@frontegg/nextjs 9.2.2-alpha.13943158357 → 9.2.2-alpha.13969697706

package/api/utils.js

@@ -15,6 +15,7 @@ var _sdkVersion = _interopRequireDefault(require("../sdkVersion"));
 var _package = _interopRequireDefault(require("next/package.json"));
 var _restApi = require("@frontegg/rest-api");
 var _constants = require("../utils/common/constants");
+var _headers = require("../utils/headers");
 const Get = ({
   url,
   credentials = 'include',
@@ -113,10 +114,11 @@ function buildRequestHeaders(headers) {
   if (headers[FRONTEGG_APPLICATION_ID_HEADER]) {
     preparedHeaders[FRONTEGG_APPLICATION_ID_HEADER] = headers[FRONTEGG_APPLICATION_ID_HEADER];
   }
-  const clientIp = headers[FRONTEGG_FORWARD_IP_HEADER] || headers['cf-connecting-ip'] || headers['x-forwarded-for'];
+  const clientIp = (0, _headers.getClientIp)(headers[FRONTEGG_FORWARD_IP_HEADER] || headers['cf-connecting-ip'] || headers['x-forwarded-for']);
   if (clientIp && _config.default.shouldForwardIp) {
     var _config$sharedSecret;
     preparedHeaders[FRONTEGG_FORWARD_IP_HEADER] = clientIp;
+    preparedHeaders['build-request-headers'] = `headers[FRONTEGG_FORWARD_IP_HEADER] ${headers[FRONTEGG_FORWARD_IP_HEADER]} | headers['cf-connecting-ip'] ${headers['cf-connecting-ip']} | headers['x-forwarded-for'] ${headers['x-forwarded-for']}`;
     preparedHeaders[FRONTEGG_HEADERS_VERIFIER_HEADER] = (_config$sharedSecret = _config.default.sharedSecret) != null ? _config$sharedSecret : '';
   }
   if (headers[CUSTOM_LOGIN_HEADER]) {

package/api/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","names":["_config","_interopRequireDefault","require","_sdkVersion","_package","_restApi","_constants","Get","url","credentials","headers","fetch","method","exports","Post","body","removeInvalidHeaders","newHeaders","_extends2","default","Object","keys","forEach","key","val","Array","isArray","headerCharRegex","exec","undefined","length","CUSTOM_LOGIN_HEADER","FRONTEGG_FORWARD_IP_HEADER","FRONTEGG_HEADERS_VERIFIER_HEADER","FRONTEGG_APPLICATION_ID_HEADER","buildRequestHeaders","cookie","replace","config","rewriteCookieByAppId","appId","split","filter","cookieStr","trim","startsWith","clientId","join","entries","map","value","preparedHeaders","authorization","accept","origin","baseUrl","nextjsPkg","version","sdkVersion","clientIp","shouldForwardIp","_config$sharedSecret","sharedSecret","parseHttpResponse","res","ok","json","isMiddlewarePath","path","isAuthPath","fronteggAuthApiRoutesRegex","find","pathRegex","RegExp","test","isSocialLoginPath","endsWith"],"sources":["../../../../packages/nextjs/src/api/utils.ts"],"sourcesContent":["import config from '../config';\nimport sdkVersion from '../sdkVersion';\nimport nextjsPkg from 'next/package.json';\nimport { fronteggAuthApiRoutesRegex } from '@frontegg/rest-api';\nimport { headerCharRegex } from '../utils/common/constants';\n\ninterface GetRequestOptions {\n  url: string;\n  credentials?: RequestCredentials;\n  headers?: HeadersInit;\n}\n\nexport const Get = ({ url, credentials = 'include', headers }: GetRequestOptions) =>\n  fetch(url, { method: 'GET', credentials, headers });\n\ninterface PostRequestOptions extends GetRequestOptions {\n  body: string;\n}\n\nexport const Post = ({ url, credentials = 'include', headers, body }: PostRequestOptions) =>\n  fetch(url, { method: 'POST', credentials, headers, body });\n\n/**\n * NodeJS 18 start using undici as http request handler,\n * undici http request does not accept invalid headers\n * for more details see:\n * https://github.com/nodejs/undici/blob/2b260c997ad4efe4ed2064b264b4b546a59e7a67/lib/core/request.js#L282\n * @param headers\n */\nexport function removeInvalidHeaders(headers: Record<string, string>) {\n  const newHeaders = { ...headers };\n  Object.keys(newHeaders).forEach((key: string) => {\n    const val: any = headers[key];\n    if (val && typeof val === 'object' && !Array.isArray(val)) {\n      delete newHeaders[key];\n    } else if (headerCharRegex.exec(val) !== null) {\n      delete newHeaders[key];\n    } else if (val === undefined || val === null) {\n      delete newHeaders[key];\n    } else if (key.length === 10 && key === 'connection') {\n      delete newHeaders[key];\n    }\n  });\n  return newHeaders;\n}\n\n/**\n * These headers are used to identify the tenant for login per tenant feature\n */\nexport const CUSTOM_LOGIN_HEADER = 'frontegg-login-alias';\nexport const FRONTEGG_FORWARD_IP_HEADER = 'x-frontegg-forwarded-for';\nexport const FRONTEGG_HEADERS_VERIFIER_HEADER = 'x-frontegg-headers-verifier';\nexport const FRONTEGG_APPLICATION_ID_HEADER = 'frontegg-requested-application-id';\n\n/**\n * Build fetch request headers, remove invalid http headers\n * @param headers - Incoming request headers\n */\nexport function buildRequestHeaders(headers: Record<string, any>): Record<string, string> {\n  let cookie = headers['cookie'];\n  if (cookie != null && typeof cookie === 'string') {\n    cookie = cookie.replace(/fe_session-[^=]*=[^;]*$/, '').replace(/fe_session-[^=]*=[^;]*;/, '');\n\n    if (config.rewriteCookieByAppId && config.appId) {\n      cookie = cookie\n        .split(';')\n        .filter((cookieStr: string) => !cookieStr.trim().startsWith(`fe_refresh_${config.clientId.replace('-', '')}`))\n        .join(';');\n      cookie = cookie.replace(\n        `fe_refresh_${config.appId.replace('-', '')}`,\n        `fe_refresh_${config.clientId.replace('-', '')}`\n      );\n    }\n  }\n  if (cookie != null && typeof cookie === 'object') {\n    cookie = Object.entries(cookie)\n      .filter(([key]) => {\n        if (config.rewriteCookieByAppId && config.appId) {\n          return key !== `fe_refresh_${config.clientId.replace('-', '')}`;\n        }\n        return true;\n      })\n      .map(([key, value]) => {\n        if (config.rewriteCookieByAppId && config.appId && key === `fe_refresh_${config.appId.replace('-', '')}`) {\n          return `fe_refresh_${config.clientId.replace('-', '')}=${value}`;\n        } else {\n          return `${key}=${value}`;\n        }\n      })\n      .join('; ');\n  }\n\n  const preparedHeaders: Record<string, string> = {\n    authorization: headers['authorization'],\n    'accept-encoding': headers['accept-encoding'],\n    'accept-language': headers['accept-language'],\n    accept: headers['accept'],\n    'content-type': 'application/json',\n    origin: config.baseUrl,\n    cookie,\n    'user-agent': headers['user-agent'],\n    'cache-control': headers['cache-control'],\n    'x-frontegg-framework': `next@${nextjsPkg.version}`,\n    'x-frontegg-sdk': `@frontegg/nextjs@${sdkVersion.version}`,\n  };\n\n  if (headers[FRONTEGG_APPLICATION_ID_HEADER]) {\n    preparedHeaders[FRONTEGG_APPLICATION_ID_HEADER] = headers[FRONTEGG_APPLICATION_ID_HEADER];\n  }\n\n  const clientIp = headers[FRONTEGG_FORWARD_IP_HEADER] || headers['cf-connecting-ip'] || headers['x-forwarded-for'];\n  if (clientIp && config.shouldForwardIp) {\n    preparedHeaders[FRONTEGG_FORWARD_IP_HEADER] = clientIp;\n    preparedHeaders[FRONTEGG_HEADERS_VERIFIER_HEADER] = config.sharedSecret ?? '';\n  }\n\n  if (headers[CUSTOM_LOGIN_HEADER]) {\n    preparedHeaders[CUSTOM_LOGIN_HEADER] = headers[CUSTOM_LOGIN_HEADER];\n  }\n  return removeInvalidHeaders({ ...preparedHeaders });\n}\n\n/**\n * Return parsed json response if http status code = 200\n * @param res\n */\nexport const parseHttpResponse = async <T>(res: Response): Promise<T | undefined> => {\n  if (!res.ok) {\n    return undefined;\n  }\n  return await res.json();\n};\n\n/**\n * Checks if the given path should be forwarded to the Next.js server middleware.\n *\n *\n * @param {string} path - The path to check for authentication API routes.\n * @returns {boolean} Returns true if the path is a frontegg authentication API route or ends with '/postlogin' or '/prelogin'; otherwise, returns false.\n */\nexport function isMiddlewarePath(path: string): boolean {\n  let isAuthPath =\n    fronteggAuthApiRoutesRegex.find((pathRegex) => {\n      if (typeof pathRegex === 'string') {\n        return pathRegex === path;\n      } else {\n        return new RegExp(pathRegex).test(path);\n      }\n    }) != null;\n\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/user\\/sso\\/[^\\/]*\\/postlogin$/g.test(path)\n  // }\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/passwordless\\/[^\\/]*\\/prelogin$/g.test(path)\n  // }\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/[^\\/]*\\/prelogin$/g.test(path)\n  // }\n\n  if (!isAuthPath) {\n    const isSocialLoginPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/user\\/sso\\/default\\/[^\\/]*\\/prelogin$/.test(path);\n    isAuthPath = (path.endsWith('/postlogin') || path.endsWith('/prelogin')) && !isSocialLoginPath;\n  }\n\n  return isAuthPath;\n}\n"],"mappings":";;;;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,WAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,QAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AACA,IAAAI,UAAA,GAAAJ,OAAA;AAQO,MAAMK,GAAG,GAAGA,CAAC;EAAEC,GAAG;EAAEC,WAAW,GAAG,SAAS;EAAEC;AAA2B,CAAC,KAC9EC,KAAK,CAACH,GAAG,EAAE;EAAEI,MAAM,EAAE,KAAK;EAAEH,WAAW;EAAEC;AAAQ,CAAC,CAAC;AAACG,OAAA,CAAAN,GAAA,GAAAA,GAAA;AAM/C,MAAMO,IAAI,GAAGA,CAAC;EAAEN,GAAG;EAAEC,WAAW,GAAG,SAAS;EAAEC,OAAO;EAAEK;AAAyB,CAAC,KACtFJ,KAAK,CAACH,GAAG,EAAE;EAAEI,MAAM,EAAE,MAAM;EAAEH,WAAW;EAAEC,OAAO;EAAEK;AAAK,CAAC,CAAC;;AAE5D;AACA;AACA;AACA;AACA;AACA;AACA;AANAF,OAAA,CAAAC,IAAA,GAAAA,IAAA;AAOO,SAASE,oBAAoBA,CAACN,OAA+B,EAAE;EACpE,MAAMO,UAAU,OAAAC,SAAA,CAAAC,OAAA,MAAQT,OAAO,CAAE;EACjCU,MAAM,CAACC,IAAI,CAACJ,UAAU,CAAC,CAACK,OAAO,CAAEC,GAAW,IAAK;IAC/C,MAAMC,GAAQ,GAAGd,OAAO,CAACa,GAAG,CAAC;IAC7B,IAAIC,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,GAAG,CAAC,EAAE;MACzD,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAII,0BAAe,CAACC,IAAI,CAACJ,GAAG,CAAC,KAAK,IAAI,EAAE;MAC7C,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAIC,GAAG,KAAKK,SAAS,IAAIL,GAAG,KAAK,IAAI,EAAE;MAC5C,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAIA,GAAG,CAACO,MAAM,KAAK,EAAE,IAAIP,GAAG,KAAK,YAAY,EAAE;MACpD,OAAON,UAAU,CAACM,GAAG,CAAC;IACxB;EACF,CAAC,CAAC;EACF,OAAON,UAAU;AACnB;;AAEA;AACA;AACA;AACO,MAAMc,mBAAmB,GAAAlB,OAAA,CAAAkB,mBAAA,GAAG,sBAAsB;AAClD,MAAMC,0BAA0B,GAAAnB,OAAA,CAAAmB,0BAAA,GAAG,0BAA0B;AAC7D,MAAMC,gCAAgC,GAAApB,OAAA,CAAAoB,gCAAA,GAAG,6BAA6B;AACtE,MAAMC,8BAA8B,GAAArB,OAAA,CAAAqB,8BAAA,GAAG,mCAAmC;;AAEjF;AACA;AACA;AACA;AACO,SAASC,mBAAmBA,CAACzB,OAA4B,EAA0B;EACxF,IAAI0B,MAAM,GAAG1B,OAAO,CAAC,QAAQ,CAAC;EAC9B,IAAI0B,MAAM,IAAI,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAChDA,MAAM,GAAGA,MAAM,CAACC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAACA,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC;IAE7F,IAAIC,eAAM,CAACC,oBAAoB,IAAID,eAAM,CAACE,KAAK,EAAE;MAC/CJ,MAAM,GAAGA,MAAM,CACZK,KAAK,CAAC,GAAG,CAAC,CACVC,MAAM,CAAEC,SAAiB,IAAK,CAACA,SAAS,CAACC,IAAI,CAAC,CAAC,CAACC,UAAU,CAAC,cAAcP,eAAM,CAACQ,QAAQ,CAACT,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAC7GU,IAAI,CAAC,GAAG,CAAC;MACZX,MAAM,GAAGA,MAAM,CAACC,OAAO,CACrB,cAAcC,eAAM,CAACE,KAAK,CAACH,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAC7C,cAAcC,eAAM,CAACQ,QAAQ,CAACT,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAChD,CAAC;IACH;EACF;EACA,IAAID,MAAM,IAAI,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAChDA,MAAM,GAAGhB,MAAM,CAAC4B,OAAO,CAACZ,MAAM,CAAC,CAC5BM,MAAM,CAAC,CAAC,CAACnB,GAAG,CAAC,KAAK;MACjB,IAAIe,eAAM,CAACC,oBAAoB,IAAID,eAAM,CAACE,KAAK,EAAE;QAC/C,OAAOjB,GAAG,KAAK,cAAce,eAAM,CAACQ,QAAQ,CAACT,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;MACjE;MACA,OAAO,IAAI;IACb,CAAC,CAAC,CACDY,GAAG,CAAC,CAAC,CAAC1B,GAAG,EAAE2B,KAAK,CAAC,KAAK;MACrB,IAAIZ,eAAM,CAACC,oBAAoB,IAAID,eAAM,CAACE,KAAK,IAAIjB,GAAG,KAAK,cAAce,eAAM,CAACE,KAAK,CAACH,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACxG,OAAO,cAAcC,eAAM,CAACQ,QAAQ,CAACT,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,IAAIa,KAAK,EAAE;MAClE,CAAC,MAAM;QACL,OAAO,GAAG3B,GAAG,IAAI2B,KAAK,EAAE;MAC1B;IACF,CAAC,CAAC,CACDH,IAAI,CAAC,IAAI,CAAC;EACf;EAEA,MAAMI,eAAuC,GAAG;IAC9CC,aAAa,EAAE1C,OAAO,CAAC,eAAe,CAAC;IACvC,iBAAiB,EAAEA,OAAO,CAAC,iBAAiB,CAAC;IAC7C,iBAAiB,EAAEA,OAAO,CAAC,iBAAiB,CAAC;IAC7C2C,MAAM,EAAE3C,OAAO,CAAC,QAAQ,CAAC;IACzB,cAAc,EAAE,kBAAkB;IAClC4C,MAAM,EAAEhB,eAAM,CAACiB,OAAO;IACtBnB,MAAM;IACN,YAAY,EAAE1B,OAAO,CAAC,YAAY,CAAC;IACnC,eAAe,EAAEA,OAAO,CAAC,eAAe,CAAC;IACzC,sBAAsB,EAAE,QAAQ8C,gBAAS,CAACC,OAAO,EAAE;IACnD,gBAAgB,EAAE,oBAAoBC,mBAAU,CAACD,OAAO;EAC1D,CAAC;EAED,IAAI/C,OAAO,CAACwB,8BAA8B,CAAC,EAAE;IAC3CiB,eAAe,CAACjB,8BAA8B,CAAC,GAAGxB,OAAO,CAACwB,8BAA8B,CAAC;EAC3F;EAEA,MAAMyB,QAAQ,GAAGjD,OAAO,CAACsB,0BAA0B,CAAC,IAAItB,OAAO,CAAC,kBAAkB,CAAC,IAAIA,OAAO,CAAC,iBAAiB,CAAC;EACjH,IAAIiD,QAAQ,IAAIrB,eAAM,CAACsB,eAAe,EAAE;IAAA,IAAAC,oBAAA;IACtCV,eAAe,CAACnB,0BAA0B,CAAC,GAAG2B,QAAQ;IACtDR,eAAe,CAAClB,gCAAgC,CAAC,IAAA4B,oBAAA,GAAGvB,eAAM,CAACwB,YAAY,YAAAD,oBAAA,GAAI,EAAE;EAC/E;EAEA,IAAInD,OAAO,CAACqB,mBAAmB,CAAC,EAAE;IAChCoB,eAAe,CAACpB,mBAAmB,CAAC,GAAGrB,OAAO,CAACqB,mBAAmB,CAAC;EACrE;EACA,OAAOf,oBAAoB,KAAAE,SAAA,CAAAC,OAAA,MAAMgC,eAAe,CAAE,CAAC;AACrD;;AAEA;AACA;AACA;AACA;AACO,MAAMY,iBAAiB,GAAG,MAAUC,GAAa,IAA6B;EACnF,IAAI,CAACA,GAAG,CAACC,EAAE,EAAE;IACX,OAAOpC,SAAS;EAClB;EACA,OAAO,MAAMmC,GAAG,CAACE,IAAI,CAAC,CAAC;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AANArD,OAAA,CAAAkD,iBAAA,GAAAA,iBAAA;AAOO,SAASI,gBAAgBA,CAACC,IAAY,EAAW;EACtD,IAAIC,UAAU,GACZC,mCAA0B,CAACC,IAAI,CAAEC,SAAS,IAAK;IAC7C,IAAI,OAAOA,SAAS,KAAK,QAAQ,EAAE;MACjC,OAAOA,SAAS,KAAKJ,IAAI;IAC3B,CAAC,MAAM;MACL,OAAO,IAAIK,MAAM,CAACD,SAAS,CAAC,CAACE,IAAI,CAACN,IAAI,CAAC;IACzC;EACF,CAAC,CAAC,IAAI,IAAI;;EAEZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA,IAAI,CAACC,UAAU,EAAE;IACf,MAAMM,iBAAiB,GAAG,8EAA8E,CAACD,IAAI,CAACN,IAAI,CAAC;IACnHC,UAAU,GAAG,CAACD,IAAI,CAACQ,QAAQ,CAAC,YAAY,CAAC,IAAIR,IAAI,CAACQ,QAAQ,CAAC,WAAW,CAAC,KAAK,CAACD,iBAAiB;EAChG;EAEA,OAAON,UAAU;AACnB","ignoreList":[]}
+{"version":3,"file":"utils.js","names":["_config","_interopRequireDefault","require","_sdkVersion","_package","_restApi","_constants","_headers","Get","url","credentials","headers","fetch","method","exports","Post","body","removeInvalidHeaders","newHeaders","_extends2","default","Object","keys","forEach","key","val","Array","isArray","headerCharRegex","exec","undefined","length","CUSTOM_LOGIN_HEADER","FRONTEGG_FORWARD_IP_HEADER","FRONTEGG_HEADERS_VERIFIER_HEADER","FRONTEGG_APPLICATION_ID_HEADER","buildRequestHeaders","cookie","replace","config","rewriteCookieByAppId","appId","split","filter","cookieStr","trim","startsWith","clientId","join","entries","map","value","preparedHeaders","authorization","accept","origin","baseUrl","nextjsPkg","version","sdkVersion","clientIp","getClientIp","shouldForwardIp","_config$sharedSecret","sharedSecret","parseHttpResponse","res","ok","json","isMiddlewarePath","path","isAuthPath","fronteggAuthApiRoutesRegex","find","pathRegex","RegExp","test","isSocialLoginPath","endsWith"],"sources":["../../../../packages/nextjs/src/api/utils.ts"],"sourcesContent":["import config from '../config';\nimport sdkVersion from '../sdkVersion';\nimport nextjsPkg from 'next/package.json';\nimport { fronteggAuthApiRoutesRegex } from '@frontegg/rest-api';\nimport { headerCharRegex } from '../utils/common/constants';\nimport { getClientIp } from '../utils/headers';\n\ninterface GetRequestOptions {\n  url: string;\n  credentials?: RequestCredentials;\n  headers?: HeadersInit;\n}\n\nexport const Get = ({ url, credentials = 'include', headers }: GetRequestOptions) =>\n  fetch(url, { method: 'GET', credentials, headers });\n\ninterface PostRequestOptions extends GetRequestOptions {\n  body: string;\n}\n\nexport const Post = ({ url, credentials = 'include', headers, body }: PostRequestOptions) =>\n  fetch(url, { method: 'POST', credentials, headers, body });\n\n/**\n * NodeJS 18 start using undici as http request handler,\n * undici http request does not accept invalid headers\n * for more details see:\n * https://github.com/nodejs/undici/blob/2b260c997ad4efe4ed2064b264b4b546a59e7a67/lib/core/request.js#L282\n * @param headers\n */\nexport function removeInvalidHeaders(headers: Record<string, string>) {\n  const newHeaders = { ...headers };\n  Object.keys(newHeaders).forEach((key: string) => {\n    const val: any = headers[key];\n    if (val && typeof val === 'object' && !Array.isArray(val)) {\n      delete newHeaders[key];\n    } else if (headerCharRegex.exec(val) !== null) {\n      delete newHeaders[key];\n    } else if (val === undefined || val === null) {\n      delete newHeaders[key];\n    } else if (key.length === 10 && key === 'connection') {\n      delete newHeaders[key];\n    }\n  });\n  return newHeaders;\n}\n\n/**\n * These headers are used to identify the tenant for login per tenant feature\n */\nexport const CUSTOM_LOGIN_HEADER = 'frontegg-login-alias';\nexport const FRONTEGG_FORWARD_IP_HEADER = 'x-frontegg-forwarded-for';\nexport const FRONTEGG_HEADERS_VERIFIER_HEADER = 'x-frontegg-headers-verifier';\nexport const FRONTEGG_APPLICATION_ID_HEADER = 'frontegg-requested-application-id';\n\n/**\n * Build fetch request headers, remove invalid http headers\n * @param headers - Incoming request headers\n */\nexport function buildRequestHeaders(headers: Record<string, any>): Record<string, string> {\n  let cookie = headers['cookie'];\n  if (cookie != null && typeof cookie === 'string') {\n    cookie = cookie.replace(/fe_session-[^=]*=[^;]*$/, '').replace(/fe_session-[^=]*=[^;]*;/, '');\n\n    if (config.rewriteCookieByAppId && config.appId) {\n      cookie = cookie\n        .split(';')\n        .filter((cookieStr: string) => !cookieStr.trim().startsWith(`fe_refresh_${config.clientId.replace('-', '')}`))\n        .join(';');\n      cookie = cookie.replace(\n        `fe_refresh_${config.appId.replace('-', '')}`,\n        `fe_refresh_${config.clientId.replace('-', '')}`\n      );\n    }\n  }\n  if (cookie != null && typeof cookie === 'object') {\n    cookie = Object.entries(cookie)\n      .filter(([key]) => {\n        if (config.rewriteCookieByAppId && config.appId) {\n          return key !== `fe_refresh_${config.clientId.replace('-', '')}`;\n        }\n        return true;\n      })\n      .map(([key, value]) => {\n        if (config.rewriteCookieByAppId && config.appId && key === `fe_refresh_${config.appId.replace('-', '')}`) {\n          return `fe_refresh_${config.clientId.replace('-', '')}=${value}`;\n        } else {\n          return `${key}=${value}`;\n        }\n      })\n      .join('; ');\n  }\n\n  const preparedHeaders: Record<string, string> = {\n    authorization: headers['authorization'],\n    'accept-encoding': headers['accept-encoding'],\n    'accept-language': headers['accept-language'],\n    accept: headers['accept'],\n    'content-type': 'application/json',\n    origin: config.baseUrl,\n    cookie,\n    'user-agent': headers['user-agent'],\n    'cache-control': headers['cache-control'],\n    'x-frontegg-framework': `next@${nextjsPkg.version}`,\n    'x-frontegg-sdk': `@frontegg/nextjs@${sdkVersion.version}`,\n  };\n\n  if (headers[FRONTEGG_APPLICATION_ID_HEADER]) {\n    preparedHeaders[FRONTEGG_APPLICATION_ID_HEADER] = headers[FRONTEGG_APPLICATION_ID_HEADER];\n  }\n\n  const clientIp = getClientIp(\n    headers[FRONTEGG_FORWARD_IP_HEADER] || headers['cf-connecting-ip'] || headers['x-forwarded-for']\n  );\n  if (clientIp && config.shouldForwardIp) {\n    preparedHeaders[FRONTEGG_FORWARD_IP_HEADER] = clientIp;\n    preparedHeaders[\n      'build-request-headers'\n    ] = `headers[FRONTEGG_FORWARD_IP_HEADER] ${headers[FRONTEGG_FORWARD_IP_HEADER]} | headers['cf-connecting-ip'] ${headers['cf-connecting-ip']} | headers['x-forwarded-for'] ${headers['x-forwarded-for']}`;\n    preparedHeaders[FRONTEGG_HEADERS_VERIFIER_HEADER] = config.sharedSecret ?? '';\n  }\n\n  if (headers[CUSTOM_LOGIN_HEADER]) {\n    preparedHeaders[CUSTOM_LOGIN_HEADER] = headers[CUSTOM_LOGIN_HEADER];\n  }\n  return removeInvalidHeaders({ ...preparedHeaders });\n}\n\n/**\n * Return parsed json response if http status code = 200\n * @param res\n */\nexport const parseHttpResponse = async <T>(res: Response): Promise<T | undefined> => {\n  if (!res.ok) {\n    return undefined;\n  }\n  return await res.json();\n};\n\n/**\n * Checks if the given path should be forwarded to the Next.js server middleware.\n *\n *\n * @param {string} path - The path to check for authentication API routes.\n * @returns {boolean} Returns true if the path is a frontegg authentication API route or ends with '/postlogin' or '/prelogin'; otherwise, returns false.\n */\nexport function isMiddlewarePath(path: string): boolean {\n  let isAuthPath =\n    fronteggAuthApiRoutesRegex.find((pathRegex) => {\n      if (typeof pathRegex === 'string') {\n        return pathRegex === path;\n      } else {\n        return new RegExp(pathRegex).test(path);\n      }\n    }) != null;\n\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/user\\/sso\\/[^\\/]*\\/postlogin$/g.test(path)\n  // }\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/passwordless\\/[^\\/]*\\/prelogin$/g.test(path)\n  // }\n  // if(!isAuthPath){\n  //   isAuthPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/[^\\/]*\\/prelogin$/g.test(path)\n  // }\n\n  if (!isAuthPath) {\n    const isSocialLoginPath = /^\\/identity\\/resources\\/auth\\/v[0-9]*\\/user\\/sso\\/default\\/[^\\/]*\\/prelogin$/.test(path);\n    isAuthPath = (path.endsWith('/postlogin') || path.endsWith('/prelogin')) && !isSocialLoginPath;\n  }\n\n  return isAuthPath;\n}\n"],"mappings":";;;;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,WAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,QAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AACA,IAAAI,UAAA,GAAAJ,OAAA;AACA,IAAAK,QAAA,GAAAL,OAAA;AAQO,MAAMM,GAAG,GAAGA,CAAC;EAAEC,GAAG;EAAEC,WAAW,GAAG,SAAS;EAAEC;AAA2B,CAAC,KAC9EC,KAAK,CAACH,GAAG,EAAE;EAAEI,MAAM,EAAE,KAAK;EAAEH,WAAW;EAAEC;AAAQ,CAAC,CAAC;AAACG,OAAA,CAAAN,GAAA,GAAAA,GAAA;AAM/C,MAAMO,IAAI,GAAGA,CAAC;EAAEN,GAAG;EAAEC,WAAW,GAAG,SAAS;EAAEC,OAAO;EAAEK;AAAyB,CAAC,KACtFJ,KAAK,CAACH,GAAG,EAAE;EAAEI,MAAM,EAAE,MAAM;EAAEH,WAAW;EAAEC,OAAO;EAAEK;AAAK,CAAC,CAAC;;AAE5D;AACA;AACA;AACA;AACA;AACA;AACA;AANAF,OAAA,CAAAC,IAAA,GAAAA,IAAA;AAOO,SAASE,oBAAoBA,CAACN,OAA+B,EAAE;EACpE,MAAMO,UAAU,OAAAC,SAAA,CAAAC,OAAA,MAAQT,OAAO,CAAE;EACjCU,MAAM,CAACC,IAAI,CAACJ,UAAU,CAAC,CAACK,OAAO,CAAEC,GAAW,IAAK;IAC/C,MAAMC,GAAQ,GAAGd,OAAO,CAACa,GAAG,CAAC;IAC7B,IAAIC,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,GAAG,CAAC,EAAE;MACzD,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAII,0BAAe,CAACC,IAAI,CAACJ,GAAG,CAAC,KAAK,IAAI,EAAE;MAC7C,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAIC,GAAG,KAAKK,SAAS,IAAIL,GAAG,KAAK,IAAI,EAAE;MAC5C,OAAOP,UAAU,CAACM,GAAG,CAAC;IACxB,CAAC,MAAM,IAAIA,GAAG,CAACO,MAAM,KAAK,EAAE,IAAIP,GAAG,KAAK,YAAY,EAAE;MACpD,OAAON,UAAU,CAACM,GAAG,CAAC;IACxB;EACF,CAAC,CAAC;EACF,OAAON,UAAU;AACnB;;AAEA;AACA;AACA;AACO,MAAMc,mBAAmB,GAAAlB,OAAA,CAAAkB,mBAAA,GAAG,sBAAsB;AAClD,MAAMC,0BAA0B,GAAAnB,OAAA,CAAAmB,0BAAA,GAAG,0BAA0B;AAC7D,MAAMC,gCAAgC,GAAApB,OAAA,CAAAoB,gCAAA,GAAG,6BAA6B;AACtE,MAAMC,8BAA8B,GAAArB,OAAA,CAAAqB,8BAAA,GAAG,mCAAmC;;AAEjF;AACA;AACA;AACA;AACO,SAASC,mBAAmBA,CAACzB,OAA4B,EAA0B;EACxF,IAAI0B,MAAM,GAAG1B,OAAO,CAAC,QAAQ,CAAC;EAC9B,IAAI0B,MAAM,IAAI,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAChDA,MAAM,GAAGA,MAAM,CAACC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAACA,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC;IAE7F,IAAIC,eAAM,CAACC,oBAAoB,IAAID,eAAM,CAACE,KAAK,EAAE;MAC/CJ,MAAM,GAAGA,MAAM,CACZK,KAAK,CAAC,GAAG,CAAC,CACVC,MAAM,CAAEC,SAAiB,IAAK,CAACA,SAAS,CAACC,IAAI,CAAC,CAAC,CAACC,UAAU,CAAC,cAAcP,eAAM,CAACQ,QAAQ,CAACT,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAC7GU,IAAI,CAAC,GAAG,CAAC;MACZX,MAAM,GAAGA,MAAM,CAACC,OAAO,CACrB,cAAcC,eAAM,CAACE,KAAK,CAACH,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAC7C,cAAcC,eAAM,CAACQ,QAAQ,CAACT,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAChD,CAAC;IACH;EACF;EACA,IAAID,MAAM,IAAI,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAChDA,MAAM,GAAGhB,MAAM,CAAC4B,OAAO,CAACZ,MAAM,CAAC,CAC5BM,MAAM,CAAC,CAAC,CAACnB,GAAG,CAAC,KAAK;MACjB,IAAIe,eAAM,CAACC,oBAAoB,IAAID,eAAM,CAACE,KAAK,EAAE;QAC/C,OAAOjB,GAAG,KAAK,cAAce,eAAM,CAACQ,QAAQ,CAACT,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;MACjE;MACA,OAAO,IAAI;IACb,CAAC,CAAC,CACDY,GAAG,CAAC,CAAC,CAAC1B,GAAG,EAAE2B,KAAK,CAAC,KAAK;MACrB,IAAIZ,eAAM,CAACC,oBAAoB,IAAID,eAAM,CAACE,KAAK,IAAIjB,GAAG,KAAK,cAAce,eAAM,CAACE,KAAK,CAACH,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACxG,OAAO,cAAcC,eAAM,CAACQ,QAAQ,CAACT,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,IAAIa,KAAK,EAAE;MAClE,CAAC,MAAM;QACL,OAAO,GAAG3B,GAAG,IAAI2B,KAAK,EAAE;MAC1B;IACF,CAAC,CAAC,CACDH,IAAI,CAAC,IAAI,CAAC;EACf;EAEA,MAAMI,eAAuC,GAAG;IAC9CC,aAAa,EAAE1C,OAAO,CAAC,eAAe,CAAC;IACvC,iBAAiB,EAAEA,OAAO,CAAC,iBAAiB,CAAC;IAC7C,iBAAiB,EAAEA,OAAO,CAAC,iBAAiB,CAAC;IAC7C2C,MAAM,EAAE3C,OAAO,CAAC,QAAQ,CAAC;IACzB,cAAc,EAAE,kBAAkB;IAClC4C,MAAM,EAAEhB,eAAM,CAACiB,OAAO;IACtBnB,MAAM;IACN,YAAY,EAAE1B,OAAO,CAAC,YAAY,CAAC;IACnC,eAAe,EAAEA,OAAO,CAAC,eAAe,CAAC;IACzC,sBAAsB,EAAE,QAAQ8C,gBAAS,CAACC,OAAO,EAAE;IACnD,gBAAgB,EAAE,oBAAoBC,mBAAU,CAACD,OAAO;EAC1D,CAAC;EAED,IAAI/C,OAAO,CAACwB,8BAA8B,CAAC,EAAE;IAC3CiB,eAAe,CAACjB,8BAA8B,CAAC,GAAGxB,OAAO,CAACwB,8BAA8B,CAAC;EAC3F;EAEA,MAAMyB,QAAQ,GAAG,IAAAC,oBAAW,EAC1BlD,OAAO,CAACsB,0BAA0B,CAAC,IAAItB,OAAO,CAAC,kBAAkB,CAAC,IAAIA,OAAO,CAAC,iBAAiB,CACjG,CAAC;EACD,IAAIiD,QAAQ,IAAIrB,eAAM,CAACuB,eAAe,EAAE;IAAA,IAAAC,oBAAA;IACtCX,eAAe,CAACnB,0BAA0B,CAAC,GAAG2B,QAAQ;IACtDR,eAAe,CACb,uBAAuB,CACxB,GAAG,uCAAuCzC,OAAO,CAACsB,0BAA0B,CAAC,kCAAkCtB,OAAO,CAAC,kBAAkB,CAAC,iCAAiCA,OAAO,CAAC,iBAAiB,CAAC,EAAE;IACxMyC,eAAe,CAAClB,gCAAgC,CAAC,IAAA6B,oBAAA,GAAGxB,eAAM,CAACyB,YAAY,YAAAD,oBAAA,GAAI,EAAE;EAC/E;EAEA,IAAIpD,OAAO,CAACqB,mBAAmB,CAAC,EAAE;IAChCoB,eAAe,CAACpB,mBAAmB,CAAC,GAAGrB,OAAO,CAACqB,mBAAmB,CAAC;EACrE;EACA,OAAOf,oBAAoB,KAAAE,SAAA,CAAAC,OAAA,MAAMgC,eAAe,CAAE,CAAC;AACrD;;AAEA;AACA;AACA;AACA;AACO,MAAMa,iBAAiB,GAAG,MAAUC,GAAa,IAA6B;EACnF,IAAI,CAACA,GAAG,CAACC,EAAE,EAAE;IACX,OAAOrC,SAAS;EAClB;EACA,OAAO,MAAMoC,GAAG,CAACE,IAAI,CAAC,CAAC;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AANAtD,OAAA,CAAAmD,iBAAA,GAAAA,iBAAA;AAOO,SAASI,gBAAgBA,CAACC,IAAY,EAAW;EACtD,IAAIC,UAAU,GACZC,mCAA0B,CAACC,IAAI,CAAEC,SAAS,IAAK;IAC7C,IAAI,OAAOA,SAAS,KAAK,QAAQ,EAAE;MACjC,OAAOA,SAAS,KAAKJ,IAAI;IAC3B,CAAC,MAAM;MACL,OAAO,IAAIK,MAAM,CAACD,SAAS,CAAC,CAACE,IAAI,CAACN,IAAI,CAAC;IACzC;EACF,CAAC,CAAC,IAAI,IAAI;;EAEZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA,IAAI,CAACC,UAAU,EAAE;IACf,MAAMM,iBAAiB,GAAG,8EAA8E,CAACD,IAAI,CAACN,IAAI,CAAC;IACnHC,UAAU,GAAG,CAACD,IAAI,CAACQ,QAAQ,CAAC,YAAY,CAAC,IAAIR,IAAI,CAACQ,QAAQ,CAAC,WAAW,CAAC,KAAK,CAACD,iBAAiB;EAChG;EAEA,OAAON,UAAU;AACnB","ignoreList":[]}

