAAmB,GAAG,sBAAsB;AACzD;AACA;AACA;AACA;AAHAlB,OAAA,CAAAkB,mBAAA,GAAAA,mBAAA;AAIO,SAASC,mBAAmBA,CAACtB,OAA4B,EAA0B;EACxF,IAAIuB,MAAM,GAAGvB,OAAO,CAAC,QAAQ,CAAC;EAC9B,IAAIuB,MAAM,IAAI,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAChDA,MAAM,GAAGA,MAAM,CAACC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAACA,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC;EAC/F;EACA,IAAID,MAAM,IAAI,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAChDA,MAAM,GAAGb,MAAM,CAACe,OAAO,CAACF,MAAM,CAAC,CAC5BG,GAAG,CAAC,CAAC,CAACb,GAAG,EAAEc,KAAK,CAAC,KAAM,GAAEd,GAAI,IAAGc,KAAM,EAAC,CAAC,CACxCC,IAAI,CAAC,IAAI,CAAC;EACf;EAEA,MAAMC,eAAuC,GAAG;IAC9CC,aAAa,EAAE9B,OAAO,CAAC,eAAe,CAAC;IACvC,iBAAiB,EAAEA,OAAO,CAAC,iBAAiB,CAAC;IAC7C,iBAAiB,EAAEA,OAAO,CAAC,iBAAiB,CAAC;IAC7C+B,MAAM,EAAE/B,OAAO,CAAC,QAAQ,CAAC;IACzB,cAAc,EAAE,kBAAkB;IAClCgC,MAAM,EAAEC,eAAM,CAACC,OAAO;IACtBX,MAAM;IACN,YAAY,EAAEvB,OAAO,CAAC,YAAY,CAAC;IACnC,eAAe,EAAEA,OAAO,CAAC,eAAe,CAAC;IACzC,sBAAsB,EAAG,QAAOmC,gBAAS,CAACC,OAAQ,EAAC;IACnD,gBAAgB,EAAG,oBAAmBC,mBAAU,CAACD,OAAQ;EAC3D,CAAC;EAED,IAAIpC,OAAO,CAACqB,mBAAmB,CAAC,EAAE;IAChCQ,eAAe,CAACR,mBAAmB,CAAC,GAAGrB,OAAO,CAACqB,mBAAmB,CAAC;EACrE;EACA,OAAOf,oBAAoB,KAAAE,SAAA,CAAAC,OAAA,MAAMoB,eAAe,EAAG;AACrD;;AAEA;AACA;AACA;AACA;AACO,MAAMS,iBAAiB,GAAG,MAAUC,GAAa,IAA6B;EACnF,IAAI,CAACA,GAAG,CAACC,EAAE,EAAE;IACX,OAAOrB,SAAS;EAClB;EACA,OAAO,MAAMoB,GAAG,CAACE,IAAI,EAAE;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AANAtC,OAAA,CAAAmC,iBAAA,GAAAA,iBAAA;AAOO,SAASI,gBAAgBA,CAACC,IAAY,EAAW;EACtD,IAAIC,UAAU,GACZC,mCAA0B,CAACC,IAAI,CAAEC,SAAS,IAAK;IAC7C,IAAI,OAAOA,SAAS,KAAK,QAAQ,EAAE;MACjC,OAAOA,SAAS,KAAKJ,IAAI;IAC3B,CAAC,MAAM;MACL,OAAO,IAAIK,MAAM,CAACD,SAAS,CAAC,CAACE,IAAI,CAACN,IAAI,CAAC;IACzC;EACF,CAAC,CAAC,IAAI,IAAI;;EAEZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA,IAAI,CAACC,UAAU,EAAE;IACf,MAAMM,iBAAiB,GAAG,8EAA8E,CAACD,IAAI,CAACN,IAAI,CAAC;IACnHC,UAAU,GAAG,CAACD,IAAI,CAACQ,QAAQ,CAAC,YAAY,CAAC,IAAIR,IAAI,CAACQ,QAAQ,CAAC,WAAW,CAAC,KAAK,CAACD,iBAAiB;EAChG;EAEA,OAAON,UAAU;AACnB"}
+{"version":3,"file":"utils.js","names":["_config","_interopRequireDefault","require","_sdkVersion","_package","_restApi","_constants","Get","url","credentials","headers","fetch","method","exports","Post","body","removeInvalidHeaders","newHeaders","_extends2","default","Object","keys","forEach","key","val","Array","isArray","headerCharRegex","exec","undefined","length","CUSTOM_LOGIN_HEADER","buildRequestHeaders","cookie","replace","config","rewriteCookieByAppId","appId","clientId","entries","map","value","join","preparedHeaders","authorization","accept","origin","baseUrl","nextjsPkg","version","sdkVersion","parseHttpResponse","res","ok","json","isMiddlewarePath","path","isAuthPath","fronteggAuthApiRoutesRegex","find","pathRegex","RegExp","test","isSocialLoginPath","endsWith"],"sources":["../../../../packages/nextjs/src/api/utils.ts"],"sourcesContent":["import config from '../config';\nimport sdkVersion from '../sdkVersion';\nimport nextjsPkg from 'next/package.json';\nimport { fronteggAuthApiRoutesRegex } from '@frontegg/rest-api';\nimport { headerCharRegex } from '../utils/common/constants';\n\ninterface GetRequestOptions {\n  url: string;\n  credentials?: RequestCredentials;\n  headers?: HeadersInit;\n}\n\nexport const Get = ({ url, credentials = 'include', headers }: GetRequestOptions) =>\n  fetch(url, { method: 'GET', credentials, headers });\n\ninterface PostRequestOptions extends GetRequestOptions {\n  body: string;\n}\n\nexport const Post = ({ url, credentials = 'include', headers, body }: PostRequestOptions) =>\n  fetch(url, { method: 'POST', credentials, headers, body });\n\n/**\n * NodeJS 18 start using undici as http request handler,\n * undici http request does not accept invalid headers\n * for more details see:\n * https://github.com/nodejs/undici/blob/2b260c997ad4efe4ed2064b264b4b546a59e7a67/lib/core/request.js#L282\n * @param headers\n */\nexport function removeInvalidHeaders(headers: Record<string, string>) {\n  const newHeaders = { ...headers };\n  Object.keys(newHeaders).forEach((key: string) => {\n    const val: any = headers[key];\n    if (val && typeof val === 'object' && !Array.isArray(val)) {\n      delete newHeaders[key];\n    } else if (headerCharRegex.exec(val) !== null) {\n      delete newHeaders[key];\n    } else if (val === undefined || val === null) {\n      delete newHeaders[key];\n    } else if (key.length === 10 && key === 'connection') {\n      delete newHeaders[key];\n    }\n  });\n  return newHeaders;\n}\n\n/**\n * These header is used to identify the tenant for login per tenant feature\n */\nexport const CUSTOM_LOGIN_HEADER = 'frontegg-login-alias';\n\n/**\n * Build fetch request headers, remove invalid http headers\n * @param headers - Incoming request headers\n */\nexport function buildRequestHeaders(headers: Record<string, any>): Record<string, string> {\n  let cookie = headers['cookie'];\n  if (cookie != null && typeof cookie === 'string') {\n    cookie = cookie.replace(/fe_session-[^=]*=[^;]*$/, '').replace(/fe_session-[^=]*=[^;]*;/, '');\n\n    if (config.rewriteCookieByAppId && config.appId) {\n      cookie = cookie.replace(\n        `fe_refresh_${config.appId.replace('-', '')}`,\n        `fe_refresh_${config.clientId.replace('-', '')}`\n      );\n    }\n  }\n  if (cookie != null && typeof cookie === 'object') {\n    cookie = Object.entries(cookie)\n      .map(([key, value]) => {\n        if (config.rewriteCookieByAppId && config.appId && key === `fe_refresh_${config.appId.replace('-', '')}`) {\n          return `fe_refresh_${config.clientId.replace('-', '')}=${value}`;\n        } else {\n          return `${key}=${value}`;\n        }\n      })\n      .join('; ');\n  }\n\n  const preparedHeaders: Record<string, string> = {\n    authorization: headers['authorization'],\n    'accept-encoding': headers['accept-encoding'],\n    'accept-language': headers['accept-language'],\n    accept: headers['accept'],\n    'content-type': 'application/json',\n    origin: config.baseUrl,\n    cookie,\n    'user-agent': headers['user-agent'],\n    'cache-control': headers['cache-control'],\n    'x-frontegg-framework': `next@${nextjsPkg.version}`,\n    'x-frontegg-sdk': `@frontegg/nextjs@${sdkVersion.version}`,\n  };\n\n  if (headers['frontegg-requested-application-id']) {\n    preparedHeaders['frontegg-requested-application-id'] = headers['frontegg-requested-application-id'];\n  }\n  if (headers[CUSTOM_LOGIN_HEADER]) {\n    preparedHeaders[CUSTOM_LOGIN_HEADER] = headers[CUSTOM_LOGIN_HEADER];\n  }\n  return removeInvalidHeaders({ ...preparedHeaders });\n}\n\n/**\n * Return parsed json response if http status code = 200\n * @param res\n */\nexport const parseHttpResponse = async <T>(res: Response): Promise<T | undefined> => {\n  if (!res.ok) {\n    return undefined;\n  }\n  return await res.json();\n};\n\n/**\n * Checks if the given path should be forwarded to the Next.js server middleware.\n *\n *\n * @param {string} path - The path to check for authentication API routes.\n * @returns {boolean} Returns true if the path is a frontegg authentication API route or ends with '/postlogin' or '/prelogin'; otherwise, returns false.\n */\nexport function isMiddlewarePath(path: string): boolean {\n  let isAuthPath =\n    fronteggAuthApiRoutesRegex.find((pathRegex) => {\n      if (typeof pathRegex === 'string') {\n        return pathRegex === path;\n      } else {\n        return new RegExp(pathRegex).test(path);\n      }\n    }) != null;\n\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/user\\/sso\\/[^\\/]*\\/postlogin$/g.test(path)\n  // }\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/passwordless\\/[^\\/]*\\/prelogin$/g.test(path)\n  // }\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/[^\\/]*\\/prelogin$/g.test(path)\n  // }\n\n  if (!isAuthPath) {\n    const isSocialLoginPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/user\\/sso\\/default\\/[^\\/]*\\/prelogin$/.test(path);\n    isAuthPath = (path.endsWith('/postlogin') || path.endsWith('/prelogin')) && !isSocialLoginPath;\n  }\n\n  return isAuthPath;\n}\n"],"mappings":";;;;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,WAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,QAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AACA,IAAAI,UAAA,GAAAJ,OAAA;AAQO,MAAMK,GAAG,GAAGA,CAAC;EAAEC,GAAG;EAAEC,WAAW,GAAG,SAAS;EAAEC;AAA2B,CAAC,KAC9EC,KAAK,CAACH,GAAG,EAAE;EAAEI,MAAM,EAAE,KAAK;EAAEH,WAAW;EAAEC;AAAQ,CAAC,CAAC;AAACG,OAAA,CAAAN,GAAA,GAAAA,GAAA;AAM/C,MAAMO,IAAI,GAAGA,CAAC;EAAEN,GAAG;EAAEC,WAAW,GAAG,SAAS;EAAEC,OAAO;EAAEK;AAAyB,CAAC,KACtFJ,KAAK,CAACH,GAAG,EAAE;EAAEI,MAAM,EAAE,MAAM;EAAEH,WAAW;EAAEC,OAAO;EAAEK;AAAK,CAAC,CAAC;;AAE5D;AACA;AACA;AACA;AACA;AACA;AACA;AANAF,OAAA,CAAAC,IAAA,GAAAA,IAAA;AAOO,SAASE,oBAAoBA,CAACN,OAA+B,EAAE;EACpE,MAAMO,UAAU,OAAAC,SAAA,CAAAC,OAAA,MAAQT,OAAO,CAAE;EACjCU,MAAM,CAACC,IAAI,CAACJ,UAAU,CAAC,CAACK,OAAO,CAAEC,GAAW,IAAK;IAC/C,MAAMC,GAAQ,GAAGd,OAAO,CAACa,GAAG,CAAC;IAC7B,IAAIC,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,GAAG,CAAC,EAAE;MACzD,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAII,0BAAe,CAACC,IAAI,CAACJ,GAAG,CAAC,KAAK,IAAI,EAAE;MAC7C,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAIC,GAAG,KAAKK,SAAS,IAAIL,GAAG,KAAK,IAAI,EAAE;MAC5C,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAIA,GAAG,CAACO,MAAM,KAAK,EAAE,IAAIP,GAAG,KAAK,YAAY,EAAE;MACpD,OAAON,UAAU,CAACM,GAAG,CAAC;IACxB;EACF,CAAC,CAAC;EACF,OAAON,UAAU;AACnB;;AAEA;AACA;AACA;AACO,MAAMc,mBAAmB,GAAG,sBAAsB;;AAEzD;AACA;AACA;AACA;AAHAlB,OAAA,CAAAkB,mBAAA,GAAAA,mBAAA;AAIO,SAASC,mBAAmBA,CAACtB,OAA4B,EAA0B;EACxF,IAAIuB,MAAM,GAAGvB,OAAO,CAAC,QAAQ,CAAC;EAC9B,IAAIuB,MAAM,IAAI,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAChDA,MAAM,GAAGA,MAAM,CAACC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAACA,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC;IAE7F,IAAIC,eAAM,CAACC,oBAAoB,IAAID,eAAM,CAACE,KAAK,EAAE;MAC/CJ,MAAM,GAAGA,MAAM,CAACC,OAAO,CACpB,cAAaC,eAAM,CAACE,KAAK,CAACH,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC,EAC5C,cAAaC,eAAM,CAACG,QAAQ,CAACJ,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC,CACjD;IACH;EACF;EACA,IAAID,MAAM,IAAI,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAChDA,MAAM,GAAGb,MAAM,CAACmB,OAAO,CAACN,MAAM,CAAC,CAC5BO,GAAG,CAAC,CAAC,CAACjB,GAAG,EAAEkB,KAAK,CAAC,KAAK;MACrB,IAAIN,eAAM,CAACC,oBAAoB,IAAID,eAAM,CAACE,KAAK,IAAId,GAAG,KAAM,cAAaY,eAAM,CAACE,KAAK,CAACH,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC,EAAE;QACxG,OAAQ,cAAaC,eAAM,CAACG,QAAQ,CAACJ,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,IAAGO,KAAM,EAAC;MAClE,CAAC,MAAM;QACL,OAAQ,GAAElB,GAAI,IAAGkB,KAAM,EAAC;MAC1B;IACF,CAAC,CAAC,CACDC,IAAI,CAAC,IAAI,CAAC;EACf;EAEA,MAAMC,eAAuC,GAAG;IAC9CC,aAAa,EAAElC,OAAO,CAAC,eAAe,CAAC;IACvC,iBAAiB,EAAEA,OAAO,CAAC,iBAAiB,CAAC;IAC7C,iBAAiB,EAAEA,OAAO,CAAC,iBAAiB,CAAC;IAC7CmC,MAAM,EAAEnC,OAAO,CAAC,QAAQ,CAAC;IACzB,cAAc,EAAE,kBAAkB;IAClCoC,MAAM,EAAEX,eAAM,CAACY,OAAO;IACtBd,MAAM;IACN,YAAY,EAAEvB,OAAO,CAAC,YAAY,CAAC;IACnC,eAAe,EAAEA,OAAO,CAAC,eAAe,CAAC;IACzC,sBAAsB,EAAG,QAAOsC,gBAAS,CAACC,OAAQ,EAAC;IACnD,gBAAgB,EAAG,oBAAmBC,mBAAU,CAACD,OAAQ;EAC3D,CAAC;EAED,IAAIvC,OAAO,CAAC,mCAAmC,CAAC,EAAE;IAChDiC,eAAe,CAAC,mCAAmC,CAAC,GAAGjC,OAAO,CAAC,mCAAmC,CAAC;EACrG;EACA,IAAIA,OAAO,CAACqB,mBAAmB,CAAC,EAAE;IAChCY,eAAe,CAACZ,mBAAmB,CAAC,GAAGrB,OAAO,CAACqB,mBAAmB,CAAC;EACrE;EACA,OAAOf,oBAAoB,KAAAE,SAAA,CAAAC,OAAA,MAAMwB,eAAe,EAAG;AACrD;;AAEA;AACA;AACA;AACA;AACO,MAAMQ,iBAAiB,GAAG,MAAUC,GAAa,IAA6B;EACnF,IAAI,CAACA,GAAG,CAACC,EAAE,EAAE;IACX,OAAOxB,SAAS;EAClB;EACA,OAAO,MAAMuB,GAAG,CAACE,IAAI,EAAE;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AANAzC,OAAA,CAAAsC,iBAAA,GAAAA,iBAAA;AAOO,SAASI,gBAAgBA,CAACC,IAAY,EAAW;EACtD,IAAIC,UAAU,GACZC,mCAA0B,CAACC,IAAI,CAAEC,SAAS,IAAK;IAC7C,IAAI,OAAOA,SAAS,KAAK,QAAQ,EAAE;MACjC,OAAOA,SAAS,KAAKJ,IAAI;IAC3B,CAAC,MAAM;MACL,OAAO,IAAIK,MAAM,CAACD,SAAS,CAAC,CAACE,IAAI,CAACN,IAAI,CAAC;IACzC;EACF,CAAC,CAAC,IAAI,IAAI;;EAEZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA,IAAI,CAACC,UAAU,EAAE;IACf,MAAMM,iBAAiB,GAAG,8EAA8E,CAACD,IAAI,CAACN,IAAI,CAAC;IACnHC,UAAU,GAAG,CAACD,IAAI,CAACQ,QAAQ,CAAC,YAAY,CAAC,IAAIR,IAAI,CAACQ,QAAQ,CAAC,WAAW,CAAC,KAAK,CAACD,iBAAiB;EAChG;EAEA,OAAON,UAAU;AACnB"}

package/config/constants.d.ts

@@ -21,6 +21,17 @@ export declare enum EnvVariables {
      * - For Prod environment [visit](https://portal.frontegg.com/production/settings/general)
      */
     FRONTEGG_CLIENT_ID = "FRONTEGG_CLIENT_ID",
+    /**
+     * Your Frontegg application ID, get it by visit:
+     * - For Dev environment [visit](https://portal.frontegg.com/development/applications)
+     * - For Prod environment [visit](https://portal.frontegg.com/production/applications)
+     */
+    FRONTEGG_APP_ID = "FRONTEGG_APP_ID",
+    /**
+     * Rewrite the cookie name by the Frontegg application ID
+     * to support multiple Frontegg applications with same domain
+     */
+    FRONTEGG_REWRITE_COOKIE_BY_APP_ID = "FRONTEGG_REWRITE_COOKIE_BY_APP_ID",
     /**
      * Your Frontegg application's Client Secret, get it by visit:
      * - For Dev environment [visit](https://portal.frontegg.com/development/settings/general)
@@ -51,6 +62,11 @@ export declare enum EnvVariables {
      * value as session cookies for supporting getServerSideProps and ServerComponents
      */
     FRONTEGG_COOKIE_NAME = "FRONTEGG_COOKIE_NAME",
+    /**
+     * The stateless cookie domain for storing the encrypted JWT
+     * value as session cookies for supporting getServerSideProps and ServerComponents
+     */
+    FRONTEGG_COOKIE_DOMAIN = "FRONTEGG_COOKIE_DOMAIN",
     /**
      * When `true`, the initial props will not refresh access token if it's valid.
      */

package/config/constants.js

@@ -9,10 +9,13 @@ let EnvVariables = /*#__PURE__*/function (EnvVariables) {
   EnvVariables["FRONTEGG_BASE_URL"] = "FRONTEGG_BASE_URL";
   EnvVariables["FRONTEGG_TEST_URL"] = "FRONTEGG_TEST_URL";
   EnvVariables["FRONTEGG_CLIENT_ID"] = "FRONTEGG_CLIENT_ID";
+  EnvVariables["FRONTEGG_APP_ID"] = "FRONTEGG_APP_ID";
+  EnvVariables["FRONTEGG_REWRITE_COOKIE_BY_APP_ID"] = "FRONTEGG_REWRITE_COOKIE_BY_APP_ID";
   EnvVariables["FRONTEGG_CLIENT_SECRET"] = "FRONTEGG_CLIENT_SECRET";
   EnvVariables["FRONTEGG_ENCRYPTION_PASSWORD"] = "FRONTEGG_ENCRYPTION_PASSWORD";
   EnvVariables["FRONTEGG_JWT_PUBLIC_KEY"] = "FRONTEGG_JWT_PUBLIC_KEY";
   EnvVariables["FRONTEGG_COOKIE_NAME"] = "FRONTEGG_COOKIE_NAME";
+  EnvVariables["FRONTEGG_COOKIE_DOMAIN"] = "FRONTEGG_COOKIE_DOMAIN";
   EnvVariables["DISABLE_INITIAL_PROPS_REFRESH_TOKEN"] = "DISABLE_INITIAL_PROPS_REFRESH_TOKEN";
   EnvVariables["FRONTEGG_SECURE_JWT_ENABLED"] = "FRONTEGG_SECURE_JWT_ENABLED";
   EnvVariables["FRONTEGG_HOSTED_LOGIN"] = "FRONTEGG_HOSTED_LOGIN";

package/config/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","names":["EnvVariables","exports"],"sources":["../../../../packages/nextjs/src/config/constants.ts"],"sourcesContent":["export enum EnvVariables {\n  /**\n   * The AppUrl is to tell Frontegg your application's app url\n   * for generating cookies and proxy http requests\n   */\n  FRONTEGG_APP_URL = 'FRONTEGG_APP_URL',\n  /**\n   * The Frontegg domain is your unique URL to connect to the Frontegg gateway, get it by visit:\n   * - For Dev environment [visit](https://portal.frontegg.com/development/settings/domains)\n   * - For Prod environment [visit](https://portal.frontegg.com/production/settings/domains)\n   */\n  FRONTEGG_BASE_URL = 'FRONTEGG_BASE_URL',\n  /**\n   * The Frontegg test domain used for testing proxy middleware\n   * @private for Frontegg\n   */\n  FRONTEGG_TEST_URL = 'FRONTEGG_TEST_URL',\n\n  /**\n   * Your Frontegg application's Client ID, get it by visit:\n   * - For Dev environment [visit](https://portal.frontegg.com/development/settings/general)\n   * - For Prod environment [visit](https://portal.frontegg.com/production/settings/general)\n   */\n  FRONTEGG_CLIENT_ID = 'FRONTEGG_CLIENT_ID',\n\n  /**\n   * Your Frontegg application's Client Secret, get it by visit:\n   * - For Dev environment [visit](https://portal.frontegg.com/development/settings/general)\n   * - For Prod environment [visit](https://portal.frontegg.com/production/settings/general)\n   */\n  FRONTEGG_CLIENT_SECRET = 'FRONTEGG_CLIENT_SECRET',\n\n  /**\n   * The stateless session encryption password, used to encrypt\n   * JWT before sending it to the client side.\n   *\n   * For quick password generation use the following command:\n   *\n   * ```sh\n   *   node -e \"console.log(crypto.randomBytes(32).toString('hex'))\"\n   * ```\n   */\n  FRONTEGG_ENCRYPTION_PASSWORD = 'FRONTEGG_ENCRYPTION_PASSWORD',\n\n  /**\n   * The JWT public key generated by frontegg, to verify JWT before create session,\n   * get it by visit: https://[YOUR_FRONTEGG_FOMAIN]/.well-known/jwks.json.\n   *\n   * Then: Copy and Paste the first key from the response:\n   * {keys: [{__KEY__}]}\n   */\n  FRONTEGG_JWT_PUBLIC_KEY = 'FRONTEGG_JWT_PUBLIC_KEY',\n\n  /**\n   * The stateless cookie name for storing the encrypted JWT\n   * value as session cookies for supporting getServerSideProps and ServerComponents\n   */\n  FRONTEGG_COOKIE_NAME = 'FRONTEGG_COOKIE_NAME',\n\n  /**\n   * When `true`, the initial props will not refresh access token if it's valid.\n   */\n  DISABLE_INITIAL_PROPS_REFRESH_TOKEN = 'DISABLE_INITIAL_PROPS_REFRESH_TOKEN',\n\n  /**\n   * Enable secure JWT by removing the signature from the JWT token.\n   * In order to enable this feature, you need to provide {@link EnvVariables.FRONTEGG_CLIENT_SECRET}\n   */\n  FRONTEGG_SECURE_JWT_ENABLED = 'FRONTEGG_SECURE_JWT_ENABLED',\n\n  /**\n   * The Frontegg Hosted Login URL, used to redirect the user to the Frontegg login page\n   * set to 'true' to enable the hosted login feature\n   */\n  FRONTEGG_HOSTED_LOGIN = 'FRONTEGG_HOSTED_LOGIN',\n\n  /**\n   * Forward client IP address to Frontegg gateway, used to detect the client's IP address\n   * when the Next.js application using frontegg middleware proxy service\n   * In order to enable this feature, you need to provide {@link EnvVariables.FRONTEGG_CLIENT_SECRET}\n   */\n  FRONTEGG_FORWARD_IP = 'FRONTEGG_FORWARD_IP',\n  /**\n   * This Env variable assign automatically when deploying you Next.js application\n   * to Vercel deployments service, and will be used to detect to dynamically configure\n   * the {@link EnvVariables.FRONTEGG_APP_URL}\n   *\n   * @see [Vercel Environment Variables](https://vercel.com/docs/concepts/projects/environment-variables#system-environment-variables)\n   */\n  VERCEL = 'VERCEL',\n  VERCEL_URL = 'VERCEL_URL',\n}\n"],"mappings":";;;;;;IAAYA,YAAY,0BAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAA,OAAZA,YAAY;AAAA;AAAAC,OAAA,CAAAD,YAAA,GAAAA,YAAA"}
+{"version":3,"file":"constants.js","names":["EnvVariables","exports"],"sources":["../../../../packages/nextjs/src/config/constants.ts"],"sourcesContent":["export enum EnvVariables {\n  /**\n   * The AppUrl is to tell Frontegg your application's app url\n   * for generating cookies and proxy http requests\n   */\n  FRONTEGG_APP_URL = 'FRONTEGG_APP_URL',\n  /**\n   * The Frontegg domain is your unique URL to connect to the Frontegg gateway, get it by visit:\n   * - For Dev environment [visit](https://portal.frontegg.com/development/settings/domains)\n   * - For Prod environment [visit](https://portal.frontegg.com/production/settings/domains)\n   */\n  FRONTEGG_BASE_URL = 'FRONTEGG_BASE_URL',\n  /**\n   * The Frontegg test domain used for testing proxy middleware\n   * @private for Frontegg\n   */\n  FRONTEGG_TEST_URL = 'FRONTEGG_TEST_URL',\n\n  /**\n   * Your Frontegg application's Client ID, get it by visit:\n   * - For Dev environment [visit](https://portal.frontegg.com/development/settings/general)\n   * - For Prod environment [visit](https://portal.frontegg.com/production/settings/general)\n   */\n  FRONTEGG_CLIENT_ID = 'FRONTEGG_CLIENT_ID',\n\n  /**\n   * Your Frontegg application ID, get it by visit:\n   * - For Dev environment [visit](https://portal.frontegg.com/development/applications)\n   * - For Prod environment [visit](https://portal.frontegg.com/production/applications)\n   */\n  FRONTEGG_APP_ID = 'FRONTEGG_APP_ID',\n\n  /**\n   * Rewrite the cookie name by the Frontegg application ID\n   * to support multiple Frontegg applications with same domain\n   */\n  FRONTEGG_REWRITE_COOKIE_BY_APP_ID = 'FRONTEGG_REWRITE_COOKIE_BY_APP_ID',\n\n  /**\n   * Your Frontegg application's Client Secret, get it by visit:\n   * - For Dev environment [visit](https://portal.frontegg.com/development/settings/general)\n   * - For Prod environment [visit](https://portal.frontegg.com/production/settings/general)\n   */\n  FRONTEGG_CLIENT_SECRET = 'FRONTEGG_CLIENT_SECRET',\n\n  /**\n   * The stateless session encryption password, used to encrypt\n   * JWT before sending it to the client side.\n   *\n   * For quick password generation use the following command:\n   *\n   * ```sh\n   *   node -e \"console.log(crypto.randomBytes(32).toString('hex'))\"\n   * ```\n   */\n  FRONTEGG_ENCRYPTION_PASSWORD = 'FRONTEGG_ENCRYPTION_PASSWORD',\n\n  /**\n   * The JWT public key generated by frontegg, to verify JWT before create session,\n   * get it by visit: https://[YOUR_FRONTEGG_FOMAIN]/.well-known/jwks.json.\n   *\n   * Then: Copy and Paste the first key from the response:\n   * {keys: [{__KEY__}]}\n   */\n  FRONTEGG_JWT_PUBLIC_KEY = 'FRONTEGG_JWT_PUBLIC_KEY',\n\n  /**\n   * The stateless cookie name for storing the encrypted JWT\n   * value as session cookies for supporting getServerSideProps and ServerComponents\n   */\n  FRONTEGG_COOKIE_NAME = 'FRONTEGG_COOKIE_NAME',\n\n  /**\n   * The stateless cookie domain for storing the encrypted JWT\n   * value as session cookies for supporting getServerSideProps and ServerComponents\n   */\n  FRONTEGG_COOKIE_DOMAIN = 'FRONTEGG_COOKIE_DOMAIN',\n\n  /**\n   * When `true`, the initial props will not refresh access token if it's valid.\n   */\n  DISABLE_INITIAL_PROPS_REFRESH_TOKEN = 'DISABLE_INITIAL_PROPS_REFRESH_TOKEN',\n\n  /**\n   * Enable secure JWT by removing the signature from the JWT token.\n   * In order to enable this feature, you need to provide {@link EnvVariables.FRONTEGG_CLIENT_SECRET}\n   */\n  FRONTEGG_SECURE_JWT_ENABLED = 'FRONTEGG_SECURE_JWT_ENABLED',\n\n  /**\n   * The Frontegg Hosted Login URL, used to redirect the user to the Frontegg login page\n   * set to 'true' to enable the hosted login feature\n   */\n  FRONTEGG_HOSTED_LOGIN = 'FRONTEGG_HOSTED_LOGIN',\n\n  /**\n   * Forward client IP address to Frontegg gateway, used to detect the client's IP address\n   * when the Next.js application using frontegg middleware proxy service\n   * In order to enable this feature, you need to provide {@link EnvVariables.FRONTEGG_CLIENT_SECRET}\n   */\n  FRONTEGG_FORWARD_IP = 'FRONTEGG_FORWARD_IP',\n  /**\n   * This Env variable assign automatically when deploying you Next.js application\n   * to Vercel deployments service, and will be used to detect to dynamically configure\n   * the {@link EnvVariables.FRONTEGG_APP_URL}\n   *\n   * @see [Vercel Environment Variables](https://vercel.com/docs/concepts/projects/environment-variables#system-environment-variables)\n   */\n  VERCEL = 'VERCEL',\n  VERCEL_URL = 'VERCEL_URL',\n}\n"],"mappings":";;;;;;IAAYA,YAAY,0BAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAZA,YAAY;EAAA,OAAZA,YAAY;AAAA;AAAAC,OAAA,CAAAD,YAAA,GAAAA,YAAA"}

package/config/index.d.ts

@@ -9,6 +9,8 @@ declare class Config {
     get baseUrl(): string;
     get baseUrlHost(): string;
     get clientId(): string;
+    get appId(): string | undefined;
+    get rewriteCookieByAppId(): boolean;
     get clientSecret(): string | undefined;
     get jwtPublicKeyJson(): string | undefined;
     get secureJwtEnabled(): string | undefined;

package/config/index.js

@@ -18,9 +18,12 @@ const setupEnvVariables = {
   FRONTEGG_BASE_URL: process.env.FRONTEGG_BASE_URL,
   FRONTEGG_TEST_URL: process.env.FRONTEGG_TEST_URL,
   FRONTEGG_CLIENT_ID: process.env.FRONTEGG_CLIENT_ID,
+  FRONTEGG_APP_ID: process.env.FRONTEGG_APP_ID,
+  FRONTEGG_REWRITE_COOKIE_BY_APP_ID: process.env.FRONTEGG_REWRITE_COOKIE_BY_APP_ID,
   FRONTEGG_CLIENT_SECRET: process.env.FRONTEGG_CLIENT_SECRET,
   FRONTEGG_ENCRYPTION_PASSWORD: process.env.FRONTEGG_ENCRYPTION_PASSWORD,
   FRONTEGG_COOKIE_NAME: process.env.FRONTEGG_COOKIE_NAME,
+  FRONTEGG_COOKIE_DOMAIN: process.env.FRONTEGG_COOKIE_DOMAIN,
   FRONTEGG_JWT_PUBLIC_KEY: process.env.FRONTEGG_JWT_PUBLIC_KEY,
   FRONTEGG_SECURE_JWT_ENABLED: process.env.FRONTEGG_SECURE_JWT_ENABLED,
   DISABLE_INITIAL_PROPS_REFRESH_TOKEN: process.env.DISABLE_INITIAL_PROPS_REFRESH_TOKEN,
@@ -55,6 +58,13 @@ class Config {
     var _getEnv2;
     return (_getEnv2 = (0, _helpers.getEnv)(_constants.EnvVariables.FRONTEGG_CLIENT_ID)) != null ? _getEnv2 : setupEnvVariables.FRONTEGG_CLIENT_ID;
   }
+  get appId() {
+    return (0, _helpers.getEnvOrDefault)(_constants.EnvVariables.FRONTEGG_APP_ID, setupEnvVariables.FRONTEGG_APP_ID);
+  }
+  get rewriteCookieByAppId() {
+    var _setupEnvVariables$FR;
+    return (0, _helpers.getEnvOrDefault)(_constants.EnvVariables.FRONTEGG_REWRITE_COOKIE_BY_APP_ID, (_setupEnvVariables$FR = setupEnvVariables.FRONTEGG_REWRITE_COOKIE_BY_APP_ID) != null ? _setupEnvVariables$FR : 'false') === 'true';
+  }
   get clientSecret() {
     let clientSecret = undefined;
     try {
@@ -80,12 +90,17 @@ class Config {
     }
   }
   get cookieName() {
-    var _setupEnvVariables$FR;
-    const cookieNameEnv = (0, _helpers.getEnvOrDefault)(_constants.EnvVariables.FRONTEGG_COOKIE_NAME, (_setupEnvVariables$FR = setupEnvVariables.FRONTEGG_COOKIE_NAME) != null ? _setupEnvVariables$FR : 'fe_session');
-    return `${cookieNameEnv}-${this.clientId.replace(/-/g, '')}`;
+    var _setupEnvVariables$FR2;
+    const cookieNameEnv = (0, _helpers.getEnvOrDefault)(_constants.EnvVariables.FRONTEGG_COOKIE_NAME, (_setupEnvVariables$FR2 = setupEnvVariables.FRONTEGG_COOKIE_NAME) != null ? _setupEnvVariables$FR2 : 'fe_session');
+    if (this.rewriteCookieByAppId && this.appId) {
+      return `${cookieNameEnv}-${this.appId.replace(/-/g, '')}`;
+    } else {
+      return `${cookieNameEnv}-${this.clientId.replace(/-/g, '')}`;
+    }
   }
   get cookieDomain() {
-    return (0, _helpers.generateCookieDomain)(this.appUrl);
+    var _setupEnvVariables$FR3;
+    return (0, _helpers.getEnvOrDefault)(_constants.EnvVariables.FRONTEGG_COOKIE_DOMAIN, (_setupEnvVariables$FR3 = setupEnvVariables.FRONTEGG_COOKIE_DOMAIN) != null ? _setupEnvVariables$FR3 : (0, _helpers.generateCookieDomain)(this.appUrl));
   }
   get authRoutes() {
     var _this$fronteggAppOpti, _this$fronteggAppOpti2, _this$fronteggAppOpti3;
@@ -127,9 +142,9 @@ class Config {
       envAppUrl: this.appUrl,
       envBaseUrl: this.baseUrl,
       envClientId: this.clientId,
+      envAppId: this.appId,
       secureJwtEnabled: this.secureJwtEnabled
     };
-    console.log('this.appEnvConfig', config);
     return config;
   }
 }

