@frontegg/nextjs 9.2.1-alpha.12073075767 → 9.2.1-alpha.12811360407

package/app/FronteggAppProvider.js

@@ -14,10 +14,12 @@ var _config = _interopRequireDefault(require("../config"));
 var _fetchUserData = _interopRequireDefault(require("../utils/fetchUserData"));
 var _getAppUrlForCustomLoginWithSubdomain = require("./getAppUrlForCustomLoginWithSubdomain");
 var _helpers2 = require("../middleware/helpers");
+var _fronteggLogger = _interopRequireDefault(require("../utils/fronteggLogger"));
+var _consts = require("./consts");
 var _jsxRuntime = require("react/jsx-runtime");
 const _excluded = ["envAppUrl"];
 const FronteggAppProvider = async options => {
-  var _options$customLoginO, _options$secureJwtEna;
+  var _options$customLoginO, _options$secureJwtEna, _ref, _appEnvConfig$envHost;
   const _config$appEnvConfig = _config.default.appEnvConfig,
     {
       envAppUrl
@@ -28,14 +30,21 @@ const FronteggAppProvider = async options => {
     getHeaders: _helpers.getAppHeaders
   });
   const subDomainAppUrl = await (0, _getAppUrlForCustomLoginWithSubdomain.getAppUrlForCustomLoginWithSubdomain)((_options$customLoginO = options.customLoginOptions) == null ? void 0 : _options$customLoginO.subDomainIndex);
+  const logger = _fronteggLogger.default.child({
+    tag: 'FronteggAppProvider'
+  });
   if (process.env['FRONTEGG_SECURE_JWT_ENABLED'] === 'true' && userData) {
     var _userData;
     userData = (0, _helpers2.removeJwtSignatureFrom)(userData);
     userData.session = (0, _helpers2.removeJwtSignatureFrom)((_userData = userData) == null ? void 0 : _userData.session);
   }
+  if (Object.hasOwn(options, 'hostedLoginBox')) {
+    logger.warn(_consts.FRONTEGG_HOSTED_LOGIN_MIGRATION_WARNING);
+  }
   const providerProps = (0, _extends2.default)({}, appEnvConfig, userData, options, {
     envAppUrl: subDomainAppUrl != null ? subDomainAppUrl : envAppUrl,
-    secureJwtEnabled: (_options$secureJwtEna = options.secureJwtEnabled) != null ? _options$secureJwtEna : false
+    secureJwtEnabled: (_options$secureJwtEna = options.secureJwtEnabled) != null ? _options$secureJwtEna : false,
+    hostedLoginBox: (_ref = (_appEnvConfig$envHost = appEnvConfig.envHostedLoginBox) != null ? _appEnvConfig$envHost : options.hostedLoginBox) != null ? _ref : false
   });
   return /*#__PURE__*/(0, _jsxRuntime.jsx)(_ClientFronteggProvider.ClientFronteggProvider, (0, _extends2.default)({}, providerProps));
 };

package/app/FronteggAppProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"FronteggAppProvider.js","names":["_react","_interopRequireDefault","require","_ClientFronteggProvider","_helpers","_config","_fetchUserData","_getAppUrlForCustomLoginWithSubdomain","_helpers2","_jsxRuntime","_excluded","FronteggAppProvider","options","_options$customLoginO","_options$secureJwtEna","_config$appEnvConfig","config","appEnvConfig","envAppUrl","_objectWithoutPropertiesLoose2","default","userData","fetchUserData","getSession","getAppSession","getHeaders","getAppHeaders","subDomainAppUrl","getAppUrlForCustomLoginWithSubdomain","customLoginOptions","subDomainIndex","process","env","_userData","removeJwtSignatureFrom","session","providerProps","_extends2","secureJwtEnabled","jsx","ClientFronteggProvider","exports"],"sources":["../../../../packages/nextjs/src/app/FronteggAppProvider.tsx"],"sourcesContent":["import React, { PropsWithChildren } from 'react';\nimport { ClientFronteggProvider } from './ClientFronteggProvider';\nimport { getAppHeaders, getAppSession } from './helpers';\nimport config from '../config';\nimport fetchUserData from '../utils/fetchUserData';\nimport { ClientFronteggProviderProps } from '../types';\nimport { getAppUrlForCustomLoginWithSubdomain } from './getAppUrlForCustomLoginWithSubdomain';\nimport { removeJwtSignatureFrom } from '../middleware/helpers';\n\nexport type FronteggAppProviderProps = PropsWithChildren<\n  Omit<ClientFronteggProviderProps, 'contextOptions' | 'envAppUrl' | 'envBaseUrl' | 'envClientId'>\n>;\n\nexport const FronteggAppProvider = async (options: FronteggAppProviderProps) => {\n  const { envAppUrl, ...appEnvConfig } = config.appEnvConfig;\n  let userData = await fetchUserData({ getSession: getAppSession, getHeaders: getAppHeaders });\n  const subDomainAppUrl = await getAppUrlForCustomLoginWithSubdomain(options.customLoginOptions?.subDomainIndex);\n\n  if (process.env['FRONTEGG_SECURE_JWT_ENABLED'] === 'true' && userData) {\n    userData = removeJwtSignatureFrom(userData);\n    userData.session = removeJwtSignatureFrom(userData?.session);\n  }\n  const providerProps = {\n    ...appEnvConfig,\n    ...userData,\n    ...options,\n    envAppUrl: subDomainAppUrl ?? envAppUrl,\n    secureJwtEnabled: options.secureJwtEnabled ?? false,\n  };\n\n  return <ClientFronteggProvider {...providerProps} />;\n};\n"],"mappings":";;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,uBAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,cAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,IAAAK,qCAAA,GAAAL,OAAA;AACA,IAAAM,SAAA,GAAAN,OAAA;AAA+D,IAAAO,WAAA,GAAAP,OAAA;AAAA,MAAAQ,SAAA;AAMxD,MAAMC,mBAAmB,GAAG,MAAOC,OAAiC,IAAK;EAAA,IAAAC,qBAAA,EAAAC,qBAAA;EAC9E,MAAAC,oBAAA,GAAuCC,eAAM,CAACC,YAAY;IAApD;MAAEC;IAA2B,CAAC,GAAAH,oBAAA;IAAdE,YAAY,OAAAE,8BAAA,CAAAC,OAAA,EAAAL,oBAAA,EAAAL,SAAA;EAClC,IAAIW,QAAQ,GAAG,MAAM,IAAAC,sBAAa,EAAC;IAAEC,UAAU,EAAEC,sBAAa;IAAEC,UAAU,EAAEC;EAAc,CAAC,CAAC;EAC5F,MAAMC,eAAe,GAAG,MAAM,IAAAC,0EAAoC,GAAAf,qBAAA,GAACD,OAAO,CAACiB,kBAAkB,qBAA1BhB,qBAAA,CAA4BiB,cAAc,CAAC;EAE9G,IAAIC,OAAO,CAACC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,IAAIX,QAAQ,EAAE;IAAA,IAAAY,SAAA;IACrEZ,QAAQ,GAAG,IAAAa,gCAAsB,EAACb,QAAQ,CAAC;IAC3CA,QAAQ,CAACc,OAAO,GAAG,IAAAD,gCAAsB,GAAAD,SAAA,GAACZ,QAAQ,qBAARY,SAAA,CAAUE,OAAO,CAAC;EAC9D;EACA,MAAMC,aAAa,OAAAC,SAAA,CAAAjB,OAAA,MACdH,YAAY,EACZI,QAAQ,EACRT,OAAO;IACVM,SAAS,EAAES,eAAe,WAAfA,eAAe,GAAIT,SAAS;IACvCoB,gBAAgB,GAAAxB,qBAAA,GAAEF,OAAO,CAAC0B,gBAAgB,YAAAxB,qBAAA,GAAI;EAAK,EACpD;EAED,oBAAO,IAAAL,WAAA,CAAA8B,GAAA,EAACpC,uBAAA,CAAAqC,sBAAsB,MAAAH,SAAA,CAAAjB,OAAA,MAAKgB,aAAa,CAAG,CAAC;AACtD,CAAC;AAACK,OAAA,CAAA9B,mBAAA,GAAAA,mBAAA","ignoreList":[]}
+{"version":3,"file":"FronteggAppProvider.js","names":["_react","_interopRequireDefault","require","_ClientFronteggProvider","_helpers","_config","_fetchUserData","_getAppUrlForCustomLoginWithSubdomain","_helpers2","_fronteggLogger","_consts","_jsxRuntime","_excluded","FronteggAppProvider","options","_options$customLoginO","_options$secureJwtEna","_ref","_appEnvConfig$envHost","_config$appEnvConfig","config","appEnvConfig","envAppUrl","_objectWithoutPropertiesLoose2","default","userData","fetchUserData","getSession","getAppSession","getHeaders","getAppHeaders","subDomainAppUrl","getAppUrlForCustomLoginWithSubdomain","customLoginOptions","subDomainIndex","logger","fronteggLogger","child","tag","process","env","_userData","removeJwtSignatureFrom","session","Object","hasOwn","warn","FRONTEGG_HOSTED_LOGIN_MIGRATION_WARNING","providerProps","_extends2","secureJwtEnabled","hostedLoginBox","envHostedLoginBox","jsx","ClientFronteggProvider","exports"],"sources":["../../../../packages/nextjs/src/app/FronteggAppProvider.tsx"],"sourcesContent":["import React, { PropsWithChildren } from 'react';\nimport { ClientFronteggProvider } from './ClientFronteggProvider';\nimport { getAppHeaders, getAppSession } from './helpers';\nimport config from '../config';\nimport fetchUserData from '../utils/fetchUserData';\nimport { ClientFronteggProviderProps } from '../types';\nimport { getAppUrlForCustomLoginWithSubdomain } from './getAppUrlForCustomLoginWithSubdomain';\nimport { removeJwtSignatureFrom } from '../middleware/helpers';\nimport fronteggLogger from '../utils/fronteggLogger';\nimport { FRONTEGG_HOSTED_LOGIN_MIGRATION_WARNING } from './consts';\n\nexport type FronteggAppProviderProps = PropsWithChildren<\n  Omit<ClientFronteggProviderProps, 'contextOptions' | 'envAppUrl' | 'envBaseUrl' | 'envClientId'>\n>;\n\nexport const FronteggAppProvider = async (options: FronteggAppProviderProps) => {\n  const { envAppUrl, ...appEnvConfig } = config.appEnvConfig;\n  let userData = await fetchUserData({ getSession: getAppSession, getHeaders: getAppHeaders });\n  const subDomainAppUrl = await getAppUrlForCustomLoginWithSubdomain(options.customLoginOptions?.subDomainIndex);\n  const logger = fronteggLogger.child({ tag: 'FronteggAppProvider' });\n\n  if (process.env['FRONTEGG_SECURE_JWT_ENABLED'] === 'true' && userData) {\n    userData = removeJwtSignatureFrom(userData);\n    userData.session = removeJwtSignatureFrom(userData?.session);\n  }\n  if (Object.hasOwn(options, 'hostedLoginBox')) {\n    logger.warn(FRONTEGG_HOSTED_LOGIN_MIGRATION_WARNING);\n  }\n\n  const providerProps = {\n    ...appEnvConfig,\n    ...userData,\n    ...options,\n    envAppUrl: subDomainAppUrl ?? envAppUrl,\n    secureJwtEnabled: options.secureJwtEnabled ?? false,\n    hostedLoginBox: appEnvConfig.envHostedLoginBox ?? options.hostedLoginBox ?? false,\n  };\n\n  return <ClientFronteggProvider {...providerProps} />;\n};\n"],"mappings":";;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,uBAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,cAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,IAAAK,qCAAA,GAAAL,OAAA;AACA,IAAAM,SAAA,GAAAN,OAAA;AACA,IAAAO,eAAA,GAAAR,sBAAA,CAAAC,OAAA;AACA,IAAAQ,OAAA,GAAAR,OAAA;AAAmE,IAAAS,WAAA,GAAAT,OAAA;AAAA,MAAAU,SAAA;AAM5D,MAAMC,mBAAmB,GAAG,MAAOC,OAAiC,IAAK;EAAA,IAAAC,qBAAA,EAAAC,qBAAA,EAAAC,IAAA,EAAAC,qBAAA;EAC9E,MAAAC,oBAAA,GAAuCC,eAAM,CAACC,YAAY;IAApD;MAAEC;IAA2B,CAAC,GAAAH,oBAAA;IAAdE,YAAY,OAAAE,8BAAA,CAAAC,OAAA,EAAAL,oBAAA,EAAAP,SAAA;EAClC,IAAIa,QAAQ,GAAG,MAAM,IAAAC,sBAAa,EAAC;IAAEC,UAAU,EAAEC,sBAAa;IAAEC,UAAU,EAAEC;EAAc,CAAC,CAAC;EAC5F,MAAMC,eAAe,GAAG,MAAM,IAAAC,0EAAoC,GAAAjB,qBAAA,GAACD,OAAO,CAACmB,kBAAkB,qBAA1BlB,qBAAA,CAA4BmB,cAAc,CAAC;EAC9G,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAAsB,CAAC,CAAC;EAEnE,IAAIC,OAAO,CAACC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,IAAIf,QAAQ,EAAE;IAAA,IAAAgB,SAAA;IACrEhB,QAAQ,GAAG,IAAAiB,gCAAsB,EAACjB,QAAQ,CAAC;IAC3CA,QAAQ,CAACkB,OAAO,GAAG,IAAAD,gCAAsB,GAAAD,SAAA,GAAChB,QAAQ,qBAARgB,SAAA,CAAUE,OAAO,CAAC;EAC9D;EACA,IAAIC,MAAM,CAACC,MAAM,CAAC/B,OAAO,EAAE,gBAAgB,CAAC,EAAE;IAC5CqB,MAAM,CAACW,IAAI,CAACC,+CAAuC,CAAC;EACtD;EAEA,MAAMC,aAAa,OAAAC,SAAA,CAAAzB,OAAA,MACdH,YAAY,EACZI,QAAQ,EACRX,OAAO;IACVQ,SAAS,EAAES,eAAe,WAAfA,eAAe,GAAIT,SAAS;IACvC4B,gBAAgB,GAAAlC,qBAAA,GAAEF,OAAO,CAACoC,gBAAgB,YAAAlC,qBAAA,GAAI,KAAK;IACnDmC,cAAc,GAAAlC,IAAA,IAAAC,qBAAA,GAAEG,YAAY,CAAC+B,iBAAiB,YAAAlC,qBAAA,GAAIJ,OAAO,CAACqC,cAAc,YAAAlC,IAAA,GAAI;EAAK,EAClF;EAED,oBAAO,IAAAN,WAAA,CAAA0C,GAAA,EAAClD,uBAAA,CAAAmD,sBAAsB,MAAAL,SAAA,CAAAzB,OAAA,MAAKwB,aAAa,CAAG,CAAC;AACtD,CAAC;AAACO,OAAA,CAAA1C,mBAAA,GAAAA,mBAAA","ignoreList":[]}