package/edge/getSessionOnEdge.js

@@ -18,6 +18,7 @@ var _fronteggLogger = _interopRequireDefault(require("../utils/fronteggLogger"))
 var _refreshAccessTokenIfNeededOnEdge = require("./refreshAccessTokenIfNeededOnEdge");
 var _redirectToLogin = require("./redirectToLogin");
 var _shouldBypassMiddleware = require("./shouldBypassMiddleware");
+var _headers = require("../utils/headers");
 const logger = _fronteggLogger.default.child({
   tag: 'EdgeRuntime.getSessionOnEdge'
 });
@@ -199,7 +200,8 @@ const handleHostedLoginCallback = async (req, pathname, searchParams) => {
   } else if (typeof req.headers === 'object') {
     var _socket2;
     let requestHeaders = (0, _extends2.default)({}, req.headers);
-    clientIp = requestHeaders['cf-connecting-ip'] || requestHeaders['x-forwarded-for'] || ((_socket2 = req.socket) == null ? void 0 : _socket2.remoteAddress);
+    clientIp = (0, _headers.getClientIp)(requestHeaders['cf-connecting-ip'] || requestHeaders['x-forwarded-for']) || ((_socket2 = req.socket) == null ? void 0 : _socket2.remoteAddress);
+    headers['get-session-on-edge'] = `requestHeaders['cf-connecting-ip'] ${requestHeaders['cf-connecting-ip']} | requestHeaders['x-forwarded-for'] ${requestHeaders['x-forwarded-for']} | (req as any).socket?.remoteAddress ${requestHeaders['x-forwarded-for']}`;
   }
   if (clientIp && _config.default.shouldForwardIp) {
     var _config$sharedSecret;