package/config/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_helpers","require","_constants","_errors","setupEnvVariables","FRONTEGG_APP_URL","process","env","FRONTEGG_BASE_URL","FRONTEGG_TEST_URL","FRONTEGG_CLIENT_ID","FRONTEGG_CLIENT_SECRET","FRONTEGG_ENCRYPTION_PASSWORD","FRONTEGG_COOKIE_NAME","FRONTEGG_JWT_PUBLIC_KEY","FRONTEGG_SECURE_JWT_ENABLED","DISABLE_INITIAL_PROPS_REFRESH_TOKEN","VERCEL","VERCEL_URL","Config","constructor","fronteggAppOptions","window","validatePassword","appUrl","generateAppUrl","testUrl","getEnvOrDefault","EnvVariables","baseUrl","_getEnv","getEnv","endsWith","slice","baseUrlHost","URL","hostname","clientId","_getEnv2","clientSecret","undefined","_getEnv3","e","secureJwtEnabled","InvalidFronteggEnv","jwtPublicKeyJson","_getEnv4","cookieName","_setupEnvVariables$FR","cookieNameEnv","replace","cookieDomain","generateCookieDomain","authRoutes","_this$fronteggAppOpti","_this$fronteggAppOpti2","_this$fronteggAppOpti3","authOptions","routes","passwordMaps","password","key","Object","keys","match","length","_getEnv5","encryptionPasswordEnv","normalizeStringPasswordToMap","isSSL","protocol","isHostedLogin","_this$fronteggAppOpti4","hostedLoginBox","FRONTEGG_HOSTED_LOGIN","isForwardIpEnabled","disableInitialPropsRefreshToken","appEnvConfig","config","envAppUrl","envBaseUrl","envClientId","console","log","_default","exports","default"],"sources":["../../../../packages/nextjs/src/config/index.ts"],"sourcesContent":["import { AuthPageRoutes } from '@frontegg/redux-store';\nimport { WithFronteggAppOptions } from '../pages';\nimport { AppEnvConfig, PasswordsMap } from './types';\nimport { generateAppUrl, generateCookieDomain, getEnv, getEnvOrDefault, normalizeStringPasswordToMap } from './helpers';\nimport { EnvVariables } from './constants';\nimport { InvalidFronteggEnv } from '../utils/errors';\n\nconst setupEnvVariables = {\n  FRONTEGG_APP_URL: process.env.FRONTEGG_APP_URL,\n  FRONTEGG_BASE_URL: process.env.FRONTEGG_BASE_URL,\n  FRONTEGG_TEST_URL: process.env.FRONTEGG_TEST_URL,\n  FRONTEGG_CLIENT_ID: process.env.FRONTEGG_CLIENT_ID,\n  FRONTEGG_CLIENT_SECRET: process.env.FRONTEGG_CLIENT_SECRET,\n  FRONTEGG_ENCRYPTION_PASSWORD: process.env.FRONTEGG_ENCRYPTION_PASSWORD,\n  FRONTEGG_COOKIE_NAME: process.env.FRONTEGG_COOKIE_NAME,\n  FRONTEGG_JWT_PUBLIC_KEY: process.env.FRONTEGG_JWT_PUBLIC_KEY,\n  FRONTEGG_SECURE_JWT_ENABLED: process.env.FRONTEGG_SECURE_JWT_ENABLED,\n  DISABLE_INITIAL_PROPS_REFRESH_TOKEN: process.env.DISABLE_INITIAL_PROPS_REFRESH_TOKEN,\n  VERCEL: process.env.VERCEL,\n  VERCEL_URL: process.env.VERCEL_URL,\n};\n\nclass Config {\n  public fronteggAppOptions: Partial<WithFronteggAppOptions> = {};\n\n  constructor() {\n    if (typeof window === 'undefined') {\n      this.validatePassword();\n    }\n  }\n\n  get appUrl(): string {\n    return generateAppUrl();\n  }\n\n  get testUrl(): string | undefined {\n    return getEnvOrDefault(EnvVariables.FRONTEGG_TEST_URL, setupEnvVariables.FRONTEGG_TEST_URL);\n  }\n\n  get baseUrl(): string {\n    const baseUrl = getEnv(EnvVariables.FRONTEGG_BASE_URL) ?? setupEnvVariables.FRONTEGG_BASE_URL;\n    if (baseUrl.endsWith('/')) {\n      return baseUrl.slice(0, -1);\n    }\n    return baseUrl;\n  }\n\n  get baseUrlHost(): string {\n    return new URL(this.baseUrl).hostname;\n  }\n\n  get clientId(): string {\n    return getEnv(EnvVariables.FRONTEGG_CLIENT_ID) ?? setupEnvVariables.FRONTEGG_CLIENT_ID;\n  }\n\n  get clientSecret(): string | undefined {\n    let clientSecret = undefined;\n    try {\n      clientSecret = getEnv(EnvVariables.FRONTEGG_CLIENT_SECRET) ?? setupEnvVariables.FRONTEGG_CLIENT_SECRET;\n    } catch (e) {\n      clientSecret = setupEnvVariables.FRONTEGG_CLIENT_SECRET;\n    }\n\n    if (this.secureJwtEnabled === 'true' && !clientSecret) {\n      throw new InvalidFronteggEnv(\n        EnvVariables.FRONTEGG_CLIENT_SECRET,\n        'Client secret is required when secure JWT is enabled'\n      );\n    }\n    return clientSecret;\n  }\n\n  get jwtPublicKeyJson(): string | undefined {\n    return getEnv(EnvVariables.FRONTEGG_JWT_PUBLIC_KEY);\n  }\n\n  get secureJwtEnabled(): string | undefined {\n    try {\n      return getEnv(EnvVariables.FRONTEGG_SECURE_JWT_ENABLED) ?? setupEnvVariables.FRONTEGG_SECURE_JWT_ENABLED;\n    } catch (e) {\n      return setupEnvVariables.FRONTEGG_SECURE_JWT_ENABLED;\n    }\n  }\n\n  get cookieName(): string {\n    const cookieNameEnv = getEnvOrDefault(\n      EnvVariables.FRONTEGG_COOKIE_NAME,\n      setupEnvVariables.FRONTEGG_COOKIE_NAME ?? 'fe_session'\n    );\n    return `${cookieNameEnv}-${this.clientId.replace(/-/g, '')}`;\n  }\n\n  get cookieDomain(): string {\n    return generateCookieDomain(this.appUrl);\n  }\n\n  get authRoutes(): Partial<AuthPageRoutes> {\n    return this.fronteggAppOptions?.authOptions?.routes ?? {};\n  }\n\n  private validatePassword() {\n    const passwordMaps = this.password;\n    for (let key of Object.keys(passwordMaps)) {\n      const password = passwordMaps[key];\n      if (!password.match(/[0-9A-Fa-f]{6}/g) || password.length !== 64) {\n        throw new InvalidFronteggEnv(\n          EnvVariables.FRONTEGG_ENCRYPTION_PASSWORD,\n          `Hex string.\\n\\nFor quick password generation use the following command:\\nnode -e \"console.log(crypto.randomBytes(32).toString('hex'))\"`\n        );\n      }\n    }\n  }\n\n  get password(): PasswordsMap {\n    const encryptionPasswordEnv =\n      getEnv(EnvVariables.FRONTEGG_ENCRYPTION_PASSWORD) ?? setupEnvVariables.FRONTEGG_ENCRYPTION_PASSWORD;\n\n    return normalizeStringPasswordToMap(encryptionPasswordEnv);\n  }\n\n  get isSSL(): boolean {\n    return new URL(this.appUrl).protocol === 'https:';\n  }\n\n  get isHostedLogin(): boolean {\n    return (\n      this.fronteggAppOptions.hostedLoginBox ?? getEnvOrDefault(EnvVariables.FRONTEGG_HOSTED_LOGIN, 'false') === 'true'\n    );\n  }\n\n  get isForwardIpEnabled(): boolean {\n    if (this.clientSecret) {\n      return getEnvOrDefault(EnvVariables.FRONTEGG_HOSTED_LOGIN, 'false') === 'true';\n    }\n    return false;\n  }\n\n  get disableInitialPropsRefreshToken(): boolean {\n    const disableInitialPropsRefreshToken = getEnvOrDefault(\n      EnvVariables.DISABLE_INITIAL_PROPS_REFRESH_TOKEN,\n      setupEnvVariables.DISABLE_INITIAL_PROPS_REFRESH_TOKEN\n    );\n    return disableInitialPropsRefreshToken === 'true';\n  }\n\n  get appEnvConfig(): AppEnvConfig {\n    const config = {\n      envAppUrl: this.appUrl,\n      envBaseUrl: this.baseUrl,\n      envClientId: this.clientId,\n      secureJwtEnabled: this.secureJwtEnabled,\n    };\n    console.log('this.appEnvConfig', config);\n    return config;\n  }\n}\n\nexport { EnvVariables } from './constants';\nexport default new Config();\n"],"mappings":";;;;;;;;;;;;AAGA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AAEA,MAAMG,iBAAiB,GAAG;EACxBC,gBAAgB,EAAEC,OAAO,CAACC,GAAG,CAACF,gBAAgB;EAC9CG,iBAAiB,EAAEF,OAAO,CAACC,GAAG,CAACC,iBAAiB;EAChDC,iBAAiB,EAAEH,OAAO,CAACC,GAAG,CAACE,iBAAiB;EAChDC,kBAAkB,EAAEJ,OAAO,CAACC,GAAG,CAACG,kBAAkB;EAClDC,sBAAsB,EAAEL,OAAO,CAACC,GAAG,CAACI,sBAAsB;EAC1DC,4BAA4B,EAAEN,OAAO,CAACC,GAAG,CAACK,4BAA4B;EACtEC,oBAAoB,EAAEP,OAAO,CAACC,GAAG,CAACM,oBAAoB;EACtDC,uBAAuB,EAAER,OAAO,CAACC,GAAG,CAACO,uBAAuB;EAC5DC,2BAA2B,EAAET,OAAO,CAACC,GAAG,CAACQ,2BAA2B;EACpEC,mCAAmC,EAAEV,OAAO,CAACC,GAAG,CAACS,mCAAmC;EACpFC,MAAM,EAAEX,OAAO,CAACC,GAAG,CAACU,MAAM;EAC1BC,UAAU,EAAEZ,OAAO,CAACC,GAAG,CAACW;AAC1B,CAAC;AAED,MAAMC,MAAM,CAAC;EAGXC,WAAWA,CAAA,EAAG;IAAA,KAFPC,kBAAkB,GAAoC,CAAC,CAAC;IAG7D,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;MACjC,IAAI,CAACC,gBAAgB,EAAE;IACzB;EACF;EAEA,IAAIC,MAAMA,CAAA,EAAW;IACnB,OAAO,IAAAC,uBAAc,GAAE;EACzB;EAEA,IAAIC,OAAOA,CAAA,EAAuB;IAChC,OAAO,IAAAC,wBAAe,EAACC,uBAAY,CAACnB,iBAAiB,EAAEL,iBAAiB,CAACK,iBAAiB,CAAC;EAC7F;EAEA,IAAIoB,OAAOA,CAAA,EAAW;IAAA,IAAAC,OAAA;IACpB,MAAMD,OAAO,IAAAC,OAAA,GAAG,IAAAC,eAAM,EAACH,uBAAY,CAACpB,iBAAiB,CAAC,YAAAsB,OAAA,GAAI1B,iBAAiB,CAACI,iBAAiB;IAC7F,IAAIqB,OAAO,CAACG,QAAQ,CAAC,GAAG,CAAC,EAAE;MACzB,OAAOH,OAAO,CAACI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B;IACA,OAAOJ,OAAO;EAChB;EAEA,IAAIK,WAAWA,CAAA,EAAW;IACxB,OAAO,IAAIC,GAAG,CAAC,IAAI,CAACN,OAAO,CAAC,CAACO,QAAQ;EACvC;EAEA,IAAIC,QAAQA,CAAA,EAAW;IAAA,IAAAC,QAAA;IACrB,QAAAA,QAAA,GAAO,IAAAP,eAAM,EAACH,uBAAY,CAAClB,kBAAkB,CAAC,YAAA4B,QAAA,GAAIlC,iBAAiB,CAACM,kBAAkB;EACxF;EAEA,IAAI6B,YAAYA,CAAA,EAAuB;IACrC,IAAIA,YAAY,GAAGC,SAAS;IAC5B,IAAI;MAAA,IAAAC,QAAA;MACFF,YAAY,IAAAE,QAAA,GAAG,IAAAV,eAAM,EAACH,uBAAY,CAACjB,sBAAsB,CAAC,YAAA8B,QAAA,GAAIrC,iBAAiB,CAACO,sBAAsB;IACxG,CAAC,CAAC,OAAO+B,CAAC,EAAE;MACVH,YAAY,GAAGnC,iBAAiB,CAACO,sBAAsB;IACzD;IAEA,IAAI,IAAI,CAACgC,gBAAgB,KAAK,MAAM,IAAI,CAACJ,YAAY,EAAE;MACrD,MAAM,IAAIK,0BAAkB,CAC1BhB,uBAAY,CAACjB,sBAAsB,EACnC,sDAAsD,CACvD;IACH;IACA,OAAO4B,YAAY;EACrB;EAEA,IAAIM,gBAAgBA,CAAA,EAAuB;IACzC,OAAO,IAAAd,eAAM,EAACH,uBAAY,CAACd,uBAAuB,CAAC;EACrD;EAEA,IAAI6B,gBAAgBA,CAAA,EAAuB;IACzC,IAAI;MAAA,IAAAG,QAAA;MACF,QAAAA,QAAA,GAAO,IAAAf,eAAM,EAACH,uBAAY,CAACb,2BAA2B,CAAC,YAAA+B,QAAA,GAAI1C,iBAAiB,CAACW,2BAA2B;IAC1G,CAAC,CAAC,OAAO2B,CAAC,EAAE;MACV,OAAOtC,iBAAiB,CAACW,2BAA2B;IACtD;EACF;EAEA,IAAIgC,UAAUA,CAAA,EAAW;IAAA,IAAAC,qBAAA;IACvB,MAAMC,aAAa,GAAG,IAAAtB,wBAAe,EACnCC,uBAAY,CAACf,oBAAoB,GAAAmC,qBAAA,GACjC5C,iBAAiB,CAACS,oBAAoB,YAAAmC,qBAAA,GAAI,YAAY,CACvD;IACD,OAAQ,GAAEC,aAAc,IAAG,IAAI,CAACZ,QAAQ,CAACa,OAAO,CAAC,IAAI,EAAE,EAAE,CAAE,EAAC;EAC9D;EAEA,IAAIC,YAAYA,CAAA,EAAW;IACzB,OAAO,IAAAC,6BAAoB,EAAC,IAAI,CAAC5B,MAAM,CAAC;EAC1C;EAEA,IAAI6B,UAAUA,CAAA,EAA4B;IAAA,IAAAC,qBAAA,EAAAC,sBAAA,EAAAC,sBAAA;IACxC,QAAAF,qBAAA,IAAAC,sBAAA,GAAO,IAAI,CAAClC,kBAAkB,sBAAAmC,sBAAA,GAAvBD,sBAAA,CAAyBE,WAAW,qBAApCD,sBAAA,CAAsCE,MAAM,YAAAJ,qBAAA,GAAI,CAAC,CAAC;EAC3D;EAEQ/B,gBAAgBA,CAAA,EAAG;IACzB,MAAMoC,YAAY,GAAG,IAAI,CAACC,QAAQ;IAClC,KAAK,IAAIC,GAAG,IAAIC,MAAM,CAACC,IAAI,CAACJ,YAAY,CAAC,EAAE;MACzC,MAAMC,QAAQ,GAAGD,YAAY,CAACE,GAAG,CAAC;MAClC,IAAI,CAACD,QAAQ,CAACI,KAAK,CAAC,iBAAiB,CAAC,IAAIJ,QAAQ,CAACK,MAAM,KAAK,EAAE,EAAE;QAChE,MAAM,IAAIrB,0BAAkB,CAC1BhB,uBAAY,CAAChB,4BAA4B,EACxC,wIAAuI,CACzI;MACH;IACF;EACF;EAEA,IAAIgD,QAAQA,CAAA,EAAiB;IAAA,IAAAM,QAAA;IAC3B,MAAMC,qBAAqB,IAAAD,QAAA,GACzB,IAAAnC,eAAM,EAACH,uBAAY,CAAChB,4BAA4B,CAAC,YAAAsD,QAAA,GAAI9D,iBAAiB,CAACQ,4BAA4B;IAErG,OAAO,IAAAwD,qCAA4B,EAACD,qBAAqB,CAAC;EAC5D;EAEA,IAAIE,KAAKA,CAAA,EAAY;IACnB,OAAO,IAAIlC,GAAG,CAAC,IAAI,CAACX,MAAM,CAAC,CAAC8C,QAAQ,KAAK,QAAQ;EACnD;EAEA,IAAIC,aAAaA,CAAA,EAAY;IAAA,IAAAC,sBAAA;IAC3B,QAAAA,sBAAA,GACE,IAAI,CAACnD,kBAAkB,CAACoD,cAAc,YAAAD,sBAAA,GAAI,IAAA7C,wBAAe,EAACC,uBAAY,CAAC8C,qBAAqB,EAAE,OAAO,CAAC,KAAK,MAAM;EAErH;EAEA,IAAIC,kBAAkBA,CAAA,EAAY;IAChC,IAAI,IAAI,CAACpC,YAAY,EAAE;MACrB,OAAO,IAAAZ,wBAAe,EAACC,uBAAY,CAAC8C,qBAAqB,EAAE,OAAO,CAAC,KAAK,MAAM;IAChF;IACA,OAAO,KAAK;EACd;EAEA,IAAIE,+BAA+BA,CAAA,EAAY;IAC7C,MAAMA,+BAA+B,GAAG,IAAAjD,wBAAe,EACrDC,uBAAY,CAACZ,mCAAmC,EAChDZ,iBAAiB,CAACY,mCAAmC,CACtD;IACD,OAAO4D,+BAA+B,KAAK,MAAM;EACnD;EAEA,IAAIC,YAAYA,CAAA,EAAiB;IAC/B,MAAMC,MAAM,GAAG;MACbC,SAAS,EAAE,IAAI,CAACvD,MAAM;MACtBwD,UAAU,EAAE,IAAI,CAACnD,OAAO;MACxBoD,WAAW,EAAE,IAAI,CAAC5C,QAAQ;MAC1BM,gBAAgB,EAAE,IAAI,CAACA;IACzB,CAAC;IACDuC,OAAO,CAACC,GAAG,CAAC,mBAAmB,EAAEL,MAAM,CAAC;IACxC,OAAOA,MAAM;EACf;AACF;AAAC,IAAAM,QAAA,GAGc,IAAIjE,MAAM,EAAE;AAAAkE,OAAA,CAAAC,OAAA,GAAAF,QAAA"}
+{"version":3,"file":"index.js","names":["_helpers","require","_constants","_errors","setupEnvVariables","FRONTEGG_APP_URL","process","env","FRONTEGG_BASE_URL","FRONTEGG_TEST_URL","FRONTEGG_CLIENT_ID","FRONTEGG_APP_ID","FRONTEGG_REWRITE_COOKIE_BY_APP_ID","FRONTEGG_CLIENT_SECRET","FRONTEGG_ENCRYPTION_PASSWORD","FRONTEGG_COOKIE_NAME","FRONTEGG_COOKIE_DOMAIN","FRONTEGG_JWT_PUBLIC_KEY","FRONTEGG_SECURE_JWT_ENABLED","DISABLE_INITIAL_PROPS_REFRESH_TOKEN","VERCEL","VERCEL_URL","Config","constructor","fronteggAppOptions","window","validatePassword","appUrl","generateAppUrl","testUrl","getEnvOrDefault","EnvVariables","baseUrl","_getEnv","getEnv","endsWith","slice","baseUrlHost","URL","hostname","clientId","_getEnv2","appId","rewriteCookieByAppId","_setupEnvVariables$FR","clientSecret","undefined","_getEnv3","e","secureJwtEnabled","InvalidFronteggEnv","jwtPublicKeyJson","_getEnv4","cookieName","_setupEnvVariables$FR2","cookieNameEnv","replace","cookieDomain","_setupEnvVariables$FR3","generateCookieDomain","authRoutes","_this$fronteggAppOpti","_this$fronteggAppOpti2","_this$fronteggAppOpti3","authOptions","routes","passwordMaps","password","key","Object","keys","match","length","_getEnv5","encryptionPasswordEnv","normalizeStringPasswordToMap","isSSL","protocol","isHostedLogin","_this$fronteggAppOpti4","hostedLoginBox","FRONTEGG_HOSTED_LOGIN","isForwardIpEnabled","disableInitialPropsRefreshToken","appEnvConfig","config","envAppUrl","envBaseUrl","envClientId","envAppId","_default","exports","default"],"sources":["../../../../packages/nextjs/src/config/index.ts"],"sourcesContent":["import { AuthPageRoutes } from '@frontegg/redux-store';\nimport { WithFronteggAppOptions } from '../pages';\nimport { AppEnvConfig, PasswordsMap } from './types';\nimport { generateAppUrl, generateCookieDomain, getEnv, getEnvOrDefault, normalizeStringPasswordToMap } from './helpers';\nimport { EnvVariables } from './constants';\nimport { InvalidFronteggEnv } from '../utils/errors';\n\nconst setupEnvVariables = {\n  FRONTEGG_APP_URL: process.env.FRONTEGG_APP_URL,\n  FRONTEGG_BASE_URL: process.env.FRONTEGG_BASE_URL,\n  FRONTEGG_TEST_URL: process.env.FRONTEGG_TEST_URL,\n  FRONTEGG_CLIENT_ID: process.env.FRONTEGG_CLIENT_ID,\n  FRONTEGG_APP_ID: process.env.FRONTEGG_APP_ID,\n  FRONTEGG_REWRITE_COOKIE_BY_APP_ID: process.env.FRONTEGG_REWRITE_COOKIE_BY_APP_ID,\n  FRONTEGG_CLIENT_SECRET: process.env.FRONTEGG_CLIENT_SECRET,\n  FRONTEGG_ENCRYPTION_PASSWORD: process.env.FRONTEGG_ENCRYPTION_PASSWORD,\n  FRONTEGG_COOKIE_NAME: process.env.FRONTEGG_COOKIE_NAME,\n  FRONTEGG_COOKIE_DOMAIN: process.env.FRONTEGG_COOKIE_DOMAIN,\n  FRONTEGG_JWT_PUBLIC_KEY: process.env.FRONTEGG_JWT_PUBLIC_KEY,\n  FRONTEGG_SECURE_JWT_ENABLED: process.env.FRONTEGG_SECURE_JWT_ENABLED,\n  DISABLE_INITIAL_PROPS_REFRESH_TOKEN: process.env.DISABLE_INITIAL_PROPS_REFRESH_TOKEN,\n  VERCEL: process.env.VERCEL,\n  VERCEL_URL: process.env.VERCEL_URL,\n};\n\nclass Config {\n  public fronteggAppOptions: Partial<WithFronteggAppOptions> = {};\n\n  constructor() {\n    if (typeof window === 'undefined') {\n      this.validatePassword();\n    }\n  }\n\n  get appUrl(): string {\n    return generateAppUrl();\n  }\n\n  get testUrl(): string | undefined {\n    return getEnvOrDefault(EnvVariables.FRONTEGG_TEST_URL, setupEnvVariables.FRONTEGG_TEST_URL);\n  }\n\n  get baseUrl(): string {\n    const baseUrl = getEnv(EnvVariables.FRONTEGG_BASE_URL) ?? setupEnvVariables.FRONTEGG_BASE_URL;\n    if (baseUrl.endsWith('/')) {\n      return baseUrl.slice(0, -1);\n    }\n    return baseUrl;\n  }\n\n  get baseUrlHost(): string {\n    return new URL(this.baseUrl).hostname;\n  }\n\n  get clientId(): string {\n    return getEnv(EnvVariables.FRONTEGG_CLIENT_ID) ?? setupEnvVariables.FRONTEGG_CLIENT_ID;\n  }\n\n  get appId(): string | undefined {\n    return getEnvOrDefault(EnvVariables.FRONTEGG_APP_ID, setupEnvVariables.FRONTEGG_APP_ID);\n  }\n  get rewriteCookieByAppId(): boolean {\n    return (\n      getEnvOrDefault(\n        EnvVariables.FRONTEGG_REWRITE_COOKIE_BY_APP_ID,\n        setupEnvVariables.FRONTEGG_REWRITE_COOKIE_BY_APP_ID ?? 'false'\n      ) === 'true'\n    );\n  }\n\n  get clientSecret(): string | undefined {\n    let clientSecret = undefined;\n    try {\n      clientSecret = getEnv(EnvVariables.FRONTEGG_CLIENT_SECRET) ?? setupEnvVariables.FRONTEGG_CLIENT_SECRET;\n    } catch (e) {\n      clientSecret = setupEnvVariables.FRONTEGG_CLIENT_SECRET;\n    }\n\n    if (this.secureJwtEnabled === 'true' && !clientSecret) {\n      throw new InvalidFronteggEnv(\n        EnvVariables.FRONTEGG_CLIENT_SECRET,\n        'Client secret is required when secure JWT is enabled'\n      );\n    }\n    return clientSecret;\n  }\n\n  get jwtPublicKeyJson(): string | undefined {\n    return getEnv(EnvVariables.FRONTEGG_JWT_PUBLIC_KEY);\n  }\n\n  get secureJwtEnabled(): string | undefined {\n    try {\n      return getEnv(EnvVariables.FRONTEGG_SECURE_JWT_ENABLED) ?? setupEnvVariables.FRONTEGG_SECURE_JWT_ENABLED;\n    } catch (e) {\n      return setupEnvVariables.FRONTEGG_SECURE_JWT_ENABLED;\n    }\n  }\n\n  get cookieName(): string {\n    const cookieNameEnv = getEnvOrDefault(\n      EnvVariables.FRONTEGG_COOKIE_NAME,\n      setupEnvVariables.FRONTEGG_COOKIE_NAME ?? 'fe_session'\n    );\n\n    if (this.rewriteCookieByAppId && this.appId) {\n      return `${cookieNameEnv}-${this.appId.replace(/-/g, '')}`;\n    } else {\n      return `${cookieNameEnv}-${this.clientId.replace(/-/g, '')}`;\n    }\n  }\n\n  get cookieDomain(): string {\n    return getEnvOrDefault(\n      EnvVariables.FRONTEGG_COOKIE_DOMAIN,\n      setupEnvVariables.FRONTEGG_COOKIE_DOMAIN ?? generateCookieDomain(this.appUrl)\n    );\n  }\n\n  get authRoutes(): Partial<AuthPageRoutes> {\n    return this.fronteggAppOptions?.authOptions?.routes ?? {};\n  }\n\n  private validatePassword() {\n    const passwordMaps = this.password;\n    for (let key of Object.keys(passwordMaps)) {\n      const password = passwordMaps[key];\n      if (!password.match(/[0-9A-Fa-f]{6}/g) || password.length !== 64) {\n        throw new InvalidFronteggEnv(\n          EnvVariables.FRONTEGG_ENCRYPTION_PASSWORD,\n          `Hex string.\\n\\nFor quick password generation use the following command:\\nnode -e \"console.log(crypto.randomBytes(32).toString('hex'))\"`\n        );\n      }\n    }\n  }\n\n  get password(): PasswordsMap {\n    const encryptionPasswordEnv =\n      getEnv(EnvVariables.FRONTEGG_ENCRYPTION_PASSWORD) ?? setupEnvVariables.FRONTEGG_ENCRYPTION_PASSWORD;\n\n    return normalizeStringPasswordToMap(encryptionPasswordEnv);\n  }\n\n  get isSSL(): boolean {\n    return new URL(this.appUrl).protocol === 'https:';\n  }\n\n  get isHostedLogin(): boolean {\n    return (\n      this.fronteggAppOptions.hostedLoginBox ?? getEnvOrDefault(EnvVariables.FRONTEGG_HOSTED_LOGIN, 'false') === 'true'\n    );\n  }\n\n  get isForwardIpEnabled(): boolean {\n    if (this.clientSecret) {\n      return getEnvOrDefault(EnvVariables.FRONTEGG_HOSTED_LOGIN, 'false') === 'true';\n    }\n    return false;\n  }\n\n  get disableInitialPropsRefreshToken(): boolean {\n    const disableInitialPropsRefreshToken = getEnvOrDefault(\n      EnvVariables.DISABLE_INITIAL_PROPS_REFRESH_TOKEN,\n      setupEnvVariables.DISABLE_INITIAL_PROPS_REFRESH_TOKEN\n    );\n    return disableInitialPropsRefreshToken === 'true';\n  }\n\n  get appEnvConfig(): AppEnvConfig {\n    const config = {\n      envAppUrl: this.appUrl,\n      envBaseUrl: this.baseUrl,\n      envClientId: this.clientId,\n      envAppId: this.appId,\n      secureJwtEnabled: this.secureJwtEnabled,\n    };\n    return config;\n  }\n}\n\nexport { EnvVariables } from './constants';\nexport default new Config();\n"],"mappings":";;;;;;;;;;;;AAGA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AAEA,MAAMG,iBAAiB,GAAG;EACxBC,gBAAgB,EAAEC,OAAO,CAACC,GAAG,CAACF,gBAAgB;EAC9CG,iBAAiB,EAAEF,OAAO,CAACC,GAAG,CAACC,iBAAiB;EAChDC,iBAAiB,EAAEH,OAAO,CAACC,GAAG,CAACE,iBAAiB;EAChDC,kBAAkB,EAAEJ,OAAO,CAACC,GAAG,CAACG,kBAAkB;EAClDC,eAAe,EAAEL,OAAO,CAACC,GAAG,CAACI,eAAe;EAC5CC,iCAAiC,EAAEN,OAAO,CAACC,GAAG,CAACK,iCAAiC;EAChFC,sBAAsB,EAAEP,OAAO,CAACC,GAAG,CAACM,sBAAsB;EAC1DC,4BAA4B,EAAER,OAAO,CAACC,GAAG,CAACO,4BAA4B;EACtEC,oBAAoB,EAAET,OAAO,CAACC,GAAG,CAACQ,oBAAoB;EACtDC,sBAAsB,EAAEV,OAAO,CAACC,GAAG,CAACS,sBAAsB;EAC1DC,uBAAuB,EAAEX,OAAO,CAACC,GAAG,CAACU,uBAAuB;EAC5DC,2BAA2B,EAAEZ,OAAO,CAACC,GAAG,CAACW,2BAA2B;EACpEC,mCAAmC,EAAEb,OAAO,CAACC,GAAG,CAACY,mCAAmC;EACpFC,MAAM,EAAEd,OAAO,CAACC,GAAG,CAACa,MAAM;EAC1BC,UAAU,EAAEf,OAAO,CAACC,GAAG,CAACc;AAC1B,CAAC;AAED,MAAMC,MAAM,CAAC;EAGXC,WAAWA,CAAA,EAAG;IAAA,KAFPC,kBAAkB,GAAoC,CAAC,CAAC;IAG7D,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;MACjC,IAAI,CAACC,gBAAgB,EAAE;IACzB;EACF;EAEA,IAAIC,MAAMA,CAAA,EAAW;IACnB,OAAO,IAAAC,uBAAc,GAAE;EACzB;EAEA,IAAIC,OAAOA,CAAA,EAAuB;IAChC,OAAO,IAAAC,wBAAe,EAACC,uBAAY,CAACtB,iBAAiB,EAAEL,iBAAiB,CAACK,iBAAiB,CAAC;EAC7F;EAEA,IAAIuB,OAAOA,CAAA,EAAW;IAAA,IAAAC,OAAA;IACpB,MAAMD,OAAO,IAAAC,OAAA,GAAG,IAAAC,eAAM,EAACH,uBAAY,CAACvB,iBAAiB,CAAC,YAAAyB,OAAA,GAAI7B,iBAAiB,CAACI,iBAAiB;IAC7F,IAAIwB,OAAO,CAACG,QAAQ,CAAC,GAAG,CAAC,EAAE;MACzB,OAAOH,OAAO,CAACI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B;IACA,OAAOJ,OAAO;EAChB;EAEA,IAAIK,WAAWA,CAAA,EAAW;IACxB,OAAO,IAAIC,GAAG,CAAC,IAAI,CAACN,OAAO,CAAC,CAACO,QAAQ;EACvC;EAEA,IAAIC,QAAQA,CAAA,EAAW;IAAA,IAAAC,QAAA;IACrB,QAAAA,QAAA,GAAO,IAAAP,eAAM,EAACH,uBAAY,CAACrB,kBAAkB,CAAC,YAAA+B,QAAA,GAAIrC,iBAAiB,CAACM,kBAAkB;EACxF;EAEA,IAAIgC,KAAKA,CAAA,EAAuB;IAC9B,OAAO,IAAAZ,wBAAe,EAACC,uBAAY,CAACpB,eAAe,EAAEP,iBAAiB,CAACO,eAAe,CAAC;EACzF;EACA,IAAIgC,oBAAoBA,CAAA,EAAY;IAAA,IAAAC,qBAAA;IAClC,OACE,IAAAd,wBAAe,EACbC,uBAAY,CAACnB,iCAAiC,GAAAgC,qBAAA,GAC9CxC,iBAAiB,CAACQ,iCAAiC,YAAAgC,qBAAA,GAAI,OAAO,CAC/D,KAAK,MAAM;EAEhB;EAEA,IAAIC,YAAYA,CAAA,EAAuB;IACrC,IAAIA,YAAY,GAAGC,SAAS;IAC5B,IAAI;MAAA,IAAAC,QAAA;MACFF,YAAY,IAAAE,QAAA,GAAG,IAAAb,eAAM,EAACH,uBAAY,CAAClB,sBAAsB,CAAC,YAAAkC,QAAA,GAAI3C,iBAAiB,CAACS,sBAAsB;IACxG,CAAC,CAAC,OAAOmC,CAAC,EAAE;MACVH,YAAY,GAAGzC,iBAAiB,CAACS,sBAAsB;IACzD;IAEA,IAAI,IAAI,CAACoC,gBAAgB,KAAK,MAAM,IAAI,CAACJ,YAAY,EAAE;MACrD,MAAM,IAAIK,0BAAkB,CAC1BnB,uBAAY,CAAClB,sBAAsB,EACnC,sDAAsD,CACvD;IACH;IACA,OAAOgC,YAAY;EACrB;EAEA,IAAIM,gBAAgBA,CAAA,EAAuB;IACzC,OAAO,IAAAjB,eAAM,EAACH,uBAAY,CAACd,uBAAuB,CAAC;EACrD;EAEA,IAAIgC,gBAAgBA,CAAA,EAAuB;IACzC,IAAI;MAAA,IAAAG,QAAA;MACF,QAAAA,QAAA,GAAO,IAAAlB,eAAM,EAACH,uBAAY,CAACb,2BAA2B,CAAC,YAAAkC,QAAA,GAAIhD,iBAAiB,CAACc,2BAA2B;IAC1G,CAAC,CAAC,OAAO8B,CAAC,EAAE;MACV,OAAO5C,iBAAiB,CAACc,2BAA2B;IACtD;EACF;EAEA,IAAImC,UAAUA,CAAA,EAAW;IAAA,IAAAC,sBAAA;IACvB,MAAMC,aAAa,GAAG,IAAAzB,wBAAe,EACnCC,uBAAY,CAAChB,oBAAoB,GAAAuC,sBAAA,GACjClD,iBAAiB,CAACW,oBAAoB,YAAAuC,sBAAA,GAAI,YAAY,CACvD;IAED,IAAI,IAAI,CAACX,oBAAoB,IAAI,IAAI,CAACD,KAAK,EAAE;MAC3C,OAAQ,GAAEa,aAAc,IAAG,IAAI,CAACb,KAAK,CAACc,OAAO,CAAC,IAAI,EAAE,EAAE,CAAE,EAAC;IAC3D,CAAC,MAAM;MACL,OAAQ,GAAED,aAAc,IAAG,IAAI,CAACf,QAAQ,CAACgB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAE,EAAC;IAC9D;EACF;EAEA,IAAIC,YAAYA,CAAA,EAAW;IAAA,IAAAC,sBAAA;IACzB,OAAO,IAAA5B,wBAAe,EACpBC,uBAAY,CAACf,sBAAsB,GAAA0C,sBAAA,GACnCtD,iBAAiB,CAACY,sBAAsB,YAAA0C,sBAAA,GAAI,IAAAC,6BAAoB,EAAC,IAAI,CAAChC,MAAM,CAAC,CAC9E;EACH;EAEA,IAAIiC,UAAUA,CAAA,EAA4B;IAAA,IAAAC,qBAAA,EAAAC,sBAAA,EAAAC,sBAAA;IACxC,QAAAF,qBAAA,IAAAC,sBAAA,GAAO,IAAI,CAACtC,kBAAkB,sBAAAuC,sBAAA,GAAvBD,sBAAA,CAAyBE,WAAW,qBAApCD,sBAAA,CAAsCE,MAAM,YAAAJ,qBAAA,GAAI,CAAC,CAAC;EAC3D;EAEQnC,gBAAgBA,CAAA,EAAG;IACzB,MAAMwC,YAAY,GAAG,IAAI,CAACC,QAAQ;IAClC,KAAK,IAAIC,GAAG,IAAIC,MAAM,CAACC,IAAI,CAACJ,YAAY,CAAC,EAAE;MACzC,MAAMC,QAAQ,GAAGD,YAAY,CAACE,GAAG,CAAC;MAClC,IAAI,CAACD,QAAQ,CAACI,KAAK,CAAC,iBAAiB,CAAC,IAAIJ,QAAQ,CAACK,MAAM,KAAK,EAAE,EAAE;QAChE,MAAM,IAAItB,0BAAkB,CAC1BnB,uBAAY,CAACjB,4BAA4B,EACxC,wIAAuI,CACzI;MACH;IACF;EACF;EAEA,IAAIqD,QAAQA,CAAA,EAAiB;IAAA,IAAAM,QAAA;IAC3B,MAAMC,qBAAqB,IAAAD,QAAA,GACzB,IAAAvC,eAAM,EAACH,uBAAY,CAACjB,4BAA4B,CAAC,YAAA2D,QAAA,GAAIrE,iBAAiB,CAACU,4BAA4B;IAErG,OAAO,IAAA6D,qCAA4B,EAACD,qBAAqB,CAAC;EAC5D;EAEA,IAAIE,KAAKA,CAAA,EAAY;IACnB,OAAO,IAAItC,GAAG,CAAC,IAAI,CAACX,MAAM,CAAC,CAACkD,QAAQ,KAAK,QAAQ;EACnD;EAEA,IAAIC,aAAaA,CAAA,EAAY;IAAA,IAAAC,sBAAA;IAC3B,QAAAA,sBAAA,GACE,IAAI,CAACvD,kBAAkB,CAACwD,cAAc,YAAAD,sBAAA,GAAI,IAAAjD,wBAAe,EAACC,uBAAY,CAACkD,qBAAqB,EAAE,OAAO,CAAC,KAAK,MAAM;EAErH;EAEA,IAAIC,kBAAkBA,CAAA,EAAY;IAChC,IAAI,IAAI,CAACrC,YAAY,EAAE;MACrB,OAAO,IAAAf,wBAAe,EAACC,uBAAY,CAACkD,qBAAqB,EAAE,OAAO,CAAC,KAAK,MAAM;IAChF;IACA,OAAO,KAAK;EACd;EAEA,IAAIE,+BAA+BA,CAAA,EAAY;IAC7C,MAAMA,+BAA+B,GAAG,IAAArD,wBAAe,EACrDC,uBAAY,CAACZ,mCAAmC,EAChDf,iBAAiB,CAACe,mCAAmC,CACtD;IACD,OAAOgE,+BAA+B,KAAK,MAAM;EACnD;EAEA,IAAIC,YAAYA,CAAA,EAAiB;IAC/B,MAAMC,MAAM,GAAG;MACbC,SAAS,EAAE,IAAI,CAAC3D,MAAM;MACtB4D,UAAU,EAAE,IAAI,CAACvD,OAAO;MACxBwD,WAAW,EAAE,IAAI,CAAChD,QAAQ;MAC1BiD,QAAQ,EAAE,IAAI,CAAC/C,KAAK;MACpBO,gBAAgB,EAAE,IAAI,CAACA;IACzB,CAAC;IACD,OAAOoC,MAAM;EACf;AACF;AAAC,IAAAK,QAAA,GAGc,IAAIpE,MAAM,EAAE;AAAAqE,OAAA,CAAAC,OAAA,GAAAF,QAAA"}