package/app/consts.d.ts

@@ -0,0 +1 @@
+export declare const FRONTEGG_HOSTED_LOGIN_MIGRATION_WARNING = "\n**Deprecated**: The 'hostedLoginBox' prop is deprecated in frontegg NextJS SKD and will be removed in the next major version. Please use 'FRONTEGG_HOSTED_LOGIN' environment variable instead.";

package/app/consts.js

@@ -0,0 +1,8 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.FRONTEGG_HOSTED_LOGIN_MIGRATION_WARNING = void 0;
+const FRONTEGG_HOSTED_LOGIN_MIGRATION_WARNING = exports.FRONTEGG_HOSTED_LOGIN_MIGRATION_WARNING = `\n**Deprecated**: The 'hostedLoginBox' prop is deprecated in frontegg NextJS SKD and will be removed in the next major version. Please use 'FRONTEGG_HOSTED_LOGIN' environment variable instead.`;
+//# sourceMappingURL=consts.js.map

package/app/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","names":["FRONTEGG_HOSTED_LOGIN_MIGRATION_WARNING","exports"],"sources":["../../../../packages/nextjs/src/app/consts.ts"],"sourcesContent":["export const FRONTEGG_HOSTED_LOGIN_MIGRATION_WARNING = `\\n**Deprecated**: The 'hostedLoginBox' prop is deprecated in frontegg NextJS SKD and will be removed in the next major version. Please use 'FRONTEGG_HOSTED_LOGIN' environment variable instead.`;\n"],"mappings":";;;;;;AAAO,MAAMA,uCAAuC,GAAAC,OAAA,CAAAD,uCAAA,GAAG,kMAAkM","ignoreList":[]}

package/edge/getSessionOnEdge.d.ts

@@ -30,7 +30,7 @@ export declare const handleSessionOnEdge: (params: HandleSessionOnEdge) => Promi
  * ```
  * @deprecated
  */
-export declare const getSessionOnEdge: (req: IncomingMessage | Request) => Promise<FronteggNextJSSession | undefined>;
+export declare const getSessionOnEdge: (req: IncomingMessage | Request, disableWarning?: boolean) => Promise<FronteggNextJSSession | undefined>;
 /**
  * Check session on edge and return session if exists this method does not redirect to login page
  * Example:
@@ -62,11 +62,14 @@ export declare const getSessionOnEdge: (req: IncomingMessage | Request) => Promi
  *       return redirectToLogin(pathname);
  *     }
  *
- *     // if headers are present return them to the next response
+ *     // if headers are present forward them to the next response / request
  *     if (session.headers) {
- *       return NextResponse.next({
- *         headers: session.headers,
- *       });
+ *        return NextResponse.next({
+ *          headers: edgeSession.headers,
+ *          request:{
+ *            headers: edgeSession.forwardedHeaders
+ *          }
+ *        });
  *     }
  *     return NextResponse.next();
  *   };

package/edge/getSessionOnEdge.js

@@ -40,13 +40,16 @@ const handleSessionOnEdge = async params => {
   }
   if (edgeSession.headers) {
     return _server.NextResponse.next({
-      headers: edgeSession.headers
+      headers: edgeSession.headers,
+      request: {
+        headers: edgeSession.forwardedHeaders
+      }
     });
   }
   return _server.NextResponse.next();
 };
 exports.handleSessionOnEdge = handleSessionOnEdge;
-const GET_SESSION_ON_EDGE_DEPRECATED_ERROR = `Deprecation Notice: getSessionOnEdge has been deprecated. Please use handleSessionOnEdge instead. For example:
+const GET_SESSION_ON_EDGE_DEPRECATED_WARN = `Deprecation Notice: getSessionOnEdge has been deprecated. Please use handleSessionOnEdge instead. For example:
 
 file: middleware.ts
 \`\`\`ts
@@ -95,8 +98,14 @@ Alternatively, to manually verify the session, you can use checkSessionOnEdge. N
  * @deprecated
  */
 
-const getSessionOnEdge = req => {
+const getSessionOnEdge = (req, disableWarning = false) => {
+  const logger = _fronteggLogger.default.child({
+    tag: 'EdgeRuntime.getSessionOnEdge'
+  });
   const cookies = _cookies.default.getSessionCookieFromRequest(req);
+  if (!disableWarning) {
+    logger.info(GET_SESSION_ON_EDGE_DEPRECATED_WARN);
+  }
   return (0, _createSession.default)(cookies, _encryptionEdge.default);
 };
 
@@ -131,11 +140,14 @@ const getSessionOnEdge = req => {
  *       return redirectToLogin(pathname);
  *     }
  *
- *     // if headers are present return them to the next response
+ *     // if headers are present forward them to the next response / request
  *     if (session.headers) {
- *       return NextResponse.next({
- *         headers: session.headers,
- *       });
+ *        return NextResponse.next({
+ *          headers: edgeSession.headers,
+ *          request:{
+ *            headers: edgeSession.forwardedHeaders
+ *          }
+ *        });
  *     }
  *     return NextResponse.next();
  *   };

package/edge/getSessionOnEdge.js.map

@@ -1 +1 @@
-{"version":3,"file":"getSessionOnEdge.js","names":["_cookies","_interopRequireDefault","require","_createSession","_encryptionEdge","_api","_server","_config","_jwt","_utils","_fronteggLogger","_refreshAccessTokenIfNeededOnEdge","_redirectToLogin","_shouldBypassMiddleware","logger","fronteggLogger","child","tag","handleSessionOnEdge","params","request","pathname","searchParams","headers","isHostedLoginCallback","handleHostedLoginCallback","shouldByPassMiddleware","NextResponse","next","edgeSession","checkSessionOnEdge","redirectToLogin","exports","GET_SESSION_ON_EDGE_DEPRECATED_ERROR","getSessionOnEdge","req","cookies","CookieManager","getSessionCookieFromRequest","createSession","encryptionEdge","sessionCookies","existingSession","debug","session","refreshAccessTokenIfNeededOnEdge","createSessionFromAccessTokenEdge","data","_data$accessToken","_data$refreshToken","accessToken","access_token","refreshToken","refresh_token","payload","decodedJwt","JwtManager","verify","expiresIn","Math","floor","exp","Date","now","tokens","sealTokens","_searchParams$get","_req$headers","code","get","clientIp","undefined","_socket","socket","remoteAddress","_socket2","requestHeaders","_extends2","default","config","shouldForwardIp","_config$clientSecret","FRONTEGG_FORWARD_IP_HEADER","FRONTEGG_CLIENT_SECRET_HEADER","clientSecret","response","api","exchangeHostedLoginToken","buildRequestHeaders","clientId","json","redirect","appUrl","isSecured","isSSL","cookieValue","create","value","expires","secure","cookieName","replace","rewriteCookieByAppId","appId","refreshCookie","sessionCookieHeaders","map","cookie","refreshCookieHeaders","secureJwtEnabled","startsWith"],"sources":["../../../../packages/nextjs/src/edge/getSessionOnEdge.ts"],"sourcesContent":["import type { IncomingMessage } from 'http';\nimport { FronteggEdgeSession, FronteggNextJSSession } from '../types';\nimport CookieManager from '../utils/cookies';\nimport createSession from '../utils/createSession';\nimport encryptionEdge from '../utils/encryption-edge';\nimport api from '../api';\nimport { type NextRequest, NextResponse } from 'next/server';\nimport config from '../config';\nimport JwtManager from '../utils/jwt';\nimport { buildRequestHeaders, FRONTEGG_CLIENT_SECRET_HEADER, FRONTEGG_FORWARD_IP_HEADER } from '../api/utils';\nimport fronteggLogger from '../utils/fronteggLogger';\nimport { refreshAccessTokenIfNeededOnEdge } from './refreshAccessTokenIfNeededOnEdge';\nimport { redirectToLogin } from './redirectToLogin';\nimport { shouldByPassMiddleware } from './shouldBypassMiddleware';\n\nconst logger = fronteggLogger.child({ tag: 'EdgeRuntime.getSessionOnEdge' });\n\nexport type HandleSessionOnEdge = {\n  request: IncomingMessage | Request;\n  pathname: string;\n  headers: NextRequest['headers'];\n  searchParams: URLSearchParams;\n};\n\nexport const handleSessionOnEdge = async (params: HandleSessionOnEdge): Promise<NextResponse> => {\n  const { request, pathname, searchParams, headers } = params;\n\n  if (isHostedLoginCallback(pathname, searchParams)) {\n    return handleHostedLoginCallback(request, pathname, searchParams);\n  }\n\n  if (shouldByPassMiddleware(pathname, headers /*, options: optional bypass configuration */)) {\n    return NextResponse.next();\n  }\n\n  const edgeSession = await checkSessionOnEdge(request);\n  if (!edgeSession) {\n    return redirectToLogin(pathname, searchParams);\n  }\n  if (edgeSession.headers) {\n    return NextResponse.next({\n      headers: edgeSession.headers,\n    });\n  }\n  return NextResponse.next();\n};\n\nconst GET_SESSION_ON_EDGE_DEPRECATED_ERROR = `Deprecation Notice: getSessionOnEdge has been deprecated. Please use handleSessionOnEdge instead. For example:\n\nfile: middleware.ts\n\\`\\`\\`ts\n  import { NextRequest } from 'next/server';\n  import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n    \n  export const middleware = async (request: NextRequest) => {\n    const { pathname, searchParams } = request.nextUrl;\n    const headers = request.headers;\n    \n    // Additional logic if needed\n    \n    return handleSessionOnEdge({ request, pathname, searchParams, headers });\n  };\n  \n  \n  export const config = {\n    matcher: '/(.