package/edge/getSessionOnEdge.js.map

@@ -1 +1 @@
-{"version":3,"file":"getSessionOnEdge.js","names":["_cookies","_interopRequireDefault","require","_createSession","_encryptionEdge","_api","_server","_config","_jwt","_utils","_fronteggLogger","_refreshAccessTokenIfNeededOnEdge","_redirectToLogin","_shouldBypassMiddleware","logger","fronteggLogger","child","tag","handleSessionOnEdge","params","request","pathname","searchParams","headers","isHostedLoginCallback","handleHostedLoginCallback","shouldByPassMiddleware","NextResponse","next","edgeSession","checkSessionOnEdge","redirectToLogin","forwardedHeaders","exports","GET_SESSION_ON_EDGE_DEPRECATED_WARN","getSessionOnEdge","req","disableWarning","cookies","CookieManager","getSessionCookieFromRequest","info","createSession","encryptionEdge","sessionCookies","existingSession","debug","session","refreshAccessTokenIfNeededOnEdge","createSessionFromAccessTokenEdge","data","_data$accessToken","_data$refreshToken","accessToken","access_token","refreshToken","refresh_token","payload","decodedJwt","JwtManager","verify","expiresIn","Math","floor","exp","Date","now","tokens","sealTokens","_searchParams$get","_req$headers","code","get","clientIp","undefined","_socket","socket","remoteAddress","_socket2","requestHeaders","_extends2","default","config","shouldForwardIp","_config$sharedSecret","FRONTEGG_FORWARD_IP_HEADER","FRONTEGG_HEADERS_VERIFIER_HEADER","sharedSecret","response","api","exchangeHostedLoginToken","buildRequestHeaders","clientId","clientSecret","json","redirect","appUrl","isSecured","isSSL","cookieValue","create","value","expires","secure","cookieName","replace","rewriteCookieByAppId","appId","refreshCookie","sessionCookieHeaders","map","cookie","refreshCookieHeaders","secureJwtEnabled","startsWith"],"sources":["../../../../packages/nextjs/src/edge/getSessionOnEdge.ts"],"sourcesContent":["import type { IncomingMessage } from 'http';\nimport { FronteggEdgeSession, FronteggNextJSSession } from '../types';\nimport CookieManager from '../utils/cookies';\nimport createSession from '../utils/createSession';\nimport encryptionEdge from '../utils/encryption-edge';\nimport api from '../api';\nimport { type NextRequest, NextResponse } from 'next/server';\nimport config from '../config';\nimport JwtManager from '../utils/jwt';\nimport { buildRequestHeaders, FRONTEGG_HEADERS_VERIFIER_HEADER, FRONTEGG_FORWARD_IP_HEADER } from '../api/utils';\nimport fronteggLogger from '../utils/fronteggLogger';\nimport { refreshAccessTokenIfNeededOnEdge } from './refreshAccessTokenIfNeededOnEdge';\nimport { redirectToLogin } from './redirectToLogin';\nimport { shouldByPassMiddleware } from './shouldBypassMiddleware';\n\nconst logger = fronteggLogger.child({ tag: 'EdgeRuntime.getSessionOnEdge' });\n\nexport type HandleSessionOnEdge = {\n  request: IncomingMessage | Request;\n  pathname: string;\n  headers: NextRequest['headers'];\n  searchParams: URLSearchParams;\n};\n\nexport const handleSessionOnEdge = async (params: HandleSessionOnEdge): Promise<NextResponse> => {\n  const { request, pathname, searchParams, headers } = params;\n\n  if (isHostedLoginCallback(pathname, searchParams)) {\n    return handleHostedLoginCallback(request, pathname, searchParams);\n  }\n\n  if (shouldByPassMiddleware(pathname, headers /*, options: optional bypass configuration */)) {\n    return NextResponse.next();\n  }\n\n  const edgeSession = await checkSessionOnEdge(request);\n  if (!edgeSession) {\n    return redirectToLogin(pathname, searchParams);\n  }\n  if (edgeSession.headers) {\n    return NextResponse.next({\n      headers: edgeSession.headers,\n      request: {\n        headers: edgeSession.forwardedHeaders,\n      },\n    });\n  }\n  return NextResponse.next();\n};\n\nconst GET_SESSION_ON_EDGE_DEPRECATED_WARN = `Deprecation Notice: getSessionOnEdge has been deprecated. Please use handleSessionOnEdge instead. For example:\n\nfile: middleware.ts\n\\`\\`\\`ts\n  import { NextRequest } from 'next/server';\n  import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n    \n  export const middleware = async (request: NextRequest) => {\n    const { pathname, searchParams } = request.nextUrl;\n    const headers = request.headers;\n    \n    // Additional logic if needed\n    \n    return handleSessionOnEdge({ request, pathname, searchParams, headers });\n  };\n  \n  \n  export const config = {\n    matcher: '/(.*)',\n  };\n\n\\`\\`\\`\n\nAlternatively, to manually verify the session, you can use checkSessionOnEdge. Note that this method does not redirect to the login page if the session is invalid.\n`;\n\n/**\n * getSessionOnEdge is deprecated, please use handleSessionOnEdge instead example:\n *\n * ```ts\n *   import { NextRequest } from 'next/server';\n *   import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n *\n *   export const middleware = async (request: NextRequest) => {\n *     const { pathname, searchParams } = request.nextUrl;\n *     const headers = request.headers;\n *\n *     // Additional logic if needed\n *\n *     return handleSessionOnEdge({ request, pathname, searchParams, headers });\n *   };\n *\n *   export const config = {\n *     matcher: '/(.*)',\n *   };\n * ```\n * @deprecated\n */\n\nexport const getSessionOnEdge = (\n  req: IncomingMessage | Request,\n  disableWarning = false\n): Promise<FronteggNextJSSession | undefined> => {\n  const logger = fronteggLogger.child({ tag: 'EdgeRuntime.getSessionOnEdge' });\n  const cookies = CookieManager.getSessionCookieFromRequest(req);\n  if (!disableWarning) {\n    logger.info(GET_SESSION_ON_EDGE_DEPRECATED_WARN);\n  }\n  return createSession(cookies, encryptionEdge);\n};\n\n/**\n * Check session on edge and return session if exists this method does not redirect to login page\n * Example:\n *\n * ```ts\n *   import { NextRequest } from 'next/server';\n *   import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n *\n *   export const middleware = async (request: NextRequest) => {\n *     const { pathname, searchParams } = request.nextUrl;\n *     const headers = request.headers;\n *\n *     // Additional logic if needed\n *\n *     // check if it's a hosted login callback\n *     if (isHostedLoginCallback(pathname, searchParams)) {\n *       return handleHostedLoginCallback(request, pathname, searchParams);\n *     }\n *\n *     // check if we should bypass the middleware\n *     if (shouldByPassMiddleware(pathname)) {\n *       return NextResponse.next();\n *     }\n *\n *     // check session\n *     const session = await checkSessionOnEdge(request);\n *\n *     if (!session) {\n *       return redirectToLogin(pathname);\n *     }\n *\n *     // if headers are present forward them to the next response / request\n *     if (session.headers) {\n *        return NextResponse.next({\n *          headers: edgeSession.headers,\n *          request:{\n *            headers: edgeSession.forwardedHeaders\n *          }\n *        });\n *     }\n *     return NextResponse.next();\n *   };\n * ```\n *\n *\n * @param req\n */\nexport const checkSessionOnEdge = async (req: IncomingMessage | Request): Promise<FronteggEdgeSession | undefined> => {\n  const sessionCookies = CookieManager.getSessionCookieFromRequest(req);\n  let existingSession = await createSession(sessionCookies, encryptionEdge);\n  if (existingSession) {\n    logger.debug('session resolved from session cookie');\n    return {\n      session: existingSession,\n    };\n  }\n\n  logger.debug('Failed to resolve session from cookie, going to refresh token');\n  return refreshAccessTokenIfNeededOnEdge(req);\n};\n\nasync function createSessionFromAccessTokenEdge(data: any): Promise<[string, any, string] | []> {\n  const accessToken = data.accessToken ?? data.access_token;\n  const refreshToken = data.refreshToken ?? data.refresh_token;\n  const { payload: decodedJwt }: any = await JwtManager.verify(accessToken);\n  decodedJwt.expiresIn = Math.floor((decodedJwt.exp * 1000 - Date.now()) / 1000);\n\n  const tokens = { accessToken, refreshToken };\n  const session = await encryptionEdge.sealTokens(tokens, decodedJwt.exp);\n  return [session, decodedJwt, refreshToken];\n}\n\nexport const handleHostedLoginCallback = async (\n  req: IncomingMessage | Request,\n  pathname: string,\n  searchParams: URLSearchParams\n): Promise<NextResponse> => {\n  if (!isHostedLoginCallback(pathname, searchParams)) {\n    return NextResponse.next();\n  }\n\n  const code = searchParams.get('code') ?? '';\n\n  let headers: Record<string, string> = {};\n  let clientIp: string | undefined = undefined;\n  if (typeof req.headers?.get === 'function') {\n    clientIp =\n      req.headers.get('cf-connecting-ip') || req.headers.get('x-forwarded-for') || (req as any).socket?.remoteAddress;\n  } else if (typeof req.headers === 'object') {\n    let requestHeaders: any = { ...req.headers };\n    clientIp =\n      requestHeaders['cf-connecting-ip'] || requestHeaders['x-forwarded-for'] || (req as any).socket?.remoteAddress;\n  }\n\n  if (clientIp && config.shouldForwardIp) {\n    headers[FRONTEGG_FORWARD_IP_HEADER] = clientIp;\n    headers[FRONTEGG_HEADERS_VERIFIER_HEADER] = config.sharedSecret ?? '';\n  }\n\n  const response = await api.exchangeHostedLoginToken(\n    buildRequestHeaders(headers),\n    code,\n    config.clientId,\n    config.clientSecret!\n  );\n\n  const data = await response.json();\n\n  const [session, decodedJwt, refreshToken] = await createSessionFromAccessTokenEdge(data);\n\n  if (!session) {\n    return NextResponse.redirect(config.appUrl);\n  }\n  const isSecured = config.isSSL;\n  const cookieValue = CookieManager.create({\n    value: session,\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n\n  let cookieName = `fe_refresh_${config.clientId.replace('-', '')}`;\n  if (config.rewriteCookieByAppId && config.appId) {\n    cookieName = `fe_refresh_${config.appId.replace('-', '')}`;\n  }\n  const refreshCookie = CookieManager.create({\n    cookieName,\n    value: refreshToken ?? '',\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n  const sessionCookieHeaders: [string, string][] = cookieValue.map((cookie) => ['set-cookie', cookie]);\n  const refreshCookieHeaders: [string, string][] = refreshCookie.map((cookie) => ['set-cookie', cookie]);\n\n  return NextResponse.redirect(config.appUrl, {\n    headers: [...sessionCookieHeaders, ...refreshCookieHeaders],\n  });\n};\n\nexport const isHostedLoginCallback = (pathname: string, searchParams: URLSearchParams): boolean => {\n  if (config.secureJwtEnabled) {\n    if (pathname.startsWith('/oauth/callback')) {\n      return searchParams.get('code') != null;\n    }\n  }\n  return false;\n};\n"],"mappings":";;;;;;;;AAEA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,cAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,eAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,IAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAN,sBAAA,CAAAC,OAAA;AACA,IAAAM,IAAA,GAAAP,sBAAA,CAAAC,OAAA;AACA,IAAAO,MAAA,GAAAP,OAAA;AACA,IAAAQ,eAAA,GAAAT,sBAAA,CAAAC,OAAA;AACA,IAAAS,iCAAA,GAAAT,OAAA;AACA,IAAAU,gBAAA,GAAAV,OAAA;AACA,IAAAW,uBAAA,GAAAX,OAAA;AAEA,MAAMY,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;EAAEC,GAAG,EAAE;AAA+B,CAAC,CAAC;AASrE,MAAMC,mBAAmB,GAAG,MAAOC,MAA2B,IAA4B;EAC/F,MAAM;IAAEC,OAAO;IAAEC,QAAQ;IAAEC,YAAY;IAAEC;EAAQ,CAAC,GAAGJ,MAAM;EAE3D,IAAIK,qBAAqB,CAACH,QAAQ,EAAEC,YAAY,CAAC,EAAE;IACjD,OAAOG,yBAAyB,CAACL,OAAO,EAAEC,QAAQ,EAAEC,YAAY,CAAC;EACnE;EAEA,IAAI,IAAAI,8CAAsB,EAACL,QAAQ,EAAEE,OAAO,CAAC,6CAA6C,CAAC,EAAE;IAC3F,OAAOI,oBAAY,CAACC,IAAI,CAAC,CAAC;EAC5B;EAEA,MAAMC,WAAW,GAAG,MAAMC,kBAAkB,CAACV,OAAO,CAAC;EACrD,IAAI,CAACS,WAAW,EAAE;IAChB,OAAO,IAAAE,gCAAe,EAACV,QAAQ,EAAEC,YAAY,CAAC;EAChD;EACA,IAAIO,WAAW,CAACN,OAAO,EAAE;IACvB,OAAOI,oBAAY,CAACC,IAAI,CAAC;MACvBL,OAAO,EAAEM,WAAW,CAACN,OAAO;MAC5BH,OAAO,EAAE;QACPG,OAAO,EAAEM,WAAW,CAACG;MACvB;IACF,CAAC,CAAC;EACJ;EACA,OAAOL,oBAAY,CAACC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAACK,OAAA,CAAAf,mBAAA,GAAAA,mBAAA;AAEF,MAAMgB,mCAAmC,GAAG;AAC5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEO,MAAMC,gBAAgB,GAAGA,CAC9BC,GAA8B,EAC9BC,cAAc,GAAG,KAAK,KACyB;EAC/C,MAAMvB,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA+B,CAAC,CAAC;EAC5E,MAAMqB,OAAO,GAAGC,gBAAa,CAACC,2BAA2B,CAACJ,GAAG,CAAC;EAC9D,IAAI,CAACC,cAAc,EAAE;IACnBvB,MAAM,CAAC2B,IAAI,CAACP,mCAAmC,CAAC;EAClD;EACA,OAAO,IAAAQ,sBAAa,EAACJ,OAAO,EAAEK,uBAAc,CAAC;AAC/C,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AA9CAV,OAAA,CAAAE,gBAAA,GAAAA,gBAAA;AA+CO,MAAML,kBAAkB,GAAG,MAAOM,GAA8B,IAA+C;EACpH,MAAMQ,cAAc,GAAGL,gBAAa,CAACC,2BAA2B,CAACJ,GAAG,CAAC;EACrE,IAAIS,eAAe,GAAG,MAAM,IAAAH,sBAAa,EAACE,cAAc,EAAED,uBAAc,CAAC;EACzE,IAAIE,eAAe,EAAE;IACnB/B,MAAM,CAACgC,KAAK,CAAC,sCAAsC,CAAC;IACpD,OAAO;MACLC,OAAO,EAAEF;IACX,CAAC;EACH;EAEA/B,MAAM,CAACgC,KAAK,CAAC,+DAA+D,CAAC;EAC7E,OAAO,IAAAE,kEAAgC,EAACZ,GAAG,CAAC;AAC9C,CAAC;AAACH,OAAA,CAAAH,kBAAA,GAAAA,kBAAA;AAEF,eAAemB,gCAAgCA,CAACC,IAAS,EAAuC;EAAA,IAAAC,iBAAA,EAAAC,kBAAA;EAC9F,MAAMC,WAAW,IAAAF,iBAAA,GAAGD,IAAI,CAACG,WAAW,YAAAF,iBAAA,GAAID,IAAI,CAACI,YAAY;EACzD,MAAMC,YAAY,IAAAH,kBAAA,GAAGF,IAAI,CAACK,YAAY,YAAAH,kBAAA,GAAIF,IAAI,CAACM,aAAa;EAC5D,MAAM;IAAEC,OAAO,EAAEC;EAAgB,CAAC,GAAG,MAAMC,YAAU,CAACC,MAAM,CAACP,WAAW,CAAC;EACzEK,UAAU,CAACG,SAAS,GAAGC,IAAI,CAACC,KAAK,CAAC,CAACL,UAAU,CAACM,GAAG,GAAG,IAAI,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;EAE9E,MAAMC,MAAM,GAAG;IAAEd,WAAW;IAAEE;EAAa,CAAC;EAC5C,MAAMR,OAAO,GAAG,MAAMJ,uBAAc,CAACyB,UAAU,CAACD,MAAM,EAAET,UAAU,CAACM,GAAG,CAAC;EACvE,OAAO,CAACjB,OAAO,EAAEW,UAAU,EAAEH,YAAY,CAAC;AAC5C;AAEO,MAAM9B,yBAAyB,GAAG,MAAAA,CACvCW,GAA8B,EAC9Bf,QAAgB,EAChBC,YAA6B,KACH;EAAA,IAAA+C,iBAAA,EAAAC,YAAA;EAC1B,IAAI,CAAC9C,qBAAqB,CAACH,QAAQ,EAAEC,YAAY,CAAC,EAAE;IAClD,OAAOK,oBAAY,CAACC,IAAI,CAAC,CAAC;EAC5B;EAEA,MAAM2C,IAAI,IAAAF,iBAAA,GAAG/C,YAAY,CAACkD,GAAG,CAAC,MAAM,CAAC,YAAAH,iBAAA,GAAI,EAAE;EAE3C,IAAI9C,OAA+B,GAAG,CAAC,CAAC;EACxC,IAAIkD,QAA4B,GAAGC,SAAS;EAC5C,IAAI,SAAAJ,YAAA,GAAOlC,GAAG,CAACb,OAAO,qBAAX+C,YAAA,CAAaE,GAAG,MAAK,UAAU,EAAE;IAAA,IAAAG,OAAA;IAC1CF,QAAQ,GACNrC,GAAG,CAACb,OAAO,CAACiD,GAAG,CAAC,kBAAkB,CAAC,IAAIpC,GAAG,CAACb,OAAO,CAACiD,GAAG,CAAC,iBAAiB,CAAC,MAAAG,OAAA,GAAKvC,GAAG,CAASwC,MAAM,qBAAnBD,OAAA,CAAqBE,aAAa;EACnH,CAAC,MAAM,IAAI,OAAOzC,GAAG,CAACb,OAAO,KAAK,QAAQ,EAAE;IAAA,IAAAuD,QAAA;IAC1C,IAAIC,cAAmB,OAAAC,SAAA,CAAAC,OAAA,MAAQ7C,GAAG,CAACb,OAAO,CAAE;IAC5CkD,QAAQ,GACNM,cAAc,CAAC,kBAAkB,CAAC,IAAIA,cAAc,CAAC,iBAAiB,CAAC,MAAAD,QAAA,GAAK1C,GAAG,CAASwC,MAAM,qBAAnBE,QAAA,CAAqBD,aAAa;EACjH;EAEA,IAAIJ,QAAQ,IAAIS,eAAM,CAACC,eAAe,EAAE;IAAA,IAAAC,oBAAA;IACtC7D,OAAO,CAAC8D,iCAA0B,CAAC,GAAGZ,QAAQ;IAC9ClD,OAAO,CAAC+D,uCAAgC,CAAC,IAAAF,oBAAA,GAAGF,eAAM,CAACK,YAAY,YAAAH,oBAAA,GAAI,EAAE;EACvE;EAEA,MAAMI,QAAQ,GAAG,MAAMC,YAAG,CAACC,wBAAwB,CACjD,IAAAC,0BAAmB,EAACpE,OAAO,CAAC,EAC5BgD,IAAI,EACJW,eAAM,CAACU,QAAQ,EACfV,eAAM,CAACW,YACT,CAAC;EAED,MAAM3C,IAAI,GAAG,MAAMsC,QAAQ,CAACM,IAAI,CAAC,CAAC;EAElC,MAAM,CAAC/C,OAAO,EAAEW,UAAU,EAAEH,YAAY,CAAC,GAAG,MAAMN,gCAAgC,CAACC,IAAI,CAAC;EAExF,IAAI,CAACH,OAAO,EAAE;IACZ,OAAOpB,oBAAY,CAACoE,QAAQ,CAACb,eAAM,CAACc,MAAM,CAAC;EAC7C;EACA,MAAMC,SAAS,GAAGf,eAAM,CAACgB,KAAK;EAC9B,MAAMC,WAAW,GAAG5D,gBAAa,CAAC6D,MAAM,CAAC;IACvCC,KAAK,EAAEtD,OAAO;IACduD,OAAO,EAAE,IAAIrC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCuC,MAAM,EAAEN;EACV,CAAC,CAAC;EAEF,IAAIO,UAAU,GAAG,cAActB,eAAM,CAACU,QAAQ,CAACa,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;EACjE,IAAIvB,eAAM,CAACwB,oBAAoB,IAAIxB,eAAM,CAACyB,KAAK,EAAE;IAC/CH,UAAU,GAAG,cAActB,eAAM,CAACyB,KAAK,CAACF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;EAC5D;EACA,MAAMG,aAAa,GAAGrE,gBAAa,CAAC6D,MAAM,CAAC;IACzCI,UAAU;IACVH,KAAK,EAAE9C,YAAY,WAAZA,YAAY,GAAI,EAAE;IACzB+C,OAAO,EAAE,IAAIrC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCuC,MAAM,EAAEN;EACV,CAAC,CAAC;EACF,MAAMY,oBAAwC,GAAGV,WAAW,CAACW,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EACpG,MAAMC,oBAAwC,GAAGJ,aAAa,CAACE,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EAEtG,OAAOpF,oBAAY,CAACoE,QAAQ,CAACb,eAAM,CAACc,MAAM,EAAE;IAC1CzE,OAAO,EAAE,CAAC,GAAGsF,oBAAoB,EAAE,GAAGG,oBAAoB;EAC5D,CAAC,CAAC;AACJ,CAAC;AAAC/E,OAAA,CAAAR,yBAAA,GAAAA,yBAAA;AAEK,MAAMD,qBAAqB,GAAGA,CAACH,QAAgB,EAAEC,YAA6B,KAAc;EACjG,IAAI4D,eAAM,CAAC+B,gBAAgB,EAAE;IAC3B,IAAI5F,QAAQ,CAAC6F,UAAU,CAAC,iBAAiB,CAAC,EAAE;MAC1C,OAAO5F,YAAY,CAACkD,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI;IACzC;EACF;EACA,OAAO,KAAK;AACd,CAAC;AAACvC,OAAA,CAAAT,qBAAA,GAAAA,qBAAA","ignoreList":[]}