package/edge/getSessionOnEdge.js

@@ -52,8 +52,12 @@ const handleHostedLoginCallback = async (req, pathname, searchParams) => {
     expires: new Date(decodedJwt.exp * 1000),
     secure: isSecured
   });
+  let cookieName = `fe_refresh_${_config.default.clientId.replace('-', '')}`;
+  if (_config.default.rewriteCookieByAppId && _config.default.appId) {
+    cookieName = `fe_refresh_${_config.default.appId.replace('-', '')}`;
+  }
   const refreshCookie = _cookies.default.create({
-    cookieName: `fe_refresh_${_config.default.clientId.replace('-', '')}`,
+    cookieName,
     value: refreshToken != null ? refreshToken : '',
     expires: new Date(decodedJwt.exp * 1000),
     secure: isSecured

package/edge/getSessionOnEdge.js.map

@@ -1 +1 @@
-{"version":3,"file":"getSessionOnEdge.js","names":["_cookies","_interopRequireDefault","require","_createSession","_encryptionEdge","_api","_server","_config","_jwt","createSessionFromAccessTokenEdge","data","_data$accessToken","_data$refreshToken","accessToken","access_token","refreshToken","refresh_token","payload","decodedJwt","JwtManager","verify","expiresIn","Math","floor","exp","Date","now","tokens","session","encryptionUtils","sealTokens","getSessionOnEdge","req","cookies","CookieManager","getSessionCookieFromRequest","createSession","encryptionEdge","exports","handleHostedLoginCallback","pathname","searchParams","_searchParams$get","isHostedLoginCallback","NextResponse","next","code","get","response","api","exchangeHostedLoginToken","config","clientId","clientSecret","json","redirect","appUrl","isSecured","isSSL","cookieValue","create","value","expires","secure","refreshCookie","cookieName","replace","sessionCookieHeaders","map","cookie","refreshCookieHeaders","headers","secureJwtEnabled","startsWith"],"sources":["../../../../packages/nextjs/src/edge/getSessionOnEdge.ts"],"sourcesContent":["import type { IncomingMessage } from 'http';\nimport { FronteggNextJSSession } from '../types';\nimport CookieManager from '../utils/cookies';\nimport createSession from '../utils/createSession';\nimport encryptionEdge from '../utils/encryption-edge';\nimport api from '../api';\nimport { NextResponse } from 'next/server';\nimport config from '../config';\nimport JwtManager from '../utils/jwt';\nimport encryptionUtils from '../utils/encryption-edge';\nimport Cookies from '../utils/cookies';\n\nasync function createSessionFromAccessTokenEdge(data: any): Promise<[string, any, string] | []> {\n  const accessToken = data.accessToken ?? data.access_token;\n  const refreshToken = data.refreshToken ?? data.refresh_token;\n  const { payload: decodedJwt }: any = await JwtManager.verify(accessToken);\n  decodedJwt.expiresIn = Math.floor((decodedJwt.exp * 1000 - Date.now()) / 1000);\n\n  const tokens = { accessToken, refreshToken };\n  const session = await encryptionUtils.sealTokens(tokens, decodedJwt.exp);\n  return [session, decodedJwt, refreshToken];\n}\n\nexport const getSessionOnEdge = (req: IncomingMessage | Request): Promise<FronteggNextJSSession | undefined> => {\n  const cookies = CookieManager.getSessionCookieFromRequest(req);\n  return createSession(cookies, encryptionEdge);\n};\n\nexport const handleHostedLoginCallback = async (\n  req: IncomingMessage | Request,\n  pathname: string,\n  searchParams: URLSearchParams\n): Promise<NextResponse> => {\n  if (!isHostedLoginCallback(pathname, searchParams)) {\n    return NextResponse.next();\n  }\n\n  const code = searchParams.get('code') ?? '';\n  const response = await api.exchangeHostedLoginToken(\n    {\n      'Content-Type': 'application/json',\n    },\n    code,\n    config.clientId,\n    config.clientSecret!\n  );\n\n  const data = await response.json();\n\n  const [session, decodedJwt, refreshToken] = await createSessionFromAccessTokenEdge(data);\n\n  if (!session) {\n    return NextResponse.redirect(config.appUrl);\n  }\n  const isSecured = config.isSSL;\n  const cookieValue = CookieManager.create({\n    value: session,\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n  const refreshCookie = CookieManager.create({\n    cookieName: `fe_refresh_${config.clientId.replace('-', '')}`,\n    value: refreshToken ?? '',\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n  const sessionCookieHeaders: [string, string][] = cookieValue.map((cookie) => ['set-cookie', cookie]);\n  const refreshCookieHeaders: [string, string][] = refreshCookie.map((cookie) => ['set-cookie', cookie]);\n\n  return NextResponse.redirect(config.appUrl, {\n    headers: [...sessionCookieHeaders, ...refreshCookieHeaders],\n  });\n};\n\nexport const isHostedLoginCallback = (pathname: string, searchParams: URLSearchParams): boolean => {\n  if (config.secureJwtEnabled) {\n    if (pathname.startsWith('/oauth/callback')) {\n      return searchParams.get('code') != null;\n    }\n  }\n  return false;\n};\n"],"mappings":";;;;;;;AAEA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,cAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,eAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,IAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAN,sBAAA,CAAAC,OAAA;AACA,IAAAM,IAAA,GAAAP,sBAAA,CAAAC,OAAA;AAIA,eAAeO,gCAAgCA,CAACC,IAAS,EAAuC;EAAA,IAAAC,iBAAA,EAAAC,kBAAA;EAC9F,MAAMC,WAAW,IAAAF,iBAAA,GAAGD,IAAI,CAACG,WAAW,YAAAF,iBAAA,GAAID,IAAI,CAACI,YAAY;EACzD,MAAMC,YAAY,IAAAH,kBAAA,GAAGF,IAAI,CAACK,YAAY,YAAAH,kBAAA,GAAIF,IAAI,CAACM,aAAa;EAC5D,MAAM;IAAEC,OAAO,EAAEC;EAAgB,CAAC,GAAG,MAAMC,YAAU,CAACC,MAAM,CAACP,WAAW,CAAC;EACzEK,UAAU,CAACG,SAAS,GAAGC,IAAI,CAACC,KAAK,CAAC,CAACL,UAAU,CAACM,GAAG,GAAG,IAAI,GAAGC,IAAI,CAACC,GAAG,EAAE,IAAI,IAAI,CAAC;EAE9E,MAAMC,MAAM,GAAG;IAAEd,WAAW;IAAEE;EAAa,CAAC;EAC5C,MAAMa,OAAO,GAAG,MAAMC,uBAAe,CAACC,UAAU,CAACH,MAAM,EAAET,UAAU,CAACM,GAAG,CAAC;EACxE,OAAO,CAACI,OAAO,EAAEV,UAAU,EAAEH,YAAY,CAAC;AAC5C;AAEO,MAAMgB,gBAAgB,GAAIC,GAA8B,IAAiD;EAC9G,MAAMC,OAAO,GAAGC,gBAAa,CAACC,2BAA2B,CAACH,GAAG,CAAC;EAC9D,OAAO,IAAAI,sBAAa,EAACH,OAAO,EAAEI,uBAAc,CAAC;AAC/C,CAAC;AAACC,OAAA,CAAAP,gBAAA,GAAAA,gBAAA;AAEK,MAAMQ,yBAAyB,GAAG,MAAAA,CACvCP,GAA8B,EAC9BQ,QAAgB,EAChBC,YAA6B,KACH;EAAA,IAAAC,iBAAA;EAC1B,IAAI,CAACC,qBAAqB,CAACH,QAAQ,EAAEC,YAAY,CAAC,EAAE;IAClD,OAAOG,oBAAY,CAACC,IAAI,EAAE;EAC5B;EAEA,MAAMC,IAAI,IAAAJ,iBAAA,GAAGD,YAAY,CAACM,GAAG,CAAC,MAAM,CAAC,YAAAL,iBAAA,GAAI,EAAE;EAC3C,MAAMM,QAAQ,GAAG,MAAMC,YAAG,CAACC,wBAAwB,CACjD;IACE,cAAc,EAAE;EAClB,CAAC,EACDJ,IAAI,EACJK,eAAM,CAACC,QAAQ,EACfD,eAAM,CAACE,YAAY,CACpB;EAED,MAAM3C,IAAI,GAAG,MAAMsC,QAAQ,CAACM,IAAI,EAAE;EAElC,MAAM,CAAC1B,OAAO,EAAEV,UAAU,EAAEH,YAAY,CAAC,GAAG,MAAMN,gCAAgC,CAACC,IAAI,CAAC;EAExF,IAAI,CAACkB,OAAO,EAAE;IACZ,OAAOgB,oBAAY,CAACW,QAAQ,CAACJ,eAAM,CAACK,MAAM,CAAC;EAC7C;EACA,MAAMC,SAAS,GAAGN,eAAM,CAACO,KAAK;EAC9B,MAAMC,WAAW,GAAGzB,gBAAa,CAAC0B,MAAM,CAAC;IACvCC,KAAK,EAAEjC,OAAO;IACdkC,OAAO,EAAE,IAAIrC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCuC,MAAM,EAAEN;EACV,CAAC,CAAC;EACF,MAAMO,aAAa,GAAG9B,gBAAa,CAAC0B,MAAM,CAAC;IACzCK,UAAU,EAAG,cAAad,eAAM,CAACC,QAAQ,CAACc,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC;IAC5DL,KAAK,EAAE9C,YAAY,WAAZA,YAAY,GAAI,EAAE;IACzB+C,OAAO,EAAE,IAAIrC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCuC,MAAM,EAAEN;EACV,CAAC,CAAC;EACF,MAAMU,oBAAwC,GAAGR,WAAW,CAACS,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EACpG,MAAMC,oBAAwC,GAAGN,aAAa,CAACI,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EAEtG,OAAOzB,oBAAY,CAACW,QAAQ,CAACJ,eAAM,CAACK,MAAM,EAAE;IAC1Ce,OAAO,EAAE,CAAC,GAAGJ,oBAAoB,EAAE,GAAGG,oBAAoB;EAC5D,CAAC,CAAC;AACJ,CAAC;AAAChC,OAAA,CAAAC,yBAAA,GAAAA,yBAAA;AAEK,MAAMI,qBAAqB,GAAGA,CAACH,QAAgB,EAAEC,YAA6B,KAAc;EACjG,IAAIU,eAAM,CAACqB,gBAAgB,EAAE;IAC3B,IAAIhC,QAAQ,CAACiC,UAAU,CAAC,iBAAiB,CAAC,EAAE;MAC1C,OAAOhC,YAAY,CAACM,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI;IACzC;EACF;EACA,OAAO,KAAK;AACd,CAAC;AAACT,OAAA,CAAAK,qBAAA,GAAAA,qBAAA"}
+{"version":3,"file":"getSessionOnEdge.js","names":["_cookies","_interopRequireDefault","require","_createSession","_encryptionEdge","_api","_server","_config","_jwt","createSessionFromAccessTokenEdge","data","_data$accessToken","_data$refreshToken","accessToken","access_token","refreshToken","refresh_token","payload","decodedJwt","JwtManager","verify","expiresIn","Math","floor","exp","Date","now","tokens","session","encryptionUtils","sealTokens","getSessionOnEdge","req","cookies","CookieManager","getSessionCookieFromRequest","createSession","encryptionEdge","exports","handleHostedLoginCallback","pathname","searchParams","_searchParams$get","isHostedLoginCallback","NextResponse","next","code","get","response","api","exchangeHostedLoginToken","config","clientId","clientSecret","json","redirect","appUrl","isSecured","isSSL","cookieValue","create","value","expires","secure","cookieName","replace","rewriteCookieByAppId","appId","refreshCookie","sessionCookieHeaders","map","cookie","refreshCookieHeaders","headers","secureJwtEnabled","startsWith"],"sources":["../../../../packages/nextjs/src/edge/getSessionOnEdge.ts"],"sourcesContent":["import type { IncomingMessage } from 'http';\nimport { FronteggNextJSSession } from '../types';\nimport CookieManager from '../utils/cookies';\nimport createSession from '../utils/createSession';\nimport encryptionEdge from '../utils/encryption-edge';\nimport api from '../api';\nimport { NextResponse } from 'next/server';\nimport config from '../config';\nimport JwtManager from '../utils/jwt';\nimport encryptionUtils from '../utils/encryption-edge';\nimport Cookies from '../utils/cookies';\n\nasync function createSessionFromAccessTokenEdge(data: any): Promise<[string, any, string] | []> {\n  const accessToken = data.accessToken ?? data.access_token;\n  const refreshToken = data.refreshToken ?? data.refresh_token;\n  const { payload: decodedJwt }: any = await JwtManager.verify(accessToken);\n  decodedJwt.expiresIn = Math.floor((decodedJwt.exp * 1000 - Date.now()) / 1000);\n\n  const tokens = { accessToken, refreshToken };\n  const session = await encryptionUtils.sealTokens(tokens, decodedJwt.exp);\n  return [session, decodedJwt, refreshToken];\n}\n\nexport const getSessionOnEdge = (req: IncomingMessage | Request): Promise<FronteggNextJSSession | undefined> => {\n  const cookies = CookieManager.getSessionCookieFromRequest(req);\n  return createSession(cookies, encryptionEdge);\n};\n\nexport const handleHostedLoginCallback = async (\n  req: IncomingMessage | Request,\n  pathname: string,\n  searchParams: URLSearchParams\n): Promise<NextResponse> => {\n  if (!isHostedLoginCallback(pathname, searchParams)) {\n    return NextResponse.next();\n  }\n\n  const code = searchParams.get('code') ?? '';\n  const response = await api.exchangeHostedLoginToken(\n    {\n      'Content-Type': 'application/json',\n    },\n    code,\n    config.clientId,\n    config.clientSecret!\n  );\n\n  const data = await response.json();\n\n  const [session, decodedJwt, refreshToken] = await createSessionFromAccessTokenEdge(data);\n\n  if (!session) {\n    return NextResponse.redirect(config.appUrl);\n  }\n  const isSecured = config.isSSL;\n  const cookieValue = CookieManager.create({\n    value: session,\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n\n  let cookieName = `fe_refresh_${config.clientId.replace('-', '')}`;\n  if (config.rewriteCookieByAppId && config.appId) {\n    cookieName = `fe_refresh_${config.appId.replace('-', '')}`;\n  }\n  const refreshCookie = CookieManager.create({\n    cookieName,\n    value: refreshToken ?? '',\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n  const sessionCookieHeaders: [string, string][] = cookieValue.map((cookie) => ['set-cookie', cookie]);\n  const refreshCookieHeaders: [string, string][] = refreshCookie.map((cookie) => ['set-cookie', cookie]);\n\n  return NextResponse.redirect(config.appUrl, {\n    headers: [...sessionCookieHeaders, ...refreshCookieHeaders],\n  });\n};\n\nexport const isHostedLoginCallback = (pathname: string, searchParams: URLSearchParams): boolean => {\n  if (config.secureJwtEnabled) {\n    if (pathname.startsWith('/oauth/callback')) {\n      return searchParams.get('code') != null;\n    }\n  }\n  return false;\n};\n"],"mappings":";;;;;;;AAEA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,cAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,eAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,IAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAN,sBAAA,CAAAC,OAAA;AACA,IAAAM,IAAA,GAAAP,sBAAA,CAAAC,OAAA;AAIA,eAAeO,gCAAgCA,CAACC,IAAS,EAAuC;EAAA,IAAAC,iBAAA,EAAAC,kBAAA;EAC9F,MAAMC,WAAW,IAAAF,iBAAA,GAAGD,IAAI,CAACG,WAAW,YAAAF,iBAAA,GAAID,IAAI,CAACI,YAAY;EACzD,MAAMC,YAAY,IAAAH,kBAAA,GAAGF,IAAI,CAACK,YAAY,YAAAH,kBAAA,GAAIF,IAAI,CAACM,aAAa;EAC5D,MAAM;IAAEC,OAAO,EAAEC;EAAgB,CAAC,GAAG,MAAMC,YAAU,CAACC,MAAM,CAACP,WAAW,CAAC;EACzEK,UAAU,CAACG,SAAS,GAAGC,IAAI,CAACC,KAAK,CAAC,CAACL,UAAU,CAACM,GAAG,GAAG,IAAI,GAAGC,IAAI,CAACC,GAAG,EAAE,IAAI,IAAI,CAAC;EAE9E,MAAMC,MAAM,GAAG;IAAEd,WAAW;IAAEE;EAAa,CAAC;EAC5C,MAAMa,OAAO,GAAG,MAAMC,uBAAe,CAACC,UAAU,CAACH,MAAM,EAAET,UAAU,CAACM,GAAG,CAAC;EACxE,OAAO,CAACI,OAAO,EAAEV,UAAU,EAAEH,YAAY,CAAC;AAC5C;AAEO,MAAMgB,gBAAgB,GAAIC,GAA8B,IAAiD;EAC9G,MAAMC,OAAO,GAAGC,gBAAa,CAACC,2BAA2B,CAACH,GAAG,CAAC;EAC9D,OAAO,IAAAI,sBAAa,EAACH,OAAO,EAAEI,uBAAc,CAAC;AAC/C,CAAC;AAACC,OAAA,CAAAP,gBAAA,GAAAA,gBAAA;AAEK,MAAMQ,yBAAyB,GAAG,MAAAA,CACvCP,GAA8B,EAC9BQ,QAAgB,EAChBC,YAA6B,KACH;EAAA,IAAAC,iBAAA;EAC1B,IAAI,CAACC,qBAAqB,CAACH,QAAQ,EAAEC,YAAY,CAAC,EAAE;IAClD,OAAOG,oBAAY,CAACC,IAAI,EAAE;EAC5B;EAEA,MAAMC,IAAI,IAAAJ,iBAAA,GAAGD,YAAY,CAACM,GAAG,CAAC,MAAM,CAAC,YAAAL,iBAAA,GAAI,EAAE;EAC3C,MAAMM,QAAQ,GAAG,MAAMC,YAAG,CAACC,wBAAwB,CACjD;IACE,cAAc,EAAE;EAClB,CAAC,EACDJ,IAAI,EACJK,eAAM,CAACC,QAAQ,EACfD,eAAM,CAACE,YAAY,CACpB;EAED,MAAM3C,IAAI,GAAG,MAAMsC,QAAQ,CAACM,IAAI,EAAE;EAElC,MAAM,CAAC1B,OAAO,EAAEV,UAAU,EAAEH,YAAY,CAAC,GAAG,MAAMN,gCAAgC,CAACC,IAAI,CAAC;EAExF,IAAI,CAACkB,OAAO,EAAE;IACZ,OAAOgB,oBAAY,CAACW,QAAQ,CAACJ,eAAM,CAACK,MAAM,CAAC;EAC7C;EACA,MAAMC,SAAS,GAAGN,eAAM,CAACO,KAAK;EAC9B,MAAMC,WAAW,GAAGzB,gBAAa,CAAC0B,MAAM,CAAC;IACvCC,KAAK,EAAEjC,OAAO;IACdkC,OAAO,EAAE,IAAIrC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCuC,MAAM,EAAEN;EACV,CAAC,CAAC;EAEF,IAAIO,UAAU,GAAI,cAAab,eAAM,CAACC,QAAQ,CAACa,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC;EACjE,IAAId,eAAM,CAACe,oBAAoB,IAAIf,eAAM,CAACgB,KAAK,EAAE;IAC/CH,UAAU,GAAI,cAAab,eAAM,CAACgB,KAAK,CAACF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC;EAC5D;EACA,MAAMG,aAAa,GAAGlC,gBAAa,CAAC0B,MAAM,CAAC;IACzCI,UAAU;IACVH,KAAK,EAAE9C,YAAY,WAAZA,YAAY,GAAI,EAAE;IACzB+C,OAAO,EAAE,IAAIrC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCuC,MAAM,EAAEN;EACV,CAAC,CAAC;EACF,MAAMY,oBAAwC,GAAGV,WAAW,CAACW,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EACpG,MAAMC,oBAAwC,GAAGJ,aAAa,CAACE,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EAEtG,OAAO3B,oBAAY,CAACW,QAAQ,CAACJ,eAAM,CAACK,MAAM,EAAE;IAC1CiB,OAAO,EAAE,CAAC,GAAGJ,oBAAoB,EAAE,GAAGG,oBAAoB;EAC5D,CAAC,CAAC;AACJ,CAAC;AAAClC,OAAA,CAAAC,yBAAA,GAAAA,yBAAA;AAEK,MAAMI,qBAAqB,GAAGA,CAACH,QAAgB,EAAEC,YAA6B,KAAc;EACjG,IAAIU,eAAM,CAACuB,gBAAgB,EAAE;IAC3B,IAAIlC,QAAQ,CAACmC,UAAU,CAAC,iBAAiB,CAAC,EAAE;MAC1C,OAAOlC,YAAY,CAACM,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI;IACzC;EACF;EACA,OAAO,KAAK;AACd,CAAC;AAACT,OAAA,CAAAK,qBAAA,GAAAA,qBAAA"}

package/index.js

@@ -1,4 +1,4 @@
-/** @license Frontegg v9.0.3
+/** @license Frontegg v9.0.4-alpha.11358351428
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.

package/middleware/ProxyRequestCallback.js

@@ -31,8 +31,13 @@ const ProxyRequestCallback = (proxyReq, req) => {
       return cookieName.startsWith('fe_') && !cookieName.startsWith(_config.default.cookieName);
     });
     logger.debug(`${req.url} | proxy FronteggCookies (${fronteggCookiesNames.join(', ')})`);
-    fronteggCookiesNames.forEach(cookieName => {
-      proxyReq.setHeader(cookieName, allCookies[cookieName]);
+    fronteggCookiesNames.forEach(requestCookieName => {
+      let cookieName = requestCookieName;
+      if (_config.default.rewriteCookieByAppId && _config.default.appId) {
+        cookieName = requestCookieName.replace(_config.default.appId, _config.default.clientId).replace(_config.default.appId.replace(/-/g, ''), _config.default.clientId.replace(/-/g, '')).replace(_config.default.appId.replace('-', ''), _config.default.clientId.replace('-', ''));
+        logger.debug(`cookieName ${requestCookieName} replaced with appId ${cookieName}`);
+      }
+      proxyReq.setHeader(cookieName, allCookies[requestCookieName]);
     });
     proxyReq.setHeader('x-frontegg-framework', (_req$headers$xFronte = req.headers['x-frontegg-framework']) != null ? _req$headers$xFronte : `next@${_package.default.version}`);
     proxyReq.setHeader('x-frontegg-sdk', (_req$headers$xFronte2 = req.headers['x-frontegg-sdk']) != null ? _req$headers$xFronte2 : `@frontegg/nextjs@${_sdkVersion.default.version}`);