*)',\n  };\n\n\\`\\`\\`\n\nAlternatively, to manually verify the session, you can use checkSessionOnEdge. Note that this method does not redirect to the login page if the session is invalid.\n`;\n\n/**\n * getSessionOnEdge is deprecated, please use handleSessionOnEdge instead example:\n *\n * ```ts\n *   import { NextRequest } from 'next/server';\n *   import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n *\n *   export const middleware = async (request: NextRequest) => {\n *     const { pathname, searchParams } = request.nextUrl;\n *     const headers = request.headers;\n *\n *     // Additional logic if needed\n *\n *     return handleSessionOnEdge({ request, pathname, searchParams, headers });\n *   };\n *\n *   export const config = {\n *     matcher: '/(.*)',\n *   };\n * ```\n * @deprecated\n */\n\nexport const getSessionOnEdge = (req: IncomingMessage | Request): Promise<FronteggNextJSSession | undefined> => {\n  const cookies = CookieManager.getSessionCookieFromRequest(req);\n  return createSession(cookies, encryptionEdge);\n};\n\n/**\n * Check session on edge and return session if exists this method does not redirect to login page\n * Example:\n *\n * ```ts\n *   import { NextRequest } from 'next/server';\n *   import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n *\n *   export const middleware = async (request: NextRequest) => {\n *     const { pathname, searchParams } = request.nextUrl;\n *     const headers = request.headers;\n *\n *     // Additional logic if needed\n *\n *     // check if it's a hosted login callback\n *     if (isHostedLoginCallback(pathname, searchParams)) {\n *       return handleHostedLoginCallback(request, pathname, searchParams);\n *     }\n *\n *     // check if we should bypass the middleware\n *     if (shouldByPassMiddleware(pathname)) {\n *       return NextResponse.next();\n *     }\n *\n *     // check session\n *     const session = await checkSessionOnEdge(request);\n *\n *     if (!session) {\n *       return redirectToLogin(pathname);\n *     }\n *\n *     // if headers are present return them to the next response\n *     if (session.headers) {\n *       return NextResponse.next({\n *         headers: session.headers,\n *       });\n *     }\n *     return NextResponse.next();\n *   };\n * ```\n *\n *\n * @param req\n */\nexport const checkSessionOnEdge = async (req: IncomingMessage | Request): Promise<FronteggEdgeSession | undefined> => {\n  const sessionCookies = CookieManager.getSessionCookieFromRequest(req);\n  let existingSession = await createSession(sessionCookies, encryptionEdge);\n  if (existingSession) {\n    logger.debug('session resolved from session cookie');\n    return {\n      session: existingSession,\n    };\n  }\n\n  logger.debug('Failed to resolve session from cookie, going to refresh token');\n  return refreshAccessTokenIfNeededOnEdge(req);\n};\n\nasync function createSessionFromAccessTokenEdge(data: any): Promise<[string, any, string] | []> {\n  const accessToken = data.accessToken ?? data.access_token;\n  const refreshToken = data.refreshToken ?? data.refresh_token;\n  const { payload: decodedJwt }: any = await JwtManager.verify(accessToken);\n  decodedJwt.expiresIn = Math.floor((decodedJwt.exp * 1000 - Date.now()) / 1000);\n\n  const tokens = { accessToken, refreshToken };\n  const session = await encryptionEdge.sealTokens(tokens, decodedJwt.exp);\n  return [session, decodedJwt, refreshToken];\n}\n\nexport const handleHostedLoginCallback = async (\n  req: IncomingMessage | Request,\n  pathname: string,\n  searchParams: URLSearchParams\n): Promise<NextResponse> => {\n  if (!isHostedLoginCallback(pathname, searchParams)) {\n    return NextResponse.next();\n  }\n\n  const code = searchParams.get('code') ?? '';\n\n  let headers: Record<string, string> = {};\n  let clientIp: string | undefined = undefined;\n  if (typeof req.headers?.get === 'function') {\n    clientIp =\n      req.headers.get('cf-connecting-ip') || req.headers.get('x-forwarded-for') || (req as any).socket?.remoteAddress;\n  } else if (typeof req.headers === 'object') {\n    let requestHeaders: any = { ...req.headers };\n    clientIp =\n      requestHeaders['cf-connecting-ip'] || requestHeaders['x-forwarded-for'] || (req as any).socket?.remoteAddress;\n  }\n\n  if (clientIp && config.shouldForwardIp) {\n    headers[FRONTEGG_FORWARD_IP_HEADER] = clientIp;\n    headers[FRONTEGG_CLIENT_SECRET_HEADER] = config.clientSecret ?? '';\n  }\n\n  const response = await api.exchangeHostedLoginToken(\n    buildRequestHeaders(headers),\n    code,\n    config.clientId,\n    config.clientSecret!\n  );\n\n  const data = await response.json();\n\n  const [session, decodedJwt, refreshToken] = await createSessionFromAccessTokenEdge(data);\n\n  if (!session) {\n    return NextResponse.redirect(config.appUrl);\n  }\n  const isSecured = config.isSSL;\n  const cookieValue = CookieManager.create({\n    value: session,\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n\n  let cookieName = `fe_refresh_${config.clientId.replace('-', '')}`;\n  if (config.rewriteCookieByAppId && config.appId) {\n    cookieName = `fe_refresh_${config.appId.replace('-', '')}`;\n  }\n  const refreshCookie = CookieManager.create({\n    cookieName,\n    value: refreshToken ?? '',\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n  const sessionCookieHeaders: [string, string][] = cookieValue.map((cookie) => ['set-cookie', cookie]);\n  const refreshCookieHeaders: [string, string][] = refreshCookie.map((cookie) => ['set-cookie', cookie]);\n\n  return NextResponse.redirect(config.appUrl, {\n    headers: [...sessionCookieHeaders, ...refreshCookieHeaders],\n  });\n};\n\nexport const isHostedLoginCallback = (pathname: string, searchParams: URLSearchParams): boolean => {\n  if (config.secureJwtEnabled) {\n    if (pathname.startsWith('/oauth/callback')) {\n      return searchParams.get('code') != null;\n    }\n  }\n  return false;\n};\n"],"mappings":";;;;;;;;AAEA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,cAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,eAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,IAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAN,sBAAA,CAAAC,OAAA;AACA,IAAAM,IAAA,GAAAP,sBAAA,CAAAC,OAAA;AACA,IAAAO,MAAA,GAAAP,OAAA;AACA,IAAAQ,eAAA,GAAAT,sBAAA,CAAAC,OAAA;AACA,IAAAS,iCAAA,GAAAT,OAAA;AACA,IAAAU,gBAAA,GAAAV,OAAA;AACA,IAAAW,uBAAA,GAAAX,OAAA;AAEA,MAAMY,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;EAAEC,GAAG,EAAE;AAA+B,CAAC,CAAC;AASrE,MAAMC,mBAAmB,GAAG,MAAOC,MAA2B,IAA4B;EAC/F,MAAM;IAAEC,OAAO;IAAEC,QAAQ;IAAEC,YAAY;IAAEC;EAAQ,CAAC,GAAGJ,MAAM;EAE3D,IAAIK,qBAAqB,CAACH,QAAQ,EAAEC,YAAY,CAAC,EAAE;IACjD,OAAOG,yBAAyB,CAACL,OAAO,EAAEC,QAAQ,EAAEC,YAAY,CAAC;EACnE;EAEA,IAAI,IAAAI,8CAAsB,EAACL,QAAQ,EAAEE,OAAO,CAAC,6CAA6C,CAAC,EAAE;IAC3F,OAAOI,oBAAY,CAACC,IAAI,CAAC,CAAC;EAC5B;EAEA,MAAMC,WAAW,GAAG,MAAMC,kBAAkB,CAACV,OAAO,CAAC;EACrD,IAAI,CAACS,WAAW,EAAE;IAChB,OAAO,IAAAE,gCAAe,EAACV,QAAQ,EAAEC,YAAY,CAAC;EAChD;EACA,IAAIO,WAAW,CAACN,OAAO,EAAE;IACvB,OAAOI,oBAAY,CAACC,IAAI,CAAC;MACvBL,OAAO,EAAEM,WAAW,CAACN;IACvB,CAAC,CAAC;EACJ;EACA,OAAOI,oBAAY,CAACC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAACI,OAAA,CAAAd,mBAAA,GAAAA,mBAAA;AAEF,MAAMe,oCAAoC,GAAG;AAC7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEO,MAAMC,gBAAgB,GAAIC,GAA8B,IAAiD;EAC9G,MAAMC,OAAO,GAAGC,gBAAa,CAACC,2BAA2B,CAACH,GAAG,CAAC;EAC9D,OAAO,IAAAI,sBAAa,EAACH,OAAO,EAAEI,uBAAc,CAAC;AAC/C,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AA3CAR,OAAA,CAAAE,gBAAA,GAAAA,gBAAA;AA4CO,MAAMJ,kBAAkB,GAAG,MAAOK,GAA8B,IAA+C;EACpH,MAAMM,cAAc,GAAGJ,gBAAa,CAACC,2BAA2B,CAACH,GAAG,CAAC;EACrE,IAAIO,eAAe,GAAG,MAAM,IAAAH,sBAAa,EAACE,cAAc,EAAED,uBAAc,CAAC;EACzE,IAAIE,eAAe,EAAE;IACnB5B,MAAM,CAAC6B,KAAK,CAAC,sCAAsC,CAAC;IACpD,OAAO;MACLC,OAAO,EAAEF;IACX,CAAC;EACH;EAEA5B,MAAM,CAAC6B,KAAK,CAAC,+DAA+D,CAAC;EAC7E,OAAO,IAAAE,kEAAgC,EAACV,GAAG,CAAC;AAC9C,CAAC;AAACH,OAAA,CAAAF,kBAAA,GAAAA,kBAAA;AAEF,eAAegB,gCAAgCA,CAACC,IAAS,EAAuC;EAAA,IAAAC,iBAAA,EAAAC,kBAAA;EAC9F,MAAMC,WAAW,IAAAF,iBAAA,GAAGD,IAAI,CAACG,WAAW,YAAAF,iBAAA,GAAID,IAAI,CAACI,YAAY;EACzD,MAAMC,YAAY,IAAAH,kBAAA,GAAGF,IAAI,CAACK,YAAY,YAAAH,kBAAA,GAAIF,IAAI,CAACM,aAAa;EAC5D,MAAM;IAAEC,OAAO,EAAEC;EAAgB,CAAC,GAAG,MAAMC,YAAU,CAACC,MAAM,CAACP,WAAW,CAAC;EACzEK,UAAU,CAACG,SAAS,GAAGC,IAAI,CAACC,KAAK,CAAC,CAACL,UAAU,CAACM,GAAG,GAAG,IAAI,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;EAE9E,MAAMC,MAAM,GAAG;IAAEd,WAAW;IAAEE;EAAa,CAAC;EAC5C,MAAMR,OAAO,GAAG,MAAMJ,uBAAc,CAACyB,UAAU,CAACD,MAAM,EAAET,UAAU,CAACM,GAAG,CAAC;EACvE,OAAO,CAACjB,OAAO,EAAEW,UAAU,EAAEH,YAAY,CAAC;AAC5C;AAEO,MAAM3B,yBAAyB,GAAG,MAAAA,CACvCU,GAA8B,EAC9Bd,QAAgB,EAChBC,YAA6B,KACH;EAAA,IAAA4C,iBAAA,EAAAC,YAAA;EAC1B,IAAI,CAAC3C,qBAAqB,CAACH,QAAQ,EAAEC,YAAY,CAAC,EAAE;IAClD,OAAOK,oBAAY,CAACC,IAAI,CAAC,CAAC;EAC5B;EAEA,MAAMwC,IAAI,IAAAF,iBAAA,GAAG5C