+{"version":3,"file":"getSessionOnEdge.js","names":["_cookies","_interopRequireDefault","require","_createSession","_encryptionEdge","_api","_server","_config","_jwt","_utils","_fronteggLogger","_refreshAccessTokenIfNeededOnEdge","_redirectToLogin","_shouldBypassMiddleware","_headers","logger","fronteggLogger","child","tag","handleSessionOnEdge","params","request","pathname","searchParams","headers","isHostedLoginCallback","handleHostedLoginCallback","shouldByPassMiddleware","NextResponse","next","edgeSession","checkSessionOnEdge","redirectToLogin","forwardedHeaders","exports","GET_SESSION_ON_EDGE_DEPRECATED_WARN","getSessionOnEdge","req","disableWarning","cookies","CookieManager","getSessionCookieFromRequest","info","createSession","encryptionEdge","sessionCookies","existingSession","debug","session","refreshAccessTokenIfNeededOnEdge","createSessionFromAccessTokenEdge","data","_data$accessToken","_data$refreshToken","accessToken","access_token","refreshToken","refresh_token","payload","decodedJwt","JwtManager","verify","expiresIn","Math","floor","exp","Date","now","tokens","sealTokens","_searchParams$get","_req$headers","code","get","clientIp","undefined","_socket","socket","remoteAddress","_socket2","requestHeaders","_extends2","default","getClientIp","config","shouldForwardIp","_config$sharedSecret","FRONTEGG_FORWARD_IP_HEADER","FRONTEGG_HEADERS_VERIFIER_HEADER","sharedSecret","response","api","exchangeHostedLoginToken","buildRequestHeaders","clientId","clientSecret","json","redirect","appUrl","isSecured","isSSL","cookieValue","create","value","expires","secure","cookieName","replace","rewriteCookieByAppId","appId","refreshCookie","sessionCookieHeaders","map","cookie","refreshCookieHeaders","secureJwtEnabled","startsWith"],"sources":["../../../../packages/nextjs/src/edge/getSessionOnEdge.ts"],"sourcesContent":["import type { IncomingMessage } from 'http';\nimport { FronteggEdgeSession, FronteggNextJSSession } from '../types';\nimport CookieManager from '../utils/cookies';\nimport createSession from '../utils/createSession';\nimport encryptionEdge from '../utils/encryption-edge';\nimport api from '../api';\nimport { type NextRequest, NextResponse } from 'next/server';\nimport config from '../config';\nimport JwtManager from '../utils/jwt';\nimport { buildRequestHeaders, FRONTEGG_HEADERS_VERIFIER_HEADER, FRONTEGG_FORWARD_IP_HEADER } from '../api/utils';\nimport fronteggLogger from '../utils/fronteggLogger';\nimport { refreshAccessTokenIfNeededOnEdge } from './refreshAccessTokenIfNeededOnEdge';\nimport { redirectToLogin } from './redirectToLogin';\nimport { shouldByPassMiddleware } from './shouldBypassMiddleware';\nimport { getClientIp } from '../utils/headers';\n\nconst logger = fronteggLogger.child({ tag: 'EdgeRuntime.getSessionOnEdge' });\n\nexport type HandleSessionOnEdge = {\n  request: IncomingMessage | Request;\n  pathname: string;\n  headers: NextRequest['headers'];\n  searchParams: URLSearchParams;\n};\n\nexport const handleSessionOnEdge = async (params: HandleSessionOnEdge): Promise<NextResponse> => {\n  const { request, pathname, searchParams, headers } = params;\n\n  if (isHostedLoginCallback(pathname, searchParams)) {\n    return handleHostedLoginCallback(request, pathname, searchParams);\n  }\n\n  if (shouldByPassMiddleware(pathname, headers /*, options: optional bypass configuration */)) {\n    return NextResponse.next();\n  }\n\n  const edgeSession = await checkSessionOnEdge(request);\n  if (!edgeSession) {\n    return redirectToLogin(pathname, searchParams);\n  }\n  if (edgeSession.headers) {\n    return NextResponse.next({\n      headers: edgeSession.headers,\n      request: {\n        headers: edgeSession.forwardedHeaders,\n      },\n    });\n  }\n  return NextResponse.next();\n};\n\nconst GET_SESSION_ON_EDGE_DEPRECATED_WARN = `Deprecation Notice: getSessionOnEdge has been deprecated. Please use handleSessionOnEdge instead. For example:\n\nfile: middleware.ts\n\\`\\`\\`ts\n  import { NextRequest } from 'next/server';\n  import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n    \n  export const middleware = async (request: NextRequest) => {\n    const { pathname, searchParams } = request.nextUrl;\n    const headers = request.headers;\n    \n    // Additional logic if needed\n    \n    return handleSessionOnEdge({ request, pathname, searchParams, headers });\n  };\n  \n  \n  export const config = {\n    matcher: '/(.*)',\n  };\n\n\\`\\`\\`\n\nAlternatively, to manually verify the session, you can use checkSessionOnEdge. Note that this method does not redirect to the login page if the session is invalid.\n`;\n\n/**\n * getSessionOnEdge is deprecated, please use handleSessionOnEdge instead example:\n *\n * ```ts\n *   import { NextRequest } from 'next/server';\n *   import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n *\n *   export const middleware = async (request: NextRequest) => {\n *     const { pathname, searchParams } = request.nextUrl;\n *     const headers = request.headers;\n *\n *     // Additional logic if needed\n *\n *     return handleSessionOnEdge({ request, pathname, searchParams, headers });\n *   };\n *\n *   export const config = {\n *     matcher: '/(.*)',\n *   };\n * ```\n * @deprecated\n */\n\nexport const getSessionOnEdge = (\n  req: IncomingMessage | Request,\n  disableWarning = false\n): Promise<FronteggNextJSSession | undefined> => {\n  const logger = fronteggLogger.child({ tag: 'EdgeRuntime.getSessionOnEdge' });\n  const cookies = CookieManager.getSessionCookieFromRequest(req);\n  if (!disableWarning) {\n    logger.info(GET_SESSION_ON_EDGE_DEPRECATED_WARN);\n  }\n  return createSession(cookies, encryptionEdge);\n};\n\n/**\n * Check session on edge and return session if exists this method does not redirect to login page\n * Example:\n *\n * ```ts\n *   import { NextRequest } from 'next/server';\n *   import { handleSessionOnEdge } from '@frontegg/nextjs/edge';\n *\n *   export const middleware = async (request: NextRequest) => {\n *     const { pathname, searchParams } = request.nextUrl;\n *     const headers = request.headers;\n *\n *     // Additional logic if needed\n *\n *     // check if it's a hosted login callback\n *     if (isHostedLoginCallback(pathname, searchParams)) {\n *       return handleHostedLoginCallback(request, pathname, searchParams);\n *     }\n *\n *     // check if we should bypass the middleware\n *     if (shouldByPassMiddleware(pathname)) {\n *       return NextResponse.next();\n *     }\n *\n *     // check session\n *     const session = await checkSessionOnEdge(request);\n *\n *     if (!session) {\n *       return redirectToLogin(pathname);\n *     }\n *\n *     // if headers are present forward them to the next response / request\n *     if (session.headers) {\n *        return NextResponse.next({\n *          headers: edgeSession.headers,\n *          request:{\n *            headers: edgeSession.forwardedHeaders\n *          }\n *        });\n *     }\n *     return NextResponse.next();\n *   };\n * ```\n *\n *\n * @param req\n */\nexport const checkSessionOnEdge = async (req: IncomingMessage | Request): Promise<FronteggEdgeSession | undefined> => {\n  const sessionCookies = CookieManager.getSessionCookieFromRequest(req);\n  let existingSession = await createSession(sessionCookies, encryptionEdge);\n  if (existingSession) {\n    logger.debug('session resolved from session cookie');\n    return {\n      session: existingSession,\n    };\n  }\n\n  logger.debug('Failed to resolve session from cookie, going to refresh token');\n  return refreshAccessTokenIfNeededOnEdge(req);\n};\n\nasync function createSessionFromAccessTokenEdge(data: any): Promise<[string, any, string] | []> {\n  const accessToken = data.accessToken ?? data.access_token;\n  const refreshToken = data.refreshToken ?? data.refresh_token;\n  const { payload: decodedJwt }: any = await JwtManager.verify(accessToken);\n  decodedJwt.expiresIn = Math.floor((decodedJwt.exp * 1000 - Date.now()) / 1000);\n\n  const tokens = { accessToken, refreshToken };\n  const session = await encryptionEdge.sealTokens(tokens, decodedJwt.exp);\n  return [session, decodedJwt, refreshToken];\n}\n\nexport const handleHostedLoginCallback = async (\n  req: IncomingMessage | Request,\n  pathname: string,\n  searchParams: URLSearchParams\n): Promise<NextResponse> => {\n  if (!isHostedLoginCallback(pathname, searchParams)) {\n    return NextResponse.next();\n  }\n\n  const code = searchParams.get('code') ?? '';\n\n  let headers: Record<string, string> = {};\n  let clientIp: string | undefined = undefined;\n  if (typeof req.headers?.get === 'function') {\n    clientIp =\n      req.headers.get('cf-connecting-ip') || req.headers.get('x-forwarded-for') || (req as any).socket?.remoteAddress;\n  } else if (typeof req.headers === 'object') {\n    let requestHeaders: any = { ...req.headers };\n    clientIp =\n      getClientIp(requestHeaders['cf-connecting-ip'] || requestHeaders['x-forwarded-for']) ||\n      (req as any).socket?.remoteAddress;\n    headers[\n      'get-session-on-edge'\n    ] = `requestHeaders['cf-connecting-ip'] ${requestHeaders['cf-connecting-ip']} | requestHeaders['x-forwarded-for'] ${requestHeaders['x-forwarded-for']} | (req as any).socket?.remoteAddress ${requestHeaders['x-forwarded-for']}`;\n  }\n\n  if (clientIp && config.shouldForwardIp) {\n    headers[FRONTEGG_FORWARD_IP_HEADER] = clientIp;\n    headers[FRONTEGG_HEADERS_VERIFIER_HEADER] = config.sharedSecret ?? '';\n  }\n\n  const response = await api.exchangeHostedLoginToken(\n    buildRequestHeaders(headers),\n    code,\n    config.clientId,\n    config.clientSecret!\n  );\n\n  const data = await response.json();\n\n  const [session, decodedJwt, refreshToken] = await createSessionFromAccessTokenEdge(data);\n\n  if (!session) {\n    return NextResponse.redirect(config.appUrl);\n  }\n  const isSecured = config.isSSL;\n  const cookieValue = CookieManager.create({\n    value: session,\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n\n  let cookieName = `fe_refresh_${config.clientId.replace('-', '')}`;\n  if (config.rewriteCookieByAppId && config.appId) {\n    cookieName = `fe_refresh_${config.appId.replace('-', '')}`;\n  }\n  const refreshCookie = CookieManager.create({\n    cookieName,\n    value: refreshToken ?? '',\n    expires: new Date(decodedJwt.exp * 1000),\n    secure: isSecured,\n  });\n  const sessionCookieHeaders: [string, string][] = cookieValue.map((cookie) => ['set-cookie', cookie]);\n  const refreshCookieHeaders: [string, string][] = refreshCookie.map((cookie) => ['set-cookie', cookie]);\n\n  return NextResponse.redirect(config.appUrl, {\n    headers: [...sessionCookieHeaders, ...refreshCookieHeaders],\n  });\n};\n\nexport const isHostedLoginCallback = (pathname: string, searchParams: URLSearchParams): boolean => {\n  if (config.secureJwtEnabled) {\n    if (pathname.startsWith('/oauth/callback')) {\n      return searchParams.get('code') != null;\n    }\n  }\n  return false;\n};\n"],"mappings":";;;;;;;;AAEA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,cAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,eAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,IAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAN,sBAAA,CAAAC,OAAA;AACA,IAAAM,IAAA,GAAAP,sBAAA,CAAAC,OAAA;AACA,IAAAO,MAAA,GAAAP,OAAA;AACA,IAAAQ,eAAA,GAAAT,sBAAA,CAAAC,OAAA;AACA,IAAAS,iCAAA,GAAAT,OAAA;AACA,IAAAU,gBAAA,GAAAV,OAAA;AACA,IAAAW,uBAAA,GAAAX,OAAA;AACA,IAAAY,QAAA,GAAAZ,OAAA;AAEA,MAAMa,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;EAAEC,GAAG,EAAE;AAA+B,CAAC,CAAC;AASrE,MAAMC,mBAAmB,GAAG,MAAOC,MAA2B,IAA4B;EAC/F,MAAM;IAAEC,OAAO;IAAEC,QAAQ;IAAEC,YAAY;IAAEC;EAAQ,CAAC,GAAGJ,MAAM;EAE3D,IAAIK,qBAAqB,CAACH,QAAQ,EAAEC,YAAY,CAAC,EAAE;IACjD,OAAOG,yBAAyB,CAACL,OAAO,EAAEC,QAAQ,EAAEC,YAAY,CAAC;EACnE;EAEA,IAAI,IAAAI,8CAAsB,EAACL,QAAQ,EAAEE,OAAO,CAAC,6CAA6C,CAAC,EAAE;IAC3F,OAAOI,oBAAY,CAACC,IAAI,CAAC,CAAC;EAC5B;EAEA,MAAMC,WAAW,GAAG,MAAMC,kBAAkB,CAACV,OAAO,CAAC;EACrD,IAAI,CAACS,WAAW,EAAE;IAChB,OAAO,IAAAE,gCAAe,EAACV,QAAQ,EAAEC,YAAY,CAAC;EAChD;EACA,IAAIO,WAAW,CAACN,OAAO,EAAE;IACvB,OAAOI,oBAAY,CAACC,IAAI,CAAC;MACvBL,OAAO,EAAEM,WAAW,CAACN,OAAO;MAC5BH,OAAO,EAAE;QACPG,OAAO,EAAEM,WAAW,CAACG;MACvB;IACF,CAAC,CAAC;EACJ;EACA,OAAOL,oBAAY,CAACC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAACK,OAAA,CAAAf,mBAAA,GAAAA,mBAAA;AAEF,MAAMgB,mCAAmC,GAAG;AAC5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEO,MAAMC,gBAAgB,GAAGA,CAC9BC,GAA8B,EAC9BC,cAAc,GAAG,KAAK,KACyB;EAC/C,MAAMvB,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA+B,CAAC,CAAC;EAC5E,MAAMqB,OAAO,GAAGC,gBAAa,CAACC,2BAA2B,CAACJ,GAAG,CAAC;EAC9D,IAAI,CAACC,cAAc,EAAE;IACnBvB,MAAM,CAAC2B,IAAI,CAACP,mCAAmC,CAAC;EAClD;EACA,OAAO,IAAAQ,sBAAa,EAACJ,OAAO,EAAEK,uBAAc,CAAC;AAC/C,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AA9CAV,OAAA,CAAAE,gBAAA,GAAAA,gBAAA;AA+CO,MAAML,kBAAkB,GAAG,MAAOM,GAA8B,IAA+C;EACpH,MAAMQ,cAAc,GAAGL,gBAAa,CAACC,2BAA2B,CAACJ,GAAG,CAAC;EACrE,IAAIS,eAAe,GAAG,MAAM,IAAAH,sBAAa,EAACE,cAAc,EAAED,uBAAc,CAAC;EACzE,IAAIE,eAAe,EAAE;IACnB/B,MAAM,CAACgC,KAAK,CAAC,sCAAsC,CAAC;IACpD,OAAO;MACLC,OAAO,EAAEF;IACX,CAAC;EACH;EAEA/B,MAAM,CAACgC,KAAK,CAAC,+DAA+D,CAAC;EAC7E,OAAO,IAAAE,kEAAgC,EAACZ,GAAG,CAAC;AAC9C,CAAC;AAACH,OAAA,CAAAH,kBAAA,GAAAA,kBAAA;AAEF,eAAemB,gCAAgCA,CAACC,IAAS,EAAuC;EAAA,IAAAC,iBAAA,EAAAC,kBAAA;EAC9F,MAAMC,WAAW,IAAAF,iBAAA,GAAGD,IAAI,CAACG,WAAW,YAAAF,iBAAA,GAAID,IAAI,CAACI,YAAY;EACzD,MAAMC,YAAY,IAAAH,kBAAA,GAAGF,IAAI,CAACK,YAAY,YAAAH,kBAAA,GAAIF,IAAI,CAACM,aAAa;EAC5D,MAAM;IAAEC,OAAO,EAAEC;EAAgB,CAAC,GAAG,MAAMC,YAAU,CAACC,MAAM,CAACP,WAAW,CAAC;EACzEK,UAAU,CAACG,SAAS,GAAGC,IAAI,CAACC,KAAK,CAAC,CAACL,UAAU,CAACM,GAAG,GAAG,IAAI,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;EAE9E,MAAMC,MAAM,GAAG;IAAEd,WAAW;IAAEE;EAAa,CAAC;EAC5C,MAAMR,OAAO,GAAG,MAAMJ,uBAAc,CAACyB,UAAU,CAACD,MAAM,EAAET,UAAU,CAACM,GAAG,CAAC;EACvE,OAAO,CAACjB,OAAO,EAAEW,UAAU,EAAEH,YAAY,CAAC;AAC5C;AAEO,MAAM9B,yBAAyB,GAAG,MAAAA,CACvCW,GAA8B,EAC9Bf,QAAgB,EAChBC,YAA6B,KACH;EAAA,IAAA+C,iBAAA,EAAAC,YAAA;EAC1B,IAAI,CAAC9C,qBAAqB,CAACH,QAAQ,EAAEC,YAAY,CAAC,EAAE;IAClD,OAAOK,oBAAY,CAACC,IAAI,CAAC,CAAC;EAC5B;EAEA,MAAM2C,IAAI,IAAAF,iBAAA,GAAG/C,YAAY,CAACkD,GAAG,CAAC,MAAM,CAAC,YAAAH,iBAAA,GAAI,EAAE;EAE3C,IAAI9C,OAA+B,GAAG,CAAC,CAAC;EACxC,IAAIkD,QAA4B,GAAGC,SAAS;EAC5C,IAAI,SAAAJ,YAAA,GAAOlC,GAAG,CAACb,OAAO,qBAAX+C,YAAA,CAAaE,GAAG,MAAK,UAAU,EAAE;IAAA,IAAAG,OAAA;IAC1CF,QAAQ,GACNrC,GAAG,CAACb,OAAO,CAACiD,GAAG,CAAC,kBAAkB,CAAC,IAAIpC,GAAG,CAACb,OAAO,CAACiD,GAAG,CAAC,iBAAiB,CAAC,MAAAG,OAAA,GAAKvC,GAAG,CAASwC,MAAM,qBAAnBD,OAAA,CAAqBE,aAAa;EACnH,CAAC,MAAM,IAAI,OAAOzC,GAAG,CAACb,OAAO,KAAK,QAAQ,EAAE;IAAA,IAAAuD,QAAA;IAC1C,IAAIC,cAAmB,OAAAC,SAAA,CAAAC,OAAA,MAAQ7C,GAAG,CAACb,OAAO,CAAE;IAC5CkD,QAAQ,GACN,IAAAS,oBAAW,EAACH,cAAc,CAAC,kBAAkB,CAAC,IAAIA,cAAc,CAAC,iBAAiB,CAAC,CAAC,MAAAD,QAAA,GACnF1C,GAAG,CAASwC,MAAM,qBAAnBE,QAAA,CAAqBD,aAAa;IACpCtD,OAAO,CACL,qBAAqB,CACtB,GAAG,sCAAsCwD,cAAc,CAAC,kBAAkB,CAAC,wCAAwCA,cAAc,CAAC,iBAAiB,CAAC,yCAAyCA,cAAc,CAAC,iBAAiB,CAAC,EAAE;EACnO;EAEA,IAAIN,QAAQ,IAAIU,eAAM,CAACC,eAAe,EAAE;IAAA,IAAAC,oBAAA;IACtC9D,OAAO,CAAC+D,iCAA0B,CAAC,GAAGb,QAAQ;IAC9ClD,OAAO,CAACgE,uCAAgC,CAAC,IAAAF,oBAAA,GAAGF,eAAM,CAACK,YAAY,YAAAH,oBAAA,GAAI,EAAE;EACvE;EAEA,MAAMI,QAAQ,GAAG,MAAMC,YAAG,CAACC,wBAAwB,CACjD,IAAAC,0BAAmB,EAACrE,OAAO,CAAC,EAC5BgD,IAAI,EACJY,eAAM,CAACU,QAAQ,EACfV,eAAM,CAACW,YACT,CAAC;EAED,MAAM5C,IAAI,GAAG,MAAMuC,QAAQ,CAACM,IAAI,CAAC,CAAC;EAElC,MAAM,CAAChD,OAAO,EAAEW,UAAU,EAAEH,YAAY,CAAC,GAAG,MAAMN,gCAAgC,CAACC,IAAI,CAAC;EAExF,IAAI,CAACH,OAAO,EAAE;IACZ,OAAOpB,oBAAY,CAACqE,QAAQ,CAACb,eAAM,CAACc,MAAM,CAAC;EAC7C;EACA,MAAMC,SAAS,GAAGf,eAAM,CAACgB,KAAK;EAC9B,MAAMC,WAAW,GAAG7D,gBAAa,CAAC8D,MAAM,CAAC;IACvCC,KAAK,EAAEvD,OAAO;IACdwD,OAAO,EAAE,IAAItC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCwC,MAAM,EAAEN;EACV,CAAC,CAAC;EAEF,IAAIO,UAAU,GAAG,cAActB,eAAM,CAACU,QAAQ,CAACa,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;EACjE,IAAIvB,eAAM,CAACwB,oBAAoB,IAAIxB,eAAM,CAACyB,KAAK,EAAE;IAC/CH,UAAU,GAAG,cAActB,eAAM,CAACyB,KAAK,CAACF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;EAC5D;EACA,MAAMG,aAAa,GAAGtE,gBAAa,CAAC8D,MAAM,CAAC;IACzCI,UAAU;IACVH,KAAK,EAAE/C,YAAY,WAAZA,YAAY,GAAI,EAAE;IACzBgD,OAAO,EAAE,IAAItC,IAAI,CAACP,UAAU,CAACM,GAAG,GAAG,IAAI,CAAC;IACxCwC,MAAM,EAAEN;EACV,CAAC,CAAC;EACF,MAAMY,oBAAwC,GAAGV,WAAW,CAACW,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EACpG,MAAMC,oBAAwC,GAAGJ,aAAa,CAACE,GAAG,CAAEC,MAAM,IAAK,CAAC,YAAY,EAAEA,MAAM,CAAC,CAAC;EAEtG,OAAOrF,oBAAY,CAACqE,QAAQ,CAACb,eAAM,CAACc,MAAM,EAAE;IAC1C1E,OAAO,EAAE,CAAC,GAAGuF,oBAAoB,EAAE,GAAGG,oBAAoB;EAC5D,CAAC,CAAC;AACJ,CAAC;AAAChF,OAAA,CAAAR,yBAAA,GAAAA,yBAAA;AAEK,MAAMD,qBAAqB,GAAGA,CAACH,QAAgB,EAAEC,YAA6B,KAAc;EACjG,IAAI6D,eAAM,CAAC+B,gBAAgB,EAAE;IAC3B,IAAI7F,QAAQ,CAAC8F,UAAU,CAAC,iBAAiB,CAAC,EAAE;MAC1C,OAAO7F,YAAY,CAACkD,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI;IACzC;EACF;EACA,OAAO,KAAK;AACd,CAAC;AAACvC,OAAA,CAAAT,qBAAA,GAAAA,qBAAA","ignoreList":[]}