package/middleware/ProxyRequestCallback.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProxyRequestCallback.js","names":["_package","_interopRequireDefault","require","_sdkVersion","_config","_cookies","_fronteggLogger","logger","fronteggLogger","child","tag","ProxyRequestCallback","proxyReq","req","_req$headers$xFronte","_req$headers$xFronte2","info","url","debug","allCookies","CookieManager","parseCookieHeader","fronteggCookiesNames","Object","keys","filter","cookieName","startsWith","config","join","forEach","setHeader","headers","NextJsPkg","version","sdkVersion","xForwardedFor","xOriginalForwardedFor","cfConnectionIp","map","header","removeHeader","method","body","bodyData","JSON","stringify","Buffer","byteLength","write","e","error","_default","exports","default"],"sources":["../../../../packages/nextjs/src/middleware/ProxyRequestCallback.ts"],"sourcesContent":["import NextJsPkg from 'next/package.json';\nimport { ProxyReqCallback } from 'http-proxy';\nimport { ClientRequest } from 'http';\nimport { NextApiRequest } from 'next';\nimport sdkVersion from '../sdkVersion';\nimport config from '../config';\nimport CookieManager from '../utils/cookies';\nimport fronteggLogger from '../utils/fronteggLogger';\n\nconst logger = fronteggLogger.child({ tag: 'FronteggApiMiddleware.ProxyRequestCallback' });\n/**\n * Proxy request callback fired on before each request to Frontegg services,\n * to transport frontegg cookies.\n *\n * @param {ClientRequest} proxyReq - Proxy request to be sent\n * @param {NextApiRequest} req - Next.js incoming request\n */\nconst ProxyRequestCallback: ProxyReqCallback<ClientRequest, NextApiRequest> = (proxyReq, req) => {\n  try {\n    logger.info(`${req.url} | Going to proxy request`);\n    logger.debug(`${req.url} | parsing request cookies`);\n    const allCookies = CookieManager.parseCookieHeader(req);\n    logger.debug(`${req.url} | found ${allCookies} cookies`);\n    const fronteggCookiesNames = Object.keys(allCookies).filter((cookieName) => {\n      return cookieName.startsWith('fe_') && !cookieName.startsWith(config.cookieName);\n    });\n\n    logger.debug(`${req.url} | proxy FronteggCookies (${fronteggCookiesNames.join(', ')})`);\n    fronteggCookiesNames.forEach((cookieName: string) => {\n      proxyReq.setHeader(cookieName, allCookies[cookieName]);\n    });\n\n    proxyReq.setHeader('x-frontegg-framework', req.headers['x-frontegg-framework'] ?? `next@${NextJsPkg.version}`);\n    proxyReq.setHeader('x-frontegg-sdk', req.headers['x-frontegg-sdk'] ?? `@frontegg/nextjs@${sdkVersion.version}`);\n    proxyReq.setHeader('x-frontegg-middleware', 'true');\n\n    const xForwardedFor = req.headers['x-forwarded-for'];\n    const xOriginalForwardedFor = req.headers['x-original-forwarded-for'];\n    const cfConnectionIp = req.headers['cf-connecting-ip'];\n\n    if (xForwardedFor) {\n      proxyReq.setHeader('x-forwarded-for', xForwardedFor);\n    }\n    if (xOriginalForwardedFor) {\n      proxyReq.setHeader('x-original-forwarded-for', xOriginalForwardedFor);\n    }\n    if (cfConnectionIp) {\n      proxyReq.setHeader('cf-connecting-ip', cfConnectionIp);\n    }\n\n    [\n      'x-invoke-path',\n      'x-invoke-query',\n      'x-middleware-invoke',\n      'x-middleware-next',\n      'transfer-encoding',\n      'cache-control',\n    ].map((header) => proxyReq.removeHeader(header));\n\n    logger.debug(`${req.url} | check if request has body`);\n    if (req.method !== 'GET' && req.body) {\n      logger.debug(`${req.url} | writing request body to proxyReq`);\n      const bodyData = JSON.stringify(req.body);\n      // in case if content-type is application/x-www-form-urlencoded -> we need to change to application/json\n      proxyReq.setHeader('Content-Type', 'application/json');\n      proxyReq.setHeader('Content-Length', Buffer.byteLength(bodyData));\n      // stream the content\n      proxyReq.write(bodyData);\n    }\n  } catch (e) {\n    logger.error(`${req.url} | Failed to proxy request`, e);\n  }\n};\n\nexport default ProxyRequestCallback;\n"],"mappings":";;;;;;;AAAA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIA,IAAAC,WAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,OAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,eAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,MAAMK,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;EAAEC,GAAG,EAAE;AAA6C,CAAC,CAAC;AAC1F;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,oBAAqE,GAAGA,CAACC,QAAQ,EAAEC,GAAG,KAAK;EAC/F,IAAI;IAAA,IAAAC,oBAAA,EAAAC,qBAAA;IACFR,MAAM,CAACS,IAAI,CAAE,GAAEH,GAAG,CAACI,GAAI,2BAA0B,CAAC;IAClDV,MAAM,CAACW,KAAK,CAAE,GAAEL,GAAG,CAACI,GAAI,4BAA2B,CAAC;IACpD,MAAME,UAAU,GAAGC,gBAAa,CAACC,iBAAiB,CAACR,GAAG,CAAC;IACvDN,MAAM,CAACW,KAAK,CAAE,GAAEL,GAAG,CAACI,GAAI,YAAWE,UAAW,UAAS,CAAC;IACxD,MAAMG,oBAAoB,GAAGC,MAAM,CAACC,IAAI,CAACL,UAAU,CAAC,CAACM,MAAM,CAAEC,UAAU,IAAK;MAC1E,OAAOA,UAAU,CAACC,UAAU,CAAC,KAAK,CAAC,IAAI,CAACD,UAAU,CAACC,UAAU,CAACC,eAAM,CAACF,UAAU,CAAC;IAClF,CAAC,CAAC;IAEFnB,MAAM,CAACW,KAAK,CAAE,GAAEL,GAAG,CAACI,GAAI,6BAA4BK,oBAAoB,CAACO,IAAI,CAAC,IAAI,CAAE,GAAE,CAAC;IACvFP,oBAAoB,CAACQ,OAAO,CAAEJ,UAAkB,IAAK;MACnDd,QAAQ,CAACmB,SAAS,CAACL,UAAU,EAAEP,UAAU,CAACO,UAAU,CAAC,CAAC;IACxD,CAAC,CAAC;IAEFd,QAAQ,CAACmB,SAAS,CAAC,sBAAsB,GAAAjB,oBAAA,GAAED,GAAG,CAACmB,OAAO,CAAC,sBAAsB,CAAC,YAAAlB,oBAAA,GAAK,QAAOmB,gBAAS,CAACC,OAAQ,EAAC,CAAC;IAC9GtB,QAAQ,CAACmB,SAAS,CAAC,gBAAgB,GAAAhB,qBAAA,GAAEF,GAAG,CAACmB,OAAO,CAAC,gBAAgB,CAAC,YAAAjB,qBAAA,GAAK,oBAAmBoB,mBAAU,CAACD,OAAQ,EAAC,CAAC;IAC/GtB,QAAQ,CAACmB,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC;IAEnD,MAAMK,aAAa,GAAGvB,GAAG,CAACmB,OAAO,CAAC,iBAAiB,CAAC;IACpD,MAAMK,qBAAqB,GAAGxB,GAAG,CAACmB,OAAO,CAAC,0BAA0B,CAAC;IACrE,MAAMM,cAAc,GAAGzB,GAAG,CAACmB,OAAO,CAAC,kBAAkB,CAAC;IAEtD,IAAII,aAAa,EAAE;MACjBxB,QAAQ,CAACmB,SAAS,CAAC,iBAAiB,EAAEK,aAAa,CAAC;IACtD;IACA,IAAIC,qBAAqB,EAAE;MACzBzB,QAAQ,CAACmB,SAAS,CAAC,0BAA0B,EAAEM,qBAAqB,CAAC;IACvE;IACA,IAAIC,cAAc,EAAE;MAClB1B,QAAQ,CAACmB,SAAS,CAAC,kBAAkB,EAAEO,cAAc,CAAC;IACxD;IAEA,CACE,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,CAChB,CAACC,GAAG,CAAEC,MAAM,IAAK5B,QAAQ,CAAC6B,YAAY,CAACD,MAAM,CAAC,CAAC;IAEhDjC,MAAM,CAACW,KAAK,CAAE,GAAEL,GAAG,CAACI,GAAI,8BAA6B,CAAC;IACtD,IAAIJ,GAAG,CAAC6B,MAAM,KAAK,KAAK,IAAI7B,GAAG,CAAC8B,IAAI,EAAE;MACpCpC,MAAM,CAACW,KAAK,CAAE,GAAEL,GAAG,CAACI,GAAI,qCAAoC,CAAC;MAC7D,MAAM2B,QAAQ,GAAGC,IAAI,CAACC,SAAS,CAACjC,GAAG,CAAC8B,IAAI,CAAC;MACzC;MACA/B,QAAQ,CAACmB,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC;MACtDnB,QAAQ,CAACmB,SAAS,CAAC,gBAAgB,EAAEgB,MAAM,CAACC,UAAU,CAACJ,QAAQ,CAAC,CAAC;MACjE;MACAhC,QAAQ,CAACqC,KAAK,CAACL,QAAQ,CAAC;IAC1B;EACF,CAAC,CAAC,OAAOM,CAAC,EAAE;IACV3C,MAAM,CAAC4C,KAAK,CAAE,GAAEtC,GAAG,CAACI,GAAI,4BAA2B,EAAEiC,CAAC,CAAC;EACzD;AACF,CAAC;AAAC,IAAAE,QAAA,GAEazC,oBAAoB;AAAA0C,OAAA,CAAAC,OAAA,GAAAF,QAAA"}
+{"version":3,"file":"ProxyRequestCallback.js","names":["_package","_interopRequireDefault","require","_sdkVersion","_config","_cookies","_fronteggLogger","logger","fronteggLogger","child","tag","ProxyRequestCallback","proxyReq","req","_req$headers$xFronte","_req$headers$xFronte2","info","url","debug","allCookies","CookieManager","parseCookieHeader","fronteggCookiesNames","Object","keys","filter","cookieName","startsWith","config","join","forEach","requestCookieName","rewriteCookieByAppId","appId","replace","clientId","setHeader","headers","NextJsPkg","version","sdkVersion","xForwardedFor","xOriginalForwardedFor","cfConnectionIp","map","header","removeHeader","method","body","bodyData","JSON","stringify","Buffer","byteLength","write","e","error","_default","exports","default"],"sources":["../../../../packages/nextjs/src/middleware/ProxyRequestCallback.ts"],"sourcesContent":["import NextJsPkg from 'next/package.json';\nimport { ProxyReqCallback } from 'http-proxy';\nimport { ClientRequest } from 'http';\nimport { NextApiRequest } from 'next';\nimport sdkVersion from '../sdkVersion';\nimport config from '../config';\nimport CookieManager from '../utils/cookies';\nimport fronteggLogger from '../utils/fronteggLogger';\n\nconst logger = fronteggLogger.child({ tag: 'FronteggApiMiddleware.ProxyRequestCallback' });\n/**\n * Proxy request callback fired on before each request to Frontegg services,\n * to transport frontegg cookies.\n *\n * @param {ClientRequest} proxyReq - Proxy request to be sent\n * @param {NextApiRequest} req - Next.js incoming request\n */\nconst ProxyRequestCallback: ProxyReqCallback<ClientRequest, NextApiRequest> = (proxyReq, req) => {\n  try {\n    logger.info(`${req.url} | Going to proxy request`);\n    logger.debug(`${req.url} | parsing request cookies`);\n    const allCookies = CookieManager.parseCookieHeader(req);\n    logger.debug(`${req.url} | found ${allCookies} cookies`);\n    const fronteggCookiesNames = Object.keys(allCookies).filter((cookieName) => {\n      return cookieName.startsWith('fe_') && !cookieName.startsWith(config.cookieName);\n    });\n\n    logger.debug(`${req.url} | proxy FronteggCookies (${fronteggCookiesNames.join(', ')})`);\n    fronteggCookiesNames.forEach((requestCookieName: string) => {\n      let cookieName = requestCookieName;\n      if (config.rewriteCookieByAppId && config.appId) {\n        cookieName = requestCookieName\n          .replace(config.appId, config.clientId)\n          .replace(config.appId.replace(/-/g, ''), config.clientId.replace(/-/g, ''))\n          .replace(config.appId.replace('-', ''), config.clientId.replace('-', ''));\n\n        logger.debug(`cookieName ${requestCookieName} replaced with appId ${cookieName}`);\n      }\n      proxyReq.setHeader(cookieName, allCookies[requestCookieName]);\n    });\n\n    proxyReq.setHeader('x-frontegg-framework', req.headers['x-frontegg-framework'] ?? `next@${NextJsPkg.version}`);\n    proxyReq.setHeader('x-frontegg-sdk', req.headers['x-frontegg-sdk'] ?? `@frontegg/nextjs@${sdkVersion.version}`);\n    proxyReq.setHeader('x-frontegg-middleware', 'true');\n\n    const xForwardedFor = req.headers['x-forwarded-for'];\n    const xOriginalForwardedFor = req.headers['x-original-forwarded-for'];\n    const cfConnectionIp = req.headers['cf-connecting-ip'];\n\n    if (xForwardedFor) {\n      proxyReq.setHeader('x-forwarded-for', xForwardedFor);\n    }\n    if (xOriginalForwardedFor) {\n      proxyReq.setHeader('x-original-forwarded-for', xOriginalForwardedFor);\n    }\n    if (cfConnectionIp) {\n      proxyReq.setHeader('cf-connecting-ip', cfConnectionIp);\n    }\n\n    [\n      'x-invoke-path',\n      'x-invoke-query',\n      'x-middleware-invoke',\n      'x-middleware-next',\n      'transfer-encoding',\n      'cache-control',\n    ].map((header) => proxyReq.removeHeader(header));\n\n    logger.debug(`${req.url} | check if request has body`);\n    if (req.method !== 'GET' && req.body) {\n      logger.debug(`${req.url} | writing request body to proxyReq`);\n      const bodyData = JSON.stringify(req.body);\n      // in case if content-type is application/x-www-form-urlencoded -> we need to change to application/json\n      proxyReq.setHeader('Content-Type', 'application/json');\n      proxyReq.setHeader('Content-Length', Buffer.byteLength(bodyData));\n      // stream the content\n      proxyReq.write(bodyData);\n    }\n  } catch (e) {\n    logger.error(`${req.url} | Failed to proxy request`, e);\n  }\n};\n\nexport default ProxyRequestCallback;\n"],"mappings":";;;;;;;AAAA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIA,IAAAC,WAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,OAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,eAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,MAAMK,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;EAAEC,GAAG,EAAE;AAA6C,CAAC,CAAC;AAC1F;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,oBAAqE,GAAGA,CAACC,QAAQ,EAAEC,GAAG,KAAK;EAC/F,IAAI;IAAA,IAAAC,oBAAA,EAAAC,qBAAA;IACFR,MAAM,CAACS,IAAI,CAAE,GAAEH,GAAG,CAACI,GAAI,2BAA0B,CAAC;IAClDV,MAAM,CAACW,KAAK,CAAE,GAAEL,GAAG,CAACI,GAAI,4BAA2B,CAAC;IACpD,MAAME,UAAU,GAAGC,gBAAa,CAACC,iBAAiB,CAACR,GAAG,CAAC;IACvDN,MAAM,CAACW,KAAK,CAAE,GAAEL,GAAG,CAACI,GAAI,YAAWE,UAAW,UAAS,CAAC;IACxD,MAAMG,oBAAoB,GAAGC,MAAM,CAACC,IAAI,CAACL,UAAU,CAAC,CAACM,MAAM,CAAEC,UAAU,IAAK;MAC1E,OAAOA,UAAU,CAACC,UAAU,CAAC,KAAK,CAAC,IAAI,CAACD,UAAU,CAACC,UAAU,CAACC,eAAM,CAACF,UAAU,CAAC;IAClF,CAAC,CAAC;IAEFnB,MAAM,CAACW,KAAK,CAAE,GAAEL,GAAG,CAACI,GAAI,6BAA4BK,oBAAoB,CAACO,IAAI,CAAC,IAAI,CAAE,GAAE,CAAC;IACvFP,oBAAoB,CAACQ,OAAO,CAAEC,iBAAyB,IAAK;MAC1D,IAAIL,UAAU,GAAGK,iBAAiB;MAClC,IAAIH,eAAM,CAACI,oBAAoB,IAAIJ,eAAM,CAACK,KAAK,EAAE;QAC/CP,UAAU,GAAGK,iBAAiB,CAC3BG,OAAO,CAACN,eAAM,CAACK,KAAK,EAAEL,eAAM,CAACO,QAAQ,CAAC,CACtCD,OAAO,CAACN,eAAM,CAACK,KAAK,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAEN,eAAM,CAACO,QAAQ,CAACD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAC1EA,OAAO,CAACN,eAAM,CAACK,KAAK,CAACC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAEN,eAAM,CAACO,QAAQ,CAACD,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE3E3B,MAAM,CAACW,KAAK,CAAE,cAAaa,iBAAkB,wBAAuBL,UAAW,EAAC,CAAC;MACnF;MACAd,QAAQ,CAACwB,SAAS,CAACV,UAAU,EAAEP,UAAU,CAACY,iBAAiB,CAAC,CAAC;IAC/D,CAAC,CAAC;IAEFnB,QAAQ,CAACwB,SAAS,CAAC,sBAAsB,GAAAtB,oBAAA,GAAED,GAAG,CAACwB,OAAO,CAAC,sBAAsB,CAAC,YAAAvB,oBAAA,GAAK,QAAOwB,gBAAS,CAACC,OAAQ,EAAC,CAAC;IAC9G3B,QAAQ,CAACwB,SAAS,CAAC,gBAAgB,GAAArB,qBAAA,GAAEF,GAAG,CAACwB,OAAO,CAAC,gBAAgB,CAAC,YAAAtB,qBAAA,GAAK,oBAAmByB,mBAAU,CAACD,OAAQ,EAAC,CAAC;IAC/G3B,QAAQ,CAACwB,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC;IAEnD,MAAMK,aAAa,GAAG5B,GAAG,CAACwB,OAAO,CAAC,iBAAiB,CAAC;IACpD,MAAMK,qBAAqB,GAAG7B,GAAG,CAACwB,OAAO,CAAC,0BAA0B,CAAC;IACrE,MAAMM,cAAc,GAAG9B,GAAG,CAACwB,OAAO,CAAC,kBAAkB,CAAC;IAEtD,IAAII,aAAa,EAAE;MACjB7B,QAAQ,CAACwB,SAAS,CAAC,iBAAiB,EAAEK,aAAa,CAAC;IACtD;IACA,IAAIC,qBAAqB,EAAE;MACzB9B,QAAQ,CAACwB,SAAS,CAAC,0BAA0B,EAAEM,qBAAqB,CAAC;IACvE;IACA,IAAIC,cAAc,EAAE;MAClB/B,QAAQ,CAACwB,SAAS,CAAC,kBAAkB,EAAEO,cAAc,CAAC;IACxD;IAEA,CACE,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,CAChB,CAACC,GAAG,CAAEC,MAAM,IAAKjC,QAAQ,CAACkC,YAAY,CAACD,MAAM,CAAC,CAAC;IAEhDtC,MAAM,CAACW,KAAK,CAAE,GAAEL,GAAG,CAACI,GAAI,8BAA6B,CAAC;IACtD,IAAIJ,GAAG,CAACkC,MAAM,KAAK,KAAK,IAAIlC,GAAG,CAACmC,IAAI,EAAE;MACpCzC,MAAM,CAACW,KAAK,CAAE,GAAEL,GAAG,CAACI,GAAI,qCAAoC,CAAC;MAC7D,MAAMgC,QAAQ,GAAGC,IAAI,CAACC,SAAS,CAACtC,GAAG,CAACmC,IAAI,CAAC;MACzC;MACApC,QAAQ,CAACwB,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC;MACtDxB,QAAQ,CAACwB,SAAS,CAAC,gBAAgB,EAAEgB,MAAM,CAACC,UAAU,CAACJ,QAAQ,CAAC,CAAC;MACjE;MACArC,QAAQ,CAAC0C,KAAK,CAACL,QAAQ,CAAC;IAC1B;EACF,CAAC,CAAC,OAAOM,CAAC,EAAE;IACVhD,MAAM,CAACiD,KAAK,CAAE,GAAE3C,GAAG,CAACI,GAAI,4BAA2B,EAAEsC,CAAC,CAAC;EACzD;AACF,CAAC;AAAC,IAAAE,QAAA,GAEa9C,oBAAoB;AAAA+C,OAAA,CAAAC,OAAA,GAAAF,QAAA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@frontegg/nextjs",
   "libName": "FronteggNextJs",
-  "version": "9.0.3",
+  "version": "9.0.4-alpha.11358351428",
   "author": "Frontegg LTD",
   "license": "MIT",
   "repository": {

package/pages/withFronteggApp/withFronteggApp.js

@@ -70,7 +70,8 @@ const withFronteggApp = (app, options) => {
       envAppUrl,
       envBaseUrl,
       envClientId,
-      secureJwtEnabled
+      secureJwtEnabled,
+      envAppId
     } = appProps.pageProps;
     return /*#__PURE__*/(0, _jsxRuntime.jsx)(_FronteggPagesProvider.default, (0, _extends2.default)({}, options, {
       user,
@@ -81,6 +82,7 @@ const withFronteggApp = (app, options) => {
       envBaseUrl,
       secureJwtEnabled,
       envClientId,
+      envAppId,
       children: app(appProps)
     }));
   }

package/pages/withFronteggApp/withFronteggApp.js.map

@@ -1 +1 @@
-{"version":3,"file":"withFronteggApp.js","names":["_react","_interopRequireDefault","require","_FronteggPagesProvider","_refreshAccessTokenIfNeeded","_interopRequireWildcard","_fetchUserData","_config","_helpers","_jsxRuntime","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","withFronteggApp","app","options","originalGetInitialProps","getInitialProps","appContext","ctx","Component","appEnvConfig","appContextSessionData","session","user","tenants","req","_ctx$req","config","url","isRuntimeNextRequest","refreshAccessTokenIfNeeded","process","env","removeJwtSignatureFrom","assign","userData","fetchUserData","getSession","getHeaders","_ctx$req$headers","_ctx$req2","headers","_userData","pageProps","_extends2","CustomFronteggApp","appProps","activeTenant","envAppUrl","envBaseUrl","envClientId","secureJwtEnabled","jsx","children","exports"],"sources":["../../../../../packages/nextjs/src/pages/withFronteggApp/withFronteggApp.tsx"],"sourcesContent":["import React from 'react';\nimport type { AppContext, AppInitialProps, AppProps } from 'next/app';\nimport type { FronteggCustomAppClass, FronteggCustomApp, WithFronteggAppOptions } from './types';\nimport FronteggProvider from '../FronteggPagesProvider';\nimport refreshAccessTokenIfNeeded, { isRuntimeNextRequest } from '../../utils/refreshAccessTokenIfNeeded';\nimport fetchUserData from '../../utils/fetchUserData';\nimport config from '../../config';\nimport { AllUserData } from '../../types';\nimport { removeJwtSignatureFrom } from '../../middleware/helpers';\n\nexport const withFronteggApp = (app: FronteggCustomAppClass, options?: WithFronteggAppOptions): FronteggCustomApp => {\n  const originalGetInitialProps = app.getInitialProps;\n\n  app.getInitialProps = async (appContext: AppContext & AllUserData): Promise<AppInitialProps> => {\n    const { ctx, Component } = appContext;\n\n    let appEnvConfig = {};\n    let appContextSessionData: AllUserData = {\n      session: null,\n      user: null,\n      tenants: null,\n    };\n\n    if (ctx.req) {\n      appEnvConfig = config.appEnvConfig;\n      const url = ctx.req?.url;\n\n      if (url && isRuntimeNextRequest(url)) {\n        let session = await refreshAccessTokenIfNeeded(ctx);\n        if (process.env['FRONTEGG_SECURE_JWT_ENABLED'] === 'true') {\n          session = removeJwtSignatureFrom(session);\n        }\n        Object.assign(appContextSessionData, { session });\n      } else {\n        let userData = await fetchUserData({\n          getSession: async () => await refreshAccessTokenIfNeeded(ctx),\n          getHeaders: async () => ctx.req?.headers ?? {},\n        });\n        if (process.env['FRONTEGG_SECURE_JWT_ENABLED'] === 'true' && userData) {\n          userData = removeJwtSignatureFrom(userData);\n          userData.session = removeJwtSignatureFrom(userData?.session);\n        }\n        Object.assign(appContextSessionData, userData);\n      }\n    }\n\n    Object.assign(appContext, appContextSessionData);\n\n    return {\n      pageProps: {\n        ...(originalGetInitialProps ? await originalGetInitialProps(appContext) : {}),\n        ...(Component.getInitialProps ? await Component.getInitialProps(ctx) : {}),\n        ...(appContextSessionData.session == null ? {} : appContextSessionData),\n        ...appEnvConfig,\n      },\n    };\n  };\n\n  function CustomFronteggApp(appProps: AppProps) {\n    const { user, tenants, activeTenant, session, envAppUrl, envBaseUrl, envClientId, secureJwtEnabled } =\n      appProps.pageProps;\n    return (\n      <FronteggProvider\n        {...options}\n        {...{\n          user,\n          tenants,\n          activeTenant,\n          session,\n          envAppUrl,\n          envBaseUrl,\n          secureJwtEnabled,\n          envClientId,\n        }}\n      >\n        {app(appProps) as any}\n      </FronteggProvider>\n    );\n  }\n\n  CustomFronteggApp.getInitialProps = app.getInitialProps;\n\n  return CustomFronteggApp as FronteggCustomApp;\n};\n"],"mappings":";;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAGA,IAAAC,sBAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,2BAAA,GAAAC,uBAAA,CAAAH,OAAA;AACA,IAAAI,cAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,OAAA,GAAAN,sBAAA,CAAAC,OAAA;AAEA,IAAAM,QAAA,GAAAN,OAAA;AAAkE,IAAAO,WAAA,GAAAP,OAAA;AAAA,SAAAQ,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAN,wBAAAU,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAE3D,MAAMW,eAAe,GAAGA,CAACC,GAA2B,EAAEC,OAAgC,KAAwB;EACnH,MAAMC,uBAAuB,GAAGF,GAAG,CAACG,eAAe;EAEnDH,GAAG,CAACG,eAAe,GAAG,MAAOC,UAAoC,IAA+B;IAC9F,MAAM;MAAEC,GAAG;MAAEC;IAAU,CAAC,GAAGF,UAAU;IAErC,IAAIG,YAAY,GAAG,CAAC,CAAC;IACrB,IAAIC,qBAAkC,GAAG;MACvCC,OAAO,EAAE,IAAI;MACbC,IAAI,EAAE,IAAI;MACVC,OAAO,EAAE;IACX,CAAC;IAED,IAAIN,GAAG,CAACO,GAAG,EAAE;MAAA,IAAAC,QAAA;MACXN,YAAY,GAAGO,eAAM,CAACP,YAAY;MAClC,MAAMQ,GAAG,IAAAF,QAAA,GAAGR,GAAG,CAACO,GAAG,qBAAPC,QAAA,CAASE,GAAG;MAExB,IAAIA,GAAG,IAAI,IAAAC,gDAAoB,EAACD,GAAG,CAAC,EAAE;QACpC,IAAIN,OAAO,GAAG,MAAM,IAAAQ,mCAA0B,EAACZ,GAAG,CAAC;QACnD,IAAIa,OAAO,CAACC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,EAAE;UACzDV,OAAO,GAAG,IAAAW,+BAAsB,EAACX,OAAO,CAAC;QAC3C;QACAnB,MAAM,CAAC+B,MAAM,CAACb,qBAAqB,EAAE;UAAEC;QAAQ,CAAC,CAAC;MACnD,CAAC,MAAM;QACL,IAAIa,QAAQ,GAAG,MAAM,IAAAC,sBAAa,EAAC;UACjCC,UAAU,EAAE,MAAAA,CAAA,KAAY,MAAM,IAAAP,mCAA0B,EAACZ,GAAG,CAAC;UAC7DoB,UAAU,EAAE,MAAAA,CAAA;YAAA,IAAAC,gBAAA,EAAAC,SAAA;YAAA,QAAAD,gBAAA,IAAAC,SAAA,GAAYtB,GAAG,CAACO,GAAG,qBAAPe,SAAA,CAASC,OAAO,YAAAF,gBAAA,GAAI,CAAC,CAAC;UAAA;QAChD,CAAC,CAAC;QACF,IAAIR,OAAO,CAACC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,IAAIG,QAAQ,EAAE;UAAA,IAAAO,SAAA;UACrEP,QAAQ,GAAG,IAAAF,+BAAsB,EAACE,QAAQ,CAAC;UAC3CA,QAAQ,CAACb,OAAO,GAAG,IAAAW,+BAAsB,GAAAS,SAAA,GAACP,QAAQ,qBAARO,SAAA,CAAUpB,OAAO,CAAC;QAC9D;QACAnB,MAAM,CAAC+B,MAAM,CAACb,qBAAqB,EAAEc,QAAQ,CAAC;MAChD;IACF;IAEAhC,MAAM,CAAC+B,MAAM,CAACjB,UAAU,EAAEI,qBAAqB,CAAC;IAEhD,OAAO;MACLsB,SAAS,MAAAC,SAAA,CAAA/C,OAAA,MACHkB,uBAAuB,GAAG,MAAMA,uBAAuB,CAACE,UAAU,CAAC,GAAG,CAAC,CAAC,EACxEE,SAAS,CAACH,eAAe,GAAG,MAAMG,SAAS,CAACH,eAAe,CAACE,GAAG,CAAC,GAAG,CAAC,CAAC,EACrEG,qBAAqB,CAACC,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC,GAAGD,qBAAqB,EACnED,YAAY;IAEnB,CAAC;EACH,CAAC;EAED,SAASyB,iBAAiBA,CAACC,QAAkB,EAAE;IAC7C,MAAM;MAAEvB,IAAI;MAAEC,OAAO;MAAEuB,YAAY;MAAEzB,OAAO;MAAE0B,SAAS;MAAEC,UAAU;MAAEC,WAAW;MAAEC;IAAiB,CAAC,GAClGL,QAAQ,CAACH,SAAS;IACpB,oBACE,IAAAtD,WAAA,CAAA+D,GAAA,EAACrE,sBAAA,CAAAc,OAAgB,MAAA+C,SAAA,CAAA/C,OAAA,MACXiB,OAAO;MAETS,IAAI;MACJC,OAAO;MACPuB,YAAY;MACZzB,OAAO;MACP0B,SAAS;MACTC,UAAU;MACVE,gBAAgB;MAChBD,WAAW;MAAAG,QAAA,EAGZxC,GAAG,CAACiC,QAAQ;IAAC,GACG;EAEvB;EAEAD,iBAAiB,CAAC7B,eAAe,GAAGH,GAAG,CAACG,eAAe;EAEvD,OAAO6B,iBAAiB;AAC1B,CAAC;AAACS,OAAA,CAAA1C,eAAA,GAAAA,eAAA"}
+{"version":3,"file":"withFronteggApp.js","names":["_react","_interopRequireDefault","require","_FronteggPagesProvider","_refreshAccessTokenIfNeeded","_interopRequireWildcard","_fetchUserData","_config","_helpers","_jsxRuntime","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","withFronteggApp","app","options","originalGetInitialProps","getInitialProps","appContext","ctx","Component","appEnvConfig","appContextSessionData","session","user","tenants","req","_ctx$req","config","url","isRuntimeNextRequest","refreshAccessTokenIfNeeded","process","env","removeJwtSignatureFrom","assign","userData","fetchUserData","getSession","getHeaders","_ctx$req$headers","_ctx$req2","headers","_userData","pageProps","_extends2","CustomFronteggApp","appProps","activeTenant","envAppUrl","envBaseUrl","envClientId","secureJwtEnabled","envAppId","jsx","children","exports"],"sources":["../../../../../packages/nextjs/src/pages/withFronteggApp/withFronteggApp.tsx"],"sourcesContent":["import React from 'react';\nimport type { AppContext, AppInitialProps, AppProps } from 'next/app';\nimport type { FronteggCustomAppClass, FronteggCustomApp, WithFronteggAppOptions } from './types';\nimport FronteggProvider from '../FronteggPagesProvider';\nimport refreshAccessTokenIfNeeded, { isRuntimeNextRequest } from '../../utils/refreshAccessTokenIfNeeded';\nimport fetchUserData from '../../utils/fetchUserData';\nimport config from '../../config';\nimport { AllUserData } from '../../types';\nimport { removeJwtSignatureFrom } from '../../middleware/helpers';\n\nexport const withFronteggApp = (app: FronteggCustomAppClass, options?: WithFronteggAppOptions): FronteggCustomApp => {\n  const originalGetInitialProps = app.getInitialProps;\n\n  app.getInitialProps = async (appContext: AppContext & AllUserData): Promise<AppInitialProps> => {\n    const { ctx, Component } = appContext;\n\n    let appEnvConfig = {};\n    let appContextSessionData: AllUserData = {\n      session: null,\n      user: null,\n      tenants: null,\n    };\n\n    if (ctx.req) {\n      appEnvConfig = config.appEnvConfig;\n      const url = ctx.req?.url;\n\n      if (url && isRuntimeNextRequest(url)) {\n        let session = await refreshAccessTokenIfNeeded(ctx);\n        if (process.env['FRONTEGG_SECURE_JWT_ENABLED'] === 'true') {\n          session = removeJwtSignatureFrom(session);\n        }\n        Object.assign(appContextSessionData, { session });\n      } else {\n        let userData = await fetchUserData({\n          getSession: async () => await refreshAccessTokenIfNeeded(ctx),\n          getHeaders: async () => ctx.req?.headers ?? {},\n        });\n        if (process.env['FRONTEGG_SECURE_JWT_ENABLED'] === 'true' && userData) {\n          userData = removeJwtSignatureFrom(userData);\n          userData.session = removeJwtSignatureFrom(userData?.session);\n        }\n        Object.assign(appContextSessionData, userData);\n      }\n    }\n\n    Object.assign(appContext, appContextSessionData);\n\n    return {\n      pageProps: {\n        ...(originalGetInitialProps ? await originalGetInitialProps(appContext) : {}),\n        ...(Component.getInitialProps ? await Component.getInitialProps(ctx) : {}),\n        ...(appContextSessionData.session == null ? {} : appContextSessionData),\n        ...appEnvConfig,\n      },\n    };\n  };\n\n  function CustomFronteggApp(appProps: AppProps) {\n    const { user, tenants, activeTenant, session, envAppUrl, envBaseUrl, envClientId, secureJwtEnabled, envAppId } =\n      appProps.pageProps;\n    return (\n      <FronteggProvider\n        {...options}\n        {...{\n          user,\n          tenants,\n          activeTenant,\n          session,\n          envAppUrl,\n          envBaseUrl,\n          secureJwtEnabled,\n          envClientId,\n          envAppId,\n        }}\n      >\n        {app(appProps) as any}\n      </FronteggProvider>\n    );\n  }\n\n  CustomFronteggApp.getInitialProps = app.getInitialProps;\n\n  return CustomFronteggApp as FronteggCustomApp;\n};\n"],"mappings":";;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAGA,IAAAC,sBAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,2BAAA,GAAAC,uBAAA,CAAAH,OAAA;AACA,IAAAI,cAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,OAAA,GAAAN,sBAAA,CAAAC,OAAA;AAEA,IAAAM,QAAA,GAAAN,OAAA;AAAkE,IAAAO,WAAA,GAAAP,OAAA;AAAA,SAAAQ,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAN,wBAAAU,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAE3D,MAAMW,eAAe,GAAGA,CAACC,GAA2B,EAAEC,OAAgC,KAAwB;EACnH,MAAMC,uBAAuB,GAAGF,GAAG,CAACG,eAAe;EAEnDH,GAAG,CAACG,eAAe,GAAG,MAAOC,UAAoC,IAA+B;IAC9F,MAAM;MAAEC,GAAG;MAAEC;IAAU,CAAC,GAAGF,UAAU;IAErC,IAAIG,YAAY,GAAG,CAAC,CAAC;IACrB,IAAIC,qBAAkC,GAAG;MACvCC,OAAO,EAAE,IAAI;MACbC,IAAI,EAAE,IAAI;MACVC,OAAO,EAAE;IACX,CAAC;IAED,IAAIN,GAAG,CAACO,GAAG,EAAE;MAAA,IAAAC,QAAA;MACXN,YAAY,GAAGO,eAAM,CAACP,YAAY;MAClC,MAAMQ,GAAG,IAAAF,QAAA,GAAGR,GAAG,CAACO,GAAG,qBAAPC,QAAA,CAASE,GAAG;MAExB,IAAIA,GAAG,IAAI,IAAAC,gDAAoB,EAACD,GAAG,CAAC,EAAE;QACpC,IAAIN,OAAO,GAAG,MAAM,IAAAQ,mCAA0B,EAACZ,GAAG,CAAC;QACnD,IAAIa,OAAO,CAACC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,EAAE;UACzDV,OAAO,GAAG,IAAAW,+BAAsB,EAACX,OAAO,CAAC;QAC3C;QACAnB,MAAM,CAAC+B,MAAM,CAACb,qBAAqB,EAAE;UAAEC;QAAQ,CAAC,CAAC;MACnD,CAAC,MAAM;QACL,IAAIa,QAAQ,GAAG,MAAM,IAAAC,sBAAa,EAAC;UACjCC,UAAU,EAAE,MAAAA,CAAA,KAAY,MAAM,IAAAP,mCAA0B,EAACZ,GAAG,CAAC;UAC7DoB,UAAU,EAAE,MAAAA,CAAA;YAAA,IAAAC,gBAAA,EAAAC,SAAA;YAAA,QAAAD,gBAAA,IAAAC,SAAA,GAAYtB,GAAG,CAACO,GAAG,qBAAPe,SAAA,CAASC,OAAO,YAAAF,gBAAA,GAAI,CAAC,CAAC;UAAA;QAChD,CAAC,CAAC;QACF,IAAIR,OAAO,CAACC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,IAAIG,QAAQ,EAAE;UAAA,IAAAO,SAAA;UACrEP,QAAQ,GAAG,IAAAF,+BAAsB,EAACE,QAAQ,CAAC;UAC3CA,QAAQ,CAACb,OAAO,GAAG,IAAAW,+BAAsB,GAAAS,SAAA,GAACP,QAAQ,qBAARO,SAAA,CAAUpB,OAAO,CAAC;QAC9D;QACAnB,MAAM,CAAC+B,MAAM,CAACb,qBAAqB,EAAEc,QAAQ,CAAC;MAChD;IACF;IAEAhC,MAAM,CAAC+B,MAAM,CAACjB,UAAU,EAAEI,qBAAqB,CAAC;IAEhD,OAAO;MACLsB,SAAS,MAAAC,SAAA,CAAA/C,OAAA,MACHkB,uBAAuB,GAAG,MAAMA,uBAAuB,CAACE,UAAU,CAAC,GAAG,CAAC,CAAC,EACxEE,SAAS,CAACH,eAAe,GAAG,MAAMG,SAAS,CAACH,eAAe,CAACE,GAAG,CAAC,GAAG,CAAC,CAAC,EACrEG,qBAAqB,CAACC,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC,GAAGD,qBAAqB,EACnED,YAAY;IAEnB,CAAC;EACH,CAAC;EAED,SAASyB,iBAAiBA,CAACC,QAAkB,EAAE;IAC7C,MAAM;MAAEvB,IAAI;MAAEC,OAAO;MAAEuB,YAAY;MAAEzB,OAAO;MAAE0B,SAAS;MAAEC,UAAU;MAAEC,WAAW;MAAEC,gBAAgB;MAAEC;IAAS,CAAC,GAC5GN,QAAQ,CAACH,SAAS;IACpB,oBACE,IAAAtD,WAAA,CAAAgE,GAAA,EAACtE,sBAAA,CAAAc,OAAgB,MAAA+C,SAAA,CAAA/C,OAAA,MACXiB,OAAO;MAETS,IAAI;MACJC,OAAO;MACPuB,YAAY;MACZzB,OAAO;MACP0B,SAAS;MACTC,UAAU;MACVE,gBAAgB;MAChBD,WAAW;MACXE,QAAQ;MAAAE,QAAA,EAGTzC,GAAG,CAACiC,QAAQ;IAAC,GACG;EAEvB;EAEAD,iBAAiB,CAAC7B,eAAe,GAAGH,GAAG,CAACG,eAAe;EAEvD,OAAO6B,iBAAiB;AAC1B,CAAC;AAACU,OAAA,CAAA3C,eAAA,GAAAA,eAAA"}

package/sdkVersion.js

@@ -5,7 +5,7 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.default = void 0;
 var _default = {
-  version: '9.0.3'
+  version: '9.0.4-alpha.11358351428'
 };
 exports.default = _default;
 //# sourceMappingURL=sdkVersion.js.map

package/sdkVersion.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdkVersion.js","names":["version","exports","default","_default"],"sources":["../../../packages/nextjs/src/sdkVersion.ts"],"sourcesContent":["export default { version: '9.0.3' };\n"],"mappings":";;;;;;eAAe;EAAEA,OAAO,EAAE;AAAQ,CAAC;AAAAC,OAAA,CAAAC,OAAA,GAAAC,QAAA"}
+{"version":3,"file":"sdkVersion.js","names":["version","exports","default","_default"],"sources":["../../../packages/nextjs/src/sdkVersion.ts"],"sourcesContent":["export default { version: '9.0.4-alpha.11358351428' };\n"],"mappings":";;;;;;eAAe;EAAEA,OAAO,EAAE;AAA0B,CAAC;AAAAC,OAAA,CAAAC,OAAA,GAAAC,QAAA"}

package/types/index.d.ts

@@ -59,6 +59,7 @@ export interface FronteggProviderOptions extends Omit<FronteggAppOptions, 'conte
     envAppUrl: string;
     envBaseUrl: string;
     envClientId: string;
+    envAppId?: string;
     secureJwtEnabled?: boolean;
     contextOptions?: Omit<FronteggAppOptions['contextOptions'], 'baseUrl'>;
 }