,YAAY,CAAC+C,GAAG,CAAC,MAAM,CAAC,YAAAH,iBAAA,GAAI,EAAE;EAE3C,IAAI3C,OAA+B,GAAG,CAAC,CAAC;EACxC,IAAI+C,QAA4B,GAAGC,SAAS;EAC5C,IAAI,SAAAJ,YAAA,GAAOhC,GAAG,CAACZ,OAAO,qBAAX4C,YAAA,CAAaE,GAAG,MAAK,UAAU,EAAE;IAAA,IAAAG,OAAA;IAC1CF,QAAQ,GACNnC,GAAG,CAACZ,OAAO,CAAC8C,GAAG,CAAC,kBAAkB,CAAC,IAAIlC,GAAG,CAACZ,OAAO,CAAC8C,GAAG,CAAC,iBAAiB,CAAC,MAAAG,OAAA,GAAKrC,GAAG,CAASsC,MAAM,qBAAnBD,OAAA,CAAqBE,aAAa;EACnH,CAAC,MAAM,IAAI,OAAOvC,GAAG,CAACZ,OAAO,KAAK,QAAQ,EAAE;IAAA,IAAAoD,QAAA;IAC1C,IAAIC,cAAmB,OAAAC,SAAA,CAAAC,OAAA,MAAQ3C,GAAG,CAACZ,OAAO,CAAE;IAC5C+C,QAAQ,GACNM,cAAc,CAAC,kBAAkB,CAAC,IAAIA,cAAc,CAAC,iBAAiB,CAAC,MAAAD,QAAA,GAAKxC,GAAG,CAASsC,MAAM,qBAAnBE,QAAA,CAAqBD,aAAa;EACjH;EAEA,IAAIJ,QAAQ,IAAIS,eAAM,CAACC,eAAe,EAAE;IAAA,IAAAC,oBAAA;IACtC1D,OAAO,CAAC2D,iCAA0B,CAAC,GAAGZ,QAAQ;IAC9C/C,OAAO,CAAC4D,oCAA6B,CAAC,IAAAF,oBAAA,GAAGF,eAAM,CAACK,YAAY,YAAAH,oBAAA,GAAI,EAAE;EACpE;EAEA,MAAMI,QAAQ,GAAG,MAAMC,YAAG,CAACC,wBAAwB,CACjD,IAAAC,0BAAmB,EAACjE,OAAO,CAAC,EAC5B6C,IAAI,EACJW,eAAM,CAACU,QAAQ,EACfV,eAAM,CAACK,YACT,CAAC;EAED,MAAMrC,IAAI,GAAG,MAAMsC,QAAQ,CAACK,IAAI,CAAC,CAAC;EAElC,MAAM,CAAC9C,OAAO,EAAEW,UAAU,EAAEH,YAAY,CAAC,GAAG,MAAMN,gCAAgC,CAACC,IAAI,CAAC;EAExF,IAAI,CAACH,OAAO,EAAE;IACZ,OAAOjB,oBAAY,CAACgE,QAAQ,CAACZ,eAAM,CAACa,MAAM,CAAC;EAC7C;EACA,MAAMC,SAAS,GAAGd,eAAM,CAACe,KAAK;EAC9B,MAAMC,WAAW,GAAG1D,gBAAa,CAAC2D,MAAM,CAAC;IACvCC,KAAK,EAAErD,OAAO;IACdsD,OAAO,EAAE,IAAIpC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCsC,MAAM,EAAEN;EACV,CAAC,CAAC;EAEF,IAAIO,UAAU,GAAG,cAAcrB,eAAM,CAACU,QAAQ,CAACY,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;EACjE,IAAItB,eAAM,CAACuB,oBAAoB,IAAIvB,eAAM,CAACwB,KAAK,EAAE;IAC/CH,UAAU,GAAG,cAAcrB,eAAM,CAACwB,KAAK,CAACF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;EAC5D;EACA,MAAMG,aAAa,GAAGnE,gBAAa,CAAC2D,MAAM,CAAC;IACzCI,UAAU;IACVH,KAAK,EAAE7C,YAAY,WAAZA,YAAY,GAAI,EAAE;IACzB8C,OAAO,EAAE,IAAIpC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCsC,MAAM,EAAEN;EACV,CAAC,CAAC;EACF,MAAMY,oBAAwC,GAAGV,WAAW,CAACW,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EACpG,MAAMC,oBAAwC,GAAGJ,aAAa,CAACE,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EAEtG,OAAOhF,oBAAY,CAACgE,QAAQ,CAACZ,eAAM,CAACa,MAAM,EAAE;IAC1CrE,OAAO,EAAE,CAAC,GAAGkF,oBAAoB,EAAE,GAAGG,oBAAoB;EAC5D,CAAC,CAAC;AACJ,CAAC;AAAC5E,OAAA,CAAAP,yBAAA,GAAAA,yBAAA;AAEK,MAAMD,qBAAqB,GAAGA,CAACH,QAAgB,EAAEC,YAA6B,KAAc;EACjG,IAAIyD,eAAM,CAAC8B,gBAAgB,EAAE;IAC3B,IAAIxF,QAAQ,CAACyF,UAAU,CAAC,iBAAiB,CAAC,EAAE;MAC1C,OAAOxF,YAAY,CAAC+C,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI;IACzC;EACF;EACA,OAAO,KAAK;AACd,CAAC;AAACrC,OAAA,CAAAR,qBAAA,GAAAA,qBAAA","ignoreList":[]}
+{"version":3,"file":"getSessionOnEdge.js","names":["_cookies","_interopRequireDefault","require","_createSession","_encryptionEdge","_api","_server","_config","_jwt","_utils","_fronteggLogger","_refreshAccessTokenIfNeededOnEdge","_redirectToLogin","_shouldBypassMiddleware","logger","fronteggLogger","child","tag","handleSessionOnEdge","params","request","pathname","searchParams","headers","isHostedLoginCallback","handleHostedLoginCallback","shouldByPassMiddleware","NextResponse","next","edgeSession","checkSessionOnEdge","redirectToLogin","forwardedHeaders","exports","GET_SESSION_ON_EDGE_DEPRECATED_WARN","getSessionOnEdge","req","disableWarning","cookies","CookieManager","getSessionCookieFromRequest","info","createSession","encryptionEdge","sessionCookies","existingSession","debug","session","refreshAccessTokenIfNeededOnEdge","createSessionFromAccessTokenEdge","data","_data$accessToken","_data$refreshToken","accessToken","access_token","refreshToken","refresh_token","payload","decodedJwt","JwtManager","verify","expiresIn","Math","floor","exp","Date","now","tokens","sealTokens","_searchParams$get","_req$headers","code","get","clientIp","undefined","_socket","socket","remoteAddress","_socket2","requestHeaders","_extends2","default","config","shouldForwardIp","_config$clientSecret","FRONTEGG_FORWARD_IP_HEADER","FRONTEGG_CLIENT_SECRET_HEADER","clientSecret","response","api","exchangeHostedLoginToken","buildRequestHeaders","clientId","json","redirect","appUrl","isSecured","isSSL","cookieValue","create","value","expires","secure","cookieName","replace","rewriteCookieByAppId","appId","refreshCookie","sessionCookieHeaders","map","cookie","refreshCookieHeaders","secureJwtEnabled","startsWith"],"sources":["../../../../packages/nextjs/src/edge/getSessionOnEdge.ts"],"sourcesContent":["import type { IncomingMessage } from 'http';\nimport { FronteggEdgeSession, FronteggNextJSSession } from '../types';\nimport CookieManager from '../utils/cookies';\nimport createSession from '../utils/createSession';\nimport encryptionEdge from '../utils/encryption-edge';\nimport api from '../api';\nimport { type NextRequest, NextResponse } from 'next/server';\nimport config from '../config';\nimport JwtManager from '../utils/jwt';\nimport { buildRequestHeaders, FRONTEGG_CLIENT_SECRET_HEADER, FRONTEGG_FORWARD_IP_HEADER } from '../api/utils';\nimport fronteggLogger from '../utils/fronteggLogger';\nimport { refreshAccessTokenIfNeededOnEdge } from './refreshAccessTokenIfNeededOnEdge';\nimport { redirectToLogin } from './redirectToLogin';\nimport { shouldByPassMiddleware } from './shouldBypassMiddleware';\n\nconst logger = fronteggLogger.child({ tag: 'EdgeRuntime.getSessionOnEdge' });\n\nexport type HandleSessionOnEdge = {\n  request: IncomingMessage | Request;\n  pathname: string;\n  headers: NextRequest['headers'];\n  searchParams: URLSearchParams;\n};\n\nexport const handleSessionOnEdge = async (params: HandleSessionOnEdge): Promise<NextResponse> => {\n  const { request, pathname, searchParams, headers } = params;\n\n  if (isHostedLoginCallback(pathname, searchParams)) {\n    return handleHostedLoginCallback(request, pathname, searchParams);\n  }\n\n  if (shouldByPassMiddleware(pathname, headers /*, options: optional bypass configuration */)) {\n    return NextResponse.next();\n  }\n\n  const edgeSession = await checkSessionOnEdge(request);\n  if (!edgeSession) {\n    return redirectToLogin(pathname, searchParams);\n  }\n  if (edgeSession.headers) {\n    return NextResponse.next({\n      headers: edgeSession.headers,\n      request: {\n        headers: edgeSession.forwardedHeaders,\n      },\n    });\n  }\n  return NextResponse.next();\n};\n\nconst GET_SESSION_ON_EDGE_DEPRECATED_WARN = `Deprecation Notice: getSessionOnEdge has been deprecated. Please use handleSessionOnEdge instead. For example:\n\nfile: middleware.ts\n\\`\\`\\`ts\n  import { NextRequest } from 'next/server';\n  import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n    \n  export const middleware = async (request: NextRequest) => {\n    const { pathname, searchParams } = request.nextUrl;\n    const headers = request.headers;\n    \n    // Additional logic if needed\n    \n    return handleSessionOnEdge({ request, pathname, searchParams, headers });\n  };\n  \n  \n  export const config = {\n    matcher: '/(.*)',\n  };\n\n\\`\\`\\`\n\nAlternatively, to manually verify the session, you can use checkSessionOnEdge. Note that this method does not redirect to the login page if the session is invalid.\n`;\n\n/**\n * getSessionOnEdge is deprecated, please use handleSessionOnEdge instead example:\n *\n * ```ts\n *   import { NextRequest } from 'next/server';\n *   import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n *\n *   export const middleware = async (request: NextRequest) => {\n *     const { pathname, searchParams } = request.nextUrl;\n *     const headers = request.headers;\n *\n *     // Additional logic if needed\n *\n *     return handleSessionOnEdge({ request, pathname, searchParams, headers });\n *   };\n *\n *   export const config = {\n *     matcher: '/(.*)',\n *   };\n * ```\n * @deprecated\n */\n\nexport const getSessionOnEdge = (\n  req: IncomingMessage | Request,\n  disableWarning = false\n): Promise<FronteggNextJSSession | undefined> => {\n  const logger = fronteggLogger.child({ tag: 'EdgeRuntime.getSessionOnEdge' });\n  const cookies = CookieManager.getSessionCookieFromRequest(req);\n  if (!disableWarning) {\n    logger.info(GET_SESSION_ON_EDGE_DEPRECATED_WARN);\n  }\n  return createSession(cookies, encryptionEdge);\n};\n\n/**\n * Check session on edge and return session if exists this method does not redirect to login page\n * Example:\n *\n * ```ts\n *   import { NextRequest } from 'next/server';\n *   import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n *\n *   export const middleware = async (request: NextRequest) => {\n *     const { pathname, searchParams } = request.nextUrl;\n *     const headers = request.headers;\n *\n *     // Additional logic if needed\n *\n *     // check if it's a hosted login callback\n *     if (isHostedLoginCallback(pathname, searchParams)) {\n *       return handleHostedLoginCallback(request, pathname, searchParams);\n *     }\n *\n *     // check if we should bypass the middleware\n *     if (shouldByPassMiddleware(pathname)) {\n *       return NextResponse.next();\n *     }\n *\n *     // check session\n *     const session = await checkSessionOnEdge(request);\n *\n *     if (!session) {\n *       return redirectToLogin(pathname);\n *     }\n *\n *     // if headers are present forward them to the next response / request\n *     if (session.headers) {\n *        return NextResponse.next({\n *          headers: edgeSession.headers,\n *          request:{\n *            headers: edgeSession.forwardedHeaders\n *          }\n *        });\n *     }\n *     return NextResponse.next();\n *   };\n * ```\n *\n *\n * @param req\n */\nexport const checkSessionOnEdge = async (req: IncomingMessage | Request): Promise<FronteggEdgeSession | undefined> => {\n  const sessionCookies = CookieManager.getSessionCookieFromRequest(req);\n  let existingSession = await createSession(sessionCookies, encryptionEdge);\n  if (existingSession) {\n    logger.debug('session resolved from session cookie');\n    return {\n      session: existingSession,\n    };\n  }\n\n  logger.debug('Failed to resolve session from cookie, going to refresh token');\n  return refreshAccessTokenIfNeededOnEdge(req);\n};\n\nasync function createSessionFromAccessTokenEdge(data: any): Promise<[string, any, string] | []> {\n  const accessToken = data.accessToken ?? data.access_token;\n  const refreshToken = data.refreshToken ?? data.refresh_token;\n  const { payload: decodedJwt }: any = await JwtManager.verify(accessToken);\n  decodedJwt.expiresIn = Math.floor((decodedJwt.exp * 1000 - Date.now()) / 1000);\n\n  const tokens = { accessToken, refreshToken };\n  const session = await encryptionEdge.sealTokens(tokens, decodedJwt.exp);\n  return [session, decodedJwt, refreshToken];\n}\n\nexport const handleHostedLoginCallback = async (\n  req: IncomingMessage | Request,\n  pathname: string,\n  searchParams: URLSearchParams\n): Promise<NextResponse> => {\n  if (!isHostedLoginCallback(pathname, searchParams)) {\n    return NextResponse.next();\n  }\n\n  const code = searchParams.get('code') ?? '';\n\n  let headers: Record<string, string> = {};\n  let clientIp: string | undefined = undefined;\n  if (typeof req.headers?.get === 'function') {\n    clientIp =\n      req.headers.get('cf-connecting-ip') || req.headers.get('x-forwarded-for') || (req as any).socket?.remoteAddress;\n  } else if (typeof req.headers === 'object') {\n    let requestHeaders: any = { ...req.headers };\n    clientIp =\n      requestHeaders['cf-connecting-ip'] || requestHeaders['x-forwarded-for'] || (req as any).socket?.remoteAddress;\n  }\n\n  if (clientIp && config.shouldForwardIp) {\n    headers[FRONTEGG_FORWARD_IP_HEADER] = clientIp;\n    headers[FRONTEGG_CLIENT_SECRET_HEADER] = config.clientSecret ?? '';\n  }\n\n  const response = await api.exchangeHostedLoginToken(\n    buildRequestHeaders(headers),\n    code,\n    config.clientId,\n    config.clientSecret!\n  );\n\n  const data = await response.json();\n\n  const [session, decodedJwt, refreshToken] = await createSessionFromAccessTokenEdge(data);\n\n  if (!session) {\n    return NextResponse.redirect(config.appUrl);\n  }\n  const isSecured = config.isSSL;\n  const cookieValue = CookieManager.create({\n    value: session,\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n\n  let cookieName = `fe_refresh_${config.clientId.replace('-', '')}`;\n  if (config.rewriteCookieByAppId && config.appId) {\n    cookieName = `fe_refresh_${config.appId.replace('-', '')}`;\n  }\n  const refreshCookie = CookieManager.create({\n    cookieName,\n    value: refreshToken ?? '',\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n  const sessionCookieHeaders: [string, string][] = cookieValue.map((cookie) => ['set-cookie', cookie]);\n  const refreshCookieHeaders: [string, string][] = refreshCookie.map((cookie) => ['set-cookie', cookie]);\n\n  return NextResponse.redirect(config.appUrl, {\n    headers: [...sessionCookieHeaders, ...refreshCookieHeaders],\n  });\n};\n\nexport const isHostedLoginCallback = (pathname: string, searchParams: URLSearchParams): boolean => {\n  if (config.secureJwtEnabled) {\n    if (pathname.startsWith('/oauth/callback')) {\n      return searchParams.get('code') != null;\n    }\n  }\n  return false;\n};\n"],"mappings":";;;;;;;;AAEA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,cAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,eAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,IAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAN,sBAAA,CAAAC,OAAA;AACA,IAAAM,IAAA,GAAAP,sBAAA,CAAAC,OAAA;AACA,IAAAO,MAAA,GAAAP,OAAA;AACA,IAAAQ,eAAA,GAAAT,sBAAA,CAAAC,OAAA;AACA,IAAAS,iCAAA,GAAAT,OAAA;AACA,IAAAU,gBAAA,GAAAV,OAAA;AACA,IAAAW,uBAAA,GAAAX,OAAA;AAEA,MAAMY,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;EAAEC,GAAG,EAAE;AAA+B,CAAC,CAAC;AASrE,MAAMC,mBAAmB,GAAG,MAAOC,MAA2B,IAA4B;EAC/F,MAAM;IAAEC,OAAO;IAAEC,QAAQ;IAAEC,YAAY;IAAEC;EAAQ,CAAC,GAAGJ,MAAM;EAE3D,IAAIK,qBAAqB,CAACH,QAAQ,EAAEC,YAAY,CAAC,EAAE;IACjD,OAAOG,yBAAyB,CAACL,OAAO,EAAEC,QAAQ,EAAEC,YAAY,CAAC;EACnE;EAEA,IAAI,IAAAI,8CAAsB,EAACL,QAAQ,EAAEE,OAAO,CAAC,6CAA6C,CAAC,EAAE;IAC3F,OAAOI,oBAAY,CAACC,IAAI,CAAC,CAAC;EAC5B;EAEA,MAAMC,WAAW,GAAG,MAAMC,kBAAkB,CAACV,OAAO,CAAC;EACrD,IAAI,CAACS,WAAW,EAAE;IAChB,OAAO,IAAAE,gCAAe,EAACV,QAAQ,EAAEC,YAAY,CAAC;EAChD;EACA,IAAIO,WAAW,CAACN,OAAO,EAAE;IACvB,OAAOI,oBAAY,CAACC,IAAI,CAAC;MACvBL,OAAO,EAAEM,WAAW,CAACN,OAAO;MAC5BH,OAAO,EAAE;QACPG,OAAO,EAAEM,WAAW,CAACG;MACvB;IACF,CAAC,CAAC;EACJ;EACA,OAAOL,oBAAY,CAACC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAACK,OAAA,CAAAf,mBAAA,GAAAA,mBAAA;AAEF,MAAMgB,mCAAmC,GAAG;AAC5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEO,MAAMC,gBAAgB,GAAGA,CAC9BC,GAA8B,EAC9BC,cAAc,GAAG,KAAK,KACyB;EAC/C,MAAMvB,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA+B,CAAC,CAAC;EAC5E,MAAMqB,OAAO,GAAGC,gBAAa,CAACC,2BAA2B,CAACJ,GAAG,CAAC;EAC9D,IAAI,CAACC,cAAc,EAAE;IACnBvB,MAAM,CAAC2B,IAAI,CAACP,mCAAmC,CAAC;EAClD;EACA,OAAO,IAAAQ,sBAAa,EAACJ,OAAO,EAAEK,uBAAc,CAAC;AAC/C,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AA9CAV,OAAA,CAAAE,gBAAA,GAAAA,gBAAA;AA+CO,MAAML,kBAAkB,GAAG,MAAOM,GAA8B,IAA+C;EACpH,MAAMQ,cAAc,GAAGL,gBAAa,CAACC,2BAA2B,CAACJ,GAAG,CAAC;EACrE,IAAIS,eAAe,GAAG,MAAM,IAAAH,sBAAa,EAACE,cAAc,EAAED,uBAAc,CAAC;EACzE,IAAIE,eAAe,EAAE;IACnB/B,MAAM,CAACgC,KAAK,CAAC,sCAAsC,CAAC;IACpD,OAAO;MACLC,OAAO,EAAEF;IACX,CAAC;EACH;EAEA/B,MAAM,CAACgC,KAAK,CAAC,+DAA+D,CAAC;EAC7E,OAAO,IAAAE,kEAAgC,EAACZ,GAAG,CAAC;AAC9C,CAAC;AAACH,OAAA,CAAAH,kBAAA,GAAAA,kBAAA;AAEF,eAAemB,gCAAgCA,CAACC,IAAS,EAAuC;EAAA,IAAAC,iBAAA,EAAAC,kBAAA;EAC9F,MAAMC,WAAW,IAAAF,iBAAA,GAAGD,IAAI,CAACG,WAAW,YAAAF,iBAAA,GAAID,IAAI,CAACI,YAAY;EACzD,MAAMC,YAAY,IAAAH,kBAAA,GAAGF,IAAI,CAACK,YAAY,YAAAH,kBAAA,GAAIF,IAAI,CAACM,aAAa;EAC5D,MAAM;IAAEC,OAAO,EAAEC;EAAgB,CAAC,GAAG,MAAMC,YAAU,CAACC,MAAM,CAACP,WAAW,CAAC;EACzEK,UAAU,CAACG,SAAS,GAAGC,IAAI,CAACC,KAAK,CAAC,CAACL,UAAU,CAACM,GAAG,GAAG,IAAI,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;EAE9E,MAAMC,MAAM,GAAG;IAAEd,WAAW;IAAEE;EAAa,CAAC;EAC5C,MAAMR,OAAO,GAAG,MAAMJ,uBAAc,CAACyB,UAAU,CAACD,MAAM,EAAET,UAAU,CAACM,GAAG,CAAC;EACvE,OAAO,CAACjB,OAAO,EAAEW,UAAU,EAAEH,YAAY,CAAC;AAC5C;AAEO,MAAM9B,yBAAyB,GAAG,MAAAA,CACvCW,GAA8B,EAC9Bf,QAAgB,EAChBC,YAA6B,KACH;EAAA,IAAA+C,iBAAA,EAAAC,YAAA;EAC1B,IAAI,CAAC9C,qBAAqB,CAACH,QAAQ,EAAEC,YAAY,CAAC,EAAE;IAClD,OAAOK,oBAAY,CAACC,IAAI,CAAC,CAAC;EAC5B;EAEA,MAAM2C,IAAI,IAAAF,iBAAA,GAAG/C,YAAY,CAACkD,GAAG,CAAC,MAAM,CAAC,YAAAH,iBAAA,GAAI,EAAE;EAE3C,IAAI9C,OAA+B,GAAG,CAAC,CAAC;EACxC,IAAIkD,QAA4B,GAAGC,SAAS;EAC5C,IAAI,SAAAJ,YAAA,GAAOlC,GAAG,CAACb,OAAO,qBAAX+C,YAAA,CAAaE,GAAG,MAAK,UAAU,EAAE;IAAA,IAAAG,OAAA;IAC1CF,QAAQ,GACNrC,GAAG,CAACb,OAAO,CAACiD,GAAG,CAAC,kBAAkB,CAAC,IAAIpC,GAAG,CAACb,OAAO,CAACiD,GAAG,CAAC,iBAAiB,CAAC,MAAAG,OAAA,GAAKvC,GAAG,CAASwC,MAAM,qBAAnBD,OAAA,CAAqBE,aAAa;EACnH,CAAC,MAAM,IAAI,OAAOzC,GAAG,CAACb,OAAO,KAAK,QAAQ,EAAE;IAAA,IAAAuD,QAAA;IAC1C,IAAIC,cAAmB,OAAAC,SAAA,CAAAC,OAAA,MAAQ7C,GAAG,CAACb,OAAO,CAAE;IAC5CkD,QAAQ,GACNM,cAAc,CAAC,kBAAkB,CAAC,IAAIA,cAAc,CAAC,iBAAiB,CAAC,MAAAD,QAAA,GAAK1C,GAAG,CAASwC,MAAM,qBAAnBE,QAAA,CAAqBD,aAAa;EACjH;EAEA,IAAIJ,QAAQ,IAAIS,eAAM,CAACC,eAAe,EAAE;IAAA,IAAAC,oBAAA;IACtC7D,OAAO,CAAC8D,iCAA0B,CAAC,GAAGZ,QAAQ;IAC9ClD,OAAO,CAAC+D,oCAA6B,CAAC,IAAAF,oBAAA,GAAGF,eAAM,CAACK,YAAY,YAAAH,oBAAA,GAAI,EAAE;EACpE;EAEA,MAAMI,QAAQ,GAAG,MAAMC,YAAG,CAACC,wBAAwB,CACjD,IAAAC,0BAAmB,EAACpE,OAAO,CAAC,EAC5BgD,IAAI,EACJW,eAAM,CAACU,QAAQ,EACfV,eAAM,CAACK,YACT,CAAC;EAED,MAAMrC,IAAI,GAAG,MAAMsC,QAAQ,CAACK,IAAI,CAAC,CAAC;EAElC,MAAM,CAAC9C,OAAO,EAAEW,UAAU,EAAEH,YAAY,CAAC,GAAG,MAAMN,gCAAgC,CAACC,IAAI,CAAC;EAExF,IAAI,CAACH,OAAO,EAAE;IACZ,OAAOpB,oBAAY,CAACmE,QAAQ,CAACZ,eAAM,CAACa,MAAM,CAAC;EAC7C;EACA,MAAMC,SAAS,GAAGd,eAAM,CAACe,KAAK;EAC9B,MAAMC,WAAW,GAAG3D,gBAAa,CAAC4D,MAAM,CAAC;IACvCC,KAAK,EAAErD,OAAO;IACdsD,OAAO,EAAE,IAAIpC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCsC,MAAM,EAAEN;EACV,CAAC,CAAC;EAEF,IAAIO,UAAU,GAAG,cAAcrB,eAAM,CAACU,QAAQ,CAACY,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;EACjE,IAAItB,eAAM,CAACuB,oBAAoB,IAAIvB,eAAM,CAACwB,KAAK,EAAE;IAC/CH,UAAU,GAAG,cAAcrB,eAAM,CAACwB,KAAK,CAACF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;EAC5D;EACA,MAAMG,aAAa,GAAGpE,gBAAa,CAAC4D,MAAM,CAAC;IACzCI,UAAU;IACVH,KAAK,EAAE7C,YAAY,WAAZA,YAAY,GAAI,EAAE;IACzB8C,OAAO,EAAE,IAAIpC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCsC,MAAM,EAAEN;EACV,CAAC,CAAC;EACF,MAAMY,oBAAwC,GAAGV,WAAW,CAACW,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EACpG,MAAMC,oBAAwC,GAAGJ,aAAa,CAACE,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EAEtG,OAAOnF,oBAAY,CAACmE,QAAQ,CAACZ,eAAM,CAACa,MAAM,EAAE;IAC1CxE,OAAO,EAAE,CAAC,GAAGqF,oBAAoB,EAAE,GAAGG,oBAAoB;EAC5D,CAAC,CAAC;AACJ,CAAC;AAAC9E,OAAA,CAAAR,yBAAA,GAAAA,yBAAA;AAEK,MAAMD,qBAAqB,GAAGA,CAACH,QAAgB,EAAEC,YAA6B,KAAc;EACjG,IAAI4D,eAAM,CAAC8B,gBAAgB,EAAE;IAC3B,IAAI3F,QAAQ,CAAC4F,UAAU,CAAC,iBAAiB,CAAC,EAAE;MAC1C,OAAO3F,YAAY,CAACkD,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI;IACzC;EACF;EACA,OAAO,KAAK;AACd,CAAC;AAACvC,OAAA,CAAAT,qBAAA,GAAAA,qBAAA","ignoreList":[]}