package/index.js

@@ -1,4 +1,4 @@
-/** @license Frontegg v9.2.2-alpha.13943158357
+/** @license Frontegg v9.2.2-alpha.13969697706
  *
  * This source code is licensed under the MIT license found in the
  * LICENSE file in the root directory of this source tree.

package/middleware/FronteggApiMiddleware.js

@@ -10,9 +10,6 @@ var _FronteggProxy = require("./FronteggProxy");
 var _constants = require("./constants");
 var _helpers = require("./helpers");
 var _pages = require("../pages");
-var _config = _interopRequireDefault(require("../config"));
-var _cookies = _interopRequireDefault(require("../utils/cookies"));
-var _common = require("../common");
 const middlewarePromise = (req, res) => new Promise(async resolve => {
   var _req$url;
   const fronteggUrlPath = (0, _helpers.rewritePath)((_req$url = req.url) != null ? _req$url : '/', _constants.fronteggPathRewrite);
@@ -32,13 +29,6 @@ const middlewarePromise = (req, res) => new Promise(async resolve => {
       headers['authorization'] = 'Bearer ' + session.accessToken;
     }
   }
-  if (_config.default.isHostedLogin && (0, _helpers.isFronteggLogoutUrl)(req.url || '') && !headers['authorization']) {
-    const sessionCookie = _cookies.default.getSessionCookieFromRequest(req);
-    const tokens = await (0, _common.getTokensFromCookie)(sessionCookie);
-    if (tokens != null && tokens.accessToken) {
-      headers['authorization'] = 'Bearer ' + tokens.accessToken;
-    }
-  }
   _FronteggProxy.FronteggProxy.web(req, res, (0, _extends2.default)({}, options, {
     headers
   }));

package/middleware/FronteggApiMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"FronteggApiMiddleware.js","names":["_FronteggProxy","require","_constants","_helpers","_pages","_config","_interopRequireDefault","_cookies","_common","middlewarePromise","req","res","Promise","resolve","_req$url","fronteggUrlPath","rewritePath","url","fronteggPathRewrite","rewriteUrl","fronteggSSOPathRewrite","on","options","target","process","env","headers","session","getSession","accessToken","config","isHostedLogin","isFronteggLogoutUrl","sessionCookie","CookieManager","getSessionCookieFromRequest","tokens","getTokensFromCookie","FronteggProxy","web","_extends2","default","FronteggApiMiddleware","exports","cors","_req$headers$host","allowedOrigins","allowedMethods","allowedHeaders","allowCredentials","isInternalRequest","host","_req$headers$origin","origin","combinedHeaders","Array","from","Set","defaultFronteggHeaders","includes","setHeader","removeHeader","join"],"sources":["../../../../packages/nextjs/src/middleware/FronteggApiMiddleware.ts"],"sourcesContent":["import type { NextApiRequest, NextApiResponse } from 'next';\nimport { FronteggProxy } from './FronteggProxy';\nimport { fronteggSSOPathRewrite, fronteggPathRewrite, defaultFronteggHeaders } from './constants';\nimport { isInternalRequest, rewritePath } from './helpers';\nimport { getSession } from '../pages';\nimport { CorsOptions, FronteggApiMiddlewareType } from './types';\nimport config from '../config';\nimport { isFronteggLogoutUrl } from './helpers';\nimport CookieManager from '../utils/cookies';\nimport { getTokensFromCookie } from '../common';\n\nconst middlewarePromise = (req: NextApiRequest, res: NextApiResponse) =>\n  new Promise<void>(async (resolve) => {\n    const fronteggUrlPath = rewritePath(req.url ?? '/', fronteggPathRewrite);\n    const rewriteUrl = rewritePath(fronteggUrlPath ?? '/', fronteggSSOPathRewrite);\n    req.url = rewriteUrl;\n    res.on('close', () => resolve());\n    const options = {\n      target: process.env['FRONTEGG_BASE_URL'],\n    };\n    if (process.env['FRONTEGG_TEST_URL'] && req.url == '/frontegg/middleware-test') {\n      options.target = process.env['FRONTEGG_TEST_URL'];\n    }\n    const headers: Record<string, string> = {};\n    if (process.env['FRONTEGG_SECURE_JWT_ENABLED'] === 'true') {\n      const session = await getSession(req);\n      if (session?.accessToken) {\n        headers['authorization'] = 'Bearer ' + session.accessToken;\n      }\n    }\n\n    if (config.isHostedLogin && isFronteggLogoutUrl(req.url || '') && !headers['authorization']) {\n      const sessionCookie = CookieManager.getSessionCookieFromRequest(req);\n      const tokens = await getTokensFromCookie(sessionCookie);\n      if (tokens?.accessToken) {\n        headers['authorization'] = 'Bearer ' + tokens.accessToken;\n      }\n    }\n    FronteggProxy.web(req, res, {\n      ...options,\n      headers,\n    });\n  });\n\n/**\n * Next.js HTTP Proxy Middleware\n * @see https://nextjs.org/docs/api-routes/api-middlewares\n * @param {NextApiRequest} req - NextJS api request passed from api routing\n * @param {NextApiResponse} res - NextJS api response passed from api routing\n */\nconst FronteggApiMiddleware: FronteggApiMiddlewareType = (async (\n  req: NextApiRequest,\n  res: NextApiResponse\n): Promise<void> => {\n  return await middlewarePromise(req, res);\n}) as FronteggApiMiddlewareType;\n\nFronteggApiMiddleware.cors =\n  (options: CorsOptions) =>\n  async (req: NextApiRequest, res: NextApiResponse): Promise<void> => {\n    const {\n      allowedOrigins = ['*'],\n      allowedMethods = ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\n      allowedHeaders = ['Content-Type', 'Authorization'],\n      allowCredentials = true,\n    } = options;\n\n    if (isInternalRequest(req.headers.host ?? '')) {\n      const origin = req.headers.origin ?? '';\n      const combinedHeaders = Array.from(new Set([...defaultFronteggHeaders, ...allowedHeaders]));\n\n      if (allowedOrigins.includes(origin)) {\n        res.setHeader('Access-Control-Allow-Origin', origin);\n      } else {\n        res.removeHeader('Access-Control-Allow-Origin');\n      }\n\n      res.setHeader('Access-Control-Allow-Methods', allowedMethods.join(','));\n      res.setHeader('Access-Control-Allow-Headers', combinedHeaders.join(','));\n      res.setHeader('Access-Control-Allow-Credentials', allowCredentials ? 'true' : 'false');\n    }\n\n    return middlewarePromise(req, res);\n  };\n\nexport { FronteggApiMiddleware };\n"],"mappings":";;;;;;;;AACA,IAAAA,cAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AAEA,IAAAI,OAAA,GAAAC,sBAAA,CAAAL,OAAA;AAEA,IAAAM,QAAA,GAAAD,sBAAA,CAAAL,OAAA;AACA,IAAAO,OAAA,GAAAP,OAAA;AAEA,MAAMQ,iBAAiB,GAAGA,CAACC,GAAmB,EAAEC,GAAoB,KAClE,IAAIC,OAAO,CAAO,MAAOC,OAAO,IAAK;EAAA,IAAAC,QAAA;EACnC,MAAMC,eAAe,GAAG,IAAAC,oBAAW,GAAAF,QAAA,GAACJ,GAAG,CAACO,GAAG,YAAAH,QAAA,GAAI,GAAG,EAAEI,8BAAmB,CAAC;EACxE,MAAMC,UAAU,GAAG,IAAAH,oBAAW,EAACD,eAAe,WAAfA,eAAe,GAAI,GAAG,EAAEK,iCAAsB,CAAC;EAC9EV,GAAG,CAACO,GAAG,GAAGE,UAAU;EACpBR,GAAG,CAACU,EAAE,CAAC,OAAO,EAAE,MAAMR,OAAO,CAAC,CAAC,CAAC;EAChC,MAAMS,OAAO,GAAG;IACdC,MAAM,EAAEC,OAAO,CAACC,GAAG,CAAC,mBAAmB;EACzC,CAAC;EACD,IAAID,OAAO,CAACC,GAAG,CAAC,mBAAmB,CAAC,IAAIf,GAAG,CAACO,GAAG,IAAI,2BAA2B,EAAE;IAC9EK,OAAO,CAACC,MAAM,GAAGC,OAAO,CAACC,GAAG,CAAC,mBAAmB,CAAC;EACnD;EACA,MAAMC,OAA+B,GAAG,CAAC,CAAC;EAC1C,IAAIF,OAAO,CAACC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,EAAE;IACzD,MAAME,OAAO,GAAG,MAAM,IAAAC,iBAAU,EAAClB,GAAG,CAAC;IACrC,IAAIiB,OAAO,YAAPA,OAAO,CAAEE,WAAW,EAAE;MACxBH,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,GAAGC,OAAO,CAACE,WAAW;IAC5D;EACF;EAEA,IAAIC,eAAM,CAACC,aAAa,IAAI,IAAAC,4BAAmB,EAACtB,GAAG,CAACO,GAAG,IAAI,EAAE,CAAC,IAAI,CAACS,OAAO,CAAC,eAAe,CAAC,EAAE;IAC3F,MAAMO,aAAa,GAAGC,gBAAa,CAACC,2BAA2B,CAACzB,GAAG,CAAC;IACpE,MAAM0B,MAAM,GAAG,MAAM,IAAAC,2BAAmB,EAACJ,aAAa,CAAC;IACvD,IAAIG,MAAM,YAANA,MAAM,CAAEP,WAAW,EAAE;MACvBH,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,GAAGU,MAAM,CAACP,WAAW;IAC3D;EACF;EACAS,4BAAa,CAACC,GAAG,CAAC7B,GAAG,EAAEC,GAAG,MAAA6B,SAAA,CAAAC,OAAA,MACrBnB,OAAO;IACVI;EAAO,EACR,CAAC;AACJ,CAAC,CAAC;;AAEJ;AACA;AACA;AACA;AACA;AACA;AACA,MAAMgB,qBAAgD,GAAI,MAAAA,CACxDhC,GAAmB,EACnBC,GAAoB,KACF;EAClB,OAAO,MAAMF,iBAAiB,CAACC,GAAG,EAAEC,GAAG,CAAC;AAC1C,CAA+B;AAACgC,OAAA,CAAAD,qBAAA,GAAAA,qBAAA;AAEhCA,qBAAqB,CAACE,IAAI,GACvBtB,OAAoB,IACrB,OAAOZ,GAAmB,EAAEC,GAAoB,KAAoB;EAAA,IAAAkC,iBAAA;EAClE,MAAM;IACJC,cAAc,GAAG,CAAC,GAAG,CAAC;IACtBC,cAAc,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;IACrEC,cAAc,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC;IAClDC,gBAAgB,GAAG;EACrB,CAAC,GAAG3B,OAAO;EAEX,IAAI,IAAA4B,0BAAiB,GAAAL,iBAAA,GAACnC,GAAG,CAACgB,OAAO,CAACyB,IAAI,YAAAN,iBAAA,GAAI,EAAE,CAAC,EAAE;IAAA,IAAAO,mBAAA;IAC7C,MAAMC,MAAM,IAAAD,mBAAA,GAAG1C,GAAG,CAACgB,OAAO,CAAC2B,MAAM,YAAAD,mBAAA,GAAI,EAAE;IACvC,MAAME,eAAe,GAAGC,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAAC,CAAC,GAAGC,iCAAsB,EAAE,GAAGV,cAAc,CAAC,CAAC,CAAC;IAE3F,IAAIF,cAAc,CAACa,QAAQ,CAACN,MAAM,CAAC,EAAE;MACnC1C,GAAG,CAACiD,SAAS,CAAC,6BAA6B,EAAEP,MAAM,CAAC;IACtD,CAAC,MAAM;MACL1C,GAAG,CAACkD,YAAY,CAAC,6BAA6B,CAAC;IACjD;IAEAlD,GAAG,CAACiD,SAAS,CAAC,8BAA8B,EAAEb,cAAc,CAACe,IAAI,CAAC,GAAG,CAAC,CAAC;IACvEnD,GAAG,CAACiD,SAAS,CAAC,8BAA8B,EAAEN,eAAe,CAACQ,IAAI,CAAC,GAAG,CAAC,CAAC;IACxEnD,GAAG,CAACiD,SAAS,CAAC,kCAAkC,EAAEX,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC;EACxF;EAEA,OAAOxC,iBAAiB,CAACC,GAAG,EAAEC,GAAG,CAAC;AACpC,CAAC","ignoreList":[]}
+{"version":3,"file":"FronteggApiMiddleware.js","names":["_FronteggProxy","require","_constants","_helpers","_pages","middlewarePromise","req","res","Promise","resolve","_req$url","fronteggUrlPath","rewritePath","url","fronteggPathRewrite","rewriteUrl","fronteggSSOPathRewrite","on","options","target","process","env","headers","session","getSession","accessToken","FronteggProxy","web","_extends2","default","FronteggApiMiddleware","exports","cors","_req$headers$host","allowedOrigins","allowedMethods","allowedHeaders","allowCredentials","isInternalRequest","host","_req$headers$origin","origin","combinedHeaders","Array","from","Set","defaultFronteggHeaders","includes","setHeader","removeHeader","join"],"sources":["../../../../packages/nextjs/src/middleware/FronteggApiMiddleware.ts"],"sourcesContent":["import type { NextApiRequest, NextApiResponse } from 'next';\nimport { FronteggProxy } from './FronteggProxy';\nimport { fronteggSSOPathRewrite, fronteggPathRewrite, defaultFronteggHeaders } from './constants';\nimport { isInternalRequest, rewritePath } from './helpers';\nimport { getSession } from '../pages';\nimport { CorsOptions, FronteggApiMiddlewareType } from './types';\n\nconst middlewarePromise = (req: NextApiRequest, res: NextApiResponse) =>\n  new Promise<void>(async (resolve) => {\n    const fronteggUrlPath = rewritePath(req.url ?? '/', fronteggPathRewrite);\n    const rewriteUrl = rewritePath(fronteggUrlPath ?? '/', fronteggSSOPathRewrite);\n    req.url = rewriteUrl;\n    res.on('close', () => resolve());\n    const options = {\n      target: process.env['FRONTEGG_BASE_URL'],\n    };\n    if (process.env['FRONTEGG_TEST_URL'] && req.url == '/frontegg/middleware-test') {\n      options.target = process.env['FRONTEGG_TEST_URL'];\n    }\n\n    const headers: Record<string, string> = {};\n    if (process.env['FRONTEGG_SECURE_JWT_ENABLED'] === 'true') {\n      const session = await getSession(req);\n      if (session?.accessToken) {\n        headers['authorization'] = 'Bearer ' + session.accessToken;\n      }\n    }\n    FronteggProxy.web(req, res, {\n      ...options,\n      headers,\n    });\n  });\n\n/**\n * Next.js HTTP Proxy Middleware\n * @see https://nextjs.org/docs/api-routes/api-middlewares\n * @param {NextApiRequest} req - NextJS api request passed from api routing\n * @param {NextApiResponse} res - NextJS api response passed from api routing\n */\nconst FronteggApiMiddleware: FronteggApiMiddlewareType = (async (\n  req: NextApiRequest,\n  res: NextApiResponse\n): Promise<void> => {\n  return await middlewarePromise(req, res);\n}) as FronteggApiMiddlewareType;\n\nFronteggApiMiddleware.cors =\n  (options: CorsOptions) =>\n  async (req: NextApiRequest, res: NextApiResponse): Promise<void> => {\n    const {\n      allowedOrigins = ['*'],\n      allowedMethods = ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\n      allowedHeaders = ['Content-Type', 'Authorization'],\n      allowCredentials = true,\n    } = options;\n\n    if (isInternalRequest(req.headers.host ?? '')) {\n      const origin = req.headers.origin ?? '';\n      const combinedHeaders = Array.from(new Set([...defaultFronteggHeaders, ...allowedHeaders]));\n\n      if (allowedOrigins.includes(origin)) {\n        res.setHeader('Access-Control-Allow-Origin', origin);\n      } else {\n        res.removeHeader('Access-Control-Allow-Origin');\n      }\n\n      res.setHeader('Access-Control-Allow-Methods', allowedMethods.join(','));\n      res.setHeader('Access-Control-Allow-Headers', combinedHeaders.join(','));\n      res.setHeader('Access-Control-Allow-Credentials', allowCredentials ? 'true' : 'false');\n    }\n\n    return middlewarePromise(req, res);\n  };\n\nexport { FronteggApiMiddleware };\n"],"mappings":";;;;;;;;AACA,IAAAA,cAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AAGA,MAAMI,iBAAiB,GAAGA,CAACC,GAAmB,EAAEC,GAAoB,KAClE,IAAIC,OAAO,CAAO,MAAOC,OAAO,IAAK;EAAA,IAAAC,QAAA;EACnC,MAAMC,eAAe,GAAG,IAAAC,oBAAW,GAAAF,QAAA,GAACJ,GAAG,CAACO,GAAG,YAAAH,QAAA,GAAI,GAAG,EAAEI,8BAAmB,CAAC;EACxE,MAAMC,UAAU,GAAG,IAAAH,oBAAW,EAACD,eAAe,WAAfA,eAAe,GAAI,GAAG,EAAEK,iCAAsB,CAAC;EAC9EV,GAAG,CAACO,GAAG,GAAGE,UAAU;EACpBR,GAAG,CAACU,EAAE,CAAC,OAAO,EAAE,MAAMR,OAAO,CAAC,CAAC,CAAC;EAChC,MAAMS,OAAO,GAAG;IACdC,MAAM,EAAEC,OAAO,CAACC,GAAG,CAAC,mBAAmB;EACzC,CAAC;EACD,IAAID,OAAO,CAACC,GAAG,CAAC,mBAAmB,CAAC,IAAIf,GAAG,CAACO,GAAG,IAAI,2BAA2B,EAAE;IAC9EK,OAAO,CAACC,MAAM,GAAGC,OAAO,CAACC,GAAG,CAAC,mBAAmB,CAAC;EACnD;EAEA,MAAMC,OAA+B,GAAG,CAAC,CAAC;EAC1C,IAAIF,OAAO,CAACC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,EAAE;IACzD,MAAME,OAAO,GAAG,MAAM,IAAAC,iBAAU,EAAClB,GAAG,CAAC;IACrC,IAAIiB,OAAO,YAAPA,OAAO,CAAEE,WAAW,EAAE;MACxBH,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,GAAGC,OAAO,CAACE,WAAW;IAC5D;EACF;EACAC,4BAAa,CAACC,GAAG,CAACrB,GAAG,EAAEC,GAAG,MAAAqB,SAAA,CAAAC,OAAA,MACrBX,OAAO;IACVI;EAAO,EACR,CAAC;AACJ,CAAC,CAAC;;AAEJ;AACA;AACA;AACA;AACA;AACA;AACA,MAAMQ,qBAAgD,GAAI,MAAAA,CACxDxB,GAAmB,EACnBC,GAAoB,KACF;EAClB,OAAO,MAAMF,iBAAiB,CAACC,GAAG,EAAEC,GAAG,CAAC;AAC1C,CAA+B;AAACwB,OAAA,CAAAD,qBAAA,GAAAA,qBAAA;AAEhCA,qBAAqB,CAACE,IAAI,GACvBd,OAAoB,IACrB,OAAOZ,GAAmB,EAAEC,GAAoB,KAAoB;EAAA,IAAA0B,iBAAA;EAClE,MAAM;IACJC,cAAc,GAAG,CAAC,GAAG,CAAC;IACtBC,cAAc,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;IACrEC,cAAc,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC;IAClDC,gBAAgB,GAAG;EACrB,CAAC,GAAGnB,OAAO;EAEX,IAAI,IAAAoB,0BAAiB,GAAAL,iBAAA,GAAC3B,GAAG,CAACgB,OAAO,CAACiB,IAAI,YAAAN,iBAAA,GAAI,EAAE,CAAC,EAAE;IAAA,IAAAO,mBAAA;IAC7C,MAAMC,MAAM,IAAAD,mBAAA,GAAGlC,GAAG,CAACgB,OAAO,CAACmB,MAAM,YAAAD,mBAAA,GAAI,EAAE;IACvC,MAAME,eAAe,GAAGC,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAAC,CAAC,GAAGC,iCAAsB,EAAE,GAAGV,cAAc,CAAC,CAAC,CAAC;IAE3F,IAAIF,cAAc,CAACa,QAAQ,CAACN,MAAM,CAAC,EAAE;MACnClC,GAAG,CAACyC,SAAS,CAAC,6BAA6B,EAAEP,MAAM,CAAC;IACtD,CAAC,MAAM;MACLlC,GAAG,CAAC0C,YAAY,CAAC,6BAA6B,CAAC;IACjD;IAEA1C,GAAG,CAACyC,SAAS,CAAC,8BAA8B,EAAEb,cAAc,CAACe,IAAI,CAAC,GAAG,CAAC,CAAC;IACvE3C,GAAG,CAACyC,SAAS,CAAC,8BAA8B,EAAEN,eAAe,CAACQ,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE3C,GAAG,CAACyC,SAAS,CAAC,kCAAkC,EAAEX,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC;EACxF;EAEA,OAAOhC,iBAAiB,CAACC,GAAG,EAAEC,GAAG,CAAC;AACpC,CAAC","ignoreList":[]}