package/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../../packages/nextjs/src/types/index.ts"],"sourcesContent":["import type { FronteggAppOptions } from '@frontegg/types';\nimport type { ILoginResponse, ITenantsResponse } from '@frontegg/rest-api';\nimport type { IncomingMessage } from 'http';\nimport type { ReactNode } from 'react';\nimport type { AppRouterInstance } from 'next/dist/shared/lib/app-router-context';\nimport type { NextRouter } from 'next/router';\n\nexport interface EncryptionUtils {\n  unsealTokens(data: string): Promise<FronteggUserTokens | undefined>;\n\n  sealTokens(tokens: FronteggUserTokens, ttl: number): Promise<string>;\n}\n\nexport interface FronteggUserTokens {\n  accessToken: string;\n  refreshToken?: string;\n}\n\nexport interface FronteggNextJSSession extends FronteggUserTokens {\n  user: FronteggUserSession;\n}\n\nexport type RequestType = IncomingMessage | Request;\n\nexport interface AccountEnvironment {\n  id: string;\n  createdAt: string;\n  environment: 'production' | 'development';\n}\n\nexport interface CustomClaims {\n  accountEnvironments: AccountEnvironment[];\n}\n\nexport interface FronteggUserTokens {\n  accessToken: string;\n  refreshToken?: string;\n}\n\nexport interface AllUserData {\n  user?: ILoginResponse | null;\n  tenants?: ITenantsResponse[] | null;\n  activeTenant?: ITenantsResponse;\n  session?: FronteggNextJSSession | null;\n}\nexport interface FronteggUserSession {\n  sub: string;\n  name: string;\n  email: string;\n  email_verified: boolean;\n  metadata: any;\n  roles: string[];\n  permissions: string[];\n  tenantId: string;\n  tenantIds: string[];\n  profilePictureUrl: string;\n  type: string; // \"userToken\"\n  customClaims: CustomClaims;\n  iat: number;\n  exp: number;\n  aud: string;\n  iss: string;\n}\n\nexport interface FronteggNextJSSession extends FronteggUserTokens {\n  user: FronteggUserSession;\n}\n\nexport interface FronteggProviderOptions extends Omit<FronteggAppOptions, 'contextOptions'>, AllUserData {\n  envAppUrl: string;\n  envBaseUrl: string;\n  envClientId: string;\n  secureJwtEnabled?: boolean;\n  contextOptions?: Omit<FronteggAppOptions['contextOptions'], 'baseUrl'>;\n}\n\nexport interface FronteggProviderProps extends FronteggProviderOptions {\n  children?: ReactNode;\n  router: AppRouterInstance | NextRouter;\n  appName?: string;\n}\n\ntype CustomLoginOptionsWithParamKeyType = {\n  /**\n   *The param key from your tenant login url, for 'frontegg.com?organization=[tenant]' would be 'organization'\n   */\n  paramKey: string;\n  subDomainIndex?: never;\n};\n\ntype CustomLoginOptionsWithSubDomainType = {\n  /**\n   *The index of sub domain from your tenant login url, for 'https://[tenant].frontegg.com' would be 0\n   */\n  subDomainIndex: number;\n  paramKey?: never;\n};\n\nexport type CustomLoginOptionsType = CustomLoginOptionsWithParamKeyType | CustomLoginOptionsWithSubDomainType;\n\ntype PagesDirectoryProviderProps = {\n  customLoginOptions?: CustomLoginOptionsType;\n};\n\nexport type ClientFronteggProviderProps = Omit<FronteggProviderProps, 'router'> & PagesDirectoryProviderProps;\n\ndeclare module 'iron-session' {\n  interface IronSessionData {\n    accessToken: FronteggNextJSSession['accessToken'];\n    user: FronteggNextJSSession['user'];\n  }\n}\n\ndeclare global {\n  var customLoginAppUrl: string | undefined;\n  interface ProcessEnv {\n    FRONTEGG_BASE_URL: string;\n    PORT?: string;\n    PWD: string;\n  }\n}\n"],"mappings":""}
+{"version":3,"file":"index.js","names":[],"sources":["../../../../packages/nextjs/src/types/index.ts"],"sourcesContent":["import type { FronteggAppOptions } from '@frontegg/types';\nimport type { ILoginResponse, ITenantsResponse } from '@frontegg/rest-api';\nimport type { IncomingMessage } from 'http';\nimport type { ReactNode } from 'react';\nimport type { AppRouterInstance } from 'next/dist/shared/lib/app-router-context';\nimport type { NextRouter } from 'next/router';\n\nexport interface EncryptionUtils {\n  unsealTokens(data: string): Promise<FronteggUserTokens | undefined>;\n\n  sealTokens(tokens: FronteggUserTokens, ttl: number): Promise<string>;\n}\n\nexport interface FronteggUserTokens {\n  accessToken: string;\n  refreshToken?: string;\n}\n\nexport interface FronteggNextJSSession extends FronteggUserTokens {\n  user: FronteggUserSession;\n}\n\nexport type RequestType = IncomingMessage | Request;\n\nexport interface AccountEnvironment {\n  id: string;\n  createdAt: string;\n  environment: 'production' | 'development';\n}\n\nexport interface CustomClaims {\n  accountEnvironments: AccountEnvironment[];\n}\n\nexport interface FronteggUserTokens {\n  accessToken: string;\n  refreshToken?: string;\n}\n\nexport interface AllUserData {\n  user?: ILoginResponse | null;\n  tenants?: ITenantsResponse[] | null;\n  activeTenant?: ITenantsResponse;\n  session?: FronteggNextJSSession | null;\n}\nexport interface FronteggUserSession {\n  sub: string;\n  name: string;\n  email: string;\n  email_verified: boolean;\n  metadata: any;\n  roles: string[];\n  permissions: string[];\n  tenantId: string;\n  tenantIds: string[];\n  profilePictureUrl: string;\n  type: string; // \"userToken\"\n  customClaims: CustomClaims;\n  iat: number;\n  exp: number;\n  aud: string;\n  iss: string;\n}\n\nexport interface FronteggNextJSSession extends FronteggUserTokens {\n  user: FronteggUserSession;\n}\n\nexport interface FronteggProviderOptions extends Omit<FronteggAppOptions, 'contextOptions'>, AllUserData {\n  envAppUrl: string;\n  envBaseUrl: string;\n  envClientId: string;\n  envAppId?: string;\n  secureJwtEnabled?: boolean;\n  contextOptions?: Omit<FronteggAppOptions['contextOptions'], 'baseUrl'>;\n}\n\nexport interface FronteggProviderProps extends FronteggProviderOptions {\n  children?: ReactNode;\n  router: AppRouterInstance | NextRouter;\n  appName?: string;\n}\n\ntype CustomLoginOptionsWithParamKeyType = {\n  /**\n   *The param key from your tenant login url, for 'frontegg.com?organization=[tenant]' would be 'organization'\n   */\n  paramKey: string;\n  subDomainIndex?: never;\n};\n\ntype CustomLoginOptionsWithSubDomainType = {\n  /**\n   *The index of sub domain from your tenant login url, for 'https://[tenant].frontegg.com' would be 0\n   */\n  subDomainIndex: number;\n  paramKey?: never;\n};\n\nexport type CustomLoginOptionsType = CustomLoginOptionsWithParamKeyType | CustomLoginOptionsWithSubDomainType;\n\ntype PagesDirectoryProviderProps = {\n  customLoginOptions?: CustomLoginOptionsType;\n};\n\nexport type ClientFronteggProviderProps = Omit<FronteggProviderProps, 'router'> & PagesDirectoryProviderProps;\n\ndeclare module 'iron-session' {\n  interface IronSessionData {\n    accessToken: FronteggNextJSSession['accessToken'];\n    user: FronteggNextJSSession['user'];\n  }\n}\n\ndeclare global {\n  var customLoginAppUrl: string | undefined;\n  interface ProcessEnv {\n    FRONTEGG_BASE_URL: string;\n    PORT?: string;\n    PWD: string;\n  }\n}\n"],"mappings":""}

package/utils/cookies/helpers.js

@@ -59,6 +59,12 @@ const getCookieHeader = request => {
   return cookieHeader;
 };
 exports.getCookieHeader = getCookieHeader;
-const getRefreshTokenCookieNameVariants = () => [`fe_refresh_${_config.default.clientId}`, `fe_refresh_${_config.default.clientId.replace('-', '')}`, `fe_refresh_${_config.default.clientId.replace(/-/g, '')}`];
+const getRefreshTokenCookieNameVariants = () => {
+  if (_config.default.rewriteCookieByAppId && _config.default.appId) {
+    return [`fe_refresh_${_config.default.appId}`, `fe_refresh_${_config.default.appId.replace('-', '')}`, `fe_refresh_${_config.default.appId.replace(/-/g, '')}`];
+  } else {
+    return [`fe_refresh_${_config.default.clientId}`, `fe_refresh_${_config.default.clientId.replace('-', '')}`, `fe_refresh_${_config.default.clientId.replace(/-/g, '')}`];
+  }
+};
 exports.getRefreshTokenCookieNameVariants = getRefreshTokenCookieNameVariants;
 //# sourceMappingURL=helpers.js.map

package/utils/cookies/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","names":["_serializer","_interopRequireDefault","require","_constants","_common","_config","getIndexedCookieName","index","_cookieName","cookieName","config","exports","splitValueToChunks","value","options","cookieOptionLength","cookieSerializer","serialize","length","chunkSize","COOKIE_MAX_LENGTH","valueChunks","chunkString","map","chunk","indexedCookieName","getCookieHeader","request","cookieHeader","headers","get","cookie","getRefreshTokenCookieNameVariants","clientId","replace"],"sources":["../../../../../packages/nextjs/src/utils/cookies/helpers.ts"],"sourcesContent":["import cookieSerializer from './serializer';\nimport { COOKIE_MAX_LENGTH } from './constants';\nimport { chunkString } from '../common';\nimport config from '../../config';\nimport { CookieSerializeOptions, RequestType } from './types';\n\n/**\n * Return a cookieName with index, used for divided cookies.\n *\n * @param {number} index - The index of the cookie, starts with '1'\n * @param {string} _cookieName - Default is {@link config.cookieName}\n */\nexport const getIndexedCookieName = (index: number, _cookieName?: string) => {\n  const cookieName = _cookieName ?? config.cookieName;\n  return `${cookieName}-${index}`;\n};\n\n/**\n * Split cookie value if value length exceeded the MAX Length of a standard HTTP header.\n * Used to split the session cookie.\n *\n * @param {string} cookieName - Cookie name for serializing\n * @param {string} value - cookie value to split if needed\n * @param {CookieSerializeOptions} options - {@link CookieSerializeOptions} for serializing\n */\nexport const splitValueToChunks = (cookieName: string, value: string, options: CookieSerializeOptions): string[] => {\n  const cookieOptionLength = cookieSerializer.serialize(getIndexedCookieName(1, cookieName), '', options).length;\n  const chunkSize = COOKIE_MAX_LENGTH - cookieOptionLength - 1;\n\n  const valueChunks = chunkString(value, chunkSize);\n\n  return valueChunks.map((chunk, index) => {\n    const indexedCookieName = getIndexedCookieName(index + 1, cookieName);\n    return cookieSerializer.serialize(indexedCookieName, chunk, options) + ';';\n  });\n};\n\n/**\n * Receive incoming http request, and extract the cookie header.\n * @return cookie as string if exists, else empty string\n *\n * @param {RequestType} request - Incoming HTTP Request\n */\nexport const getCookieHeader = (request: RequestType): string => {\n  let cookieHeader: string | null | undefined;\n  if ('credentials' in request) {\n    cookieHeader = request.headers.get('cookie');\n  } else {\n    cookieHeader = request.headers.cookie;\n  }\n  if (!cookieHeader) {\n    return '';\n  }\n\n  return cookieHeader;\n};\n\nexport const getRefreshTokenCookieNameVariants = () => [\n  `fe_refresh_${config.clientId}`,\n  `fe_refresh_${config.clientId.replace('-', '')}`,\n  `fe_refresh_${config.clientId.replace(/-/g, '')}`,\n];\n"],"mappings":";;;;;;;AAAA,IAAAA,WAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAJ,sBAAA,CAAAC,OAAA;AAGA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMI,oBAAoB,GAAGA,CAACC,KAAa,EAAEC,WAAoB,KAAK;EAC3E,MAAMC,UAAU,GAAGD,WAAW,WAAXA,WAAW,GAAIE,eAAM,CAACD,UAAU;EACnD,OAAQ,GAAEA,UAAW,IAAGF,KAAM,EAAC;AACjC,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPAI,OAAA,CAAAL,oBAAA,GAAAA,oBAAA;AAQO,MAAMM,kBAAkB,GAAGA,CAACH,UAAkB,EAAEI,KAAa,EAAEC,OAA+B,KAAe;EAClH,MAAMC,kBAAkB,GAAGC,mBAAgB,CAACC,SAAS,CAACX,oBAAoB,CAAC,CAAC,EAAEG,UAAU,CAAC,EAAE,EAAE,EAAEK,OAAO,CAAC,CAACI,MAAM;EAC9G,MAAMC,SAAS,GAAGC,4BAAiB,GAAGL,kBAAkB,GAAG,CAAC;EAE5D,MAAMM,WAAW,GAAG,IAAAC,mBAAW,EAACT,KAAK,EAAEM,SAAS,CAAC;EAEjD,OAAOE,WAAW,CAACE,GAAG,CAAC,CAACC,KAAK,EAAEjB,KAAK,KAAK;IACvC,MAAMkB,iBAAiB,GAAGnB,oBAAoB,CAACC,KAAK,GAAG,CAAC,EAAEE,UAAU,CAAC;IACrE,OAAOO,mBAAgB,CAACC,SAAS,CAACQ,iBAAiB,EAAED,KAAK,EAAEV,OAAO,CAAC,GAAG,GAAG;EAC5E,CAAC,CAAC;AACJ,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AALAH,OAAA,CAAAC,kBAAA,GAAAA,kBAAA;AAMO,MAAMc,eAAe,GAAIC,OAAoB,IAAa;EAC/D,IAAIC,YAAuC;EAC3C,IAAI,aAAa,IAAID,OAAO,EAAE;IAC5BC,YAAY,GAAGD,OAAO,CAACE,OAAO,CAACC,GAAG,CAAC,QAAQ,CAAC;EAC9C,CAAC,MAAM;IACLF,YAAY,GAAGD,OAAO,CAACE,OAAO,CAACE,MAAM;EACvC;EACA,IAAI,CAACH,YAAY,EAAE;IACjB,OAAO,EAAE;EACX;EAEA,OAAOA,YAAY;AACrB,CAAC;AAACjB,OAAA,CAAAe,eAAA,GAAAA,eAAA;AAEK,MAAMM,iCAAiC,GAAGA,CAAA,KAAM,CACpD,cAAatB,eAAM,CAACuB,QAAS,EAAC,EAC9B,cAAavB,eAAM,CAACuB,QAAQ,CAACC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC,EAC/C,cAAaxB,eAAM,CAACuB,QAAQ,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAE,EAAC,CAClD;AAACvB,OAAA,CAAAqB,iCAAA,GAAAA,iCAAA"}
+{"version":3,"file":"helpers.js","names":["_serializer","_interopRequireDefault","require","_constants","_common","_config","getIndexedCookieName","index","_cookieName","cookieName","config","exports","splitValueToChunks","value","options","cookieOptionLength","cookieSerializer","serialize","length","chunkSize","COOKIE_MAX_LENGTH","valueChunks","chunkString","map","chunk","indexedCookieName","getCookieHeader","request","cookieHeader","headers","get","cookie","getRefreshTokenCookieNameVariants","rewriteCookieByAppId","appId","replace","clientId"],"sources":["../../../../../packages/nextjs/src/utils/cookies/helpers.ts"],"sourcesContent":["import cookieSerializer from './serializer';\nimport { COOKIE_MAX_LENGTH } from './constants';\nimport { chunkString } from '../common';\nimport config from '../../config';\nimport { CookieSerializeOptions, RequestType } from './types';\n\n/**\n * Return a cookieName with index, used for divided cookies.\n *\n * @param {number} index - The index of the cookie, starts with '1'\n * @param {string} _cookieName - Default is {@link config.cookieName}\n */\nexport const getIndexedCookieName = (index: number, _cookieName?: string) => {\n  const cookieName = _cookieName ?? config.cookieName;\n  return `${cookieName}-${index}`;\n};\n\n/**\n * Split cookie value if value length exceeded the MAX Length of a standard HTTP header.\n * Used to split the session cookie.\n *\n * @param {string} cookieName - Cookie name for serializing\n * @param {string} value - cookie value to split if needed\n * @param {CookieSerializeOptions} options - {@link CookieSerializeOptions} for serializing\n */\nexport const splitValueToChunks = (cookieName: string, value: string, options: CookieSerializeOptions): string[] => {\n  const cookieOptionLength = cookieSerializer.serialize(getIndexedCookieName(1, cookieName), '', options).length;\n  const chunkSize = COOKIE_MAX_LENGTH - cookieOptionLength - 1;\n\n  const valueChunks = chunkString(value, chunkSize);\n\n  return valueChunks.map((chunk, index) => {\n    const indexedCookieName = getIndexedCookieName(index + 1, cookieName);\n    return cookieSerializer.serialize(indexedCookieName, chunk, options) + ';';\n  });\n};\n\n/**\n * Receive incoming http request, and extract the cookie header.\n * @return cookie as string if exists, else empty string\n *\n * @param {RequestType} request - Incoming HTTP Request\n */\nexport const getCookieHeader = (request: RequestType): string => {\n  let cookieHeader: string | null | undefined;\n  if ('credentials' in request) {\n    cookieHeader = request.headers.get('cookie');\n  } else {\n    cookieHeader = request.headers.cookie;\n  }\n  if (!cookieHeader) {\n    return '';\n  }\n\n  return cookieHeader;\n};\n\nexport const getRefreshTokenCookieNameVariants = () => {\n  if (config.rewriteCookieByAppId && config.appId) {\n    return [\n      `fe_refresh_${config.appId}`,\n      `fe_refresh_${config.appId.replace('-', '')}`,\n      `fe_refresh_${config.appId.replace(/-/g, '')}`,\n    ];\n  } else {\n    return [\n      `fe_refresh_${config.clientId}`,\n      `fe_refresh_${config.clientId.replace('-', '')}`,\n      `fe_refresh_${config.clientId.replace(/-/g, '')}`,\n    ];\n  }\n};\n"],"mappings":";;;;;;;AAAA,IAAAA,WAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAJ,sBAAA,CAAAC,OAAA;AAGA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMI,oBAAoB,GAAGA,CAACC,KAAa,EAAEC,WAAoB,KAAK;EAC3E,MAAMC,UAAU,GAAGD,WAAW,WAAXA,WAAW,GAAIE,eAAM,CAACD,UAAU;EACnD,OAAQ,GAAEA,UAAW,IAAGF,KAAM,EAAC;AACjC,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAPAI,OAAA,CAAAL,oBAAA,GAAAA,oBAAA;AAQO,MAAMM,kBAAkB,GAAGA,CAACH,UAAkB,EAAEI,KAAa,EAAEC,OAA+B,KAAe;EAClH,MAAMC,kBAAkB,GAAGC,mBAAgB,CAACC,SAAS,CAACX,oBAAoB,CAAC,CAAC,EAAEG,UAAU,CAAC,EAAE,EAAE,EAAEK,OAAO,CAAC,CAACI,MAAM;EAC9G,MAAMC,SAAS,GAAGC,4BAAiB,GAAGL,kBAAkB,GAAG,CAAC;EAE5D,MAAMM,WAAW,GAAG,IAAAC,mBAAW,EAACT,KAAK,EAAEM,SAAS,CAAC;EAEjD,OAAOE,WAAW,CAACE,GAAG,CAAC,CAACC,KAAK,EAAEjB,KAAK,KAAK;IACvC,MAAMkB,iBAAiB,GAAGnB,oBAAoB,CAACC,KAAK,GAAG,CAAC,EAAEE,UAAU,CAAC;IACrE,OAAOO,mBAAgB,CAACC,SAAS,CAACQ,iBAAiB,EAAED,KAAK,EAAEV,OAAO,CAAC,GAAG,GAAG;EAC5E,CAAC,CAAC;AACJ,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AALAH,OAAA,CAAAC,kBAAA,GAAAA,kBAAA;AAMO,MAAMc,eAAe,GAAIC,OAAoB,IAAa;EAC/D,IAAIC,YAAuC;EAC3C,IAAI,aAAa,IAAID,OAAO,EAAE;IAC5BC,YAAY,GAAGD,OAAO,CAACE,OAAO,CAACC,GAAG,CAAC,QAAQ,CAAC;EAC9C,CAAC,MAAM;IACLF,YAAY,GAAGD,OAAO,CAACE,OAAO,CAACE,MAAM;EACvC;EACA,IAAI,CAACH,YAAY,EAAE;IACjB,OAAO,EAAE;EACX;EAEA,OAAOA,YAAY;AACrB,CAAC;AAACjB,OAAA,CAAAe,eAAA,GAAAA,eAAA;AAEK,MAAMM,iCAAiC,GAAGA,CAAA,KAAM;EACrD,IAAItB,eAAM,CAACuB,oBAAoB,IAAIvB,eAAM,CAACwB,KAAK,EAAE;IAC/C,OAAO,CACJ,cAAaxB,eAAM,CAACwB,KAAM,EAAC,EAC3B,cAAaxB,eAAM,CAACwB,KAAK,CAACC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC,EAC5C,cAAazB,eAAM,CAACwB,KAAK,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAE,EAAC,CAC/C;EACH,CAAC,MAAM;IACL,OAAO,CACJ,cAAazB,eAAM,CAAC0B,QAAS,EAAC,EAC9B,cAAa1B,eAAM,CAAC0B,QAAQ,CAACD,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC,EAC/C,cAAazB,eAAM,CAAC0B,QAAQ,CAACD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAE,EAAC,CAClD;EACH;AACF,CAAC;AAACxB,OAAA,CAAAqB,iCAAA,GAAAA,iCAAA"}

package/utils/cookies/index.js

@@ -78,16 +78,27 @@ class CookieManager {
           cookie = cookie.filter(property => property !== 'Secure' && property !== 'SameSite=None');
         }
         return cookie.map(property => {
-          if (property.toLowerCase() === `domain=${_config.default.baseUrlHost}`) {
+          if (property.startsWith(`fe_refresh_${_config.default.clientId.replace('-', '')}`)) {
+            if (_config.default.rewriteCookieByAppId && _config.default.appId) {
+              return property.replace(`fe_refresh_${_config.default.clientId.replace('-', '')}`, `fe_refresh_${_config.default.appId.replace('-', '')}`);
+            } else {
+              return property;
+            }
+          } else if (property.toLowerCase() === `domain=${_config.default.baseUrlHost}`) {
             return `Domain=${_config.default.cookieDomain}`;
+          } else {
+            return property;
           }
-          return property;
         }).join(';') + ';';
       });
     };
   }
   get refreshTokenKey() {
-    return `fe_refresh_${_config.default.clientId}`.replace(/-/g, '');
+    if (_config.default.rewriteCookieByAppId && _config.default.appId) {
+      return `fe_refresh_${_config.default.appId.replace(/-/g, '')}`;
+    } else {
+      return `fe_refresh_${_config.default.clientId.replace(/-/g, '')}`;
+    }
   }
 