package/edge/refreshAccessTokenIfNeededOnEdge.js

@@ -79,6 +79,12 @@ async function refreshAccessTokenIfNeededOnEdge(req) {
     req
   });
   newSetCookie.push(...cookieValue);
+  const forwardedHeaders = req.headers;
+  newSetCookie.forEach(cookie => {
+    // get cookie name and value only
+    const [name, value] = cookie.split(';')[0].split('=');
+    forwardedHeaders.set('cookie', `${name}=${value}`);
+  });
   return {
     session: {
       accessToken: (_data$accessToken = data.accessToken) != null ? _data$accessToken : data.access_token,
@@ -87,7 +93,8 @@ async function refreshAccessTokenIfNeededOnEdge(req) {
     },
     headers: {
       'set-cookie': newSetCookie.join(', ')
-    }
+    },
+    forwardedHeaders
   };
 }
 async function createSessionFromAccessTokenOnEdge(data) {

package/edge/refreshAccessTokenIfNeededOnEdge.js.map

@@ -1 +1 @@
-{"version":3,"file":"refreshAccessTokenIfNeededOnEdge.js","names":["_cookies","_interopRequireDefault","require","_config","_api","_fronteggLogger","_jwt","_encryptionEdge","logger","fronteggLogger","child","tag","refreshAccessTokenIfNeededOnEdge","req","_ref","_ref2","_response$headers$raw","_response$headers","_response$headers$raw2","_response$headers2","_response$headers2$ge","_response$headers3","_response$headers3$ge","_CookieManager$modify","_data$accessToken","refreshCookie","CookieManager","getRefreshCookieFromRequestEdge","info","undefined","reqHeaders","headers","forEach","value","key","clientId","config","clientSecret","response","isHostedLogin","api","refreshTokenHostedLogin","refreshTokenEmbedded","e","error","isSecured","isSSL","ok","cookiesToRemove","getRequestCookiesHeaderToRemove","cookieDomain","session","join","data","json","cookieHeader","raw","call","getSetCookie","get","newSetCookie","modifySetCookie","decodedJwt","refreshToken","createSessionFromAccessTokenOnEdge","cookieValue","create","expires","Date","exp","secure","push","accessToken","access_token","user","_data$accessToken2","_data$refreshToken","refresh_token","payload","JwtManager","verify","expiresIn","Math","floor","now","tokens","encryptionEdge","sealTokens"],"sources":["../../../../packages/nextjs/src/edge/refreshAccessTokenIfNeededOnEdge.ts"],"sourcesContent":["import { FronteggEdgeSession } from '../types';\nimport type { IncomingMessage } from 'http';\nimport CookieManager from '../utils/cookies';\nimport config from '../config';\nimport api from '../api';\nimport fronteggLogger from '../utils/fronteggLogger';\nimport JwtManager from '../utils/jwt';\nimport encryptionEdge from '../utils/encryption-edge';\n\nconst logger = fronteggLogger.child({ tag: 'EdgeRuntime.refreshAccessTokenIfNeededOnEdge' });\n\nexport async function refreshAccessTokenIfNeededOnEdge(\n  req: IncomingMessage | Request\n): Promise<FronteggEdgeSession | undefined> {\n  const refreshCookie = CookieManager.getRefreshCookieFromRequestEdge(req);\n  if (!refreshCookie) {\n    logger.info('No refresh cookie found, No session found');\n    return undefined;\n  }\n\n  logger.info('going to refresh token');\n\n  const reqHeaders = req.headers as any as Map<string, string>;\n  const headers: Record<string, string> = {};\n  reqHeaders.forEach((value: string, key: string) => {\n    headers[key] = value;\n  });\n  const clientId = config.clientId;\n  const clientSecret = config.clientSecret;\n\n  let response: Response | null;\n  try {\n    if (config.isHostedLogin) {\n      response = await api.refreshTokenHostedLogin(headers, refreshCookie, clientId, clientSecret);\n    } else {\n      response = await api.refreshTokenEmbedded(headers);\n    }\n  } catch (e) {\n    logger.error('Failed to refresh token', e);\n    return undefined;\n  }\n\n  const isSecured = config.isSSL;\n  if (response === null || !response.ok) {\n    const cookiesToRemove = CookieManager.getRequestCookiesHeaderToRemove({\n      cookieDomain: config.cookieDomain,\n      isSecured,\n      req,\n    });\n    if (cookiesToRemove) {\n      return {\n        session: undefined,\n        headers: {\n          'set-cookie': cookiesToRemove.join(', '),\n        },\n      };\n    }\n    return undefined;\n  }\n\n  const data = await response.json();\n\n  const cookieHeader: string[] =\n    // @ts-ignore the first argument \"raw\" will only work before nextjs 13.4 and the second argument \"getSetCookie\" will only work after\n    response.headers?.raw?.()['set-cookie'] ??\n    // @ts-ignore the first argument \"raw\" will only work before nextjs 13.4 and the second argument \"getSetCookie\" will only work after\n    response.headers?.getSetCookie?.() ??\n    response.headers?.get?.('set-cookie') ??\n    [];\n\n  const newSetCookie = CookieManager.modifySetCookie(cookieHeader, isSecured) ?? [];\n  const [session, decodedJwt, refreshToken] = await createSessionFromAccessTokenOnEdge(data);\n\n  if (!session) {\n    return {\n      session: undefined,\n      headers: {\n        'set-cookie': newSetCookie.join(', '),\n      },\n    };\n  }\n\n  const cookieValue = CookieManager.create({\n    value: session,\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n    req,\n  });\n  newSetCookie.push(...cookieValue);\n\n  return {\n    session: {\n      accessToken: data.accessToken ?? data.access_token,\n      user: decodedJwt,\n      refreshToken,\n    },\n    headers: {\n      'set-cookie': newSetCookie.join(', '),\n    },\n  };\n}\n\nexport async function createSessionFromAccessTokenOnEdge(data: any): Promise<[string, any, string] | []> {\n  const accessToken = data.accessToken ?? data.access_token;\n  const refreshToken = data.refreshToken ?? data.refresh_token;\n  const { payload: decodedJwt }: any = await JwtManager.verify(accessToken);\n  decodedJwt.expiresIn = Math.floor((decodedJwt.exp * 1000 - Date.now()) / 1000);\n\n  const tokens = { accessToken, refreshToken };\n  const session = await encryptionEdge.sealTokens(tokens, decodedJwt.exp);\n  return [session, decodedJwt, refreshToken];\n}\n"],"mappings":";;;;;;;;AAEA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,IAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,eAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,IAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,eAAA,GAAAN,sBAAA,CAAAC,OAAA;AAEA,MAAMM,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;EAAEC,GAAG,EAAE;AAA+C,CAAC,CAAC;AAErF,eAAeC,gCAAgCA,CACpDC,GAA8B,EACY;EAAA,IAAAC,IAAA,EAAAC,KAAA,EAAAC,qBAAA,EAAAC,iBAAA,EAAAC,sBAAA,EAAAC,kBAAA,EAAAC,qBAAA,EAAAC,kBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,iBAAA;EAC1C,MAAMC,aAAa,GAAGC,gBAAa,CAACC,+BAA+B,CAACd,GAAG,CAAC;EACxE,IAAI,CAACY,aAAa,EAAE;IAClBjB,MAAM,CAACoB,IAAI,CAAC,2CAA2C,CAAC;IACxD,OAAOC,SAAS;EAClB;EAEArB,MAAM,CAACoB,IAAI,CAAC,wBAAwB,CAAC;EAErC,MAAME,UAAU,GAAGjB,GAAG,CAACkB,OAAqC;EAC5D,MAAMA,OAA+B,GAAG,CAAC,CAAC;EAC1CD,UAAU,CAACE,OAAO,CAAC,CAACC,KAAa,EAAEC,GAAW,KAAK;IACjDH,OAAO,CAACG,GAAG,CAAC,GAAGD,KAAK;EACtB,CAAC,CAAC;EACF,MAAME,QAAQ,GAAGC,eAAM,CAACD,QAAQ;EAChC,MAAME,YAAY,GAAGD,eAAM,CAACC,YAAY;EAExC,IAAIC,QAAyB;EAC7B,IAAI;IACF,IAAIF,eAAM,CAACG,aAAa,EAAE;MACxBD,QAAQ,GAAG,MAAME,YAAG,CAACC,uBAAuB,CAACV,OAAO,EAAEN,aAAa,EAAEU,QAAQ,EAAEE,YAAY,CAAC;IAC9F,CAAC,MAAM;MACLC,QAAQ,GAAG,MAAME,YAAG,CAACE,oBAAoB,CAACX,OAAO,CAAC;IACpD;EACF,CAAC,CAAC,OAAOY,CAAC,EAAE;IACVnC,MAAM,CAACoC,KAAK,CAAC,yBAAyB,EAAED,CAAC,CAAC;IAC1C,OAAOd,SAAS;EAClB;EAEA,MAAMgB,SAAS,GAAGT,eAAM,CAACU,KAAK;EAC9B,IAAIR,QAAQ,KAAK,IAAI,IAAI,CAACA,QAAQ,CAACS,EAAE,EAAE;IACrC,MAAMC,eAAe,GAAGtB,gBAAa,CAACuB,+BAA+B,CAAC;MACpEC,YAAY,EAAEd,eAAM,CAACc,YAAY;MACjCL,SAAS;MACThC;IACF,CAAC,CAAC;IACF,IAAImC,eAAe,EAAE;MACnB,OAAO;QACLG,OAAO,EAAEtB,SAAS;QAClBE,OAAO,EAAE;UACP,YAAY,EAAEiB,eAAe,CAACI,IAAI,CAAC,IAAI;QACzC;MACF,CAAC;IACH;IACA,OAAOvB,SAAS;EAClB;EAEA,MAAMwB,IAAI,GAAG,MAAMf,QAAQ,CAACgB,IAAI,CAAC,CAAC;EAElC,MAAMC,YAAsB,GAC1B;EAAA,CAAAzC,IAAA,IAAAC,KAAA,IAAAC,qBAAA,IAAAC,iBAAA,GACAqB,QAAQ,CAACP,OAAO,cAAAb,sBAAA,GAAhBD,iBAAA,CAAkBuC,GAAG,qBAArBtC,sBAAA,CAAAuC,IAAA,CAAAxC,iBAAwB,CAAC,CAAC,YAAY,CAAC,YAAAD,qBAAA,GACvC;EAAA,CAAAG,kBAAA,GACAmB,QAAQ,CAACP,OAAO,cAAAX,qBAAA,GAAhBD,kBAAA,CAAkBuC,YAAY,qBAA9BtC,qBAAA,CAAAqC,IAAA,CAAAtC,kBAAiC,CAAC,YAAAJ,KAAA,IAAAM,kBAAA,GAClCiB,QAAQ,CAACP,OAAO,cAAAT,qBAAA,GAAhBD,kBAAA,CAAkBsC,GAAG,qBAArBrC,qBAAA,CAAAmC,IAAA,CAAApC,kBAAA,EAAwB,YAAY,CAAC,YAAAP,IAAA,GACrC,EAAE;EAEJ,MAAM8C,YAAY,IAAArC,qBAAA,GAAGG,gBAAa,CAACmC,eAAe,CAACN,YAAY,EAAEV,SAAS,CAAC,YAAAtB,qBAAA,GAAI,EAAE;EACjF,MAAM,CAAC4B,OAAO,EAAEW,UAAU,EAAEC,YAAY,CAAC,GAAG,MAAMC,kCAAkC,CAACX,IAAI,CAAC;EAE1F,IAAI,CAACF,OAAO,EAAE;IACZ,OAAO;MACLA,OAAO,EAAEtB,SAAS;MAClBE,OAAO,EAAE;QACP,YAAY,EAAE6B,YAAY,CAACR,IAAI,CAAC,IAAI;MACtC;IACF,CAAC;EACH;EAEA,MAAMa,WAAW,GAAGvC,gBAAa,CAACwC,MAAM,CAAC;IACvCjC,KAAK,EAAEkB,OAAO;IACdgB,OAAO,EAAE,IAAIC,IAAI,CAACN,UAAU,CAACO,GAAG,GAAG,IAAI,CAAC;IACxCC,MAAM,EAAEzB,SAAS;IACjBhC;EACF,CAAC,CAAC;EACF+C,YAAY,CAACW,IAAI,CAAC,GAAGN,WAAW,CAAC;EAEjC,OAAO;IACLd,OAAO,EAAE;MACPqB,WAAW,GAAAhD,iBAAA,GAAE6B,IAAI,CAACmB,WAAW,YAAAhD,iBAAA,GAAI6B,IAAI,CAACoB,YAAY;MAClDC,IAAI,EAAEZ,UAAU;MAChBC;IACF,CAAC;IACDhC,OAAO,EAAE;MACP,YAAY,EAAE6B,YAAY,CAACR,IAAI,CAAC,IAAI;IACtC;EACF,CAAC;AACH;AAEO,eAAeY,kCAAkCA,CAACX,IAAS,EAAuC;EAAA,IAAAsB,kBAAA,EAAAC,kBAAA;EACvG,MAAMJ,WAAW,IAAAG,kBAAA,GAAGtB,IAAI,CAACmB,WAAW,YAAAG,kBAAA,GAAItB,IAAI,CAACoB,YAAY;EACzD,MAAMV,YAAY,IAAAa,kBAAA,GAAGvB,IAAI,CAACU,YAAY,YAAAa,kBAAA,GAAIvB,IAAI,CAACwB,aAAa;EAC5D,MAAM;IAAEC,OAAO,EAAEhB;EAAgB,CAAC,GAAG,MAAMiB,YAAU,CAACC,MAAM,CAACR,WAAW,CAAC;EACzEV,UAAU,CAACmB,SAAS,GAAGC,IAAI,CAACC,KAAK,CAAC,CAACrB,UAAU,CAACO,GAAG,GAAG,IAAI,GAAGD,IAAI,CAACgB,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;EAE9E,MAAMC,MAAM,GAAG;IAAEb,WAAW;IAAET;EAAa,CAAC;EAC5C,MAAMZ,OAAO,GAAG,MAAMmC,uBAAc,CAACC,UAAU,CAACF,MAAM,EAAEvB,UAAU,CAACO,GAAG,CAAC;EACvE,OAAO,CAAClB,OAAO,EAAEW,UAAU,EAAEC,YAAY,CAAC;AAC5C","ignoreList":[]}