package/middleware/ProxyRequestCallback.js

@@ -10,8 +10,10 @@ var _sdkVersion = _interopRequireDefault(require("../sdkVersion"));
 var _config = _interopRequireDefault(require("../config"));
 var _cookies = _interopRequireDefault(require("../utils/cookies"));
 var _fronteggLogger = _interopRequireDefault(require("../utils/fronteggLogger"));
+var _helpers = require("../utils/refreshAccessTokenIfNeeded/helpers");
 var _utils = require("../api/utils");
 var _constants = require("./constants");
+var _headers = require("../utils/headers");
 const logger = _fronteggLogger.default.child({
   tag: 'FronteggApiMiddleware.ProxyRequestCallback'
 });
@@ -47,12 +49,17 @@ const ProxyRequestCallback = (proxyReq, req) => {
     proxyReq.setHeader('x-frontegg-framework', (_req$headers$xFronte = req.headers['x-frontegg-framework']) != null ? _req$headers$xFronte : `next@${_package.default.version}`);
     proxyReq.setHeader('x-frontegg-sdk', (_req$headers$xFronte2 = req.headers['x-frontegg-sdk']) != null ? _req$headers$xFronte2 : `@frontegg/nextjs@${_sdkVersion.default.version}`);
     proxyReq.setHeader('x-frontegg-middleware', 'true');
-    const clientIp = req.headers['cf-connecting-ip'] || req.headers['x-forwarded-for'];
+    const clientIp = (0, _headers.getClientIp)(req.headers['cf-connecting-ip'] || req.headers['x-forwarded-for']);
     if (clientIp && _config.default.shouldForwardIp) {
       var _config$sharedSecret;
-      proxyReq.setHeader(_utils.FRONTEGG_FORWARD_IP_HEADER, `${clientIp}`);
+      proxyReq.setHeader(_utils.FRONTEGG_FORWARD_IP_HEADER, clientIp);
+      proxyReq.setHeader('proxy-request-callback', `req.headers['cf-connecting-ip'] ${req.headers['cf-connecting-ip']} | req.headers['x-forwarded-for'] ${req.headers['x-forwarded-for']}`);
       proxyReq.setHeader(_utils.FRONTEGG_HEADERS_VERIFIER_HEADER, (_config$sharedSecret = _config.default.sharedSecret) != null ? _config$sharedSecret : '');
     }
+    if ((0, _helpers.isRefreshTokenRequest)(req.url)) {
+      logger.debug(`${req.url} | removing Authorization header`);
+      proxyReq.removeHeader('authorization');
+    }
     _constants.headersToRemove.map(header => proxyReq.removeHeader(header));
     logger.debug(`${req.url} | check if request has body`);
     if (req.method !== 'GET' && req.body) {

package/middleware/ProxyRequestCallback.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProxyRequestCallback.js","names":["_package","_interopRequireDefault","require","_sdkVersion","_config","_cookies","_fronteggLogger","_utils","_constants","logger","fronteggLogger","child","tag","ProxyRequestCallback","proxyReq","req","_req$headers$xFronte","_req$headers$xFronte2","info","url","debug","allCookies","CookieManager","parseCookieHeader","fronteggCookiesNames","Object","keys","filter","cookieName","startsWith","config","join","modifiedCookies","forEach","requestCookieName","rewriteCookieByAppId","appId","replace","clientId","setHeader","headers","NextJsPkg","version","sdkVersion","clientIp","shouldForwardIp","_config$sharedSecret","FRONTEGG_FORWARD_IP_HEADER","FRONTEGG_HEADERS_VERIFIER_HEADER","sharedSecret","headersToRemove","map","header","removeHeader","method","body","bodyData","JSON","stringify","Buffer","byteLength","write","e","error","_default","exports","default"],"sources":["../../../../packages/nextjs/src/middleware/ProxyRequestCallback.ts"],"sourcesContent":["import NextJsPkg from 'next/package.json';\nimport { ProxyReqCallback } from 'http-proxy';\nimport { ClientRequest } from 'http';\nimport { NextApiRequest } from 'next';\nimport sdkVersion from '../sdkVersion';\nimport config from '../config';\nimport CookieManager from '../utils/cookies';\nimport fronteggLogger from '../utils/fronteggLogger';\nimport { FRONTEGG_HEADERS_VERIFIER_HEADER, FRONTEGG_FORWARD_IP_HEADER } from '../api/utils';\nimport { headersToRemove } from './constants';\n\nconst logger = fronteggLogger.child({ tag: 'FronteggApiMiddleware.ProxyRequestCallback' });\n/**\n * Proxy request callback fired on before each request to Frontegg services,\n * to transport frontegg cookies.\n *\n * @param {ClientRequest} proxyReq - Proxy request to be sent\n * @param {NextApiRequest} req - Next.js incoming request\n */\nconst ProxyRequestCallback: ProxyReqCallback<ClientRequest, NextApiRequest> = (proxyReq, req) => {\n  try {\n    logger.info(`${req.url} | Going to proxy request`);\n    logger.debug(`${req.url} | parsing request cookies`);\n    const allCookies = CookieManager.parseCookieHeader(req);\n    logger.debug(`${req.url} | found ${allCookies} cookies`);\n    const fronteggCookiesNames = Object.keys(allCookies).filter((cookieName) => {\n      return cookieName.startsWith('fe_') && !cookieName.startsWith(config.cookieName);\n    });\n\n    logger.debug(`${req.url} | proxy FronteggCookies (${fronteggCookiesNames.join(', ')})`);\n    let modifiedCookies = ``;\n\n    fronteggCookiesNames.forEach((requestCookieName: string) => {\n      let cookieName = requestCookieName;\n      if (config.rewriteCookieByAppId && config.appId) {\n        cookieName = requestCookieName\n          .replace(config.appId, config.clientId)\n          .replace(config.appId.replace(/-/g, ''), config.clientId.replace(/-/g, ''))\n          .replace(config.appId.replace('-', ''), config.clientId.replace('-', ''));\n\n        logger.debug(`cookieName ${requestCookieName} replaced with appId ${cookieName}`);\n      }\n\n      logger.debug(`PROXY_ADDING_COOKIE ${cookieName}, ${allCookies[requestCookieName]}`);\n      modifiedCookies += `${cookieName}=${allCookies[requestCookieName]}; `;\n    });\n    proxyReq.setHeader('cookie', modifiedCookies);\n\n    proxyReq.setHeader('x-frontegg-framework', req.headers['x-frontegg-framework'] ?? `next@${NextJsPkg.version}`);\n    proxyReq.setHeader('x-frontegg-sdk', req.headers['x-frontegg-sdk'] ?? `@frontegg/nextjs@${sdkVersion.version}`);\n    proxyReq.setHeader('x-frontegg-middleware', 'true');\n\n    const clientIp = req.headers['cf-connecting-ip'] || req.headers['x-forwarded-for'];\n\n    if (clientIp && config.shouldForwardIp) {\n      proxyReq.setHeader(FRONTEGG_FORWARD_IP_HEADER, `${clientIp}`);\n      proxyReq.setHeader(FRONTEGG_HEADERS_VERIFIER_HEADER, config.sharedSecret ?? '');\n    }\n\n    headersToRemove.map((header) => proxyReq.removeHeader(header));\n\n    logger.debug(`${req.url} | check if request has body`);\n    if (req.method !== 'GET' && req.body) {\n      logger.debug(`${req.url} | writing request body to proxyReq`);\n      const bodyData = JSON.stringify(req.body);\n      // in case if content-type is application/x-www-form-urlencoded -> we need to change to application/json\n      proxyReq.setHeader('Content-Type', 'application/json');\n      proxyReq.setHeader('Content-Length', Buffer.byteLength(bodyData));\n      // stream the content\n      proxyReq.write(bodyData);\n    }\n  } catch (e) {\n    logger.error(`${req.url} | Failed to proxy request`, e);\n  }\n};\n\nexport default ProxyRequestCallback;\n"],"mappings":";;;;;;;AAAA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIA,IAAAC,WAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,OAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,eAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,UAAA,GAAAN,OAAA;AAEA,MAAMO,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;EAAEC,GAAG,EAAE;AAA6C,CAAC,CAAC;AAC1F;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,oBAAqE,GAAGA,CAACC,QAAQ,EAAEC,GAAG,KAAK;EAC/F,IAAI;IAAA,IAAAC,oBAAA,EAAAC,qBAAA;IACFR,MAAM,CAACS,IAAI,CAAC,GAAGH,GAAG,CAACI,GAAG,2BAA2B,CAAC;IAClDV,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,4BAA4B,CAAC;IACpD,MAAME,UAAU,GAAGC,gBAAa,CAACC,iBAAiB,CAACR,GAAG,CAAC;IACvDN,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,YAAYE,UAAU,UAAU,CAAC;IACxD,MAAMG,oBAAoB,GAAGC,MAAM,CAACC,IAAI,CAACL,UAAU,CAAC,CAACM,MAAM,CAAEC,UAAU,IAAK;MAC1E,OAAOA,UAAU,CAACC,UAAU,CAAC,KAAK,CAAC,IAAI,CAACD,UAAU,CAACC,UAAU,CAACC,eAAM,CAACF,UAAU,CAAC;IAClF,CAAC,CAAC;IAEFnB,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,6BAA6BK,oBAAoB,CAACO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACvF,IAAIC,eAAe,GAAG,EAAE;IAExBR,oBAAoB,CAACS,OAAO,CAAEC,iBAAyB,IAAK;MAC1D,IAAIN,UAAU,GAAGM,iBAAiB;MAClC,IAAIJ,eAAM,CAACK,oBAAoB,IAAIL,eAAM,CAACM,KAAK,EAAE;QAC/CR,UAAU,GAAGM,iBAAiB,CAC3BG,OAAO,CAACP,eAAM,CAACM,KAAK,EAAEN,eAAM,CAACQ,QAAQ,CAAC,CACtCD,OAAO,CAACP,eAAM,CAACM,KAAK,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAEP,eAAM,CAACQ,QAAQ,CAACD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAC1EA,OAAO,CAACP,eAAM,CAACM,KAAK,CAACC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAEP,eAAM,CAACQ,QAAQ,CAACD,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE3E5B,MAAM,CAACW,KAAK,CAAC,cAAcc,iBAAiB,wBAAwBN,UAAU,EAAE,CAAC;MACnF;MAEAnB,MAAM,CAACW,KAAK,CAAC,uBAAuBQ,UAAU,KAAKP,UAAU,CAACa,iBAAiB,CAAC,EAAE,CAAC;MACnFF,eAAe,IAAI,GAAGJ,UAAU,IAAIP,UAAU,CAACa,iBAAiB,CAAC,IAAI;IACvE,CAAC,CAAC;IACFpB,QAAQ,CAACyB,SAAS,CAAC,QAAQ,EAAEP,eAAe,CAAC;IAE7ClB,QAAQ,CAACyB,SAAS,CAAC,sBAAsB,GAAAvB,oBAAA,GAAED,GAAG,CAACyB,OAAO,CAAC,sBAAsB,CAAC,YAAAxB,oBAAA,GAAI,QAAQyB,gBAAS,CAACC,OAAO,EAAE,CAAC;IAC9G5B,QAAQ,CAACyB,SAAS,CAAC,gBAAgB,GAAAtB,qBAAA,GAAEF,GAAG,CAACyB,OAAO,CAAC,gBAAgB,CAAC,YAAAvB,qBAAA,GAAI,oBAAoB0B,mBAAU,CAACD,OAAO,EAAE,CAAC;IAC/G5B,QAAQ,CAACyB,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC;IAEnD,MAAMK,QAAQ,GAAG7B,GAAG,CAACyB,OAAO,CAAC,kBAAkB,CAAC,IAAIzB,GAAG,CAACyB,OAAO,CAAC,iBAAiB,CAAC;IAElF,IAAII,QAAQ,IAAId,eAAM,CAACe,eAAe,EAAE;MAAA,IAAAC,oBAAA;MACtChC,QAAQ,CAACyB,SAAS,CAACQ,iCAA0B,EAAE,GAAGH,QAAQ,EAAE,CAAC;MAC7D9B,QAAQ,CAACyB,SAAS,CAACS,uCAAgC,GAAAF,oBAAA,GAAEhB,eAAM,CAACmB,YAAY,YAAAH,oBAAA,GAAI,EAAE,CAAC;IACjF;IAEAI,0BAAe,CAACC,GAAG,CAAEC,MAAM,IAAKtC,QAAQ,CAACuC,YAAY,CAACD,MAAM,CAAC,CAAC;IAE9D3C,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,8BAA8B,CAAC;IACtD,IAAIJ,GAAG,CAACuC,MAAM,KAAK,KAAK,IAAIvC,GAAG,CAACwC,IAAI,EAAE;MACpC9C,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,qCAAqC,CAAC;MAC7D,MAAMqC,QAAQ,GAAGC,IAAI,CAACC,SAAS,CAAC3C,GAAG,CAACwC,IAAI,CAAC;MACzC;MACAzC,QAAQ,CAACyB,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC;MACtDzB,QAAQ,CAACyB,SAAS,CAAC,gBAAgB,EAAEoB,MAAM,CAACC,UAAU,CAACJ,QAAQ,CAAC,CAAC;MACjE;MACA1C,QAAQ,CAAC+C,KAAK,CAACL,QAAQ,CAAC;IAC1B;EACF,CAAC,CAAC,OAAOM,CAAC,EAAE;IACVrD,MAAM,CAACsD,KAAK,CAAC,GAAGhD,GAAG,CAACI,GAAG,4BAA4B,EAAE2C,CAAC,CAAC;EACzD;AACF,CAAC;AAAC,IAAAE,QAAA,GAAAC,OAAA,CAAAC,OAAA,GAEarD,oBAAoB","ignoreList":[]}
+{"version":3,"file":"ProxyRequestCallback.js","names":["_package","_interopRequireDefault","require","_sdkVersion","_config","_cookies","_fronteggLogger","_helpers","_utils","_constants","_headers","logger","fronteggLogger","child","tag","ProxyRequestCallback","proxyReq","req","_req$headers$xFronte","_req$headers$xFronte2","info","url","debug","allCookies","CookieManager","parseCookieHeader","fronteggCookiesNames","Object","keys","filter","cookieName","startsWith","config","join","modifiedCookies","forEach","requestCookieName","rewriteCookieByAppId","appId","replace","clientId","setHeader","headers","NextJsPkg","version","sdkVersion","clientIp","getClientIp","shouldForwardIp","_config$sharedSecret","FRONTEGG_FORWARD_IP_HEADER","FRONTEGG_HEADERS_VERIFIER_HEADER","sharedSecret","isRefreshTokenRequest","removeHeader","headersToRemove","map","header","method","body","bodyData","JSON","stringify","Buffer","byteLength","write","e","error","_default","exports","default"],"sources":["../../../../packages/nextjs/src/middleware/ProxyRequestCallback.ts"],"sourcesContent":["import NextJsPkg from 'next/package.json';\nimport { ProxyReqCallback } from 'http-proxy';\nimport { ClientRequest } from 'http';\nimport { NextApiRequest } from 'next';\nimport sdkVersion from '../sdkVersion';\nimport config from '../config';\nimport CookieManager from '../utils/cookies';\nimport fronteggLogger from '../utils/fronteggLogger';\nimport { isRefreshTokenRequest } from '../utils/refreshAccessTokenIfNeeded/helpers';\nimport { FRONTEGG_HEADERS_VERIFIER_HEADER, FRONTEGG_FORWARD_IP_HEADER } from '../api/utils';\nimport { headersToRemove } from './constants';\nimport { getClientIp } from '../utils/headers';\n\nconst logger = fronteggLogger.child({ tag: 'FronteggApiMiddleware.ProxyRequestCallback' });\n/**\n * Proxy request callback fired on before each request to Frontegg services,\n * to transport frontegg cookies.\n *\n * @param {ClientRequest} proxyReq - Proxy request to be sent\n * @param {NextApiRequest} req - Next.js incoming request\n */\nconst ProxyRequestCallback: ProxyReqCallback<ClientRequest, NextApiRequest> = (proxyReq, req) => {\n  try {\n    logger.info(`${req.url} | Going to proxy request`);\n    logger.debug(`${req.url} | parsing request cookies`);\n    const allCookies = CookieManager.parseCookieHeader(req);\n    logger.debug(`${req.url} | found ${allCookies} cookies`);\n    const fronteggCookiesNames = Object.keys(allCookies).filter((cookieName) => {\n      return cookieName.startsWith('fe_') && !cookieName.startsWith(config.cookieName);\n    });\n\n    logger.debug(`${req.url} | proxy FronteggCookies (${fronteggCookiesNames.join(', ')})`);\n    let modifiedCookies = ``;\n\n    fronteggCookiesNames.forEach((requestCookieName: string) => {\n      let cookieName = requestCookieName;\n      if (config.rewriteCookieByAppId && config.appId) {\n        cookieName = requestCookieName\n          .replace(config.appId, config.clientId)\n          .replace(config.appId.replace(/-/g, ''), config.clientId.replace(/-/g, ''))\n          .replace(config.appId.replace('-', ''), config.clientId.replace('-', ''));\n\n        logger.debug(`cookieName ${requestCookieName} replaced with appId ${cookieName}`);\n      }\n\n      logger.debug(`PROXY_ADDING_COOKIE ${cookieName}, ${allCookies[requestCookieName]}`);\n      modifiedCookies += `${cookieName}=${allCookies[requestCookieName]}; `;\n    });\n    proxyReq.setHeader('cookie', modifiedCookies);\n\n    proxyReq.setHeader('x-frontegg-framework', req.headers['x-frontegg-framework'] ?? `next@${NextJsPkg.version}`);\n    proxyReq.setHeader('x-frontegg-sdk', req.headers['x-frontegg-sdk'] ?? `@frontegg/nextjs@${sdkVersion.version}`);\n    proxyReq.setHeader('x-frontegg-middleware', 'true');\n\n    const clientIp = getClientIp(req.headers['cf-connecting-ip'] || req.headers['x-forwarded-for']);\n\n    if (clientIp && config.shouldForwardIp) {\n      proxyReq.setHeader(FRONTEGG_FORWARD_IP_HEADER, clientIp);\n      proxyReq.setHeader(\n        'proxy-request-callback',\n        `req.headers['cf-connecting-ip'] ${req.headers['cf-connecting-ip']} | req.headers['x-forwarded-for'] ${req.headers['x-forwarded-for']}`\n      );\n      proxyReq.setHeader(FRONTEGG_HEADERS_VERIFIER_HEADER, config.sharedSecret ?? '');\n    }\n\n    if (isRefreshTokenRequest(req.url!)) {\n      logger.debug(`${req.url} | removing Authorization header`);\n      proxyReq.removeHeader('authorization');\n    }\n\n    headersToRemove.map((header) => proxyReq.removeHeader(header));\n\n    logger.debug(`${req.url} | check if request has body`);\n    if (req.method !== 'GET' && req.body) {\n      logger.debug(`${req.url} | writing request body to proxyReq`);\n      const bodyData = JSON.stringify(req.body);\n      // in case if content-type is application/x-www-form-urlencoded -> we need to change to application/json\n      proxyReq.setHeader('Content-Type', 'application/json');\n      proxyReq.setHeader('Content-Length', Buffer.byteLength(bodyData));\n      // stream the content\n      proxyReq.write(bodyData);\n    }\n  } catch (e) {\n    logger.error(`${req.url} | Failed to proxy request`, e);\n  }\n};\n\nexport default ProxyRequestCallback;\n"],"mappings":";;;;;;;AAAA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIA,IAAAC,WAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,OAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,eAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,QAAA,GAAAL,OAAA;AACA,IAAAM,MAAA,GAAAN,OAAA;AACA,IAAAO,UAAA,GAAAP,OAAA;AACA,IAAAQ,QAAA,GAAAR,OAAA;AAEA,MAAMS,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;EAAEC,GAAG,EAAE;AAA6C,CAAC,CAAC;AAC1F;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,oBAAqE,GAAGA,CAACC,QAAQ,EAAEC,GAAG,KAAK;EAC/F,IAAI;IAAA,IAAAC,oBAAA,EAAAC,qBAAA;IACFR,MAAM,CAACS,IAAI,CAAC,GAAGH,GAAG,CAACI,GAAG,2BAA2B,CAAC;IAClDV,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,4BAA4B,CAAC;IACpD,MAAME,UAAU,GAAGC,gBAAa,CAACC,iBAAiB,CAACR,GAAG,CAAC;IACvDN,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,YAAYE,UAAU,UAAU,CAAC;IACxD,MAAMG,oBAAoB,GAAGC,MAAM,CAACC,IAAI,CAACL,UAAU,CAAC,CAACM,MAAM,CAAEC,UAAU,IAAK;MAC1E,OAAOA,UAAU,CAACC,UAAU,CAAC,KAAK,CAAC,IAAI,CAACD,UAAU,CAACC,UAAU,CAACC,eAAM,CAACF,UAAU,CAAC;IAClF,CAAC,CAAC;IAEFnB,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,6BAA6BK,oBAAoB,CAACO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACvF,IAAIC,eAAe,GAAG,EAAE;IAExBR,oBAAoB,CAACS,OAAO,CAAEC,iBAAyB,IAAK;MAC1D,IAAIN,UAAU,GAAGM,iBAAiB;MAClC,IAAIJ,eAAM,CAACK,oBAAoB,IAAIL,eAAM,CAACM,KAAK,EAAE;QAC/CR,UAAU,GAAGM,iBAAiB,CAC3BG,OAAO,CAACP,eAAM,CAACM,KAAK,EAAEN,eAAM,CAACQ,QAAQ,CAAC,CACtCD,OAAO,CAACP,eAAM,CAACM,KAAK,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAEP,eAAM,CAACQ,QAAQ,CAACD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAC1EA,OAAO,CAACP,eAAM,CAACM,KAAK,CAACC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAEP,eAAM,CAACQ,QAAQ,CAACD,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE3E5B,MAAM,CAACW,KAAK,CAAC,cAAcc,iBAAiB,wBAAwBN,UAAU,EAAE,CAAC;MACnF;MAEAnB,MAAM,CAACW,KAAK,CAAC,uBAAuBQ,UAAU,KAAKP,UAAU,CAACa,iBAAiB,CAAC,EAAE,CAAC;MACnFF,eAAe,IAAI,GAAGJ,UAAU,IAAIP,UAAU,CAACa,iBAAiB,CAAC,IAAI;IACvE,CAAC,CAAC;IACFpB,QAAQ,CAACyB,SAAS,CAAC,QAAQ,EAAEP,eAAe,CAAC;IAE7ClB,QAAQ,CAACyB,SAAS,CAAC,sBAAsB,GAAAvB,oBAAA,GAAED,GAAG,CAACyB,OAAO,CAAC,sBAAsB,CAAC,YAAAxB,oBAAA,GAAI,QAAQyB,gBAAS,CAACC,OAAO,EAAE,CAAC;IAC9G5B,QAAQ,CAACyB,SAAS,CAAC,gBAAgB,GAAAtB,qBAAA,GAAEF,GAAG,CAACyB,OAAO,CAAC,gBAAgB,CAAC,YAAAvB,qBAAA,GAAI,oBAAoB0B,mBAAU,CAACD,OAAO,EAAE,CAAC;IAC/G5B,QAAQ,CAACyB,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC;IAEnD,MAAMK,QAAQ,GAAG,IAAAC,oBAAW,EAAC9B,GAAG,CAACyB,OAAO,CAAC,kBAAkB,CAAC,IAAIzB,GAAG,CAACyB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAE/F,IAAII,QAAQ,IAAId,eAAM,CAACgB,eAAe,EAAE;MAAA,IAAAC,oBAAA;MACtCjC,QAAQ,CAACyB,SAAS,CAACS,iCAA0B,EAAEJ,QAAQ,CAAC;MACxD9B,QAAQ,CAACyB,SAAS,CAChB,wBAAwB,EACxB,mCAAmCxB,GAAG,CAACyB,OAAO,CAAC,kBAAkB,CAAC,qCAAqCzB,GAAG,CAACyB,OAAO,CAAC,iBAAiB,CAAC,EACvI,CAAC;MACD1B,QAAQ,CAACyB,SAAS,CAACU,uCAAgC,GAAAF,oBAAA,GAAEjB,eAAM,CAACoB,YAAY,YAAAH,oBAAA,GAAI,EAAE,CAAC;IACjF;IAEA,IAAI,IAAAI,8BAAqB,EAACpC,GAAG,CAACI,GAAI,CAAC,EAAE;MACnCV,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,kCAAkC,CAAC;MAC1DL,QAAQ,CAACsC,YAAY,CAAC,eAAe,CAAC;IACxC;IAEAC,0BAAe,CAACC,GAAG,CAAEC,MAAM,IAAKzC,QAAQ,CAACsC,YAAY,CAACG,MAAM,CAAC,CAAC;IAE9D9C,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,8BAA8B,CAAC;IACtD,IAAIJ,GAAG,CAACyC,MAAM,KAAK,KAAK,IAAIzC,GAAG,CAAC0C,IAAI,EAAE;MACpChD,MAAM,CAACW,KAAK,CAAC,GAAGL,GAAG,CAACI,GAAG,qCAAqC,CAAC;MAC7D,MAAMuC,QAAQ,GAAGC,IAAI,CAACC,SAAS,CAAC7C,GAAG,CAAC0C,IAAI,CAAC;MACzC;MACA3C,QAAQ,CAACyB,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC;MACtDzB,QAAQ,CAACyB,SAAS,CAAC,gBAAgB,EAAEsB,MAAM,CAACC,UAAU,CAACJ,QAAQ,CAAC,CAAC;MACjE;MACA5C,QAAQ,CAACiD,KAAK,CAACL,QAAQ,CAAC;IAC1B;EACF,CAAC,CAAC,OAAOM,CAAC,EAAE;IACVvD,MAAM,CAACwD,KAAK,CAAC,GAAGlD,GAAG,CAACI,GAAG,4BAA4B,EAAE6C,CAAC,CAAC;EACzD;AACF,CAAC;AAAC,IAAAE,QAAA,GAAAC,OAAA,CAAAC,OAAA,GAEavD,oBAAoB","ignoreList":[]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@frontegg/nextjs",
   "libName": "FronteggNextJs",
-  "version": "9.2.2-alpha.13943158357",
+  "version": "9.2.2-alpha.13969697706",
   "author": "Frontegg LTD",
   "license": "MIT",
   "repository": {