   /**

package/utils/cookies/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_serializer","_interopRequireDefault","require","_config","_constants","_helpers","_fronteggLogger","CookieManager","constructor","getCookieName","cookieNumber","cookieName","config","getIndexedCookieName","createEmptySingleCookie","isSecured","cookieDomain","create","value","expires","Date","secure","domain","silent","createEmptyCookies","_cookiesToRemove","removeRefresh","allEmptyCookies","refreshTokenVariants","getRefreshTokenCookieNameVariants","cookiesToRemove","forEach","name","push","getCookiesToRemove","request","logger","fronteggLogger","child","tag","info","cookieStr","getCookieHeader","cookies","cookieSerializer","parse","cookieToRemove","length","e","error","modifySetCookie","setCookieValue","map","c","cookie","split","debug","filter","property","toLowerCase","baseUrlHost","join","refreshTokenKey","clientId","replace","getEmptyCookiesBeforeCreatingNew","req","newCookies","newCookieNames","indexOf","options","_options$cookieName","_options$httpOnly","_options$domain","_options$path","level","undefined","cookieValue","serializeOptions","httpOnly","path","priority","sameSite","serializedCookie","serialize","COOKIE_MAX_LENGTH","splitValueToChunks","removedCookiesValue","parseCookieHeader","cookieHeader","getSessionCookieFromRequest","i","sessionCookies","sessionCookieChunk","parseCookieFromArray","cookieChunks","includes","sort","a","b","firstCookieNumber","parseInt","slice","secondCookieNumber","removeCookies","cookieNames","res","_ref","existingSetCookie","getHeader","setCookieHeaders","setHeader","_default","exports","default"],"sources":["../../../../../packages/nextjs/src/utils/cookies/index.ts"],"sourcesContent":["import cookieSerializer from './serializer';\nimport type { RequestCookie } from 'next/dist/server/web/spec-extension/cookies';\nimport config from '../../config';\nimport { CookieSerializeOptions, CreateCookieOptions, RemoveCookiesOptions, RequestType } from './types';\nimport { COOKIE_MAX_LENGTH } from './constants';\n\nimport {\n  getCookieHeader,\n  getIndexedCookieName,\n  getRefreshTokenCookieNameVariants,\n  splitValueToChunks,\n} from './helpers';\nimport fronteggLogger from '../fronteggLogger';\n\nclass CookieManager {\n  getCookieName = (cookieNumber?: number, cookieName = config.cookieName) =>\n    cookieNumber ? getIndexedCookieName(cookieNumber, cookieName) : cookieName;\n\n  get refreshTokenKey(): string {\n    return `fe_refresh_${config.clientId}`.replace(/-/g, '');\n  }\n\n  /**\n   * This function creates list of empty cookies that already exists in the request.\n   * This is used for removing existing cookies before creating new ones.\n   * @param {CreateCookieOptions} options - Create cookie options\n   */\n  getEmptyCookiesBeforeCreatingNew(\n    { req, value, secure, domain }: CreateCookieOptions,\n    newCookies: string[]\n  ): string[] {\n    if (!req || !value) {\n      return [];\n    }\n    const newCookieNames = newCookies.map((c) => c.split('=')[0]);\n    const cookiesToRemove = this.getCookiesToRemove(req).filter((cookie) => newCookieNames.indexOf(cookie) === -1);\n    if (cookiesToRemove.length === 0) {\n      return [];\n    }\n\n    return this.createEmptyCookies(secure, domain ?? config.cookieDomain, cookiesToRemove, false);\n  }\n\n  /**\n   * Validate and create new cookie headers.\n   * The default value of `cookieName` is {@link config.cookieName}\n   * @param {CreateCookieOptions} options - Create cookie options\n   */\n  create(options: CreateCookieOptions): string[] {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.create', level: options.silent ? 'error' : undefined });\n    const cookieName = options.cookieName ?? this.getCookieName();\n    const cookieValue = options.value;\n    logger.info(`Creating new cookie for '${cookieName}'`);\n\n    const serializeOptions: CookieSerializeOptions = {\n      expires: options.expires,\n      httpOnly: options.httpOnly ?? true,\n      domain: options.domain ?? config.cookieDomain,\n      path: options.path ?? '/',\n      priority: 'high',\n    };\n\n    if (options.secure) {\n      logger.debug(`Set cookie '${cookieName}' as secure`);\n      serializeOptions.secure = options.secure;\n      serializeOptions.sameSite = 'none';\n    }\n\n    const serializedCookie = cookieSerializer.serialize(cookieName, cookieValue, serializeOptions);\n\n    let newCookies: string[] = [];\n    if (serializedCookie.length <= COOKIE_MAX_LENGTH) {\n      logger.info(`Successfully create a cookie header, '${cookieName}'`);\n      newCookies = [serializedCookie];\n    } else {\n      logger.debug('Going to split cookie into chunks');\n      /** Create chunked cookie headers and store value as array of headers */\n      const cookies = splitValueToChunks(cookieName, cookieValue, serializeOptions);\n      logger.info(`Successfully create chunked cookie headers, '${cookieName}' (count: ${cookies.length})`);\n      newCookies = cookies;\n    }\n\n    const removedCookiesValue = this.getEmptyCookiesBeforeCreatingNew(options, newCookies);\n    return [...removedCookiesValue, ...newCookies];\n  }\n\n  /**\n   * Receive incoming http request, and extract the cookie header.\n   * @return cookie as string if exists, else empty string\n   *\n   * @param {RequestType} request - Incoming HTTP Request\n   */\n  parseCookieHeader(request: RequestType): Record<string, string> {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.parseCookieHeader' });\n\n    logger.info('Going to extract all cookies header from request');\n    const cookieHeader = getCookieHeader(request);\n    logger.info('Parsing cookie header to map');\n    return cookieSerializer.parse(cookieHeader);\n  }\n\n  /**\n   * Loop over cookie headers, extract, parse cookies and merged divided cookies from incoming http request,\n   * @return full session cookie headers if exists, else return undefined\n   * @param {RequestType} request - Incoming HTTP Request\n   */\n  getSessionCookieFromRequest(request?: RequestType): string | undefined {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.getSessionCookieFromRequest' });\n    logger.info('Going to extract session cookies header from request');\n\n    if (!request) {\n      logger.info(`'request' argument is null, Cookie header not found`);\n      return undefined;\n    }\n\n    logger.debug('Getting cookie header');\n    const cookieStr = getCookieHeader(request);\n\n    logger.debug('Parsing cookie header string');\n    const cookies = cookieSerializer.parse(cookieStr);\n\n    logger.debug('Loop over session cookie headers');\n    let i = 1;\n    let sessionCookies = '';\n    let sessionCookieChunk: string | undefined = cookies[this.getCookieName()];\n    if (sessionCookieChunk === undefined) {\n      do {\n        sessionCookieChunk = cookies[getIndexedCookieName(i++)];\n        if (sessionCookieChunk) {\n          sessionCookies += sessionCookieChunk;\n        }\n      } while (sessionCookieChunk);\n    } else {\n      sessionCookies = sessionCookieChunk;\n    }\n\n    if (sessionCookies.length === 0) {\n      logger.info('Session cookie NOT found');\n      return undefined;\n    }\n\n    logger.info(`Session cookie found, (count: ${sessionCookies.length})`);\n    return sessionCookies;\n  }\n\n  parseCookieFromArray(cookies: RequestCookie[]): string | undefined {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.parseCookieFromArray' });\n    const cookieChunks = cookies.filter((c) => c.name.includes(this.getCookieName()));\n    logger.info('Parsing session cookie from RequestCookie for Next.JS 13+');\n\n    if (!cookieChunks || cookieChunks.length === 0) {\n      logger.info(`No session cookies found`);\n      return undefined;\n    }\n    logger.debug(`Found ${cookieChunks.length} chunks`);\n    cookieChunks.sort((a, b) => {\n      const firstCookieNumber = parseInt(a.name.slice(-1));\n      const secondCookieNumber = parseInt(b.name.slice(-1));\n      return firstCookieNumber > secondCookieNumber ? 1 : -1;\n    });\n\n    logger.info(`Concatenate session cookies chunks`);\n    return cookieChunks.map((c) => c.value).join('');\n  }\n\n  private createEmptySingleCookie = (cookieName: string, isSecured: boolean, cookieDomain: string) => {\n    return this.create({\n      cookieName,\n      value: '',\n      expires: new Date(),\n      secure: isSecured,\n      domain: cookieDomain,\n      silent: true,\n    });\n  };\n\n  createEmptyCookies = (\n    isSecured: boolean,\n    cookieDomain: string,\n    _cookiesToRemove: string[],\n    removeRefresh = true\n  ): string[] => {\n    const allEmptyCookies: string[] = [];\n\n    const refreshTokenVariants = getRefreshTokenCookieNameVariants();\n    const cookiesToRemove = [..._cookiesToRemove, ...(removeRefresh ? refreshTokenVariants : [])];\n\n    cookiesToRemove.forEach((name: string) => {\n      allEmptyCookies.push(...this.createEmptySingleCookie(name, isSecured, cookieDomain));\n    });\n\n    return allEmptyCookies;\n  };\n\n  private getCookiesToRemove = (request?: RequestType): string[] => {\n    const logger = fronteggLogger.child({ tag: 'getCookiesToRemove' });\n    if (!request) {\n      return [];\n    }\n    try {\n      logger.info('extract cookie from request headers');\n      const cookieStr = getCookieHeader(request);\n      const cookies = cookieStr && cookieSerializer.parse(cookieStr);\n      if (!cookies) {\n        return [];\n      }\n      let cookieNumber = 1;\n      const cookieToRemove = [];\n      if (cookies[this.getCookieName()]) {\n        cookieToRemove.push(this.getCookieName());\n      }\n      while (cookies[this.getCookieName(cookieNumber)]) {\n        cookieToRemove.push(this.getCookieName(cookieNumber));\n        cookieNumber++;\n      }\n      logger.info(`number of cookies to remove: ${cookieToRemove.length}`);\n      return cookieToRemove;\n    } catch (e) {\n      logger.error(e);\n      return [];\n    }\n  };\n\n  /**\n   * Take a list of cookieNames and modify request/response headers\n   * to proxy the cookies from Next.js to Frontegg Services and vice-versa\n   * @param {string[]} setCookieValue - list of cookies to modify\n   * @param {boolean} isSecured - if the running application behind SSL\n   */\n  removeCookies({ cookieNames, isSecured, cookieDomain, res, req }: RemoveCookiesOptions): void {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.removeCookies' });\n    logger.debug('Setting empty cookie headers remove cookies from client side');\n    const cookiesToRemove = this.getCookiesToRemove(req);\n    const cookieValue = this.createEmptyCookies(isSecured, cookieDomain, cookieNames ?? cookiesToRemove);\n    let existingSetCookie = (res.getHeader('set-cookie') as string[] | string) ?? [];\n    if (typeof existingSetCookie === 'string') {\n      existingSetCookie = [existingSetCookie];\n    }\n\n    const setCookieHeaders = [...existingSetCookie, ...cookieValue];\n    logger.debug(`removing headers (count: ${setCookieHeaders.length})`);\n    res.setHeader('set-cookie', setCookieHeaders);\n  }\n\n  /**\n   * Take a list of cookie headers and modify the Domain / Secure / SameSite\n   * to proxy the cookies to Frontegg Services and vice-versa\n   * @param {string[]} setCookieValue - list of cookies to modify\n   * @param {boolean} isSecured - if the running application behind SSL\n   */\n  modifySetCookie = (setCookieValue: string[] | undefined, isSecured: boolean): string[] | undefined => {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.modifySetCookie' });\n    if (!setCookieValue || setCookieValue.length === 0) {\n      logger.info(`No headers to modify`);\n      return setCookieValue;\n    }\n    logger.info(`modifying cookie headers (count: ${setCookieValue.length})`);\n    return setCookieValue.map((c) => {\n      let cookie = c.split('; ');\n\n      logger.debug(`modifying cookie ${cookie[0]}, isSecured: ${isSecured}`);\n      if (!isSecured) {\n        cookie = cookie.filter((property) => property !== 'Secure' && property !== 'SameSite=None');\n      }\n\n      return (\n        cookie\n          .map((property) => {\n            if (property.toLowerCase() === `domain=${config.baseUrlHost}`) {\n              return `Domain=${config.cookieDomain}`;\n            }\n            return property;\n          })\n          .join(';') + ';'\n      );\n    });\n  };\n}\n\nexport default new CookieManager();\n"],"mappings":";;;;;;;AAAA,IAAAA,WAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,UAAA,GAAAF,OAAA;AAEA,IAAAG,QAAA,GAAAH,OAAA;AAMA,IAAAI,eAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,MAAMK,aAAa,CAAC;EAAAC,YAAA;IAAA,KAClBC,aAAa,GAAG,CAACC,YAAqB,EAAEC,UAAU,GAAGC,eAAM,CAACD,UAAU,KACpED,YAAY,GAAG,IAAAG,6BAAoB,EAACH,YAAY,EAAEC,UAAU,CAAC,GAAGA,UAAU;IAAA,KAqJpEG,uBAAuB,GAAG,CAACH,UAAkB,EAAEI,SAAkB,EAAEC,YAAoB,KAAK;MAClG,OAAO,IAAI,CAACC,MAAM,CAAC;QACjBN,UAAU;QACVO,KAAK,EAAE,EAAE;QACTC,OAAO,EAAE,IAAIC,IAAI,EAAE;QACnBC,MAAM,EAAEN,SAAS;QACjBO,MAAM,EAAEN,YAAY;QACpBO,MAAM,EAAE;MACV,CAAC,CAAC;IACJ,CAAC;IAAA,KAEDC,kBAAkB,GAAG,CACnBT,SAAkB,EAClBC,YAAoB,EACpBS,gBAA0B,EAC1BC,aAAa,GAAG,IAAI,KACP;MACb,MAAMC,eAAyB,GAAG,EAAE;MAEpC,MAAMC,oBAAoB,GAAG,IAAAC,0CAAiC,GAAE;MAChE,MAAMC,eAAe,GAAG,CAAC,GAAGL,gBAAgB,EAAE,IAAIC,aAAa,GAAGE,oBAAoB,GAAG,EAAE,CAAC,CAAC;MAE7FE,eAAe,CAACC,OAAO,CAAEC,IAAY,IAAK;QACxCL,eAAe,CAACM,IAAI,CAAC,GAAG,IAAI,CAACnB,uBAAuB,CAACkB,IAAI,EAAEjB,SAAS,EAAEC,YAAY,CAAC,CAAC;MACtF,CAAC,CAAC;MAEF,OAAOW,eAAe;IACxB,CAAC;IAAA,KAEOO,kBAAkB,GAAIC,OAAqB,IAAe;MAChE,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;QAAEC,GAAG,EAAE;MAAqB,CAAC,CAAC;MAClE,IAAI,CAACJ,OAAO,EAAE;QACZ,OAAO,EAAE;MACX;MACA,IAAI;QACFC,MAAM,CAACI,IAAI,CAAC,qCAAqC,CAAC;QAClD,MAAMC,SAAS,GAAG,IAAAC,wBAAe,EAACP,OAAO,CAAC;QAC1C,MAAMQ,OAAO,GAAGF,SAAS,IAAIG,mBAAgB,CAACC,KAAK,CAACJ,SAAS,CAAC;QAC9D,IAAI,CAACE,OAAO,EAAE;UACZ,OAAO,EAAE;QACX;QACA,IAAIjC,YAAY,GAAG,CAAC;QACpB,MAAMoC,cAAc,GAAG,EAAE;QACzB,IAAIH,OAAO,CAAC,IAAI,CAAClC,aAAa,EAAE,CAAC,EAAE;UACjCqC,cAAc,CAACb,IAAI,CAAC,IAAI,CAACxB,aAAa,EAAE,CAAC;QAC3C;QACA,OAAOkC,OAAO,CAAC,IAAI,CAAClC,aAAa,CAACC,YAAY,CAAC,CAAC,EAAE;UAChDoC,cAAc,CAACb,IAAI,CAAC,IAAI,CAACxB,aAAa,CAACC,YAAY,CAAC,CAAC;UACrDA,YAAY,EAAE;QAChB;QACA0B,MAAM,CAACI,IAAI,CAAE,gCAA+BM,cAAc,CAACC,MAAO,EAAC,CAAC;QACpE,OAAOD,cAAc;MACvB,CAAC,CAAC,OAAOE,CAAC,EAAE;QACVZ,MAAM,CAACa,KAAK,CAACD,CAAC,CAAC;QACf,OAAO,EAAE;MACX;IACF,CAAC;IAAA,KA6BDE,eAAe,GAAG,CAACC,cAAoC,EAAEpC,SAAkB,KAA2B;MACpG,MAAMqB,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;QAAEC,GAAG,EAAE;MAAgC,CAAC,CAAC;MAC7E,IAAI,CAACY,cAAc,IAAIA,cAAc,CAACJ,MAAM,KAAK,CAAC,EAAE;QAClDX,MAAM,CAACI,IAAI,CAAE,sBAAqB,CAAC;QACnC,OAAOW,cAAc;MACvB;MACAf,MAAM,CAACI,IAAI,CAAE,oCAAmCW,cAAc,CAACJ,MAAO,GAAE,CAAC;MACzE,OAAOI,cAAc,CAACC,GAAG,CAAEC,CAAC,IAAK;QAC/B,IAAIC,MAAM,GAAGD,CAAC,CAACE,KAAK,CAAC,IAAI,CAAC;QAE1BnB,MAAM,CAACoB,KAAK,CAAE,oBAAmBF,MAAM,CAAC,CAAC,CAAE,gBAAevC,SAAU,EAAC,CAAC;QACtE,IAAI,CAACA,SAAS,EAAE;UACduC,MAAM,GAAGA,MAAM,CAACG,MAAM,CAAEC,QAAQ,IAAKA,QAAQ,KAAK,QAAQ,IAAIA,QAAQ,KAAK,eAAe,CAAC;QAC7F;QAEA,OACEJ,MAAM,CACHF,GAAG,CAAEM,QAAQ,IAAK;UACjB,IAAIA,QAAQ,CAACC,WAAW,EAAE,KAAM,UAAS/C,eAAM,CAACgD,WAAY,EAAC,EAAE;YAC7D,OAAQ,UAAShD,eAAM,CAACI,YAAa,EAAC;UACxC;UACA,OAAO0C,QAAQ;QACjB,CAAC,CAAC,CACDG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG;MAEtB,CAAC,CAAC;IACJ,CAAC;EAAA;EAlQD,IAAIC,eAAeA,CAAA,EAAW;IAC5B,OAAQ,cAAalD,eAAM,CAACmD,QAAS,EAAC,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;EAC1D;;EAEA;AACF;AACA;AACA;AACA;EACEC,gCAAgCA,CAC9B;IAAEC,GAAG;IAAEhD,KAAK;IAAEG,MAAM;IAAEC;EAA4B,CAAC,EACnD6C,UAAoB,EACV;IACV,IAAI,CAACD,GAAG,IAAI,CAAChD,KAAK,EAAE;MAClB,OAAO,EAAE;IACX;IACA,MAAMkD,cAAc,GAAGD,UAAU,CAACf,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAACE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAMzB,eAAe,GAAG,IAAI,CAACI,kBAAkB,CAACgC,GAAG,CAAC,CAACT,MAAM,CAAEH,MAAM,IAAKc,cAAc,CAACC,OAAO,CAACf,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9G,IAAIxB,eAAe,CAACiB,MAAM,KAAK,CAAC,EAAE;MAChC,OAAO,EAAE;IACX;IAEA,OAAO,IAAI,CAACvB,kBAAkB,CAACH,MAAM,EAAEC,MAAM,WAANA,MAAM,GAAIV,eAAM,CAACI,YAAY,EAAEc,eAAe,EAAE,KAAK,CAAC;EAC/F;;EAEA;AACF;AACA;AACA;AACA;EACEb,MAAMA,CAACqD,OAA4B,EAAY;IAAA,IAAAC,mBAAA,EAAAC,iBAAA,EAAAC,eAAA,EAAAC,aAAA;IAC7C,MAAMtC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE,sBAAsB;MAAEoC,KAAK,EAAEL,OAAO,CAAC/C,MAAM,GAAG,OAAO,GAAGqD;IAAU,CAAC,CAAC;IACjH,MAAMjE,UAAU,IAAA4D,mBAAA,GAAGD,OAAO,CAAC3D,UAAU,YAAA4D,mBAAA,GAAI,IAAI,CAAC9D,aAAa,EAAE;IAC7D,MAAMoE,WAAW,GAAGP,OAAO,CAACpD,KAAK;IACjCkB,MAAM,CAACI,IAAI,CAAE,4BAA2B7B,UAAW,GAAE,CAAC;IAEtD,MAAMmE,gBAAwC,GAAG;MAC/C3D,OAAO,EAAEmD,OAAO,CAACnD,OAAO;MACxB4D,QAAQ,GAAAP,iBAAA,GAAEF,OAAO,CAACS,QAAQ,YAAAP,iBAAA,GAAI,IAAI;MAClClD,MAAM,GAAAmD,eAAA,GAAEH,OAAO,CAAChD,MAAM,YAAAmD,eAAA,GAAI7D,eAAM,CAACI,YAAY;MAC7CgE,IAAI,GAAAN,aAAA,GAAEJ,OAAO,CAACU,IAAI,YAAAN,aAAA,GAAI,GAAG;MACzBO,QAAQ,EAAE;IACZ,CAAC;IAED,IAAIX,OAAO,CAACjD,MAAM,EAAE;MAClBe,MAAM,CAACoB,KAAK,CAAE,eAAc7C,UAAW,aAAY,CAAC;MACpDmE,gBAAgB,CAACzD,MAAM,GAAGiD,OAAO,CAACjD,MAAM;MACxCyD,gBAAgB,CAACI,QAAQ,GAAG,MAAM;IACpC;IAEA,MAAMC,gBAAgB,GAAGvC,mBAAgB,CAACwC,SAAS,CAACzE,UAAU,EAAEkE,WAAW,EAAEC,gBAAgB,CAAC;IAE9F,IAAIX,UAAoB,GAAG,EAAE;IAC7B,IAAIgB,gBAAgB,CAACpC,MAAM,IAAIsC,4BAAiB,EAAE;MAChDjD,MAAM,CAACI,IAAI,CAAE,yCAAwC7B,UAAW,GAAE,CAAC;MACnEwD,UAAU,GAAG,CAACgB,gBAAgB,CAAC;IACjC,CAAC,MAAM;MACL/C,MAAM,CAACoB,KAAK,CAAC,mCAAmC,CAAC;MACjD;MACA,MAAMb,OAAO,GAAG,IAAA2C,2BAAkB,EAAC3E,UAAU,EAAEkE,WAAW,EAAEC,gBAAgB,CAAC;MAC7E1C,MAAM,CAACI,IAAI,CAAE,gDAA+C7B,UAAW,aAAYgC,OAAO,CAACI,MAAO,GAAE,CAAC;MACrGoB,UAAU,GAAGxB,OAAO;IACtB;IAEA,MAAM4C,mBAAmB,GAAG,IAAI,CAACtB,gCAAgC,CAACK,OAAO,EAAEH,UAAU,CAAC;IACtF,OAAO,CAAC,GAAGoB,mBAAmB,EAAE,GAAGpB,UAAU,CAAC;EAChD;;EAEA;AACF;AACA;AACA;AACA;AACA;EACEqB,iBAAiBA,CAACrD,OAAoB,EAA0B;IAC9D,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAAkC,CAAC,CAAC;IAE/EH,MAAM,CAACI,IAAI,CAAC,kDAAkD,CAAC;IAC/D,MAAMiD,YAAY,GAAG,IAAA/C,wBAAe,EAACP,OAAO,CAAC;IAC7CC,MAAM,CAACI,IAAI,CAAC,8BAA8B,CAAC;IAC3C,OAAOI,mBAAgB,CAACC,KAAK,CAAC4C,YAAY,CAAC;EAC7C;;EAEA;AACF;AACA;AACA;AACA;EACEC,2BAA2BA,CAACvD,OAAqB,EAAsB;IACrE,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAA4C,CAAC,CAAC;IACzFH,MAAM,CAACI,IAAI,CAAC,sDAAsD,CAAC;IAEnE,IAAI,CAACL,OAAO,EAAE;MACZC,MAAM,CAACI,IAAI,CAAE,qDAAoD,CAAC;MAClE,OAAOoC,SAAS;IAClB;IAEAxC,MAAM,CAACoB,KAAK,CAAC,uBAAuB,CAAC;IACrC,MAAMf,SAAS,GAAG,IAAAC,wBAAe,EAACP,OAAO,CAAC;IAE1CC,MAAM,CAACoB,KAAK,CAAC,8BAA8B,CAAC;IAC5C,MAAMb,OAAO,GAAGC,mBAAgB,CAACC,KAAK,CAACJ,SAAS,CAAC;IAEjDL,MAAM,CAACoB,KAAK,CAAC,kCAAkC,CAAC;IAChD,IAAImC,CAAC,GAAG,CAAC;IACT,IAAIC,cAAc,GAAG,EAAE;IACvB,IAAIC,kBAAsC,GAAGlD,OAAO,CAAC,IAAI,CAAClC,aAAa,EAAE,CAAC;IAC1E,IAAIoF,kBAAkB,KAAKjB,SAAS,EAAE;MACpC,GAAG;QACDiB,kBAAkB,GAAGlD,OAAO,CAAC,IAAA9B,6BAAoB,EAAC8E,CAAC,EAAE,CAAC,CAAC;QACvD,IAAIE,kBAAkB,EAAE;UACtBD,cAAc,IAAIC,kBAAkB;QACtC;MACF,CAAC,QAAQA,kBAAkB;IAC7B,CAAC,MAAM;MACLD,cAAc,GAAGC,kBAAkB;IACrC;IAEA,IAAID,cAAc,CAAC7C,MAAM,KAAK,CAAC,EAAE;MAC/BX,MAAM,CAACI,IAAI,CAAC,0BAA0B,CAAC;MACvC,OAAOoC,SAAS;IAClB;IAEAxC,MAAM,CAACI,IAAI,CAAE,iCAAgCoD,cAAc,CAAC7C,MAAO,GAAE,CAAC;IACtE,OAAO6C,cAAc;EACvB;EAEAE,oBAAoBA,CAACnD,OAAwB,EAAsB;IACjE,MAAMP,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAAqC,CAAC,CAAC;IAClF,MAAMwD,YAAY,GAAGpD,OAAO,CAACc,MAAM,CAAEJ,CAAC,IAAKA,CAAC,CAACrB,IAAI,CAACgE,QAAQ,CAAC,IAAI,CAACvF,aAAa,EAAE,CAAC,CAAC;IACjF2B,MAAM,CAACI,IAAI,CAAC,2DAA2D,CAAC;IAExE,IAAI,CAACuD,YAAY,IAAIA,YAAY,CAAChD,MAAM,KAAK,CAAC,EAAE;MAC9CX,MAAM,CAACI,IAAI,CAAE,0BAAyB,CAAC;MACvC,OAAOoC,SAAS;IAClB;IACAxC,MAAM,CAACoB,KAAK,CAAE,SAAQuC,YAAY,CAAChD,MAAO,SAAQ,CAAC;IACnDgD,YAAY,CAACE,IAAI,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAK;MAC1B,MAAMC,iBAAiB,GAAGC,QAAQ,CAACH,CAAC,CAAClE,IAAI,CAACsE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;MACpD,MAAMC,kBAAkB,GAAGF,QAAQ,CAACF,CAAC,CAACnE,IAAI,CAACsE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;MACrD,OAAOF,iBAAiB,GAAGG,kBAAkB,GAAG,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC;IAEFnE,MAAM,CAACI,IAAI,CAAE,oCAAmC,CAAC;IACjD,OAAOuD,YAAY,CAAC3C,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAACnC,KAAK,CAAC,CAAC2C,IAAI,CAAC,EAAE,CAAC;EAClD;EA4DA;AACF;AACA;AACA;AACA;AACA;EACE2C,aAAaA,CAAC;IAAEC,WAAW;IAAE1F,SAAS;IAAEC,YAAY;IAAE0F,GAAG;IAAExC;EAA0B,CAAC,EAAQ;IAAA,IAAAyC,IAAA;IAC5F,MAAMvE,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAA8B,CAAC,CAAC;IAC3EH,MAAM,CAACoB,KAAK,CAAC,8DAA8D,CAAC;IAC5E,MAAM1B,eAAe,GAAG,IAAI,CAACI,kBAAkB,CAACgC,GAAG,CAAC;IACpD,MAAMW,WAAW,GAAG,IAAI,CAACrD,kBAAkB,CAACT,SAAS,EAAEC,YAAY,EAAEyF,WAAW,WAAXA,WAAW,GAAI3E,eAAe,CAAC;IACpG,IAAI8E,iBAAiB,IAAAD,IAAA,GAAID,GAAG,CAACG,SAAS,CAAC,YAAY,CAAC,YAAAF,IAAA,GAA0B,EAAE;IAChF,IAAI,OAAOC,iBAAiB,KAAK,QAAQ,EAAE;MACzCA,iBAAiB,GAAG,CAACA,iBAAiB,CAAC;IACzC;IAEA,MAAME,gBAAgB,GAAG,CAAC,GAAGF,iBAAiB,EAAE,GAAG/B,WAAW,CAAC;IAC/DzC,MAAM,CAACoB,KAAK,CAAE,4BAA2BsD,gBAAgB,CAAC/D,MAAO,GAAE,CAAC;IACpE2D,GAAG,CAACK,SAAS,CAAC,YAAY,EAAED,gBAAgB,CAAC;EAC/C;;EAEA;AACF;AACA;AACA;AACA;AACA;AA4BA;AAAC,IAAAE,QAAA,GAEc,IAAIzG,aAAa,EAAE;AAAA0G,OAAA,CAAAC,OAAA,GAAAF,QAAA"}
+{"version":3,"file":"index.js","names":["_serializer","_interopRequireDefault","require","_config","_constants","_helpers","_fronteggLogger","CookieManager","constructor","getCookieName","cookieNumber","cookieName","config","getIndexedCookieName","createEmptySingleCookie","isSecured","cookieDomain","create","value","expires","Date","secure","domain","silent","createEmptyCookies","_cookiesToRemove","removeRefresh","allEmptyCookies","refreshTokenVariants","getRefreshTokenCookieNameVariants","cookiesToRemove","forEach","name","push","getCookiesToRemove","request","logger","fronteggLogger","child","tag","info","cookieStr","getCookieHeader","cookies","cookieSerializer","parse","cookieToRemove","length","e","error","modifySetCookie","setCookieValue","map","c","cookie","split","debug","filter","property","startsWith","clientId","replace","rewriteCookieByAppId","appId","toLowerCase","baseUrlHost","join","refreshTokenKey","getEmptyCookiesBeforeCreatingNew","req","newCookies","newCookieNames","indexOf","options","_options$cookieName","_options$httpOnly","_options$domain","_options$path","level","undefined","cookieValue","serializeOptions","httpOnly","path","priority","sameSite","serializedCookie","serialize","COOKIE_MAX_LENGTH","splitValueToChunks","removedCookiesValue","parseCookieHeader","cookieHeader","getSessionCookieFromRequest","i","sessionCookies","sessionCookieChunk","parseCookieFromArray","cookieChunks","includes","sort","a","b","firstCookieNumber","parseInt","slice","secondCookieNumber","removeCookies","cookieNames","res","_ref","existingSetCookie","getHeader","setCookieHeaders","setHeader","_default","exports","default"],"sources":["../../../../../packages/nextjs/src/utils/cookies/index.ts"],"sourcesContent":["import cookieSerializer from './serializer';\nimport type { RequestCookie } from 'next/dist/server/web/spec-extension/cookies';\nimport config from '../../config';\nimport { CookieSerializeOptions, CreateCookieOptions, RemoveCookiesOptions, RequestType } from './types';\nimport { COOKIE_MAX_LENGTH } from './constants';\n\nimport {\n  getCookieHeader,\n  getIndexedCookieName,\n  getRefreshTokenCookieNameVariants,\n  splitValueToChunks,\n} from './helpers';\nimport fronteggLogger from '../fronteggLogger';\n\nclass CookieManager {\n  getCookieName = (cookieNumber?: number, cookieName = config.cookieName) =>\n    cookieNumber ? getIndexedCookieName(cookieNumber, cookieName) : cookieName;\n\n  get refreshTokenKey(): string {\n    if (config.rewriteCookieByAppId && config.appId) {\n      return `fe_refresh_${config.appId.replace(/-/g, '')}`;\n    } else {\n      return `fe_refresh_${config.clientId.replace(/-/g, '')}`;\n    }\n  }\n\n  /**\n   * This function creates list of empty cookies that already exists in the request.\n   * This is used for removing existing cookies before creating new ones.\n   * @param {CreateCookieOptions} options - Create cookie options\n   */\n  getEmptyCookiesBeforeCreatingNew(\n    { req, value, secure, domain }: CreateCookieOptions,\n    newCookies: string[]\n  ): string[] {\n    if (!req || !value) {\n      return [];\n    }\n    const newCookieNames = newCookies.map((c) => c.split('=')[0]);\n    const cookiesToRemove = this.getCookiesToRemove(req).filter((cookie) => newCookieNames.indexOf(cookie) === -1);\n    if (cookiesToRemove.length === 0) {\n      return [];\n    }\n\n    return this.createEmptyCookies(secure, domain ?? config.cookieDomain, cookiesToRemove, false);\n  }\n\n  /**\n   * Validate and create new cookie headers.\n   * The default value of `cookieName` is {@link config.cookieName}\n   * @param {CreateCookieOptions} options - Create cookie options\n   */\n  create(options: CreateCookieOptions): string[] {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.create', level: options.silent ? 'error' : undefined });\n    const cookieName = options.cookieName ?? this.getCookieName();\n    const cookieValue = options.value;\n    logger.info(`Creating new cookie for '${cookieName}'`);\n\n    const serializeOptions: CookieSerializeOptions = {\n      expires: options.expires,\n      httpOnly: options.httpOnly ?? true,\n      domain: options.domain ?? config.cookieDomain,\n      path: options.path ?? '/',\n      priority: 'high',\n    };\n\n    if (options.secure) {\n      logger.debug(`Set cookie '${cookieName}' as secure`);\n      serializeOptions.secure = options.secure;\n      serializeOptions.sameSite = 'none';\n    }\n\n    const serializedCookie = cookieSerializer.serialize(cookieName, cookieValue, serializeOptions);\n\n    let newCookies: string[] = [];\n    if (serializedCookie.length <= COOKIE_MAX_LENGTH) {\n      logger.info(`Successfully create a cookie header, '${cookieName}'`);\n      newCookies = [serializedCookie];\n    } else {\n      logger.debug('Going to split cookie into chunks');\n      /** Create chunked cookie headers and store value as array of headers */\n      const cookies = splitValueToChunks(cookieName, cookieValue, serializeOptions);\n      logger.info(`Successfully create chunked cookie headers, '${cookieName}' (count: ${cookies.length})`);\n      newCookies = cookies;\n    }\n\n    const removedCookiesValue = this.getEmptyCookiesBeforeCreatingNew(options, newCookies);\n    return [...removedCookiesValue, ...newCookies];\n  }\n\n  /**\n   * Receive incoming http request, and extract the cookie header.\n   * @return cookie as string if exists, else empty string\n   *\n   * @param {RequestType} request - Incoming HTTP Request\n   */\n  parseCookieHeader(request: RequestType): Record<string, string> {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.parseCookieHeader' });\n\n    logger.info('Going to extract all cookies header from request');\n    const cookieHeader = getCookieHeader(request);\n    logger.info('Parsing cookie header to map');\n    return cookieSerializer.parse(cookieHeader);\n  }\n\n  /**\n   * Loop over cookie headers, extract, parse cookies and merged divided cookies from incoming http request,\n   * @return full session cookie headers if exists, else return undefined\n   * @param {RequestType} request - Incoming HTTP Request\n   */\n  getSessionCookieFromRequest(request?: RequestType): string | undefined {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.getSessionCookieFromRequest' });\n    logger.info('Going to extract session cookies header from request');\n\n    if (!request) {\n      logger.info(`'request' argument is null, Cookie header not found`);\n      return undefined;\n    }\n\n    logger.debug('Getting cookie header');\n    const cookieStr = getCookieHeader(request);\n\n    logger.debug('Parsing cookie header string');\n    const cookies = cookieSerializer.parse(cookieStr);\n\n    logger.debug('Loop over session cookie headers');\n    let i = 1;\n    let sessionCookies = '';\n    let sessionCookieChunk: string | undefined = cookies[this.getCookieName()];\n    if (sessionCookieChunk === undefined) {\n      do {\n        sessionCookieChunk = cookies[getIndexedCookieName(i++)];\n        if (sessionCookieChunk) {\n          sessionCookies += sessionCookieChunk;\n        }\n      } while (sessionCookieChunk);\n    } else {\n      sessionCookies = sessionCookieChunk;\n    }\n\n    if (sessionCookies.length === 0) {\n      logger.info('Session cookie NOT found');\n      return undefined;\n    }\n\n    logger.info(`Session cookie found, (count: ${sessionCookies.length})`);\n    return sessionCookies;\n  }\n\n  parseCookieFromArray(cookies: RequestCookie[]): string | undefined {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.parseCookieFromArray' });\n    const cookieChunks = cookies.filter((c) => c.name.includes(this.getCookieName()));\n    logger.info('Parsing session cookie from RequestCookie for Next.JS 13+');\n\n    if (!cookieChunks || cookieChunks.length === 0) {\n      logger.info(`No session cookies found`);\n      return undefined;\n    }\n    logger.debug(`Found ${cookieChunks.length} chunks`);\n    cookieChunks.sort((a, b) => {\n      const firstCookieNumber = parseInt(a.name.slice(-1));\n      const secondCookieNumber = parseInt(b.name.slice(-1));\n      return firstCookieNumber > secondCookieNumber ? 1 : -1;\n    });\n\n    logger.info(`Concatenate session cookies chunks`);\n    return cookieChunks.map((c) => c.value).join('');\n  }\n\n  private createEmptySingleCookie = (cookieName: string, isSecured: boolean, cookieDomain: string) => {\n    return this.create({\n      cookieName,\n      value: '',\n      expires: new Date(),\n      secure: isSecured,\n      domain: cookieDomain,\n      silent: true,\n    });\n  };\n\n  createEmptyCookies = (\n    isSecured: boolean,\n    cookieDomain: string,\n    _cookiesToRemove: string[],\n    removeRefresh = true\n  ): string[] => {\n    const allEmptyCookies: string[] = [];\n\n    const refreshTokenVariants = getRefreshTokenCookieNameVariants();\n    const cookiesToRemove = [..._cookiesToRemove, ...(removeRefresh ? refreshTokenVariants : [])];\n\n    cookiesToRemove.forEach((name: string) => {\n      allEmptyCookies.push(...this.createEmptySingleCookie(name, isSecured, cookieDomain));\n    });\n\n    return allEmptyCookies;\n  };\n\n  private getCookiesToRemove = (request?: RequestType): string[] => {\n    const logger = fronteggLogger.child({ tag: 'getCookiesToRemove' });\n    if (!request) {\n      return [];\n    }\n    try {\n      logger.info('extract cookie from request headers');\n      const cookieStr = getCookieHeader(request);\n      const cookies = cookieStr && cookieSerializer.parse(cookieStr);\n      if (!cookies) {\n        return [];\n      }\n      let cookieNumber = 1;\n      const cookieToRemove = [];\n      if (cookies[this.getCookieName()]) {\n        cookieToRemove.push(this.getCookieName());\n      }\n      while (cookies[this.getCookieName(cookieNumber)]) {\n        cookieToRemove.push(this.getCookieName(cookieNumber));\n        cookieNumber++;\n      }\n      logger.info(`number of cookies to remove: ${cookieToRemove.length}`);\n      return cookieToRemove;\n    } catch (e) {\n      logger.error(e);\n      return [];\n    }\n  };\n\n  /**\n   * Take a list of cookieNames and modify request/response headers\n   * to proxy the cookies from Next.js to Frontegg Services and vice-versa\n   * @param {string[]} setCookieValue - list of cookies to modify\n   * @param {boolean} isSecured - if the running application behind SSL\n   */\n  removeCookies({ cookieNames, isSecured, cookieDomain, res, req }: RemoveCookiesOptions): void {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.removeCookies' });\n    logger.debug('Setting empty cookie headers remove cookies from client side');\n    const cookiesToRemove = this.getCookiesToRemove(req);\n    const cookieValue = this.createEmptyCookies(isSecured, cookieDomain, cookieNames ?? cookiesToRemove);\n    let existingSetCookie = (res.getHeader('set-cookie') as string[] | string) ?? [];\n    if (typeof existingSetCookie === 'string') {\n      existingSetCookie = [existingSetCookie];\n    }\n\n    const setCookieHeaders = [...existingSetCookie, ...cookieValue];\n    logger.debug(`removing headers (count: ${setCookieHeaders.length})`);\n    res.setHeader('set-cookie', setCookieHeaders);\n  }\n\n  /**\n   * Take a list of cookie headers and modify the Domain / Secure / SameSite\n   * to proxy the cookies to Frontegg Services and vice-versa\n   * @param {string[]} setCookieValue - list of cookies to modify\n   * @param {boolean} isSecured - if the running application behind SSL\n   */\n  modifySetCookie = (setCookieValue: string[] | undefined, isSecured: boolean): string[] | undefined => {\n    const logger = fronteggLogger.child({ tag: 'CookieManager.modifySetCookie' });\n    if (!setCookieValue || setCookieValue.length === 0) {\n      logger.info(`No headers to modify`);\n      return setCookieValue;\n    }\n    logger.info(`modifying cookie headers (count: ${setCookieValue.length})`);\n    return setCookieValue.map((c) => {\n      let cookie = c.split('; ');\n\n      logger.debug(`modifying cookie ${cookie[0]}, isSecured: ${isSecured}`);\n      if (!isSecured) {\n        cookie = cookie.filter((property) => property !== 'Secure' && property !== 'SameSite=None');\n      }\n\n      return (\n        cookie\n          .map((property) => {\n            if (property.startsWith(`fe_refresh_${config.clientId.replace('-', '')}`)) {\n              if (config.rewriteCookieByAppId && config.appId) {\n                return property.replace(\n                  `fe_refresh_${config.clientId.replace('-', '')}`,\n                  `fe_refresh_${config.appId.replace('-', '')}`\n                );\n              } else {\n                return property;\n              }\n            } else if (property.toLowerCase() === `domain=${config.baseUrlHost}`) {\n              return `Domain=${config.cookieDomain}`;\n            } else {\n              return property;\n            }\n          })\n          .join(';') + ';'\n      );\n    });\n  };\n}\n\nexport default new CookieManager();\n"],"mappings":";;;;;;;AAAA,IAAAA,WAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,UAAA,GAAAF,OAAA;AAEA,IAAAG,QAAA,GAAAH,OAAA;AAMA,IAAAI,eAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,MAAMK,aAAa,CAAC;EAAAC,YAAA;IAAA,KAClBC,aAAa,GAAG,CAACC,YAAqB,EAAEC,UAAU,GAAGC,eAAM,CAACD,UAAU,KACpED,YAAY,GAAG,IAAAG,6BAAoB,EAACH,YAAY,EAAEC,UAAU,CAAC,GAAGA,UAAU;IAAA,KAyJpEG,uBAAuB,GAAG,CAACH,UAAkB,EAAEI,SAAkB,EAAEC,YAAoB,KAAK;MAClG,OAAO,IAAI,CAACC,MAAM,CAAC;QACjBN,UAAU;QACVO,KAAK,EAAE,EAAE;QACTC,OAAO,EAAE,IAAIC,IAAI,EAAE;QACnBC,MAAM,EAAEN,SAAS;QACjBO,MAAM,EAAEN,YAAY;QACpBO,MAAM,EAAE;MACV,CAAC,CAAC;IACJ,CAAC;IAAA,KAEDC,kBAAkB,GAAG,CACnBT,SAAkB,EAClBC,YAAoB,EACpBS,gBAA0B,EAC1BC,aAAa,GAAG,IAAI,KACP;MACb,MAAMC,eAAyB,GAAG,EAAE;MAEpC,MAAMC,oBAAoB,GAAG,IAAAC,0CAAiC,GAAE;MAChE,MAAMC,eAAe,GAAG,CAAC,GAAGL,gBAAgB,EAAE,IAAIC,aAAa,GAAGE,oBAAoB,GAAG,EAAE,CAAC,CAAC;MAE7FE,eAAe,CAACC,OAAO,CAAEC,IAAY,IAAK;QACxCL,eAAe,CAACM,IAAI,CAAC,GAAG,IAAI,CAACnB,uBAAuB,CAACkB,IAAI,EAAEjB,SAAS,EAAEC,YAAY,CAAC,CAAC;MACtF,CAAC,CAAC;MAEF,OAAOW,eAAe;IACxB,CAAC;IAAA,KAEOO,kBAAkB,GAAIC,OAAqB,IAAe;MAChE,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;QAAEC,GAAG,EAAE;MAAqB,CAAC,CAAC;MAClE,IAAI,CAACJ,OAAO,EAAE;QACZ,OAAO,EAAE;MACX;MACA,IAAI;QACFC,MAAM,CAACI,IAAI,CAAC,qCAAqC,CAAC;QAClD,MAAMC,SAAS,GAAG,IAAAC,wBAAe,EAACP,OAAO,CAAC;QAC1C,MAAMQ,OAAO,GAAGF,SAAS,IAAIG,mBAAgB,CAACC,KAAK,CAACJ,SAAS,CAAC;QAC9D,IAAI,CAACE,OAAO,EAAE;UACZ,OAAO,EAAE;QACX;QACA,IAAIjC,YAAY,GAAG,CAAC;QACpB,MAAMoC,cAAc,GAAG,EAAE;QACzB,IAAIH,OAAO,CAAC,IAAI,CAAClC,aAAa,EAAE,CAAC,EAAE;UACjCqC,cAAc,CAACb,IAAI,CAAC,IAAI,CAACxB,aAAa,EAAE,CAAC;QAC3C;QACA,OAAOkC,OAAO,CAAC,IAAI,CAAClC,aAAa,CAACC,YAAY,CAAC,CAAC,EAAE;UAChDoC,cAAc,CAACb,IAAI,CAAC,IAAI,CAACxB,aAAa,CAACC,YAAY,CAAC,CAAC;UACrDA,YAAY,EAAE;QAChB;QACA0B,MAAM,CAACI,IAAI,CAAE,gCAA+BM,cAAc,CAACC,MAAO,EAAC,CAAC;QACpE,OAAOD,cAAc;MACvB,CAAC,CAAC,OAAOE,CAAC,EAAE;QACVZ,MAAM,CAACa,KAAK,CAACD,CAAC,CAAC;QACf,OAAO,EAAE;MACX;IACF,CAAC;IAAA,KA6BDE,eAAe,GAAG,CAACC,cAAoC,EAAEpC,SAAkB,KAA2B;MACpG,MAAMqB,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;QAAEC,GAAG,EAAE;MAAgC,CAAC,CAAC;MAC7E,IAAI,CAACY,cAAc,IAAIA,cAAc,CAACJ,MAAM,KAAK,CAAC,EAAE;QAClDX,MAAM,CAACI,IAAI,CAAE,sBAAqB,CAAC;QACnC,OAAOW,cAAc;MACvB;MACAf,MAAM,CAACI,IAAI,CAAE,oCAAmCW,cAAc,CAACJ,MAAO,GAAE,CAAC;MACzE,OAAOI,cAAc,CAACC,GAAG,CAAEC,CAAC,IAAK;QAC/B,IAAIC,MAAM,GAAGD,CAAC,CAACE,KAAK,CAAC,IAAI,CAAC;QAE1BnB,MAAM,CAACoB,KAAK,CAAE,oBAAmBF,MAAM,CAAC,CAAC,CAAE,gBAAevC,SAAU,EAAC,CAAC;QACtE,IAAI,CAACA,SAAS,EAAE;UACduC,MAAM,GAAGA,MAAM,CAACG,MAAM,CAAEC,QAAQ,IAAKA,QAAQ,KAAK,QAAQ,IAAIA,QAAQ,KAAK,eAAe,CAAC;QAC7F;QAEA,OACEJ,MAAM,CACHF,GAAG,CAAEM,QAAQ,IAAK;UACjB,IAAIA,QAAQ,CAACC,UAAU,CAAE,cAAa/C,eAAM,CAACgD,QAAQ,CAACC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC,CAAC,EAAE;YACzE,IAAIjD,eAAM,CAACkD,oBAAoB,IAAIlD,eAAM,CAACmD,KAAK,EAAE;cAC/C,OAAOL,QAAQ,CAACG,OAAO,CACpB,cAAajD,eAAM,CAACgD,QAAQ,CAACC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC,EAC/C,cAAajD,eAAM,CAACmD,KAAK,CAACF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAE,EAAC,CAC9C;YACH,CAAC,MAAM;cACL,OAAOH,QAAQ;YACjB;UACF,CAAC,MAAM,IAAIA,QAAQ,CAACM,WAAW,EAAE,KAAM,UAASpD,eAAM,CAACqD,WAAY,EAAC,EAAE;YACpE,OAAQ,UAASrD,eAAM,CAACI,YAAa,EAAC;UACxC,CAAC,MAAM;YACL,OAAO0C,QAAQ;UACjB;QACF,CAAC,CAAC,CACDQ,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG;MAEtB,CAAC,CAAC;IACJ,CAAC;EAAA;EAhRD,IAAIC,eAAeA,CAAA,EAAW;IAC5B,IAAIvD,eAAM,CAACkD,oBAAoB,IAAIlD,eAAM,CAACmD,KAAK,EAAE;MAC/C,OAAQ,cAAanD,eAAM,CAACmD,KAAK,CAACF,OAAO,CAAC,IAAI,EAAE,EAAE,CAAE,EAAC;IACvD,CAAC,MAAM;MACL,OAAQ,cAAajD,eAAM,CAACgD,QAAQ,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAE,EAAC;IAC1D;EACF;;EAEA;AACF;AACA;AACA;AACA;EACEO,gCAAgCA,CAC9B;IAAEC,GAAG;IAAEnD,KAAK;IAAEG,MAAM;IAAEC;EAA4B,CAAC,EACnDgD,UAAoB,EACV;IACV,IAAI,CAACD,GAAG,IAAI,CAACnD,KAAK,EAAE;MAClB,OAAO,EAAE;IACX;IACA,MAAMqD,cAAc,GAAGD,UAAU,CAAClB,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAACE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAMzB,eAAe,GAAG,IAAI,CAACI,kBAAkB,CAACmC,GAAG,CAAC,CAACZ,MAAM,CAAEH,MAAM,IAAKiB,cAAc,CAACC,OAAO,CAAClB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9G,IAAIxB,eAAe,CAACiB,MAAM,KAAK,CAAC,EAAE;MAChC,OAAO,EAAE;IACX;IAEA,OAAO,IAAI,CAACvB,kBAAkB,CAACH,MAAM,EAAEC,MAAM,WAANA,MAAM,GAAIV,eAAM,CAACI,YAAY,EAAEc,eAAe,EAAE,KAAK,CAAC;EAC/F;;EAEA;AACF;AACA;AACA;AACA;EACEb,MAAMA,CAACwD,OAA4B,EAAY;IAAA,IAAAC,mBAAA,EAAAC,iBAAA,EAAAC,eAAA,EAAAC,aAAA;IAC7C,MAAMzC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE,sBAAsB;MAAEuC,KAAK,EAAEL,OAAO,CAAClD,MAAM,GAAG,OAAO,GAAGwD;IAAU,CAAC,CAAC;IACjH,MAAMpE,UAAU,IAAA+D,mBAAA,GAAGD,OAAO,CAAC9D,UAAU,YAAA+D,mBAAA,GAAI,IAAI,CAACjE,aAAa,EAAE;IAC7D,MAAMuE,WAAW,GAAGP,OAAO,CAACvD,KAAK;IACjCkB,MAAM,CAACI,IAAI,CAAE,4BAA2B7B,UAAW,GAAE,CAAC;IAEtD,MAAMsE,gBAAwC,GAAG;MAC/C9D,OAAO,EAAEsD,OAAO,CAACtD,OAAO;MACxB+D,QAAQ,GAAAP,iBAAA,GAAEF,OAAO,CAACS,QAAQ,YAAAP,iBAAA,GAAI,IAAI;MAClCrD,MAAM,GAAAsD,eAAA,GAAEH,OAAO,CAACnD,MAAM,YAAAsD,eAAA,GAAIhE,eAAM,CAACI,YAAY;MAC7CmE,IAAI,GAAAN,aAAA,GAAEJ,OAAO,CAACU,IAAI,YAAAN,aAAA,GAAI,GAAG;MACzBO,QAAQ,EAAE;IACZ,CAAC;IAED,IAAIX,OAAO,CAACpD,MAAM,EAAE;MAClBe,MAAM,CAACoB,KAAK,CAAE,eAAc7C,UAAW,aAAY,CAAC;MACpDsE,gBAAgB,CAAC5D,MAAM,GAAGoD,OAAO,CAACpD,MAAM;MACxC4D,gBAAgB,CAACI,QAAQ,GAAG,MAAM;IACpC;IAEA,MAAMC,gBAAgB,GAAG1C,mBAAgB,CAAC2C,SAAS,CAAC5E,UAAU,EAAEqE,WAAW,EAAEC,gBAAgB,CAAC;IAE9F,IAAIX,UAAoB,GAAG,EAAE;IAC7B,IAAIgB,gBAAgB,CAACvC,MAAM,IAAIyC,4BAAiB,EAAE;MAChDpD,MAAM,CAACI,IAAI,CAAE,yCAAwC7B,UAAW,GAAE,CAAC;MACnE2D,UAAU,GAAG,CAACgB,gBAAgB,CAAC;IACjC,CAAC,MAAM;MACLlD,MAAM,CAACoB,KAAK,CAAC,mCAAmC,CAAC;MACjD;MACA,MAAMb,OAAO,GAAG,IAAA8C,2BAAkB,EAAC9E,UAAU,EAAEqE,WAAW,EAAEC,gBAAgB,CAAC;MAC7E7C,MAAM,CAACI,IAAI,CAAE,gDAA+C7B,UAAW,aAAYgC,OAAO,CAACI,MAAO,GAAE,CAAC;MACrGuB,UAAU,GAAG3B,OAAO;IACtB;IAEA,MAAM+C,mBAAmB,GAAG,IAAI,CAACtB,gCAAgC,CAACK,OAAO,EAAEH,UAAU,CAAC;IACtF,OAAO,CAAC,GAAGoB,mBAAmB,EAAE,GAAGpB,UAAU,CAAC;EAChD;;EAEA;AACF;AACA;AACA;AACA;AACA;EACEqB,iBAAiBA,CAACxD,OAAoB,EAA0B;IAC9D,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAAkC,CAAC,CAAC;IAE/EH,MAAM,CAACI,IAAI,CAAC,kDAAkD,CAAC;IAC/D,MAAMoD,YAAY,GAAG,IAAAlD,wBAAe,EAACP,OAAO,CAAC;IAC7CC,MAAM,CAACI,IAAI,CAAC,8BAA8B,CAAC;IAC3C,OAAOI,mBAAgB,CAACC,KAAK,CAAC+C,YAAY,CAAC;EAC7C;;EAEA;AACF;AACA;AACA;AACA;EACEC,2BAA2BA,CAAC1D,OAAqB,EAAsB;IACrE,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAA4C,CAAC,CAAC;IACzFH,MAAM,CAACI,IAAI,CAAC,sDAAsD,CAAC;IAEnE,IAAI,CAACL,OAAO,EAAE;MACZC,MAAM,CAACI,IAAI,CAAE,qDAAoD,CAAC;MAClE,OAAOuC,SAAS;IAClB;IAEA3C,MAAM,CAACoB,KAAK,CAAC,uBAAuB,CAAC;IACrC,MAAMf,SAAS,GAAG,IAAAC,wBAAe,EAACP,OAAO,CAAC;IAE1CC,MAAM,CAACoB,KAAK,CAAC,8BAA8B,CAAC;IAC5C,MAAMb,OAAO,GAAGC,mBAAgB,CAACC,KAAK,CAACJ,SAAS,CAAC;IAEjDL,MAAM,CAACoB,KAAK,CAAC,kCAAkC,CAAC;IAChD,IAAIsC,CAAC,GAAG,CAAC;IACT,IAAIC,cAAc,GAAG,EAAE;IACvB,IAAIC,kBAAsC,GAAGrD,OAAO,CAAC,IAAI,CAAClC,aAAa,EAAE,CAAC;IAC1E,IAAIuF,kBAAkB,KAAKjB,SAAS,EAAE;MACpC,GAAG;QACDiB,kBAAkB,GAAGrD,OAAO,CAAC,IAAA9B,6BAAoB,EAACiF,CAAC,EAAE,CAAC,CAAC;QACvD,IAAIE,kBAAkB,EAAE;UACtBD,cAAc,IAAIC,kBAAkB;QACtC;MACF,CAAC,QAAQA,kBAAkB;IAC7B,CAAC,MAAM;MACLD,cAAc,GAAGC,kBAAkB;IACrC;IAEA,IAAID,cAAc,CAAChD,MAAM,KAAK,CAAC,EAAE;MAC/BX,MAAM,CAACI,IAAI,CAAC,0BAA0B,CAAC;MACvC,OAAOuC,SAAS;IAClB;IAEA3C,MAAM,CAACI,IAAI,CAAE,iCAAgCuD,cAAc,CAAChD,MAAO,GAAE,CAAC;IACtE,OAAOgD,cAAc;EACvB;EAEAE,oBAAoBA,CAACtD,OAAwB,EAAsB;IACjE,MAAMP,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAAqC,CAAC,CAAC;IAClF,MAAM2D,YAAY,GAAGvD,OAAO,CAACc,MAAM,CAAEJ,CAAC,IAAKA,CAAC,CAACrB,IAAI,CAACmE,QAAQ,CAAC,IAAI,CAAC1F,aAAa,EAAE,CAAC,CAAC;IACjF2B,MAAM,CAACI,IAAI,CAAC,2DAA2D,CAAC;IAExE,IAAI,CAAC0D,YAAY,IAAIA,YAAY,CAACnD,MAAM,KAAK,CAAC,EAAE;MAC9CX,MAAM,CAACI,IAAI,CAAE,0BAAyB,CAAC;MACvC,OAAOuC,SAAS;IAClB;IACA3C,MAAM,CAACoB,KAAK,CAAE,SAAQ0C,YAAY,CAACnD,MAAO,SAAQ,CAAC;IACnDmD,YAAY,CAACE,IAAI,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAK;MAC1B,MAAMC,iBAAiB,GAAGC,QAAQ,CAACH,CAAC,CAACrE,IAAI,CAACyE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;MACpD,MAAMC,kBAAkB,GAAGF,QAAQ,CAACF,CAAC,CAACtE,IAAI,CAACyE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;MACrD,OAAOF,iBAAiB,GAAGG,kBAAkB,GAAG,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC;IAEFtE,MAAM,CAACI,IAAI,CAAE,oCAAmC,CAAC;IACjD,OAAO0D,YAAY,CAAC9C,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAACnC,KAAK,CAAC,CAACgD,IAAI,CAAC,EAAE,CAAC;EAClD;EA4DA;AACF;AACA;AACA;AACA;AACA;EACEyC,aAAaA,CAAC;IAAEC,WAAW;IAAE7F,SAAS;IAAEC,YAAY;IAAE6F,GAAG;IAAExC;EAA0B,CAAC,EAAQ;IAAA,IAAAyC,IAAA;IAC5F,MAAM1E,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;MAAEC,GAAG,EAAE;IAA8B,CAAC,CAAC;IAC3EH,MAAM,CAACoB,KAAK,CAAC,8DAA8D,CAAC;IAC5E,MAAM1B,eAAe,GAAG,IAAI,CAACI,kBAAkB,CAACmC,GAAG,CAAC;IACpD,MAAMW,WAAW,GAAG,IAAI,CAACxD,kBAAkB,CAACT,SAAS,EAAEC,YAAY,EAAE4F,WAAW,WAAXA,WAAW,GAAI9E,eAAe,CAAC;IACpG,IAAIiF,iBAAiB,IAAAD,IAAA,GAAID,GAAG,CAACG,SAAS,CAAC,YAAY,CAAC,YAAAF,IAAA,GAA0B,EAAE;IAChF,IAAI,OAAOC,iBAAiB,KAAK,QAAQ,EAAE;MACzCA,iBAAiB,GAAG,CAACA,iBAAiB,CAAC;IACzC;IAEA,MAAME,gBAAgB,GAAG,CAAC,GAAGF,iBAAiB,EAAE,GAAG/B,WAAW,CAAC;IAC/D5C,MAAM,CAACoB,KAAK,CAAE,4BAA2ByD,gBAAgB,CAAClE,MAAO,GAAE,CAAC;IACpE8D,GAAG,CAACK,SAAS,CAAC,YAAY,EAAED,gBAAgB,CAAC;EAC/C;;EAEA;AACF;AACA;AACA;AACA;AACA;AAsCA;AAAC,IAAAE,QAAA,GAEc,IAAI5G,aAAa,EAAE;AAAA6G,OAAA,CAAAC,OAAA,GAAAF,QAAA"}