+{"version":3,"file":"refreshAccessTokenIfNeededOnEdge.js","names":["_cookies","_interopRequireDefault","require","_config","_api","_fronteggLogger","_jwt","_encryptionEdge","logger","fronteggLogger","child","tag","refreshAccessTokenIfNeededOnEdge","req","_ref","_ref2","_response$headers$raw","_response$headers","_response$headers$raw2","_response$headers2","_response$headers2$ge","_response$headers3","_response$headers3$ge","_CookieManager$modify","_data$accessToken","refreshCookie","CookieManager","getRefreshCookieFromRequestEdge","info","undefined","reqHeaders","headers","forEach","value","key","clientId","config","clientSecret","response","isHostedLogin","api","refreshTokenHostedLogin","refreshTokenEmbedded","e","error","isSecured","isSSL","ok","cookiesToRemove","getRequestCookiesHeaderToRemove","cookieDomain","session","join","data","json","cookieHeader","raw","call","getSetCookie","get","newSetCookie","modifySetCookie","decodedJwt","refreshToken","createSessionFromAccessTokenOnEdge","cookieValue","create","expires","Date","exp","secure","push","forwardedHeaders","cookie","name","split","set","accessToken","access_token","user","_data$accessToken2","_data$refreshToken","refresh_token","payload","JwtManager","verify","expiresIn","Math","floor","now","tokens","encryptionEdge","sealTokens"],"sources":["../../../../packages/nextjs/src/edge/refreshAccessTokenIfNeededOnEdge.ts"],"sourcesContent":["import { FronteggEdgeSession } from '../types';\nimport type { IncomingMessage } from 'http';\nimport CookieManager from '../utils/cookies';\nimport config from '../config';\nimport api from '../api';\nimport fronteggLogger from '../utils/fronteggLogger';\nimport JwtManager from '../utils/jwt';\nimport encryptionEdge from '../utils/encryption-edge';\n\nconst logger = fronteggLogger.child({ tag: 'EdgeRuntime.refreshAccessTokenIfNeededOnEdge' });\n\nexport async function refreshAccessTokenIfNeededOnEdge(\n  req: IncomingMessage | Request\n): Promise<FronteggEdgeSession | undefined> {\n  const refreshCookie = CookieManager.getRefreshCookieFromRequestEdge(req);\n  if (!refreshCookie) {\n    logger.info('No refresh cookie found, No session found');\n    return undefined;\n  }\n\n  logger.info('going to refresh token');\n\n  const reqHeaders = req.headers as any as Map<string, string>;\n  const headers: Record<string, string> = {};\n  reqHeaders.forEach((value: string, key: string) => {\n    headers[key] = value;\n  });\n  const clientId = config.clientId;\n  const clientSecret = config.clientSecret;\n\n  let response: Response | null;\n  try {\n    if (config.isHostedLogin) {\n      response = await api.refreshTokenHostedLogin(headers, refreshCookie, clientId, clientSecret);\n    } else {\n      response = await api.refreshTokenEmbedded(headers);\n    }\n  } catch (e) {\n    logger.error('Failed to refresh token', e);\n    return undefined;\n  }\n\n  const isSecured = config.isSSL;\n  if (response === null || !response.ok) {\n    const cookiesToRemove = CookieManager.getRequestCookiesHeaderToRemove({\n      cookieDomain: config.cookieDomain,\n      isSecured,\n      req,\n    });\n    if (cookiesToRemove) {\n      return {\n        session: undefined,\n        headers: {\n          'set-cookie': cookiesToRemove.join(', '),\n        },\n      };\n    }\n    return undefined;\n  }\n\n  const data = await response.json();\n\n  const cookieHeader: string[] =\n    // @ts-ignore the first argument \"raw\" will only work before nextjs 13.4 and the second argument \"getSetCookie\" will only work after\n    response.headers?.raw?.()['set-cookie'] ??\n    // @ts-ignore the first argument \"raw\" will only work before nextjs 13.4 and the second argument \"getSetCookie\" will only work after\n    response.headers?.getSetCookie?.() ??\n    response.headers?.get?.('set-cookie') ??\n    [];\n\n  const newSetCookie = CookieManager.modifySetCookie(cookieHeader, isSecured) ?? [];\n  const [session, decodedJwt, refreshToken] = await createSessionFromAccessTokenOnEdge(data);\n\n  if (!session) {\n    return {\n      session: undefined,\n      headers: {\n        'set-cookie': newSetCookie.join(', '),\n      },\n    };\n  }\n\n  const cookieValue = CookieManager.create({\n    value: session,\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n    req,\n  });\n  newSetCookie.push(...cookieValue);\n\n  const forwardedHeaders = req.headers as Headers;\n  newSetCookie.forEach((cookie) => {\n    // get cookie name and value only\n    const [name, value] = cookie.split(';')[0].split('=');\n    forwardedHeaders.set('cookie', `${name}=${value}`);\n  });\n  return {\n    session: {\n      accessToken: data.accessToken ?? data.access_token,\n      user: decodedJwt,\n      refreshToken,\n    },\n    headers: {\n      'set-cookie': newSetCookie.join(', '),\n    },\n    forwardedHeaders,\n  };\n}\n\nexport async function createSessionFromAccessTokenOnEdge(data: any): Promise<[string, any, string] | []> {\n  const accessToken = data.accessToken ?? data.access_token;\n  const refreshToken = data.refreshToken ?? data.refresh_token;\n  const { payload: decodedJwt }: any = await JwtManager.verify(accessToken);\n  decodedJwt.expiresIn = Math.floor((decodedJwt.exp * 1000 - Date.now()) / 1000);\n\n  const tokens = { accessToken, refreshToken };\n  const session = await encryptionEdge.sealTokens(tokens, decodedJwt.exp);\n  return [session, decodedJwt, refreshToken];\n}\n"],"mappings":";;;;;;;;AAEA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,IAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,eAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,IAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,eAAA,GAAAN,sBAAA,CAAAC,OAAA;AAEA,MAAMM,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;EAAEC,GAAG,EAAE;AAA+C,CAAC,CAAC;AAErF,eAAeC,gCAAgCA,CACpDC,GAA8B,EACY;EAAA,IAAAC,IAAA,EAAAC,KAAA,EAAAC,qBAAA,EAAAC,iBAAA,EAAAC,sBAAA,EAAAC,kBAAA,EAAAC,qBAAA,EAAAC,kBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,iBAAA;EAC1C,MAAMC,aAAa,GAAGC,gBAAa,CAACC,+BAA+B,CAACd,GAAG,CAAC;EACxE,IAAI,CAACY,aAAa,EAAE;IAClBjB,MAAM,CAACoB,IAAI,CAAC,2CAA2C,CAAC;IACxD,OAAOC,SAAS;EAClB;EAEArB,MAAM,CAACoB,IAAI,CAAC,wBAAwB,CAAC;EAErC,MAAME,UAAU,GAAGjB,GAAG,CAACkB,OAAqC;EAC5D,MAAMA,OAA+B,GAAG,CAAC,CAAC;EAC1CD,UAAU,CAACE,OAAO,CAAC,CAACC,KAAa,EAAEC,GAAW,KAAK;IACjDH,OAAO,CAACG,GAAG,CAAC,GAAGD,KAAK;EACtB,CAAC,CAAC;EACF,MAAME,QAAQ,GAAGC,eAAM,CAACD,QAAQ;EAChC,MAAME,YAAY,GAAGD,eAAM,CAACC,YAAY;EAExC,IAAIC,QAAyB;EAC7B,IAAI;IACF,IAAIF,eAAM,CAACG,aAAa,EAAE;MACxBD,QAAQ,GAAG,MAAME,YAAG,CAACC,uBAAuB,CAACV,OAAO,EAAEN,aAAa,EAAEU,QAAQ,EAAEE,YAAY,CAAC;IAC9F,CAAC,MAAM;MACLC,QAAQ,GAAG,MAAME,YAAG,CAACE,oBAAoB,CAACX,OAAO,CAAC;IACpD;EACF,CAAC,CAAC,OAAOY,CAAC,EAAE;IACVnC,MAAM,CAACoC,KAAK,CAAC,yBAAyB,EAAED,CAAC,CAAC;IAC1C,OAAOd,SAAS;EAClB;EAEA,MAAMgB,SAAS,GAAGT,eAAM,CAACU,KAAK;EAC9B,IAAIR,QAAQ,KAAK,IAAI,IAAI,CAACA,QAAQ,CAACS,EAAE,EAAE;IACrC,MAAMC,eAAe,GAAGtB,gBAAa,CAACuB,+BAA+B,CAAC;MACpEC,YAAY,EAAEd,eAAM,CAACc,YAAY;MACjCL,SAAS;MACThC;IACF,CAAC,CAAC;IACF,IAAImC,eAAe,EAAE;MACnB,OAAO;QACLG,OAAO,EAAEtB,SAAS;QAClBE,OAAO,EAAE;UACP,YAAY,EAAEiB,eAAe,CAACI,IAAI,CAAC,IAAI;QACzC;MACF,CAAC;IACH;IACA,OAAOvB,SAAS;EAClB;EAEA,MAAMwB,IAAI,GAAG,MAAMf,QAAQ,CAACgB,IAAI,CAAC,CAAC;EAElC,MAAMC,YAAsB,GAC1B;EAAA,CAAAzC,IAAA,IAAAC,KAAA,IAAAC,qBAAA,IAAAC,iBAAA,GACAqB,QAAQ,CAACP,OAAO,cAAAb,sBAAA,GAAhBD,iBAAA,CAAkBuC,GAAG,qBAArBtC,sBAAA,CAAAuC,IAAA,CAAAxC,iBAAwB,CAAC,CAAC,YAAY,CAAC,YAAAD,qBAAA,GACvC;EAAA,CAAAG,kBAAA,GACAmB,QAAQ,CAACP,OAAO,cAAAX,qBAAA,GAAhBD,kBAAA,CAAkBuC,YAAY,qBAA9BtC,qBAAA,CAAAqC,IAAA,CAAAtC,kBAAiC,CAAC,YAAAJ,KAAA,IAAAM,kBAAA,GAClCiB,QAAQ,CAACP,OAAO,cAAAT,qBAAA,GAAhBD,kBAAA,CAAkBsC,GAAG,qBAArBrC,qBAAA,CAAAmC,IAAA,CAAApC,kBAAA,EAAwB,YAAY,CAAC,YAAAP,IAAA,GACrC,EAAE;EAEJ,MAAM8C,YAAY,IAAArC,qBAAA,GAAGG,gBAAa,CAACmC,eAAe,CAACN,YAAY,EAAEV,SAAS,CAAC,YAAAtB,qBAAA,GAAI,EAAE;EACjF,MAAM,CAAC4B,OAAO,EAAEW,UAAU,EAAEC,YAAY,CAAC,GAAG,MAAMC,kCAAkC,CAACX,IAAI,CAAC;EAE1F,IAAI,CAACF,OAAO,EAAE;IACZ,OAAO;MACLA,OAAO,EAAEtB,SAAS;MAClBE,OAAO,EAAE;QACP,YAAY,EAAE6B,YAAY,CAACR,IAAI,CAAC,IAAI;MACtC;IACF,CAAC;EACH;EAEA,MAAMa,WAAW,GAAGvC,gBAAa,CAACwC,MAAM,CAAC;IACvCjC,KAAK,EAAEkB,OAAO;IACdgB,OAAO,EAAE,IAAIC,IAAI,CAACN,UAAU,CAACO,GAAG,GAAG,IAAI,CAAC;IACxCC,MAAM,EAAEzB,SAAS;IACjBhC;EACF,CAAC,CAAC;EACF+C,YAAY,CAACW,IAAI,CAAC,GAAGN,WAAW,CAAC;EAEjC,MAAMO,gBAAgB,GAAG3D,GAAG,CAACkB,OAAkB;EAC/C6B,YAAY,CAAC5B,OAAO,CAAEyC,MAAM,IAAK;IAC/B;IACA,MAAM,CAACC,IAAI,EAAEzC,KAAK,CAAC,GAAGwC,MAAM,CAACE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAACA,KAAK,CAAC,GAAG,CAAC;IACrDH,gBAAgB,CAACI,GAAG,CAAC,QAAQ,EAAE,GAAGF,IAAI,IAAIzC,KAAK,EAAE,CAAC;EACpD,CAAC,CAAC;EACF,OAAO;IACLkB,OAAO,EAAE;MACP0B,WAAW,GAAArD,iBAAA,GAAE6B,IAAI,CAACwB,WAAW,YAAArD,iBAAA,GAAI6B,IAAI,CAACyB,YAAY;MAClDC,IAAI,EAAEjB,UAAU;MAChBC;IACF,CAAC;IACDhC,OAAO,EAAE;MACP,YAAY,EAAE6B,YAAY,CAACR,IAAI,CAAC,IAAI;IACtC,CAAC;IACDoB;EACF,CAAC;AACH;AAEO,eAAeR,kCAAkCA,CAACX,IAAS,EAAuC;EAAA,IAAA2B,kBAAA,EAAAC,kBAAA;EACvG,MAAMJ,WAAW,IAAAG,kBAAA,GAAG3B,IAAI,CAACwB,WAAW,YAAAG,kBAAA,GAAI3B,IAAI,CAACyB,YAAY;EACzD,MAAMf,YAAY,IAAAkB,kBAAA,GAAG5B,IAAI,CAACU,YAAY,YAAAkB,kBAAA,GAAI5B,IAAI,CAAC6B,aAAa;EAC5D,MAAM;IAAEC,OAAO,EAAErB;EAAgB,CAAC,GAAG,MAAMsB,YAAU,CAACC,MAAM,CAACR,WAAW,CAAC;EACzEf,UAAU,CAACwB,SAAS,GAAGC,IAAI,CAACC,KAAK,CAAC,CAAC1B,UAAU,CAACO,GAAG,GAAG,IAAI,GAAGD,IAAI,CAACqB,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;EAE9E,MAAMC,MAAM,GAAG;IAAEb,WAAW;IAAEd;EAAa,CAAC;EAC5C,MAAMZ,OAAO,GAAG,MAAMwC,uBAAc,CAACC,UAAU,CAACF,MAAM,EAAE5B,UAAU,CAACO,GAAG,CAAC;EACvE,OAAO,CAAClB,OAAO,EAAEW,UAAU,EAAEC,YAAY,CAAC;AAC5C","ignoreList":[]}