package/sdkVersion.js

@@ -5,6 +5,6 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.default = void 0;
 var _default = exports.default = {
-  version: '9.2.2-alpha.13943158357'
+  version: '9.2.2-alpha.13969697706'
 };
 //# sourceMappingURL=sdkVersion.js.map

package/sdkVersion.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdkVersion.js","names":["version"],"sources":["../../../packages/nextjs/src/sdkVersion.ts"],"sourcesContent":["export default { version: '9.2.2-alpha.13943158357' };\n"],"mappings":";;;;;;iCAAe;EAAEA,OAAO,EAAE;AAA0B,CAAC","ignoreList":[]}
+{"version":3,"file":"sdkVersion.js","names":["version"],"sources":["../../../packages/nextjs/src/sdkVersion.ts"],"sourcesContent":["export default { version: '9.2.2-alpha.13969697706' };\n"],"mappings":";;;;;;iCAAe;EAAEA,OAAO,EAAE;AAA0B,CAAC","ignoreList":[]}

package/utils/fetchUserData/index.js

@@ -11,6 +11,7 @@ var _common = require("../common");
 var _fronteggLogger = _interopRequireDefault(require("../fronteggLogger"));
 var _config = _interopRequireDefault(require("../../config"));
 var _utils = require("../../api/utils");
+var _headers = require("../headers");
 const FULFILLED_STATUS = 'fulfilled';
 async function fetchUserData(options) {
   const {
@@ -38,10 +39,10 @@ async function fetchUserData(options) {
     }
     if (_config.default.shouldForwardIp) {
       logger.debug('Retrieving forwarded IP...');
-      let clientIp = reqHeaders['cf-connecting-ip'] || reqHeaders['x-vercel-proxied-for'] || reqHeaders['x-real-ip'] || reqHeaders['x-forwarded-for'];
-      clientIp = Array.isArray(clientIp) ? clientIp[0] : clientIp;
+      const clientIp = (0, _headers.getClientIp)(reqHeaders['cf-connecting-ip'] || reqHeaders['x-vercel-proxied-for'] || reqHeaders['x-real-ip'] || reqHeaders['x-forwarded-for']);
       if (clientIp) {
         headers[_utils.FRONTEGG_FORWARD_IP_HEADER] = clientIp;
+        headers['fetch-user-data'] = `reqHeaders['cf-connecting-ip'] ${reqHeaders['cf-connecting-ip']} | reqHeaders['x-vercel-proxied-for'] ${reqHeaders['x-vercel-proxied-for']} | reqHeaders['x-real-ip'] ${reqHeaders['x-real-ip']} | reqHeaders['x-forwarded-for'] ${reqHeaders['x-forwarded-for']}`;
       }
     }
     logger.debug('Retrieving user data...');

package/utils/fetchUserData/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_api","require","_common","_fronteggLogger","_interopRequireDefault","_config","_utils","FULFILLED_STATUS","fetchUserData","options","getSession","getHeaders","logger","fronteggLogger","child","tag","session","info","accessToken","reqHeaders","headers","_extends2","default","authorization","config","appId","FRONTEGG_APPLICATION_ID_HEADER","shouldForwardIp","debug","clientIp","Array","isArray","FRONTEGG_FORWARD_IP_HEADER","baseUserResult","tenantsResult","entitlementsResult","meAuthorizationResult","Promise","allSettled","getMe","getTenants","getEntitlements","getMeAuthorization","status","baseUser","value","tenantsResponse","meAuthorizationResponse","entitlementsResponse","undefined","user","entitlements","expiresIn","calculateExpiresInFromExp","exp","tenants","activeTenant","e"],"sources":["../../../../../packages/nextjs/src/utils/fetchUserData/index.ts"],"sourcesContent":["import { AllUserData, FronteggNextJSSession } from '../../types';\nimport { getTenants, getMe, getMeAuthorization, getEntitlements } from '../../api';\nimport { calculateExpiresInFromExp } from '../common';\nimport fronteggLogger from '../fronteggLogger';\nimport config from '../../config';\nimport { FRONTEGG_APPLICATION_ID_HEADER, FRONTEGG_FORWARD_IP_HEADER } from '../../api/utils';\n\nconst FULFILLED_STATUS = 'fulfilled';\n\ntype FetchUserDataOptions = {\n  getSession: () => Promise<FronteggNextJSSession | undefined | null>;\n  getHeaders: () => Promise<Record<string, string | string[] | undefined>>;\n};\n\nexport default async function fetchUserData(options: FetchUserDataOptions): Promise<AllUserData> {\n  const { getSession, getHeaders } = options;\n\n  const logger = fronteggLogger.child({ tag: 'fetchUserData.getAllUserData' });\n  try {\n    const session = await getSession();\n    if (!session) {\n      logger.info('No session found');\n      return {};\n    }\n\n    const { accessToken } = session;\n    const reqHeaders = await getHeaders();\n    const headers: Record<string, string> = { ...reqHeaders, authorization: `Bearer ${accessToken}` };\n\n    if (config.appId) {\n      headers[FRONTEGG_APPLICATION_ID_HEADER] = config.appId;\n    }\n\n    if (config.shouldForwardIp) {\n      logger.debug('Retrieving forwarded IP...');\n      let clientIp =\n        reqHeaders['cf-connecting-ip'] ||\n        reqHeaders['x-vercel-proxied-for'] ||\n        reqHeaders['x-real-ip'] ||\n        reqHeaders['x-forwarded-for'];\n      clientIp = Array.isArray(clientIp) ? clientIp[0] : clientIp;\n      if (clientIp) {\n        headers[FRONTEGG_FORWARD_IP_HEADER] = clientIp;\n      }\n    }\n\n    logger.debug('Retrieving user data...');\n    const [baseUserResult, tenantsResult, entitlementsResult, meAuthorizationResult] = await Promise.allSettled([\n      getMe(headers),\n      getTenants(headers),\n      getEntitlements(headers),\n      getMeAuthorization(headers),\n    ]);\n\n    logger.debug(\n      'Retrieved user data:',\n      'baseUserResult: ',\n      baseUserResult.status,\n      'tenantsResult:',\n      tenantsResult.status,\n      'entitlements:',\n      entitlementsResult.status\n    );\n\n    const baseUser = baseUserResult.status === FULFILLED_STATUS ? baseUserResult.value : null;\n    const tenantsResponse = tenantsResult.status === FULFILLED_STATUS ? tenantsResult.value : null;\n    const meAuthorizationResponse =\n      meAuthorizationResult.status === FULFILLED_STATUS ? meAuthorizationResult.value : null;\n    const entitlementsResponse = entitlementsResult.status === FULFILLED_STATUS ? entitlementsResult.value : undefined;\n\n    if (!baseUser || !tenantsResponse) {\n      logger.info('No base user or tenants found');\n      return {};\n    }\n\n    const user = {\n      ...session.user,\n      ...baseUser!,\n      ...meAuthorizationResponse,\n      entitlements: entitlementsResponse,\n      expiresIn: calculateExpiresInFromExp(session.user.exp),\n    };\n\n    logger.info('Retrieved all user data successfully');\n\n    const { tenants, activeTenant } = tenantsResponse;\n    return { user, session, tenants, activeTenant };\n  } catch (e: any) {\n    // logger.error(e.message, e);\n    return {};\n  }\n}\n"],"mappings":";;;;;;;;AACA,IAAAA,IAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,eAAA,GAAAC,sBAAA,CAAAH,OAAA;AACA,IAAAI,OAAA,GAAAD,sBAAA,CAAAH,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AAEA,MAAMM,gBAAgB,GAAG,WAAW;AAOrB,eAAeC,aAAaA,CAACC,OAA6B,EAAwB;EAC/F,MAAM;IAAEC,UAAU;IAAEC;EAAW,CAAC,GAAGF,OAAO;EAE1C,MAAMG,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA+B,CAAC,CAAC;EAC5E,IAAI;IACF,MAAMC,OAAO,GAAG,MAAMN,UAAU,CAAC,CAAC;IAClC,IAAI,CAACM,OAAO,EAAE;MACZJ,MAAM,CAACK,IAAI,CAAC,kBAAkB,CAAC;MAC/B,OAAO,CAAC,CAAC;IACX;IAEA,MAAM;MAAEC;IAAY,CAAC,GAAGF,OAAO;IAC/B,MAAMG,UAAU,GAAG,MAAMR,UAAU,CAAC,CAAC;IACrC,MAAMS,OAA+B,OAAAC,SAAA,CAAAC,OAAA,MAAQH,UAAU;MAAEI,aAAa,EAAE,UAAUL,WAAW;IAAE,EAAE;IAEjG,IAAIM,eAAM,CAACC,KAAK,EAAE;MAChBL,OAAO,CAACM,qCAA8B,CAAC,GAAGF,eAAM,CAACC,KAAK;IACxD;IAEA,IAAID,eAAM,CAACG,eAAe,EAAE;MAC1Bf,MAAM,CAACgB,KAAK,CAAC,4BAA4B,CAAC;MAC1C,IAAIC,QAAQ,GACVV,UAAU,CAAC,kBAAkB,CAAC,IAC9BA,UAAU,CAAC,sBAAsB,CAAC,IAClCA,UAAU,CAAC,WAAW,CAAC,IACvBA,UAAU,CAAC,iBAAiB,CAAC;MAC/BU,QAAQ,GAAGC,KAAK,CAACC,OAAO,CAACF,QAAQ,CAAC,GAAGA,QAAQ,CAAC,CAAC,CAAC,GAAGA,QAAQ;MAC3D,IAAIA,QAAQ,EAAE;QACZT,OAAO,CAACY,iCAA0B,CAAC,GAAGH,QAAQ;MAChD;IACF;IAEAjB,MAAM,CAACgB,KAAK,CAAC,yBAAyB,CAAC;IACvC,MAAM,CAACK,cAAc,EAAEC,aAAa,EAAEC,kBAAkB,EAAEC,qBAAqB,CAAC,GAAG,MAAMC,OAAO,CAACC,UAAU,CAAC,CAC1G,IAAAC,UAAK,EAACnB,OAAO,CAAC,EACd,IAAAoB,eAAU,EAACpB,OAAO,CAAC,EACnB,IAAAqB,oBAAe,EAACrB,OAAO,CAAC,EACxB,IAAAsB,uBAAkB,EAACtB,OAAO,CAAC,CAC5B,CAAC;IAEFR,MAAM,CAACgB,KAAK,CACV,sBAAsB,EACtB,kBAAkB,EAClBK,cAAc,CAACU,MAAM,EACrB,gBAAgB,EAChBT,aAAa,CAACS,MAAM,EACpB,eAAe,EACfR,kBAAkB,CAACQ,MACrB,CAAC;IAED,MAAMC,QAAQ,GAAGX,cAAc,CAACU,MAAM,KAAKpC,gBAAgB,GAAG0B,cAAc,CAACY,KAAK,GAAG,IAAI;IACzF,MAAMC,eAAe,GAAGZ,aAAa,CAACS,MAAM,KAAKpC,gBAAgB,GAAG2B,aAAa,CAACW,KAAK,GAAG,IAAI;IAC9F,MAAME,uBAAuB,GAC3BX,qBAAqB,CAACO,MAAM,KAAKpC,gBAAgB,GAAG6B,qBAAqB,CAACS,KAAK,GAAG,IAAI;IACxF,MAAMG,oBAAoB,GAAGb,kBAAkB,CAACQ,MAAM,KAAKpC,gBAAgB,GAAG4B,kBAAkB,CAACU,KAAK,GAAGI,SAAS;IAElH,IAAI,CAACL,QAAQ,IAAI,CAACE,eAAe,EAAE;MACjClC,MAAM,CAACK,IAAI,CAAC,+BAA+B,CAAC;MAC5C,OAAO,CAAC,CAAC;IACX;IAEA,MAAMiC,IAAI,OAAA7B,SAAA,CAAAC,OAAA,MACLN,OAAO,CAACkC,IAAI,EACZN,QAAQ,EACRG,uBAAuB;MAC1BI,YAAY,EAAEH,oBAAoB;MAClCI,SAAS,EAAE,IAAAC,iCAAyB,EAACrC,OAAO,CAACkC,IAAI,CAACI,GAAG;IAAC,EACvD;IAED1C,MAAM,CAACK,IAAI,CAAC,sCAAsC,CAAC;IAEnD,MAAM;MAAEsC,OAAO;MAAEC;IAAa,CAAC,GAAGV,eAAe;IACjD,OAAO;MAAEI,IAAI;MAAElC,OAAO;MAAEuC,OAAO;MAAEC;IAAa,CAAC;EACjD,CAAC,CAAC,OAAOC,CAAM,EAAE;IACf;IACA,OAAO,CAAC,CAAC;EACX;AACF","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_api","require","_common","_fronteggLogger","_interopRequireDefault","_config","_utils","_headers","FULFILLED_STATUS","fetchUserData","options","getSession","getHeaders","logger","fronteggLogger","child","tag","session","info","accessToken","reqHeaders","headers","_extends2","default","authorization","config","appId","FRONTEGG_APPLICATION_ID_HEADER","shouldForwardIp","debug","clientIp","getClientIp","FRONTEGG_FORWARD_IP_HEADER","baseUserResult","tenantsResult","entitlementsResult","meAuthorizationResult","Promise","allSettled","getMe","getTenants","getEntitlements","getMeAuthorization","status","baseUser","value","tenantsResponse","meAuthorizationResponse","entitlementsResponse","undefined","user","entitlements","expiresIn","calculateExpiresInFromExp","exp","tenants","activeTenant","e"],"sources":["../../../../../packages/nextjs/src/utils/fetchUserData/index.ts"],"sourcesContent":["import { AllUserData, FronteggNextJSSession } from '../../types';\nimport { getTenants, getMe, getMeAuthorization, getEntitlements } from '../../api';\nimport { calculateExpiresInFromExp } from '../common';\nimport fronteggLogger from '../fronteggLogger';\nimport config from '../../config';\nimport { FRONTEGG_APPLICATION_ID_HEADER, FRONTEGG_FORWARD_IP_HEADER } from '../../api/utils';\nimport { getClientIp } from '../headers';\n\nconst FULFILLED_STATUS = 'fulfilled';\n\ntype FetchUserDataOptions = {\n  getSession: () => Promise<FronteggNextJSSession | undefined | null>;\n  getHeaders: () => Promise<Record<string, string | string[] | undefined>>;\n};\n\nexport default async function fetchUserData(options: FetchUserDataOptions): Promise<AllUserData> {\n  const { getSession, getHeaders } = options;\n\n  const logger = fronteggLogger.child({ tag: 'fetchUserData.getAllUserData' });\n  try {\n    const session = await getSession();\n    if (!session) {\n      logger.info('No session found');\n      return {};\n    }\n\n    const { accessToken } = session;\n    const reqHeaders = await getHeaders();\n    const headers: Record<string, string> = { ...reqHeaders, authorization: `Bearer ${accessToken}` };\n\n    if (config.appId) {\n      headers[FRONTEGG_APPLICATION_ID_HEADER] = config.appId;\n    }\n\n    if (config.shouldForwardIp) {\n      logger.debug('Retrieving forwarded IP...');\n      const clientIp = getClientIp(\n        reqHeaders['cf-connecting-ip'] ||\n          reqHeaders['x-vercel-proxied-for'] ||\n          reqHeaders['x-real-ip'] ||\n          reqHeaders['x-forwarded-for']\n      );\n      if (clientIp) {\n        headers[FRONTEGG_FORWARD_IP_HEADER] = clientIp;\n        headers[\n          'fetch-user-data'\n        ] = `reqHeaders['cf-connecting-ip'] ${reqHeaders['cf-connecting-ip']} | reqHeaders['x-vercel-proxied-for'] ${reqHeaders['x-vercel-proxied-for']} | reqHeaders['x-real-ip'] ${reqHeaders['x-real-ip']} | reqHeaders['x-forwarded-for'] ${reqHeaders['x-forwarded-for']}`;\n      }\n    }\n\n    logger.debug('Retrieving user data...');\n    const [baseUserResult, tenantsResult, entitlementsResult, meAuthorizationResult] = await Promise.allSettled([\n      getMe(headers),\n      getTenants(headers),\n      getEntitlements(headers),\n      getMeAuthorization(headers),\n    ]);\n\n    logger.debug(\n      'Retrieved user data:',\n      'baseUserResult: ',\n      baseUserResult.status,\n      'tenantsResult:',\n      tenantsResult.status,\n      'entitlements:',\n      entitlementsResult.status\n    );\n\n    const baseUser = baseUserResult.status === FULFILLED_STATUS ? baseUserResult.value : null;\n    const tenantsResponse = tenantsResult.status === FULFILLED_STATUS ? tenantsResult.value : null;\n    const meAuthorizationResponse =\n      meAuthorizationResult.status === FULFILLED_STATUS ? meAuthorizationResult.value : null;\n    const entitlementsResponse = entitlementsResult.status === FULFILLED_STATUS ? entitlementsResult.value : undefined;\n\n    if (!baseUser || !tenantsResponse) {\n      logger.info('No base user or tenants found');\n      return {};\n    }\n\n    const user = {\n      ...session.user,\n      ...baseUser!,\n      ...meAuthorizationResponse,\n      entitlements: entitlementsResponse,\n      expiresIn: calculateExpiresInFromExp(session.user.exp),\n    };\n\n    logger.info('Retrieved all user data successfully');\n\n    const { tenants, activeTenant } = tenantsResponse;\n    return { user, session, tenants, activeTenant };\n  } catch (e: any) {\n    // logger.error(e.message, e);\n    return {};\n  }\n}\n"],"mappings":";;;;;;;;AACA,IAAAA,IAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,eAAA,GAAAC,sBAAA,CAAAH,OAAA;AACA,IAAAI,OAAA,GAAAD,sBAAA,CAAAH,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,QAAA,GAAAN,OAAA;AAEA,MAAMO,gBAAgB,GAAG,WAAW;AAOrB,eAAeC,aAAaA,CAACC,OAA6B,EAAwB;EAC/F,MAAM;IAAEC,UAAU;IAAEC;EAAW,CAAC,GAAGF,OAAO;EAE1C,MAAMG,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA+B,CAAC,CAAC;EAC5E,IAAI;IACF,MAAMC,OAAO,GAAG,MAAMN,UAAU,CAAC,CAAC;IAClC,IAAI,CAACM,OAAO,EAAE;MACZJ,MAAM,CAACK,IAAI,CAAC,kBAAkB,CAAC;MAC/B,OAAO,CAAC,CAAC;IACX;IAEA,MAAM;MAAEC;IAAY,CAAC,GAAGF,OAAO;IAC/B,MAAMG,UAAU,GAAG,MAAMR,UAAU,CAAC,CAAC;IACrC,MAAMS,OAA+B,OAAAC,SAAA,CAAAC,OAAA,MAAQH,UAAU;MAAEI,aAAa,EAAE,UAAUL,WAAW;IAAE,EAAE;IAEjG,IAAIM,eAAM,CAACC,KAAK,EAAE;MAChBL,OAAO,CAACM,qCAA8B,CAAC,GAAGF,eAAM,CAACC,KAAK;IACxD;IAEA,IAAID,eAAM,CAACG,eAAe,EAAE;MAC1Bf,MAAM,CAACgB,KAAK,CAAC,4BAA4B,CAAC;MAC1C,MAAMC,QAAQ,GAAG,IAAAC,oBAAW,EAC1BX,UAAU,CAAC,kBAAkB,CAAC,IAC5BA,UAAU,CAAC,sBAAsB,CAAC,IAClCA,UAAU,CAAC,WAAW,CAAC,IACvBA,UAAU,CAAC,iBAAiB,CAChC,CAAC;MACD,IAAIU,QAAQ,EAAE;QACZT,OAAO,CAACW,iCAA0B,CAAC,GAAGF,QAAQ;QAC9CT,OAAO,CACL,iBAAiB,CAClB,GAAG,kCAAkCD,UAAU,CAAC,kBAAkB,CAAC,yCAAyCA,UAAU,CAAC,sBAAsB,CAAC,8BAA8BA,UAAU,CAAC,WAAW,CAAC,oCAAoCA,UAAU,CAAC,iBAAiB,CAAC,EAAE;MACzQ;IACF;IAEAP,MAAM,CAACgB,KAAK,CAAC,yBAAyB,CAAC;IACvC,MAAM,CAACI,cAAc,EAAEC,aAAa,EAAEC,kBAAkB,EAAEC,qBAAqB,CAAC,GAAG,MAAMC,OAAO,CAACC,UAAU,CAAC,CAC1G,IAAAC,UAAK,EAAClB,OAAO,CAAC,EACd,IAAAmB,eAAU,EAACnB,OAAO,CAAC,EACnB,IAAAoB,oBAAe,EAACpB,OAAO,CAAC,EACxB,IAAAqB,uBAAkB,EAACrB,OAAO,CAAC,CAC5B,CAAC;IAEFR,MAAM,CAACgB,KAAK,CACV,sBAAsB,EACtB,kBAAkB,EAClBI,cAAc,CAACU,MAAM,EACrB,gBAAgB,EAChBT,aAAa,CAACS,MAAM,EACpB,eAAe,EACfR,kBAAkB,CAACQ,MACrB,CAAC;IAED,MAAMC,QAAQ,GAAGX,cAAc,CAACU,MAAM,KAAKnC,gBAAgB,GAAGyB,cAAc,CAACY,KAAK,GAAG,IAAI;IACzF,MAAMC,eAAe,GAAGZ,aAAa,CAACS,MAAM,KAAKnC,gBAAgB,GAAG0B,aAAa,CAACW,KAAK,GAAG,IAAI;IAC9F,MAAME,uBAAuB,GAC3BX,qBAAqB,CAACO,MAAM,KAAKnC,gBAAgB,GAAG4B,qBAAqB,CAACS,KAAK,GAAG,IAAI;IACxF,MAAMG,oBAAoB,GAAGb,kBAAkB,CAACQ,MAAM,KAAKnC,gBAAgB,GAAG2B,kBAAkB,CAACU,KAAK,GAAGI,SAAS;IAElH,IAAI,CAACL,QAAQ,IAAI,CAACE,eAAe,EAAE;MACjCjC,MAAM,CAACK,IAAI,CAAC,+BAA+B,CAAC;MAC5C,OAAO,CAAC,CAAC;IACX;IAEA,MAAMgC,IAAI,OAAA5B,SAAA,CAAAC,OAAA,MACLN,OAAO,CAACiC,IAAI,EACZN,QAAQ,EACRG,uBAAuB;MAC1BI,YAAY,EAAEH,oBAAoB;MAClCI,SAAS,EAAE,IAAAC,iCAAyB,EAACpC,OAAO,CAACiC,IAAI,CAACI,GAAG;IAAC,EACvD;IAEDzC,MAAM,CAACK,IAAI,CAAC,sCAAsC,CAAC;IAEnD,MAAM;MAAEqC,OAAO;MAAEC;IAAa,CAAC,GAAGV,eAAe;IACjD,OAAO;MAAEI,IAAI;MAAEjC,OAAO;MAAEsC,OAAO;MAAEC;IAAa,CAAC;EACjD,CAAC,CAAC,OAAOC,CAAM,EAAE;IACf;IACA,OAAO,CAAC,CAAC;EACX;AACF","ignoreList":[]}