package/utils/fetchUserData/index.js

@@ -9,6 +9,7 @@ var _extends2 = _interopRequireDefault(require("@babel/runtime/helpers/extends")
 var _api = require("../../api");
 var _common = require("../common");
 var _fronteggLogger = _interopRequireDefault(require("../fronteggLogger"));
+var _config = _interopRequireDefault(require("../../config"));
 const FULFILLED_STATUS = 'fulfilled';
 async function fetchUserData(options) {
   const {
@@ -31,6 +32,9 @@ async function fetchUserData(options) {
     const headers = (0, _extends2.default)({}, reqHeaders, {
       authorization: `Bearer ${accessToken}`
     });
+    if (_config.default.appId) {
+      headers['frontegg-requested-application-id'] = _config.default.appId;
+    }
     logger.debug('Retrieving user data...');
     const [baseUserResult, tenantsResult, entitlementsResult, meAuthorizationResult] = await Promise.allSettled([(0, _api.getMe)(headers), (0, _api.getTenants)(headers), (0, _api.getEntitlements)(headers), (0, _api.getMeAuthorization)(headers)]);
     logger.debug('Retrieved user data:', 'baseUserResult: ', baseUserResult.status, 'tenantsResult:', tenantsResult.status, 'entitlements:', entitlementsResult.status);

package/utils/fetchUserData/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_api","require","_common","_fronteggLogger","_interopRequireDefault","FULFILLED_STATUS","fetchUserData","options","getSession","getHeaders","logger","fronteggLogger","child","tag","session","info","accessToken","reqHeaders","headers","_extends2","default","authorization","debug","baseUserResult","tenantsResult","entitlementsResult","meAuthorizationResult","Promise","allSettled","getMe","getTenants","getEntitlements","getMeAuthorization","status","baseUser","value","tenantsResponse","meAuthorizationResponse","entitlementsResponse","undefined","user","entitlements","expiresIn","calculateExpiresInFromExp","exp","tenants","activeTenant","e"],"sources":["../../../../../packages/nextjs/src/utils/fetchUserData/index.ts"],"sourcesContent":["import { AllUserData, FronteggNextJSSession } from '../../types';\nimport { getTenants, getMe, getMeAuthorization, getEntitlements } from '../../api';\nimport { calculateExpiresInFromExp } from '../common';\nimport fronteggLogger from '../fronteggLogger';\n\nconst FULFILLED_STATUS = 'fulfilled';\n\ntype FetchUserDataOptions = {\n  getSession: () => Promise<FronteggNextJSSession | undefined | null>;\n  getHeaders: () => Promise<Record<string, string | string[] | undefined>>;\n};\n\nexport default async function fetchUserData(options: FetchUserDataOptions): Promise<AllUserData> {\n  const { getSession, getHeaders } = options;\n\n  const logger = fronteggLogger.child({ tag: 'fetchUserData.getAllUserData' });\n  try {\n    const session = await getSession();\n    if (!session) {\n      logger.info('No session found');\n      return {};\n    }\n\n    const { accessToken } = session;\n    const reqHeaders = await getHeaders();\n    const headers = { ...reqHeaders, authorization: `Bearer ${accessToken}` };\n\n    logger.debug('Retrieving user data...');\n    const [baseUserResult, tenantsResult, entitlementsResult, meAuthorizationResult] = await Promise.allSettled([\n      getMe(headers),\n      getTenants(headers),\n      getEntitlements(headers),\n      getMeAuthorization(headers),\n    ]);\n\n    logger.debug(\n      'Retrieved user data:',\n      'baseUserResult: ',\n      baseUserResult.status,\n      'tenantsResult:',\n      tenantsResult.status,\n      'entitlements:',\n      entitlementsResult.status\n    );\n\n    const baseUser = baseUserResult.status === FULFILLED_STATUS ? baseUserResult.value : null;\n    const tenantsResponse = tenantsResult.status === FULFILLED_STATUS ? tenantsResult.value : null;\n    const meAuthorizationResponse =\n      meAuthorizationResult.status === FULFILLED_STATUS ? meAuthorizationResult.value : null;\n    const entitlementsResponse = entitlementsResult.status === FULFILLED_STATUS ? entitlementsResult.value : undefined;\n\n    if (!baseUser || !tenantsResponse) {\n      logger.info('No base user or tenants found');\n      return {};\n    }\n\n    const user = {\n      ...session.user,\n      ...baseUser!,\n      ...meAuthorizationResponse,\n      entitlements: entitlementsResponse,\n      expiresIn: calculateExpiresInFromExp(session.user.exp),\n    };\n\n    logger.info('Retrieved all user data successfully');\n\n    const { tenants, activeTenant } = tenantsResponse;\n    return { user, session, tenants, activeTenant };\n  } catch (e: any) {\n    // logger.error(e.message, e);\n    return {};\n  }\n}\n"],"mappings":";;;;;;;;AACA,IAAAA,IAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,eAAA,GAAAC,sBAAA,CAAAH,OAAA;AAEA,MAAMI,gBAAgB,GAAG,WAAW;AAOrB,eAAeC,aAAaA,CAACC,OAA6B,EAAwB;EAC/F,MAAM;IAAEC,UAAU;IAAEC;EAAW,CAAC,GAAGF,OAAO;EAE1C,MAAMG,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA+B,CAAC,CAAC;EAC5E,IAAI;IACF,MAAMC,OAAO,GAAG,MAAMN,UAAU,EAAE;IAClC,IAAI,CAACM,OAAO,EAAE;MACZJ,MAAM,CAACK,IAAI,CAAC,kBAAkB,CAAC;MAC/B,OAAO,CAAC,CAAC;IACX;IAEA,MAAM;MAAEC;IAAY,CAAC,GAAGF,OAAO;IAC/B,MAAMG,UAAU,GAAG,MAAMR,UAAU,EAAE;IACrC,MAAMS,OAAO,OAAAC,SAAA,CAAAC,OAAA,MAAQH,UAAU;MAAEI,aAAa,EAAG,UAASL,WAAY;IAAC,EAAE;IAEzEN,MAAM,CAACY,KAAK,CAAC,yBAAyB,CAAC;IACvC,MAAM,CAACC,cAAc,EAAEC,aAAa,EAAEC,kBAAkB,EAAEC,qBAAqB,CAAC,GAAG,MAAMC,OAAO,CAACC,UAAU,CAAC,CAC1G,IAAAC,UAAK,EAACX,OAAO,CAAC,EACd,IAAAY,eAAU,EAACZ,OAAO,CAAC,EACnB,IAAAa,oBAAe,EAACb,OAAO,CAAC,EACxB,IAAAc,uBAAkB,EAACd,OAAO,CAAC,CAC5B,CAAC;IAEFR,MAAM,CAACY,KAAK,CACV,sBAAsB,EACtB,kBAAkB,EAClBC,cAAc,CAACU,MAAM,EACrB,gBAAgB,EAChBT,aAAa,CAACS,MAAM,EACpB,eAAe,EACfR,kBAAkB,CAACQ,MAAM,CAC1B;IAED,MAAMC,QAAQ,GAAGX,cAAc,CAACU,MAAM,KAAK5B,gBAAgB,GAAGkB,cAAc,CAACY,KAAK,GAAG,IAAI;IACzF,MAAMC,eAAe,GAAGZ,aAAa,CAACS,MAAM,KAAK5B,gBAAgB,GAAGmB,aAAa,CAACW,KAAK,GAAG,IAAI;IAC9F,MAAME,uBAAuB,GAC3BX,qBAAqB,CAACO,MAAM,KAAK5B,gBAAgB,GAAGqB,qBAAqB,CAACS,KAAK,GAAG,IAAI;IACxF,MAAMG,oBAAoB,GAAGb,kBAAkB,CAACQ,MAAM,KAAK5B,gBAAgB,GAAGoB,kBAAkB,CAACU,KAAK,GAAGI,SAAS;IAElH,IAAI,CAACL,QAAQ,IAAI,CAACE,eAAe,EAAE;MACjC1B,MAAM,CAACK,IAAI,CAAC,+BAA+B,CAAC;MAC5C,OAAO,CAAC,CAAC;IACX;IAEA,MAAMyB,IAAI,OAAArB,SAAA,CAAAC,OAAA,MACLN,OAAO,CAAC0B,IAAI,EACZN,QAAQ,EACRG,uBAAuB;MAC1BI,YAAY,EAAEH,oBAAoB;MAClCI,SAAS,EAAE,IAAAC,iCAAyB,EAAC7B,OAAO,CAAC0B,IAAI,CAACI,GAAG;IAAC,EACvD;IAEDlC,MAAM,CAACK,IAAI,CAAC,sCAAsC,CAAC;IAEnD,MAAM;MAAE8B,OAAO;MAAEC;IAAa,CAAC,GAAGV,eAAe;IACjD,OAAO;MAAEI,IAAI;MAAE1B,OAAO;MAAE+B,OAAO;MAAEC;IAAa,CAAC;EACjD,CAAC,CAAC,OAAOC,CAAM,EAAE;IACf;IACA,OAAO,CAAC,CAAC;EACX;AACF"}
+{"version":3,"file":"index.js","names":["_api","require","_common","_fronteggLogger","_interopRequireDefault","_config","FULFILLED_STATUS","fetchUserData","options","getSession","getHeaders","logger","fronteggLogger","child","tag","session","info","accessToken","reqHeaders","headers","_extends2","default","authorization","config","appId","debug","baseUserResult","tenantsResult","entitlementsResult","meAuthorizationResult","Promise","allSettled","getMe","getTenants","getEntitlements","getMeAuthorization","status","baseUser","value","tenantsResponse","meAuthorizationResponse","entitlementsResponse","undefined","user","entitlements","expiresIn","calculateExpiresInFromExp","exp","tenants","activeTenant","e"],"sources":["../../../../../packages/nextjs/src/utils/fetchUserData/index.ts"],"sourcesContent":["import { AllUserData, FronteggNextJSSession } from '../../types';\nimport { getTenants, getMe, getMeAuthorization, getEntitlements } from '../../api';\nimport { calculateExpiresInFromExp } from '../common';\nimport fronteggLogger from '../fronteggLogger';\nimport config from '../../config';\n\nconst FULFILLED_STATUS = 'fulfilled';\n\ntype FetchUserDataOptions = {\n  getSession: () => Promise<FronteggNextJSSession | undefined | null>;\n  getHeaders: () => Promise<Record<string, string | string[] | undefined>>;\n};\n\nexport default async function fetchUserData(options: FetchUserDataOptions): Promise<AllUserData> {\n  const { getSession, getHeaders } = options;\n\n  const logger = fronteggLogger.child({ tag: 'fetchUserData.getAllUserData' });\n  try {\n    const session = await getSession();\n    if (!session) {\n      logger.info('No session found');\n      return {};\n    }\n\n    const { accessToken } = session;\n    const reqHeaders = await getHeaders();\n    const headers: Record<string, string> = { ...reqHeaders, authorization: `Bearer ${accessToken}` };\n\n    if (config.appId) {\n      headers['frontegg-requested-application-id'] = config.appId;\n    }\n\n    logger.debug('Retrieving user data...');\n    const [baseUserResult, tenantsResult, entitlementsResult, meAuthorizationResult] = await Promise.allSettled([\n      getMe(headers),\n      getTenants(headers),\n      getEntitlements(headers),\n      getMeAuthorization(headers),\n    ]);\n\n    logger.debug(\n      'Retrieved user data:',\n      'baseUserResult: ',\n      baseUserResult.status,\n      'tenantsResult:',\n      tenantsResult.status,\n      'entitlements:',\n      entitlementsResult.status\n    );\n\n    const baseUser = baseUserResult.status === FULFILLED_STATUS ? baseUserResult.value : null;\n    const tenantsResponse = tenantsResult.status === FULFILLED_STATUS ? tenantsResult.value : null;\n    const meAuthorizationResponse =\n      meAuthorizationResult.status === FULFILLED_STATUS ? meAuthorizationResult.value : null;\n    const entitlementsResponse = entitlementsResult.status === FULFILLED_STATUS ? entitlementsResult.value : undefined;\n\n    if (!baseUser || !tenantsResponse) {\n      logger.info('No base user or tenants found');\n      return {};\n    }\n\n    const user = {\n      ...session.user,\n      ...baseUser!,\n      ...meAuthorizationResponse,\n      entitlements: entitlementsResponse,\n      expiresIn: calculateExpiresInFromExp(session.user.exp),\n    };\n\n    logger.info('Retrieved all user data successfully');\n\n    const { tenants, activeTenant } = tenantsResponse;\n    return { user, session, tenants, activeTenant };\n  } catch (e: any) {\n    // logger.error(e.message, e);\n    return {};\n  }\n}\n"],"mappings":";;;;;;;;AACA,IAAAA,IAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,eAAA,GAAAC,sBAAA,CAAAH,OAAA;AACA,IAAAI,OAAA,GAAAD,sBAAA,CAAAH,OAAA;AAEA,MAAMK,gBAAgB,GAAG,WAAW;AAOrB,eAAeC,aAAaA,CAACC,OAA6B,EAAwB;EAC/F,MAAM;IAAEC,UAAU;IAAEC;EAAW,CAAC,GAAGF,OAAO;EAE1C,MAAMG,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA+B,CAAC,CAAC;EAC5E,IAAI;IACF,MAAMC,OAAO,GAAG,MAAMN,UAAU,EAAE;IAClC,IAAI,CAACM,OAAO,EAAE;MACZJ,MAAM,CAACK,IAAI,CAAC,kBAAkB,CAAC;MAC/B,OAAO,CAAC,CAAC;IACX;IAEA,MAAM;MAAEC;IAAY,CAAC,GAAGF,OAAO;IAC/B,MAAMG,UAAU,GAAG,MAAMR,UAAU,EAAE;IACrC,MAAMS,OAA+B,OAAAC,SAAA,CAAAC,OAAA,MAAQH,UAAU;MAAEI,aAAa,EAAG,UAASL,WAAY;IAAC,EAAE;IAEjG,IAAIM,eAAM,CAACC,KAAK,EAAE;MAChBL,OAAO,CAAC,mCAAmC,CAAC,GAAGI,eAAM,CAACC,KAAK;IAC7D;IAEAb,MAAM,CAACc,KAAK,CAAC,yBAAyB,CAAC;IACvC,MAAM,CAACC,cAAc,EAAEC,aAAa,EAAEC,kBAAkB,EAAEC,qBAAqB,CAAC,GAAG,MAAMC,OAAO,CAACC,UAAU,CAAC,CAC1G,IAAAC,UAAK,EAACb,OAAO,CAAC,EACd,IAAAc,eAAU,EAACd,OAAO,CAAC,EACnB,IAAAe,oBAAe,EAACf,OAAO,CAAC,EACxB,IAAAgB,uBAAkB,EAAChB,OAAO,CAAC,CAC5B,CAAC;IAEFR,MAAM,CAACc,KAAK,CACV,sBAAsB,EACtB,kBAAkB,EAClBC,cAAc,CAACU,MAAM,EACrB,gBAAgB,EAChBT,aAAa,CAACS,MAAM,EACpB,eAAe,EACfR,kBAAkB,CAACQ,MAAM,CAC1B;IAED,MAAMC,QAAQ,GAAGX,cAAc,CAACU,MAAM,KAAK9B,gBAAgB,GAAGoB,cAAc,CAACY,KAAK,GAAG,IAAI;IACzF,MAAMC,eAAe,GAAGZ,aAAa,CAACS,MAAM,KAAK9B,gBAAgB,GAAGqB,aAAa,CAACW,KAAK,GAAG,IAAI;IAC9F,MAAME,uBAAuB,GAC3BX,qBAAqB,CAACO,MAAM,KAAK9B,gBAAgB,GAAGuB,qBAAqB,CAACS,KAAK,GAAG,IAAI;IACxF,MAAMG,oBAAoB,GAAGb,kBAAkB,CAACQ,MAAM,KAAK9B,gBAAgB,GAAGsB,kBAAkB,CAACU,KAAK,GAAGI,SAAS;IAElH,IAAI,CAACL,QAAQ,IAAI,CAACE,eAAe,EAAE;MACjC5B,MAAM,CAACK,IAAI,CAAC,+BAA+B,CAAC;MAC5C,OAAO,CAAC,CAAC;IACX;IAEA,MAAM2B,IAAI,OAAAvB,SAAA,CAAAC,OAAA,MACLN,OAAO,CAAC4B,IAAI,EACZN,QAAQ,EACRG,uBAAuB;MAC1BI,YAAY,EAAEH,oBAAoB;MAClCI,SAAS,EAAE,IAAAC,iCAAyB,EAAC/B,OAAO,CAAC4B,IAAI,CAACI,GAAG;IAAC,EACvD;IAEDpC,MAAM,CAACK,IAAI,CAAC,sCAAsC,CAAC;IAEnD,MAAM;MAAEgC,OAAO;MAAEC;IAAa,CAAC,GAAGV,eAAe;IACjD,OAAO;MAAEI,IAAI;MAAE5B,OAAO;MAAEiC,OAAO;MAAEC;IAAa,CAAC;EACjD,CAAC,CAAC,OAAOC,CAAM,EAAE;IACf;IACA,OAAO,CAAC,CAAC;EACX;AACF"}

package/utils/initializeFronteggApp/index.js

@@ -62,7 +62,8 @@ const initializeFronteggApp = ({
         return options.envBaseUrl;
       }
     },
-    clientId: options.envClientId
+    clientId: options.envClientId,
+    appId: options.envAppId
   });
   const tenantsState = (0, _extends2.default)({
     tenants: tenants || [],