package/index.js

@@ -1,4 +1,4 @@
-/** @license Frontegg v9.2.1-alpha.12073075767
+/** @license Frontegg v9.2.1-alpha.12811360407
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@frontegg/nextjs",
   "libName": "FronteggNextJs",
-  "version": "9.2.1-alpha.12073075767",
+  "version": "9.2.1-alpha.12811360407",
   "author": "Frontegg LTD",
   "license": "MIT",
   "repository": {
@@ -27,8 +27,8 @@
     "lint-json": "eslint -c .eslintrc.json -o ./lint-report.json --format json --no-color ./src/**/*.{ts,tsx}"
   },
   "dependencies": {
-    "@frontegg/js": "7.33.0",
-    "@frontegg/react-hooks": "7.33.0",
+    "@frontegg/js": "7.50.0",
+    "@frontegg/react-hooks": "7.50.0",
     "http-proxy": "^1.18.1",
     "iron-session": "^6.3.1",
     "jose": "^4.12.2"

package/sdkVersion.js

@@ -5,6 +5,6 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.default = void 0;
 var _default = exports.default = {
-  version: '9.2.1-alpha.12073075767'
+  version: '9.2.1-alpha.12811360407'
 };
 //# sourceMappingURL=sdkVersion.js.map

package/sdkVersion.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdkVersion.js","names":["version"],"sources":["../../../packages/nextjs/src/sdkVersion.ts"],"sourcesContent":["export default { version: '9.2.1-alpha.12073075767' };\n"],"mappings":";;;;;;iCAAe;EAAEA,OAAO,EAAE;AAA0B,CAAC","ignoreList":[]}
+{"version":3,"file":"sdkVersion.js","names":["version"],"sources":["../../../packages/nextjs/src/sdkVersion.ts"],"sourcesContent":["export default { version: '9.2.1-alpha.12811360407' };\n"],"mappings":";;;;;;iCAAe;EAAEA,OAAO,EAAE;AAA0B,CAAC","ignoreList":[]}

package/types/index.d.ts

@@ -18,6 +18,7 @@ export interface FronteggNextJSSession extends FronteggUserTokens {
 export interface FronteggEdgeSession {
     session?: FronteggNextJSSession;
     headers?: Record<string, string>;
+    forwardedHeaders?: Headers;
 }
 export type RequestType = IncomingMessage | Request;
 export interface AccountEnvironment {

package/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../../packages/nextjs/src/types/index.ts"],"sourcesContent":["import type { FronteggAppOptions } from '@frontegg/types';\nimport type { ILoginResponse, ITenantsResponse } from '@frontegg/rest-api';\nimport type { IncomingMessage } from 'http';\nimport type { ReactNode } from 'react';\nimport type { AppRouterInstance } from 'next/dist/shared/lib/app-router-context';\nimport type { NextRouter } from 'next/router';\n\nexport interface EncryptionUtils {\n  unsealTokens(data: string): Promise<FronteggUserTokens | undefined>;\n\n  sealTokens(tokens: FronteggUserTokens, ttl: number): Promise<string>;\n}\n\nexport interface FronteggUserTokens {\n  accessToken: string;\n  refreshToken?: string;\n}\n\nexport interface FronteggNextJSSession extends FronteggUserTokens {\n  user: FronteggUserSession;\n}\n\nexport interface FronteggEdgeSession {\n  session?: FronteggNextJSSession;\n  headers?: Record<string, string>;\n}\n\nexport type RequestType = IncomingMessage | Request;\n\nexport interface AccountEnvironment {\n  id: string;\n  createdAt: string;\n  environment: 'production' | 'development';\n}\n\nexport interface CustomClaims {\n  accountEnvironments: AccountEnvironment[];\n}\n\nexport interface AllUserData {\n  user?: ILoginResponse | null;\n  tenants?: ITenantsResponse[] | null;\n  activeTenant?: ITenantsResponse;\n  session?: FronteggNextJSSession | null;\n}\n\nexport interface FronteggUserSession {\n  sub: string;\n  name: string;\n  email: string;\n  email_verified: boolean;\n  metadata: any;\n  roles: string[];\n  permissions: string[];\n  tenantId: string;\n  tenantIds: string[];\n  profilePictureUrl: string;\n  type: string; // \"userToken\"\n  customClaims: CustomClaims;\n  iat: number;\n  exp: number;\n  aud: string;\n  iss: string;\n}\n\nexport interface FronteggProviderOptions extends Omit<FronteggAppOptions, 'contextOptions'>, AllUserData {\n  envAppUrl: string;\n  envBaseUrl: string;\n  envClientId: string;\n  shouldRequestAuthorize?: boolean;\n  isSSG?: boolean;\n  envAppId?: string;\n  secureJwtEnabled?: boolean;\n  contextOptions?: Omit<FronteggAppOptions['contextOptions'], 'baseUrl'>;\n}\n\nexport interface FronteggProviderProps extends FronteggProviderOptions {\n  children?: ReactNode;\n  router: AppRouterInstance | NextRouter;\n  appName?: string;\n}\n\ntype CustomLoginOptionsWithParamKeyType = {\n  /**\n   *The param key from your tenant login url, for 'frontegg.com?organization=[tenant]' would be 'organization'\n   */\n  paramKey: string;\n  subDomainIndex?: never;\n};\n\ntype CustomLoginOptionsWithSubDomainType = {\n  /**\n   *The index of sub domain from your tenant login url, for 'https://[tenant].frontegg.com' would be 0\n   */\n  subDomainIndex: number;\n  paramKey?: never;\n};\n\nexport type CustomLoginOptionsType = CustomLoginOptionsWithParamKeyType | CustomLoginOptionsWithSubDomainType;\n\ntype PagesDirectoryProviderProps = {\n  customLoginOptions?: CustomLoginOptionsType;\n};\n\nexport type ClientFronteggProviderProps = Omit<FronteggProviderProps, 'router'> & PagesDirectoryProviderProps;\n\ndeclare module 'iron-session' {\n  interface IronSessionData {\n    accessToken: FronteggNextJSSession['accessToken'];\n    user: FronteggNextJSSession['user'];\n  }\n}\n\ndeclare global {\n  var customLoginAppUrl: string | undefined;\n\n  interface ProcessEnv {\n    FRONTEGG_BASE_URL: string;\n    PORT?: string;\n    PWD: string;\n  }\n}\n"],"mappings":"","ignoreList":[]}
+{"version":3,"file":"index.js","names":[],"sources":["../../../../packages/nextjs/src/types/index.ts"],"sourcesContent":["import type { FronteggAppOptions } from '@frontegg/types';\nimport type { ILoginResponse, ITenantsResponse } from '@frontegg/rest-api';\nimport type { IncomingMessage } from 'http';\nimport type { ReactNode } from 'react';\nimport type { AppRouterInstance } from 'next/dist/shared/lib/app-router-context';\nimport type { NextRouter } from 'next/router';\n\nexport interface EncryptionUtils {\n  unsealTokens(data: string): Promise<FronteggUserTokens | undefined>;\n\n  sealTokens(tokens: FronteggUserTokens, ttl: number): Promise<string>;\n}\n\nexport interface FronteggUserTokens {\n  accessToken: string;\n  refreshToken?: string;\n}\n\nexport interface FronteggNextJSSession extends FronteggUserTokens {\n  user: FronteggUserSession;\n}\n\nexport interface FronteggEdgeSession {\n  session?: FronteggNextJSSession;\n  headers?: Record<string, string>;\n  forwardedHeaders?: Headers;\n}\n\nexport type RequestType = IncomingMessage | Request;\n\nexport interface AccountEnvironment {\n  id: string;\n  createdAt: string;\n  environment: 'production' | 'development';\n}\n\nexport interface CustomClaims {\n  accountEnvironments: AccountEnvironment[];\n}\n\nexport interface AllUserData {\n  user?: ILoginResponse | null;\n  tenants?: ITenantsResponse[] | null;\n  activeTenant?: ITenantsResponse;\n  session?: FronteggNextJSSession | null;\n}\n\nexport interface FronteggUserSession {\n  sub: string;\n  name: string;\n  email: string;\n  email_verified: boolean;\n  metadata: any;\n  roles: string[];\n  permissions: string[];\n  tenantId: string;\n  tenantIds: string[];\n  profilePictureUrl: string;\n  type: string; // \"userToken\"\n  customClaims: CustomClaims;\n  iat: number;\n  exp: number;\n  aud: string;\n  iss: string;\n}\n\nexport interface FronteggProviderOptions extends Omit<FronteggAppOptions, 'contextOptions'>, AllUserData {\n  envAppUrl: string;\n  envBaseUrl: string;\n  envClientId: string;\n  shouldRequestAuthorize?: boolean;\n  isSSG?: boolean;\n  envAppId?: string;\n  secureJwtEnabled?: boolean;\n  contextOptions?: Omit<FronteggAppOptions['contextOptions'], 'baseUrl'>;\n}\n\nexport interface FronteggProviderProps extends FronteggProviderOptions {\n  children?: ReactNode;\n  router: AppRouterInstance | NextRouter;\n  appName?: string;\n}\n\ntype CustomLoginOptionsWithParamKeyType = {\n  /**\n   *The param key from your tenant login url, for 'frontegg.com?organization=[tenant]' would be 'organization'\n   */\n  paramKey: string;\n  subDomainIndex?: never;\n};\n\ntype CustomLoginOptionsWithSubDomainType = {\n  /**\n   *The index of sub domain from your tenant login url, for 'https://[tenant].frontegg.com' would be 0\n   */\n  subDomainIndex: number;\n  paramKey?: never;\n};\n\nexport type CustomLoginOptionsType = CustomLoginOptionsWithParamKeyType | CustomLoginOptionsWithSubDomainType;\n\ntype PagesDirectoryProviderProps = {\n  customLoginOptions?: CustomLoginOptionsType;\n};\n\nexport type ClientFronteggProviderProps = Omit<FronteggProviderProps, 'router'> & PagesDirectoryProviderProps;\n\ndeclare module 'iron-session' {\n  interface IronSessionData {\n    accessToken: FronteggNextJSSession['accessToken'];\n    user: FronteggNextJSSession['user'];\n  }\n}\n\ndeclare global {\n  var customLoginAppUrl: string | undefined;\n\n  interface ProcessEnv {\n    FRONTEGG_BASE_URL: string;\n    PORT?: string;\n    PWD: string;\n  }\n}\n"],"mappings":"","ignoreList":[]}