package/utils/initializeFronteggApp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_js","require","_reduxStore","_sdkVersion","_interopRequireDefault","_package","_utils","initializeFronteggApp","options","onRedirectTo","appName","storeHolder","_options$authOptions","_options$authOptions2","_options$hostedLoginB","_options$authOptions$","_options$authOptions3","session","user","tenants","activeTenant","accessToken","refreshToken","contextOptions","_extends2","default","requestCredentials","additionalHeadersResolver","_options$contextOptio","additionalHeaders","originalAdditionalHeadersResolver","push","e","Array","isArray","key","value","nextjsPkg","version","sdkVersion","tokenResolver","secureJwtEnabled","undefined","baseUrl","path","isMiddlewarePath","envAppUrl","envBaseUrl","clientId","envClientId","tenantsState","authOptions","userData","isLoading","isAuthenticated","hostedLoginBox","disableSilentRefresh","sharedStore","store","createStore","context","previewMode","name","urlStrategy","builderMode","initialState","auth","createdApp","AppHolder","getInstance","_options$hostedLoginB2","_options$customLoginB","initialize","customLoginBox","basename","_default","exports"],"sources":["../../../../../packages/nextjs/src/utils/initializeFronteggApp/index.ts"],"sourcesContent":["import { AppHolder, FronteggApp, initialize } from '@frontegg/js';\nimport { createStore, AuthState } from '@frontegg/redux-store';\nimport { KeyValuePair } from '@frontegg/rest-api';\nimport { FronteggAppOptions } from '@frontegg/types';\nimport sdkVersion from '../../sdkVersion';\nimport type { FronteggProviderOptions } from '../../types';\nimport nextjsPkg from 'next/package.json';\nimport { isMiddlewarePath } from '../../api/utils';\n\ntype CreateOrGetFronteggAppParams = {\n  options: FronteggProviderOptions;\n  onRedirectTo: AuthState['onRedirectTo'];\n  appName?: string;\n  storeHolder: any;\n};\n\nconst initializeFronteggApp = ({\n  options,\n  onRedirectTo,\n  appName,\n  storeHolder,\n}: CreateOrGetFronteggAppParams): FronteggApp => {\n  const { session, user, tenants, activeTenant } = options;\n  const { accessToken, refreshToken } = session ?? {};\n\n  const contextOptions: FronteggAppOptions['contextOptions'] = {\n    requestCredentials: 'include' as RequestCredentials,\n    ...options.contextOptions,\n    additionalHeadersResolver: async () => {\n      const additionalHeaders: KeyValuePair[] = [];\n      const originalAdditionalHeadersResolver = options.contextOptions?.additionalHeadersResolver;\n      if (typeof originalAdditionalHeadersResolver === 'function') {\n        try {\n          additionalHeaders.push(...(await originalAdditionalHeadersResolver()));\n        } catch (e) {\n          /** ignore failed additionalHeadersResolver */\n        }\n      } else if (Array.isArray(originalAdditionalHeadersResolver)) {\n        additionalHeaders.push(...(originalAdditionalHeadersResolver as KeyValuePair[]));\n      }\n      additionalHeaders.push({\n        key: 'x-frontegg-framework',\n        value: `next@${nextjsPkg.version}`,\n      });\n      additionalHeaders.push({\n        key: 'x-frontegg-sdk',\n        value: `@frontegg/nextjs@${sdkVersion.version}`,\n      });\n      return additionalHeaders;\n    },\n    tokenResolver: options.secureJwtEnabled ? () => '' : undefined,\n    baseUrl: (path: string) => {\n      if (isMiddlewarePath(path) || options.secureJwtEnabled) {\n        return `${options.envAppUrl}/api`;\n      } else {\n        return options.envBaseUrl;\n      }\n    },\n    clientId: options.envClientId,\n  };\n\n  const tenantsState = {\n    tenants: tenants || [],\n    activeTenant,\n    ...options.authOptions?.tenantsState,\n  };\n  const userData = user\n    ? {\n        ...user,\n        accessToken: accessToken ?? '',\n        refreshToken: refreshToken ?? undefined,\n        ...options.authOptions?.user,\n      }\n    : null;\n\n  const authOptions: FronteggAppOptions['authOptions'] = {\n    ...options.authOptions,\n    onRedirectTo,\n    isLoading: false,\n    isAuthenticated: !!options.session,\n    hostedLoginBox: options.hostedLoginBox ?? false,\n    disableSilentRefresh: options.authOptions?.disableSilentRefresh ?? true,\n    user: userData,\n    tenantsState: tenantsState as AuthState['tenantsState'],\n  };\n\n  let sharedStore = storeHolder.store;\n  if (!sharedStore) {\n    sharedStore = createStore({\n      context: contextOptions,\n      storeHolder,\n      previewMode: options.previewMode,\n      name: appName ?? 'default',\n      urlStrategy: options.urlStrategy,\n      builderMode: false,\n      initialState: {\n        auth: authOptions,\n      },\n    });\n    storeHolder.store = sharedStore;\n  }\n\n  let createdApp;\n  try {\n    createdApp = AppHolder.getInstance(appName ?? 'default');\n    createdApp.store = sharedStore;\n  } catch (e) {\n    createdApp = initialize(\n      {\n        ...options,\n        store: sharedStore,\n        hostedLoginBox: options.hostedLoginBox ?? false,\n        customLoginBox: options.customLoginBox ?? false,\n        basename: options.basename,\n        authOptions,\n        contextOptions,\n        onRedirectTo,\n      },\n      appName ?? 'default'\n    );\n  }\n  return createdApp;\n};\nexport default initializeFronteggApp;\n"],"mappings":";;;;;;;;AAAA,IAAAA,GAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AAGA,IAAAE,WAAA,GAAAC,sBAAA,CAAAH,OAAA;AAEA,IAAAI,QAAA,GAAAD,sBAAA,CAAAH,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AASA,MAAMM,qBAAqB,GAAGA,CAAC;EAC7BC,OAAO;EACPC,YAAY;EACZC,OAAO;EACPC;AAC4B,CAAC,KAAkB;EAAA,IAAAC,oBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,qBAAA;EAC/C,MAAM;IAAEC,OAAO;IAAEC,IAAI;IAAEC,OAAO;IAAEC;EAAa,CAAC,GAAGZ,OAAO;EACxD,MAAM;IAAEa,WAAW;IAAEC;EAAa,CAAC,GAAGL,OAAO,WAAPA,OAAO,GAAI,CAAC,CAAC;EAEnD,MAAMM,cAAoD,OAAAC,SAAA,CAAAC,OAAA;IACxDC,kBAAkB,EAAE;EAA+B,GAChDlB,OAAO,CAACe,cAAc;IACzBI,yBAAyB,EAAE,MAAAA,CAAA,KAAY;MAAA,IAAAC,qBAAA;MACrC,MAAMC,iBAAiC,GAAG,EAAE;MAC5C,MAAMC,iCAAiC,IAAAF,qBAAA,GAAGpB,OAAO,CAACe,cAAc,qBAAtBK,qBAAA,CAAwBD,yBAAyB;MAC3F,IAAI,OAAOG,iCAAiC,KAAK,UAAU,EAAE;QAC3D,IAAI;UACFD,iBAAiB,CAACE,IAAI,CAAC,IAAI,MAAMD,iCAAiC,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,OAAOE,CAAC,EAAE;UACV;QAAA;MAEJ,CAAC,MAAM,IAAIC,KAAK,CAACC,OAAO,CAACJ,iCAAiC,CAAC,EAAE;QAC3DD,iBAAiB,CAACE,IAAI,CAAC,GAAID,iCAAoD,CAAC;MAClF;MACAD,iBAAiB,CAACE,IAAI,CAAC;QACrBI,GAAG,EAAE,sBAAsB;QAC3BC,KAAK,EAAG,QAAOC,gBAAS,CAACC,OAAQ;MACnC,CAAC,CAAC;MACFT,iBAAiB,CAACE,IAAI,CAAC;QACrBI,GAAG,EAAE,gBAAgB;QACrBC,KAAK,EAAG,oBAAmBG,mBAAU,CAACD,OAAQ;MAChD,CAAC,CAAC;MACF,OAAOT,iBAAiB;IAC1B,CAAC;IACDW,aAAa,EAAEhC,OAAO,CAACiC,gBAAgB,GAAG,MAAM,EAAE,GAAGC,SAAS;IAC9DC,OAAO,EAAGC,IAAY,IAAK;MACzB,IAAI,IAAAC,uBAAgB,EAACD,IAAI,CAAC,IAAIpC,OAAO,CAACiC,gBAAgB,EAAE;QACtD,OAAQ,GAAEjC,OAAO,CAACsC,SAAU,MAAK;MACnC,CAAC,MAAM;QACL,OAAOtC,OAAO,CAACuC,UAAU;MAC3B;IACF,CAAC;IACDC,QAAQ,EAAExC,OAAO,CAACyC;EAAW,EAC9B;EAED,MAAMC,YAAY,OAAA1B,SAAA,CAAAC,OAAA;IAChBN,OAAO,EAAEA,OAAO,IAAI,EAAE;IACtBC;EAAY,IAAAR,oBAAA,GACTJ,OAAO,CAAC2C,WAAW,qBAAnBvC,oBAAA,CAAqBsC,YAAY,CACrC;EACD,MAAME,QAAQ,GAAGlC,IAAI,OAAAM,SAAA,CAAAC,OAAA,MAEZP,IAAI;IACPG,WAAW,EAAEA,WAAW,WAAXA,WAAW,GAAI,EAAE;IAC9BC,YAAY,EAAEA,YAAY,WAAZA,YAAY,GAAIoB;EAAS,IAAA7B,qBAAA,GACpCL,OAAO,CAAC2C,WAAW,qBAAnBtC,qBAAA,CAAqBK,IAAI,IAE9B,IAAI;EAER,MAAMiC,WAA8C,OAAA3B,SAAA,CAAAC,OAAA,MAC/CjB,OAAO,CAAC2C,WAAW;IACtB1C,YAAY;IACZ4C,SAAS,EAAE,KAAK;IAChBC,eAAe,EAAE,CAAC,CAAC9C,OAAO,CAACS,OAAO;IAClCsC,cAAc,GAAAzC,qBAAA,GAAEN,OAAO,CAAC+C,cAAc,YAAAzC,qBAAA,GAAI,KAAK;IAC/C0C,oBAAoB,GAAAzC,qBAAA,IAAAC,qBAAA,GAAER,OAAO,CAAC2C,WAAW,qBAAnBnC,qBAAA,CAAqBwC,oBAAoB,YAAAzC,qBAAA,GAAI,IAAI;IACvEG,IAAI,EAAEkC,QAAQ;IACdF,YAAY,EAAEA;EAAyC,EACxD;EAED,IAAIO,WAAW,GAAG9C,WAAW,CAAC+C,KAAK;EACnC,IAAI,CAACD,WAAW,EAAE;IAChBA,WAAW,GAAG,IAAAE,uBAAW,EAAC;MACxBC,OAAO,EAAErC,cAAc;MACvBZ,WAAW;MACXkD,WAAW,EAAErD,OAAO,CAACqD,WAAW;MAChCC,IAAI,EAAEpD,OAAO,WAAPA,OAAO,GAAI,SAAS;MAC1BqD,WAAW,EAAEvD,OAAO,CAACuD,WAAW;MAChCC,WAAW,EAAE,KAAK;MAClBC,YAAY,EAAE;QACZC,IAAI,EAAEf;MACR;IACF,CAAC,CAAC;IACFxC,WAAW,CAAC+C,KAAK,GAAGD,WAAW;EACjC;EAEA,IAAIU,UAAU;EACd,IAAI;IACFA,UAAU,GAAGC,aAAS,CAACC,WAAW,CAAC3D,OAAO,WAAPA,OAAO,GAAI,SAAS,CAAC;IACxDyD,UAAU,CAACT,KAAK,GAAGD,WAAW;EAChC,CAAC,CAAC,OAAOzB,CAAC,EAAE;IAAA,IAAAsC,sBAAA,EAAAC,qBAAA;IACVJ,UAAU,GAAG,IAAAK,cAAU,MAAAhD,SAAA,CAAAC,OAAA,MAEhBjB,OAAO;MACVkD,KAAK,EAAED,WAAW;MAClBF,cAAc,GAAAe,sBAAA,GAAE9D,OAAO,CAAC+C,cAAc,YAAAe,sBAAA,GAAI,KAAK;MAC/CG,cAAc,GAAAF,qBAAA,GAAE/D,OAAO,CAACiE,cAAc,YAAAF,qBAAA,GAAI,KAAK;MAC/CG,QAAQ,EAAElE,OAAO,CAACkE,QAAQ;MAC1BvB,WAAW;MACX5B,cAAc;MACdd;IAAY,IAEdC,OAAO,WAAPA,OAAO,GAAI,SAAS,CACrB;EACH;EACA,OAAOyD,UAAU;AACnB,CAAC;AAAC,IAAAQ,QAAA,GACapE,qBAAqB;AAAAqE,OAAA,CAAAnD,OAAA,GAAAkD,QAAA"}
+{"version":3,"file":"index.js","names":["_js","require","_reduxStore","_sdkVersion","_interopRequireDefault","_package","_utils","initializeFronteggApp","options","onRedirectTo","appName","storeHolder","_options$authOptions","_options$authOptions2","_options$hostedLoginB","_options$authOptions$","_options$authOptions3","session","user","tenants","activeTenant","accessToken","refreshToken","contextOptions","_extends2","default","requestCredentials","additionalHeadersResolver","_options$contextOptio","additionalHeaders","originalAdditionalHeadersResolver","push","e","Array","isArray","key","value","nextjsPkg","version","sdkVersion","tokenResolver","secureJwtEnabled","undefined","baseUrl","path","isMiddlewarePath","envAppUrl","envBaseUrl","clientId","envClientId","appId","envAppId","tenantsState","authOptions","userData","isLoading","isAuthenticated","hostedLoginBox","disableSilentRefresh","sharedStore","store","createStore","context","previewMode","name","urlStrategy","builderMode","initialState","auth","createdApp","AppHolder","getInstance","_options$hostedLoginB2","_options$customLoginB","initialize","customLoginBox","basename","_default","exports"],"sources":["../../../../../packages/nextjs/src/utils/initializeFronteggApp/index.ts"],"sourcesContent":["import { AppHolder, FronteggApp, initialize } from '@frontegg/js';\nimport { createStore, AuthState } from '@frontegg/redux-store';\nimport { KeyValuePair } from '@frontegg/rest-api';\nimport { FronteggAppOptions } from '@frontegg/types';\nimport sdkVersion from '../../sdkVersion';\nimport type { FronteggProviderOptions } from '../../types';\nimport nextjsPkg from 'next/package.json';\nimport { isMiddlewarePath } from '../../api/utils';\n\ntype CreateOrGetFronteggAppParams = {\n  options: FronteggProviderOptions;\n  onRedirectTo: AuthState['onRedirectTo'];\n  appName?: string;\n  storeHolder: any;\n};\n\nconst initializeFronteggApp = ({\n  options,\n  onRedirectTo,\n  appName,\n  storeHolder,\n}: CreateOrGetFronteggAppParams): FronteggApp => {\n  const { session, user, tenants, activeTenant } = options;\n  const { accessToken, refreshToken } = session ?? {};\n\n  const contextOptions: FronteggAppOptions['contextOptions'] = {\n    requestCredentials: 'include' as RequestCredentials,\n    ...options.contextOptions,\n    additionalHeadersResolver: async () => {\n      const additionalHeaders: KeyValuePair[] = [];\n      const originalAdditionalHeadersResolver = options.contextOptions?.additionalHeadersResolver;\n      if (typeof originalAdditionalHeadersResolver === 'function') {\n        try {\n          additionalHeaders.push(...(await originalAdditionalHeadersResolver()));\n        } catch (e) {\n          /** ignore failed additionalHeadersResolver */\n        }\n      } else if (Array.isArray(originalAdditionalHeadersResolver)) {\n        additionalHeaders.push(...(originalAdditionalHeadersResolver as KeyValuePair[]));\n      }\n      additionalHeaders.push({\n        key: 'x-frontegg-framework',\n        value: `next@${nextjsPkg.version}`,\n      });\n      additionalHeaders.push({\n        key: 'x-frontegg-sdk',\n        value: `@frontegg/nextjs@${sdkVersion.version}`,\n      });\n      return additionalHeaders;\n    },\n    tokenResolver: options.secureJwtEnabled ? () => '' : undefined,\n    baseUrl: (path: string) => {\n      if (isMiddlewarePath(path) || options.secureJwtEnabled) {\n        return `${options.envAppUrl}/api`;\n      } else {\n        return options.envBaseUrl;\n      }\n    },\n    clientId: options.envClientId,\n    appId: options.envAppId,\n  };\n\n  const tenantsState = {\n    tenants: tenants || [],\n    activeTenant,\n    ...options.authOptions?.tenantsState,\n  };\n  const userData = user\n    ? {\n        ...user,\n        accessToken: accessToken ?? '',\n        refreshToken: refreshToken ?? undefined,\n        ...options.authOptions?.user,\n      }\n    : null;\n\n  const authOptions: FronteggAppOptions['authOptions'] = {\n    ...options.authOptions,\n    onRedirectTo,\n    isLoading: false,\n    isAuthenticated: !!options.session,\n    hostedLoginBox: options.hostedLoginBox ?? false,\n    disableSilentRefresh: options.authOptions?.disableSilentRefresh ?? true,\n    user: userData,\n    tenantsState: tenantsState as AuthState['tenantsState'],\n  };\n\n  let sharedStore = storeHolder.store;\n  if (!sharedStore) {\n    sharedStore = createStore({\n      context: contextOptions,\n      storeHolder,\n      previewMode: options.previewMode,\n      name: appName ?? 'default',\n      urlStrategy: options.urlStrategy,\n      builderMode: false,\n      initialState: {\n        auth: authOptions,\n      },\n    });\n    storeHolder.store = sharedStore;\n  }\n\n  let createdApp;\n  try {\n    createdApp = AppHolder.getInstance(appName ?? 'default');\n    createdApp.store = sharedStore;\n  } catch (e) {\n    createdApp = initialize(\n      {\n        ...options,\n        store: sharedStore,\n        hostedLoginBox: options.hostedLoginBox ?? false,\n        customLoginBox: options.customLoginBox ?? false,\n        basename: options.basename,\n        authOptions,\n        contextOptions,\n        onRedirectTo,\n      },\n      appName ?? 'default'\n    );\n  }\n  return createdApp;\n};\nexport default initializeFronteggApp;\n"],"mappings":";;;;;;;;AAAA,IAAAA,GAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AAGA,IAAAE,WAAA,GAAAC,sBAAA,CAAAH,OAAA;AAEA,IAAAI,QAAA,GAAAD,sBAAA,CAAAH,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AASA,MAAMM,qBAAqB,GAAGA,CAAC;EAC7BC,OAAO;EACPC,YAAY;EACZC,OAAO;EACPC;AAC4B,CAAC,KAAkB;EAAA,IAAAC,oBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,qBAAA;EAC/C,MAAM;IAAEC,OAAO;IAAEC,IAAI;IAAEC,OAAO;IAAEC;EAAa,CAAC,GAAGZ,OAAO;EACxD,MAAM;IAAEa,WAAW;IAAEC;EAAa,CAAC,GAAGL,OAAO,WAAPA,OAAO,GAAI,CAAC,CAAC;EAEnD,MAAMM,cAAoD,OAAAC,SAAA,CAAAC,OAAA;IACxDC,kBAAkB,EAAE;EAA+B,GAChDlB,OAAO,CAACe,cAAc;IACzBI,yBAAyB,EAAE,MAAAA,CAAA,KAAY;MAAA,IAAAC,qBAAA;MACrC,MAAMC,iBAAiC,GAAG,EAAE;MAC5C,MAAMC,iCAAiC,IAAAF,qBAAA,GAAGpB,OAAO,CAACe,cAAc,qBAAtBK,qBAAA,CAAwBD,yBAAyB;MAC3F,IAAI,OAAOG,iCAAiC,KAAK,UAAU,EAAE;QAC3D,IAAI;UACFD,iBAAiB,CAACE,IAAI,CAAC,IAAI,MAAMD,iCAAiC,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,OAAOE,CAAC,EAAE;UACV;QAAA;MAEJ,CAAC,MAAM,IAAIC,KAAK,CAACC,OAAO,CAACJ,iCAAiC,CAAC,EAAE;QAC3DD,iBAAiB,CAACE,IAAI,CAAC,GAAID,iCAAoD,CAAC;MAClF;MACAD,iBAAiB,CAACE,IAAI,CAAC;QACrBI,GAAG,EAAE,sBAAsB;QAC3BC,KAAK,EAAG,QAAOC,gBAAS,CAACC,OAAQ;MACnC,CAAC,CAAC;MACFT,iBAAiB,CAACE,IAAI,CAAC;QACrBI,GAAG,EAAE,gBAAgB;QACrBC,KAAK,EAAG,oBAAmBG,mBAAU,CAACD,OAAQ;MAChD,CAAC,CAAC;MACF,OAAOT,iBAAiB;IAC1B,CAAC;IACDW,aAAa,EAAEhC,OAAO,CAACiC,gBAAgB,GAAG,MAAM,EAAE,GAAGC,SAAS;IAC9DC,OAAO,EAAGC,IAAY,IAAK;MACzB,IAAI,IAAAC,uBAAgB,EAACD,IAAI,CAAC,IAAIpC,OAAO,CAACiC,gBAAgB,EAAE;QACtD,OAAQ,GAAEjC,OAAO,CAACsC,SAAU,MAAK;MACnC,CAAC,MAAM;QACL,OAAOtC,OAAO,CAACuC,UAAU;MAC3B;IACF,CAAC;IACDC,QAAQ,EAAExC,OAAO,CAACyC,WAAW;IAC7BC,KAAK,EAAE1C,OAAO,CAAC2C;EAAQ,EACxB;EAED,MAAMC,YAAY,OAAA5B,SAAA,CAAAC,OAAA;IAChBN,OAAO,EAAEA,OAAO,IAAI,EAAE;IACtBC;EAAY,IAAAR,oBAAA,GACTJ,OAAO,CAAC6C,WAAW,qBAAnBzC,oBAAA,CAAqBwC,YAAY,CACrC;EACD,MAAME,QAAQ,GAAGpC,IAAI,OAAAM,SAAA,CAAAC,OAAA,MAEZP,IAAI;IACPG,WAAW,EAAEA,WAAW,WAAXA,WAAW,GAAI,EAAE;IAC9BC,YAAY,EAAEA,YAAY,WAAZA,YAAY,GAAIoB;EAAS,IAAA7B,qBAAA,GACpCL,OAAO,CAAC6C,WAAW,qBAAnBxC,qBAAA,CAAqBK,IAAI,IAE9B,IAAI;EAER,MAAMmC,WAA8C,OAAA7B,SAAA,CAAAC,OAAA,MAC/CjB,OAAO,CAAC6C,WAAW;IACtB5C,YAAY;IACZ8C,SAAS,EAAE,KAAK;IAChBC,eAAe,EAAE,CAAC,CAAChD,OAAO,CAACS,OAAO;IAClCwC,cAAc,GAAA3C,qBAAA,GAAEN,OAAO,CAACiD,cAAc,YAAA3C,qBAAA,GAAI,KAAK;IAC/C4C,oBAAoB,GAAA3C,qBAAA,IAAAC,qBAAA,GAAER,OAAO,CAAC6C,WAAW,qBAAnBrC,qBAAA,CAAqB0C,oBAAoB,YAAA3C,qBAAA,GAAI,IAAI;IACvEG,IAAI,EAAEoC,QAAQ;IACdF,YAAY,EAAEA;EAAyC,EACxD;EAED,IAAIO,WAAW,GAAGhD,WAAW,CAACiD,KAAK;EACnC,IAAI,CAACD,WAAW,EAAE;IAChBA,WAAW,GAAG,IAAAE,uBAAW,EAAC;MACxBC,OAAO,EAAEvC,cAAc;MACvBZ,WAAW;MACXoD,WAAW,EAAEvD,OAAO,CAACuD,WAAW;MAChCC,IAAI,EAAEtD,OAAO,WAAPA,OAAO,GAAI,SAAS;MAC1BuD,WAAW,EAAEzD,OAAO,CAACyD,WAAW;MAChCC,WAAW,EAAE,KAAK;MAClBC,YAAY,EAAE;QACZC,IAAI,EAAEf;MACR;IACF,CAAC,CAAC;IACF1C,WAAW,CAACiD,KAAK,GAAGD,WAAW;EACjC;EAEA,IAAIU,UAAU;EACd,IAAI;IACFA,UAAU,GAAGC,aAAS,CAACC,WAAW,CAAC7D,OAAO,WAAPA,OAAO,GAAI,SAAS,CAAC;IACxD2D,UAAU,CAACT,KAAK,GAAGD,WAAW;EAChC,CAAC,CAAC,OAAO3B,CAAC,EAAE;IAAA,IAAAwC,sBAAA,EAAAC,qBAAA;IACVJ,UAAU,GAAG,IAAAK,cAAU,MAAAlD,SAAA,CAAAC,OAAA,MAEhBjB,OAAO;MACVoD,KAAK,EAAED,WAAW;MAClBF,cAAc,GAAAe,sBAAA,GAAEhE,OAAO,CAACiD,cAAc,YAAAe,sBAAA,GAAI,KAAK;MAC/CG,cAAc,GAAAF,qBAAA,GAAEjE,OAAO,CAACmE,cAAc,YAAAF,qBAAA,GAAI,KAAK;MAC/CG,QAAQ,EAAEpE,OAAO,CAACoE,QAAQ;MAC1BvB,WAAW;MACX9B,cAAc;MACdd;IAAY,IAEdC,OAAO,WAAPA,OAAO,GAAI,SAAS,CACrB;EACH;EACA,OAAO2D,UAAU;AACnB,CAAC;AAAC,IAAAQ,QAAA,GACatE,qBAAqB;AAAAuE,OAAA,CAAArD,OAAA,GAAAoD,QAAA"}

package/utils/refreshAccessTokenIfNeeded/helpers.js

@@ -38,6 +38,9 @@ async function refreshAccessTokenEmbedded(request) {
   logger.info('check if has refresh token headers');
   if (hasRefreshTokenCookie(cookies)) {
     logger.info('going to refresh token (embedded mode)');
+    if (_config.default.appId) {
+      headers['frontegg-requested-application-id'] = _config.default.appId;
+    }
     return await _api.default.refreshTokenEmbedded(headers);
   }
   return null;
@@ -55,6 +58,9 @@ async function refreshAccessTokenHostedLogin(request) {
       logger.info('refresh token not found');
       return null;
     }
+    if (_config.default.appId) {
+      headers['frontegg-requested-application-id'] = _config.default.appId;
+    }
     if (_config.default.secureJwtEnabled) {
       const clientId = _config.default.clientId;
       const clientSecret = _config.default.clientSecret;

package/utils/refreshAccessTokenIfNeeded/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","names":["_fronteggLogger","_interopRequireDefault","require","_cookies","_api","_common","_config","hasRefreshTokenCookie","cookies","logger","fronteggLogger","child","tag","refreshTokenKey","CookieManager","debug","cookieKey","Object","keys","find","cookie","replace","exists","refreshAccessTokenEmbedded","request","headers","info","api","refreshTokenEmbedded","refreshAccessTokenHostedLogin","sealFromCookies","getSessionCookieFromRequest","tokens","getTokensFromCookie","refreshToken","config","secureJwtEnabled","clientId","clientSecret","refreshTokenHostedLogin","e","error","isRuntimeNextRequest","url","startsWith","isOauthCallback","isSamlCallback","isSSOPostRequest"],"sources":["../../../../../packages/nextjs/src/utils/refreshAccessTokenIfNeeded/helpers.ts"],"sourcesContent":["import fronteggLogger from '../fronteggLogger';\nimport CookieManager from '../cookies';\nimport { NextApiRequest } from 'next/dist/shared/lib/utils';\nimport api from '../../api';\nimport { getTokensFromCookie } from '../../common';\nimport { IncomingMessage } from 'http';\nimport config from '../../config';\n\nexport function hasRefreshTokenCookie(cookies: Record<string, any>): boolean {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.hasRefreshTokenCookie' });\n  const refreshTokenKey = CookieManager.refreshTokenKey;\n  logger.debug(`Checking if '${refreshTokenKey}' exists in cookies`);\n  const cookieKey = Object.keys(cookies).find((cookie) => {\n    return cookie.replace(/-/g, '') === refreshTokenKey;\n  });\n  const exists: boolean = cookieKey != null;\n  logger.debug(`Cookie '${refreshTokenKey}' ${exists ? 'exists' : 'NOT exists'} in cookies`);\n  return exists;\n}\n\nexport async function refreshAccessTokenEmbedded(request: IncomingMessage): Promise<Response | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.refreshAccessTokenEmbedded' });\n\n  const headers = request.headers as Record<string, string>;\n  const cookies = (request as NextApiRequest).cookies;\n\n  logger.info('check if has refresh token headers');\n  if (hasRefreshTokenCookie(cookies)) {\n    logger.info('going to refresh token (embedded mode)');\n    return await api.refreshTokenEmbedded(headers);\n  }\n  return null;\n}\n\nexport async function refreshAccessTokenHostedLogin(request: IncomingMessage): Promise<Response | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.refreshAccessTokenHostedLogin' });\n  const headers = request.headers as Record<string, string>;\n\n  logger.info('trying to get token from cookies');\n\n  const sealFromCookies = CookieManager.getSessionCookieFromRequest(request);\n  try {\n    const tokens = await getTokensFromCookie(sealFromCookies);\n    if (!tokens?.refreshToken) {\n      logger.info('refresh token not found');\n      return null;\n    }\n\n    if (config.secureJwtEnabled) {\n      const clientId = config.clientId;\n      const clientSecret = config.clientSecret;\n\n      logger.info('going to refresh token (hosted-login mode) (secure-jwt mode)');\n      return await api.refreshTokenHostedLogin(headers, tokens.refreshToken, clientId, clientSecret);\n    } else {\n      logger.info('going to refresh token (hosted-login mode) ', tokens.refreshToken);\n      return await api.refreshTokenHostedLogin(headers, tokens.refreshToken);\n    }\n  } catch (e) {\n    logger.error(e);\n    return null;\n  }\n}\n\n/**\n * If url starts with /_next/ means that the user trying to navigate\n * to a new nextjs page, in this scenario no need to refresh token\n * we can just return the actual stateless session from\n * the encrypted cookie\n */\nexport function isRuntimeNextRequest(url: string): boolean {\n  return url.startsWith('/_next/');\n}\n\n/**\n * If url starts with '/oauth/callback' means that the user navigated back\n * from frontegg hosted login, in this scenario no need to SSR refresh token\n */\nexport function isOauthCallback(url: string): boolean {\n  return url.startsWith('/oauth/callback');\n}\n\n/**\n * If url starts with '/account/saml/callback' means that the user navigated back\n * from sso login, in this scenario no need to SSR refresh token\n */\nexport function isSamlCallback(url: string): boolean {\n  return url.startsWith('/account/saml/callback') || url.startsWith('/account/oidc/callback');\n}\n\n/**\n * If the url equals to '/frontegg/auth/{provider}/callback', it means that the SSO provider\n * is posting an http request to the nextjs backend middleware after successfully logged in the user\n */\nexport function isSSOPostRequest(url: string): boolean {\n  return url === '/frontegg/auth/saml/callback' || url === '/frontegg/auth/oidc/callback';\n}\n"],"mappings":";;;;;;;;;;;;;AAAA,IAAAA,eAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,IAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AAEA,IAAAI,OAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEO,SAASK,qBAAqBA,CAACC,OAA4B,EAAW;EAC3E,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAAqC,CAAC,CAAC;EAClF,MAAMC,eAAe,GAAGC,gBAAa,CAACD,eAAe;EACrDJ,MAAM,CAACM,KAAK,CAAE,gBAAeF,eAAgB,qBAAoB,CAAC;EAClE,MAAMG,SAAS,GAAGC,MAAM,CAACC,IAAI,CAACV,OAAO,CAAC,CAACW,IAAI,CAAEC,MAAM,IAAK;IACtD,OAAOA,MAAM,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAKR,eAAe;EACrD,CAAC,CAAC;EACF,MAAMS,MAAe,GAAGN,SAAS,IAAI,IAAI;EACzCP,MAAM,CAACM,KAAK,CAAE,WAAUF,eAAgB,KAAIS,MAAM,GAAG,QAAQ,GAAG,YAAa,aAAY,CAAC;EAC1F,OAAOA,MAAM;AACf;AAEO,eAAeC,0BAA0BA,CAACC,OAAwB,EAA4B;EACnG,MAAMf,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA0C,CAAC,CAAC;EAEvF,MAAMa,OAAO,GAAGD,OAAO,CAACC,OAAiC;EACzD,MAAMjB,OAAO,GAAIgB,OAAO,CAAoBhB,OAAO;EAEnDC,MAAM,CAACiB,IAAI,CAAC,oCAAoC,CAAC;EACjD,IAAInB,qBAAqB,CAACC,OAAO,CAAC,EAAE;IAClCC,MAAM,CAACiB,IAAI,CAAC,wCAAwC,CAAC;IACrD,OAAO,MAAMC,YAAG,CAACC,oBAAoB,CAACH,OAAO,CAAC;EAChD;EACA,OAAO,IAAI;AACb;AAEO,eAAeI,6BAA6BA,CAACL,OAAwB,EAA4B;EACtG,MAAMf,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA6C,CAAC,CAAC;EAC1F,MAAMa,OAAO,GAAGD,OAAO,CAACC,OAAiC;EAEzDhB,MAAM,CAACiB,IAAI,CAAC,kCAAkC,CAAC;EAE/C,MAAMI,eAAe,GAAGhB,gBAAa,CAACiB,2BAA2B,CAACP,OAAO,CAAC;EAC1E,IAAI;IACF,MAAMQ,MAAM,GAAG,MAAM,IAAAC,2BAAmB,EAACH,eAAe,CAAC;IACzD,IAAI,EAACE,MAAM,YAANA,MAAM,CAAEE,YAAY,GAAE;MACzBzB,MAAM,CAACiB,IAAI,CAAC,yBAAyB,CAAC;MACtC,OAAO,IAAI;IACb;IAEA,IAAIS,eAAM,CAACC,gBAAgB,EAAE;MAC3B,MAAMC,QAAQ,GAAGF,eAAM,CAACE,QAAQ;MAChC,MAAMC,YAAY,GAAGH,eAAM,CAACG,YAAY;MAExC7B,MAAM,CAACiB,IAAI,CAAC,8DAA8D,CAAC;MAC3E,OAAO,MAAMC,YAAG,CAACY,uBAAuB,CAACd,OAAO,EAAEO,MAAM,CAACE,YAAY,EAAEG,QAAQ,EAAEC,YAAY,CAAC;IAChG,CAAC,MAAM;MACL7B,MAAM,CAACiB,IAAI,CAAC,6CAA6C,EAAEM,MAAM,CAACE,YAAY,CAAC;MAC/E,OAAO,MAAMP,YAAG,CAACY,uBAAuB,CAACd,OAAO,EAAEO,MAAM,CAACE,YAAY,CAAC;IACxE;EACF,CAAC,CAAC,OAAOM,CAAC,EAAE;IACV/B,MAAM,CAACgC,KAAK,CAACD,CAAC,CAAC;IACf,OAAO,IAAI;EACb;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,oBAAoBA,CAACC,GAAW,EAAW;EACzD,OAAOA,GAAG,CAACC,UAAU,CAAC,SAAS,CAAC;AAClC;;AAEA;AACA;AACA;AACA;AACO,SAASC,eAAeA,CAACF,GAAW,EAAW;EACpD,OAAOA,GAAG,CAACC,UAAU,CAAC,iBAAiB,CAAC;AAC1C;;AAEA;AACA;AACA;AACA;AACO,SAASE,cAAcA,CAACH,GAAW,EAAW;EACnD,OAAOA,GAAG,CAACC,UAAU,CAAC,wBAAwB,CAAC,IAAID,GAAG,CAACC,UAAU,CAAC,wBAAwB,CAAC;AAC7F;;AAEA;AACA;AACA;AACA;AACO,SAASG,gBAAgBA,CAACJ,GAAW,EAAW;EACrD,OAAOA,GAAG,KAAK,8BAA8B,IAAIA,GAAG,KAAK,8BAA8B;AACzF"}
+{"version":3,"file":"helpers.js","names":["_fronteggLogger","_interopRequireDefault","require","_cookies","_api","_common","_config","hasRefreshTokenCookie","cookies","logger","fronteggLogger","child","tag","refreshTokenKey","CookieManager","debug","cookieKey","Object","keys","find","cookie","replace","exists","refreshAccessTokenEmbedded","request","headers","info","config","appId","api","refreshTokenEmbedded","refreshAccessTokenHostedLogin","sealFromCookies","getSessionCookieFromRequest","tokens","getTokensFromCookie","refreshToken","secureJwtEnabled","clientId","clientSecret","refreshTokenHostedLogin","e","error","isRuntimeNextRequest","url","startsWith","isOauthCallback","isSamlCallback","isSSOPostRequest"],"sources":["../../../../../packages/nextjs/src/utils/refreshAccessTokenIfNeeded/helpers.ts"],"sourcesContent":["import fronteggLogger from '../fronteggLogger';\nimport CookieManager from '../cookies';\nimport { NextApiRequest } from 'next/dist/shared/lib/utils';\nimport api from '../../api';\nimport { getTokensFromCookie } from '../../common';\nimport { IncomingMessage } from 'http';\nimport config from '../../config';\n\nexport function hasRefreshTokenCookie(cookies: Record<string, any>): boolean {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.hasRefreshTokenCookie' });\n  const refreshTokenKey = CookieManager.refreshTokenKey;\n  logger.debug(`Checking if '${refreshTokenKey}' exists in cookies`);\n  const cookieKey = Object.keys(cookies).find((cookie) => {\n    return cookie.replace(/-/g, '') === refreshTokenKey;\n  });\n  const exists: boolean = cookieKey != null;\n  logger.debug(`Cookie '${refreshTokenKey}' ${exists ? 'exists' : 'NOT exists'} in cookies`);\n  return exists;\n}\n\nexport async function refreshAccessTokenEmbedded(request: IncomingMessage): Promise<Response | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.refreshAccessTokenEmbedded' });\n\n  const headers = request.headers as Record<string, string>;\n  const cookies = (request as NextApiRequest).cookies;\n\n  logger.info('check if has refresh token headers');\n  if (hasRefreshTokenCookie(cookies)) {\n    logger.info('going to refresh token (embedded mode)');\n    if (config.appId) {\n      headers['frontegg-requested-application-id'] = config.appId;\n    }\n    return await api.refreshTokenEmbedded(headers);\n  }\n  return null;\n}\n\nexport async function refreshAccessTokenHostedLogin(request: IncomingMessage): Promise<Response | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.refreshAccessTokenHostedLogin' });\n  const headers = request.headers as Record<string, string>;\n\n  logger.info('trying to get token from cookies');\n\n  const sealFromCookies = CookieManager.getSessionCookieFromRequest(request);\n  try {\n    const tokens = await getTokensFromCookie(sealFromCookies);\n    if (!tokens?.refreshToken) {\n      logger.info('refresh token not found');\n      return null;\n    }\n    if (config.appId) {\n      headers['frontegg-requested-application-id'] = config.appId;\n    }\n    if (config.secureJwtEnabled) {\n      const clientId = config.clientId;\n      const clientSecret = config.clientSecret;\n\n      logger.info('going to refresh token (hosted-login mode) (secure-jwt mode)');\n      return await api.refreshTokenHostedLogin(headers, tokens.refreshToken, clientId, clientSecret);\n    } else {\n      logger.info('going to refresh token (hosted-login mode) ', tokens.refreshToken);\n      return await api.refreshTokenHostedLogin(headers, tokens.refreshToken);\n    }\n  } catch (e) {\n    logger.error(e);\n    return null;\n  }\n}\n\n/**\n * If url starts with /_next/ means that the user trying to navigate\n * to a new nextjs page, in this scenario no need to refresh token\n * we can just return the actual stateless session from\n * the encrypted cookie\n */\nexport function isRuntimeNextRequest(url: string): boolean {\n  return url.startsWith('/_next/');\n}\n\n/**\n * If url starts with '/oauth/callback' means that the user navigated back\n * from frontegg hosted login, in this scenario no need to SSR refresh token\n */\nexport function isOauthCallback(url: string): boolean {\n  return url.startsWith('/oauth/callback');\n}\n\n/**\n * If url starts with '/account/saml/callback' means that the user navigated back\n * from sso login, in this scenario no need to SSR refresh token\n */\nexport function isSamlCallback(url: string): boolean {\n  return url.startsWith('/account/saml/callback') || url.startsWith('/account/oidc/callback');\n}\n\n/**\n * If the url equals to '/frontegg/auth/{provider}/callback', it means that the SSO provider\n * is posting an http request to the nextjs backend middleware after successfully logged in the user\n */\nexport function isSSOPostRequest(url: string): boolean {\n  return url === '/frontegg/auth/saml/callback' || url === '/frontegg/auth/oidc/callback';\n}\n"],"mappings":";;;;;;;;;;;;;AAAA,IAAAA,eAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,IAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AAEA,IAAAI,OAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEO,SAASK,qBAAqBA,CAACC,OAA4B,EAAW;EAC3E,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAAqC,CAAC,CAAC;EAClF,MAAMC,eAAe,GAAGC,gBAAa,CAACD,eAAe;EACrDJ,MAAM,CAACM,KAAK,CAAE,gBAAeF,eAAgB,qBAAoB,CAAC;EAClE,MAAMG,SAAS,GAAGC,MAAM,CAACC,IAAI,CAACV,OAAO,CAAC,CAACW,IAAI,CAAEC,MAAM,IAAK;IACtD,OAAOA,MAAM,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAKR,eAAe;EACrD,CAAC,CAAC;EACF,MAAMS,MAAe,GAAGN,SAAS,IAAI,IAAI;EACzCP,MAAM,CAACM,KAAK,CAAE,WAAUF,eAAgB,KAAIS,MAAM,GAAG,QAAQ,GAAG,YAAa,aAAY,CAAC;EAC1F,OAAOA,MAAM;AACf;AAEO,eAAeC,0BAA0BA,CAACC,OAAwB,EAA4B;EACnG,MAAMf,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA0C,CAAC,CAAC;EAEvF,MAAMa,OAAO,GAAGD,OAAO,CAACC,OAAiC;EACzD,MAAMjB,OAAO,GAAIgB,OAAO,CAAoBhB,OAAO;EAEnDC,MAAM,CAACiB,IAAI,CAAC,oCAAoC,CAAC;EACjD,IAAInB,qBAAqB,CAACC,OAAO,CAAC,EAAE;IAClCC,MAAM,CAACiB,IAAI,CAAC,wCAAwC,CAAC;IACrD,IAAIC,eAAM,CAACC,KAAK,EAAE;MAChBH,OAAO,CAAC,mCAAmC,CAAC,GAAGE,eAAM,CAACC,KAAK;IAC7D;IACA,OAAO,MAAMC,YAAG,CAACC,oBAAoB,CAACL,OAAO,CAAC;EAChD;EACA,OAAO,IAAI;AACb;AAEO,eAAeM,6BAA6BA,CAACP,OAAwB,EAA4B;EACtG,MAAMf,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA6C,CAAC,CAAC;EAC1F,MAAMa,OAAO,GAAGD,OAAO,CAACC,OAAiC;EAEzDhB,MAAM,CAACiB,IAAI,CAAC,kCAAkC,CAAC;EAE/C,MAAMM,eAAe,GAAGlB,gBAAa,CAACmB,2BAA2B,CAACT,OAAO,CAAC;EAC1E,IAAI;IACF,MAAMU,MAAM,GAAG,MAAM,IAAAC,2BAAmB,EAACH,eAAe,CAAC;IACzD,IAAI,EAACE,MAAM,YAANA,MAAM,CAAEE,YAAY,GAAE;MACzB3B,MAAM,CAACiB,IAAI,CAAC,yBAAyB,CAAC;MACtC,OAAO,IAAI;IACb;IACA,IAAIC,eAAM,CAACC,KAAK,EAAE;MAChBH,OAAO,CAAC,mCAAmC,CAAC,GAAGE,eAAM,CAACC,KAAK;IAC7D;IACA,IAAID,eAAM,CAACU,gBAAgB,EAAE;MAC3B,MAAMC,QAAQ,GAAGX,eAAM,CAACW,QAAQ;MAChC,MAAMC,YAAY,GAAGZ,eAAM,CAACY,YAAY;MAExC9B,MAAM,CAACiB,IAAI,CAAC,8DAA8D,CAAC;MAC3E,OAAO,MAAMG,YAAG,CAACW,uBAAuB,CAACf,OAAO,EAAES,MAAM,CAACE,YAAY,EAAEE,QAAQ,EAAEC,YAAY,CAAC;IAChG,CAAC,MAAM;MACL9B,MAAM,CAACiB,IAAI,CAAC,6CAA6C,EAAEQ,MAAM,CAACE,YAAY,CAAC;MAC/E,OAAO,MAAMP,YAAG,CAACW,uBAAuB,CAACf,OAAO,EAAES,MAAM,CAACE,YAAY,CAAC;IACxE;EACF,CAAC,CAAC,OAAOK,CAAC,EAAE;IACVhC,MAAM,CAACiC,KAAK,CAACD,CAAC,CAAC;IACf,OAAO,IAAI;EACb;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,oBAAoBA,CAACC,GAAW,EAAW;EACzD,OAAOA,GAAG,CAACC,UAAU,CAAC,SAAS,CAAC;AAClC;;AAEA;AACA;AACA;AACA;AACO,SAASC,eAAeA,CAACF,GAAW,EAAW;EACpD,OAAOA,GAAG,CAACC,UAAU,CAAC,iBAAiB,CAAC;AAC1C;;AAEA;AACA;AACA;AACA;AACO,SAASE,cAAcA,CAACH,GAAW,EAAW;EACnD,OAAOA,GAAG,CAACC,UAAU,CAAC,wBAAwB,CAAC,IAAID,GAAG,CAACC,UAAU,CAAC,wBAAwB,CAAC;AAC7F;;AAEA;AACA;AACA;AACA;AACO,SAASG,gBAAgBA,CAACJ,GAAW,EAAW;EACrD,OAAOA,GAAG,KAAK,8BAA8B,IAAIA,GAAG,KAAK,8BAA8B;AACzF"}