package/utils/headers/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Extracts the real client IP address from a raw IP string or array.
+ *
+ * If the input contains multiple IPs (e.g., from the `x-forwarded-for` header),
+ * it returns only the first IP, which typically represents the real client.
+ *
+ * @param rawIp - A single IP string or an array of IPs.
+ * @returns The first IP address as a string, or undefined if not available.
+ */
+export declare function getClientIp(rawIp?: string | string[]): string | undefined;

package/utils/headers/index.js

@@ -0,0 +1,21 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getClientIp = getClientIp;
+/**
+ * Extracts the real client IP address from a raw IP string or array.
+ *
+ * If the input contains multiple IPs (e.g., from the `x-forwarded-for` header),
+ * it returns only the first IP, which typically represents the real client.
+ *
+ * @param rawIp - A single IP string or an array of IPs.
+ * @returns The first IP address as a string, or undefined if not available.
+ */
+function getClientIp(rawIp) {
+  if (!rawIp) return undefined;
+  const ip = Array.isArray(rawIp) ? rawIp[0] : rawIp;
+  return ip.split(',')[0].trim();
+}
+//# sourceMappingURL=index.js.map

package/utils/headers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["getClientIp","rawIp","undefined","ip","Array","isArray","split","trim"],"sources":["../../../../../packages/nextjs/src/utils/headers/index.ts"],"sourcesContent":["/**\n * Extracts the real client IP address from a raw IP string or array.\n *\n * If the input contains multiple IPs (e.g., from the `x-forwarded-for` header),\n * it returns only the first IP, which typically represents the real client.\n *\n * @param rawIp - A single IP string or an array of IPs.\n * @returns The first IP address as a string, or undefined if not available.\n */\nexport function getClientIp(rawIp?: string | string[]): string | undefined {\n  if (!rawIp) return undefined;\n  const ip = Array.isArray(rawIp) ? rawIp[0] : rawIp;\n  return ip.split(',')[0].trim();\n}\n"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASA,WAAWA,CAACC,KAAyB,EAAsB;EACzE,IAAI,CAACA,KAAK,EAAE,OAAOC,SAAS;EAC5B,MAAMC,EAAE,GAAGC,KAAK,CAACC,OAAO,CAACJ,KAAK,CAAC,GAAGA,KAAK,CAAC,CAAC,CAAC,GAAGA,KAAK;EAClD,OAAOE,EAAE,CAACG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAACC,IAAI,CAAC,CAAC;AAChC","ignoreList":[]}

package/utils/headers/package.json

@@ -0,0 +1,6 @@
+{
+  "sideEffects": false,
+  "module": "./index.js",
+  "main": "./index.js",
+  "types": "./index.d.ts"
+}

package/utils/initializeFronteggApp/index.js

@@ -63,32 +63,31 @@ const initializeFronteggApp = ({
         return options.envBaseUrl;
       }
     },
-    beforeRequestInterceptor: (reqOptions, url) => {
+    beforeRequestInterceptor: (options, url) => {
       /**
        * Determines whether the authorization header should be removed from a request.
        * @param {String} urlStr - The URL of the request.
        */
       try {
-        if (url && reqOptions.headers) {
+        if (url && options.headers) {
           const {
             pathname,
             origin
           } = new URL(url);
-          if (typeof window !== 'undefined' && origin !== window.location.origin) {
-            return (0, _extends2.default)({}, reqOptions, {
+          if (typeof window !== 'undefined' && origin != window.location.origin) {
+            return (0, _extends2.default)({}, options, {
               url
             });
           }
-          const excludedPaths = [_urls.CommonUrls.refreshToken.embedded, _urls.CommonUrls.refreshToken.hosted, _urls.CommonUrls.activateAccount.activate, _urls.CommonUrls.logout];
-          if (excludedPaths.some(path => pathname.endsWith(path))) {
-            delete reqOptions.headers['authorization'];
-            delete reqOptions.headers['Authorization'];
+          if ([_urls.CommonUrls.refreshToken.embedded, _urls.CommonUrls.refreshToken.hosted, _urls.CommonUrls.activateAccount.activate, _urls.CommonUrls.logout].find(path => pathname.endsWith(path)) != undefined) {
+            delete options.headers['authorization'];
+            delete options.headers['Authorization'];
           }
         }
       } catch (e) {
         /** ignore */
       }
-      return (0, _extends2.default)({}, reqOptions, {
+      return (0, _extends2.default)({}, options, {
         url
       });
     },

package/utils/initializeFronteggApp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_js","require","_reduxStore","_sdkVersion","_interopRequireDefault","_package","_utils","_urls","initializeFronteggApp","options","onRedirectTo","appName","storeHolder","_options$authOptions","_options$authOptions2","_options$hostedLoginB","_options$authOptions$","_options$authOptions3","session","user","tenants","activeTenant","accessToken","refreshToken","contextOptions","_extends2","default","requestCredentials","additionalHeadersResolver","_options$contextOptio","additionalHeaders","originalAdditionalHeadersResolver","push","e","Array","isArray","key","value","nextjsPkg","version","sdkVersion","tokenResolver","secureJwtEnabled","undefined","baseUrl","path","isMiddlewarePath","envAppUrl","envBaseUrl","beforeRequestInterceptor","reqOptions","url","headers","pathname","origin","URL","window","location","excludedPaths","CommonUrls","embedded","hosted","activateAccount","activate","logout","some","endsWith","clientId","envClientId","appId","envAppId","tenantsState","authOptions","userData","isLoading","isAuthenticated","hostedLoginBox","disableSilentRefresh","sharedStore","store","createStore","context","previewMode","name","urlStrategy","builderMode","initialState","auth","createdApp","AppHolder","getInstance","_options$hostedLoginB2","_options$customLoginB","initialize","customLoginBox","basename","_default","exports"],"sources":["../../../../../packages/nextjs/src/utils/initializeFronteggApp/index.ts"],"sourcesContent":["import { AppHolder, FronteggApp, initialize } from '@frontegg/js';\nimport { createStore, AuthState } from '@frontegg/redux-store';\nimport { KeyValuePair } from '@frontegg/rest-api';\nimport { FronteggAppOptions } from '@frontegg/types';\nimport sdkVersion from '../../sdkVersion';\nimport type { FronteggProviderOptions } from '../../types';\nimport nextjsPkg from 'next/package.json';\nimport { isMiddlewarePath } from '../../api/utils';\nimport { CommonUrls } from '../common/urls';\n\ntype CreateOrGetFronteggAppParams = {\n  options: FronteggProviderOptions;\n  onRedirectTo: AuthState['onRedirectTo'];\n  appName?: string;\n  storeHolder: any;\n};\n\nconst initializeFronteggApp = ({\n  options,\n  onRedirectTo,\n  appName,\n  storeHolder,\n}: CreateOrGetFronteggAppParams): FronteggApp => {\n  const { session, user, tenants, activeTenant } = options;\n  const { accessToken, refreshToken } = session ?? {};\n\n  const contextOptions: FronteggAppOptions['contextOptions'] = {\n    requestCredentials: 'include' as RequestCredentials,\n    ...options.contextOptions,\n    additionalHeadersResolver: async () => {\n      const additionalHeaders: KeyValuePair[] = [];\n      const originalAdditionalHeadersResolver = options.contextOptions?.additionalHeadersResolver;\n      if (typeof originalAdditionalHeadersResolver === 'function') {\n        try {\n          additionalHeaders.push(...(await originalAdditionalHeadersResolver()));\n        } catch (e) {\n          /** ignore failed additionalHeadersResolver */\n        }\n      } else if (Array.isArray(originalAdditionalHeadersResolver)) {\n        additionalHeaders.push(...(originalAdditionalHeadersResolver as KeyValuePair[]));\n      }\n      additionalHeaders.push({\n        key: 'x-frontegg-framework',\n        value: `next@${nextjsPkg.version}`,\n      });\n      additionalHeaders.push({\n        key: 'x-frontegg-sdk',\n        value: `@frontegg/nextjs@${sdkVersion.version}`,\n      });\n      return additionalHeaders;\n    },\n    tokenResolver: options.secureJwtEnabled ? () => '' : undefined,\n    baseUrl: (path: string) => {\n      if (isMiddlewarePath(path) || options.secureJwtEnabled) {\n        return `${options.envAppUrl}/api`;\n      } else {\n        return options.envBaseUrl;\n      }\n    },\n    beforeRequestInterceptor: (reqOptions, url) => {\n      /**\n       * Determines whether the authorization header should be removed from a request.\n       * @param {String} urlStr - The URL of the request.\n       */\n      try {\n        if (url && reqOptions.headers) {\n          const { pathname, origin } = new URL(url);\n          if (typeof window !== 'undefined' && origin !== window.location.origin) {\n            return { ...reqOptions, url };\n          }\n\n          const excludedPaths = [\n            CommonUrls.refreshToken.embedded,\n            CommonUrls.refreshToken.hosted,\n            CommonUrls.activateAccount.activate,\n            CommonUrls.logout,\n          ];\n\n          if (excludedPaths.some((path) => pathname.endsWith(path))) {\n            delete reqOptions.headers['authorization'];\n            delete reqOptions.headers['Authorization'];\n          }\n        }\n      } catch (e) {\n        /** ignore */\n      }\n      return { ...reqOptions, url };\n    },\n    clientId: options.envClientId,\n    appId: options.envAppId,\n  };\n\n  const tenantsState = {\n    tenants: tenants || [],\n    activeTenant,\n    ...options.authOptions?.tenantsState,\n  };\n  const userData = user\n    ? {\n        ...user,\n        accessToken: accessToken ?? '',\n        refreshToken: refreshToken ?? undefined,\n        ...options.authOptions?.user,\n      }\n    : null;\n\n  const authOptions: FronteggAppOptions['authOptions'] = {\n    ...options.authOptions,\n    onRedirectTo,\n    isLoading: false,\n    isAuthenticated: !!options.session,\n    hostedLoginBox: options.hostedLoginBox ?? false,\n    disableSilentRefresh: options.authOptions?.disableSilentRefresh ?? true,\n    user: userData,\n    tenantsState: tenantsState as AuthState['tenantsState'],\n  };\n\n  let sharedStore = storeHolder.store;\n  if (!sharedStore) {\n    sharedStore = createStore({\n      context: contextOptions,\n      storeHolder,\n      previewMode: options.previewMode,\n      name: appName ?? 'default',\n      urlStrategy: options.urlStrategy,\n      builderMode: false,\n      initialState: {\n        auth: authOptions,\n      },\n    });\n    storeHolder.store = sharedStore;\n  }\n\n  let createdApp;\n  try {\n    createdApp = AppHolder.getInstance(appName ?? 'default');\n    createdApp.store = sharedStore;\n  } catch (e) {\n    createdApp = initialize(\n      {\n        ...options,\n        store: sharedStore,\n        hostedLoginBox: options.hostedLoginBox ?? false,\n        customLoginBox: options.customLoginBox ?? false,\n        basename: options.basename,\n        authOptions,\n        contextOptions,\n        onRedirectTo,\n      },\n      appName ?? 'default'\n    );\n  }\n  return createdApp;\n};\nexport default initializeFronteggApp;\n"],"mappings":";;;;;;;;AAAA,IAAAA,GAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AAGA,IAAAE,WAAA,GAAAC,sBAAA,CAAAH,OAAA;AAEA,IAAAI,QAAA,GAAAD,sBAAA,CAAAH,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,KAAA,GAAAN,OAAA;AASA,MAAMO,qBAAqB,GAAGA,CAAC;EAC7BC,OAAO;EACPC,YAAY;EACZC,OAAO;EACPC;AAC4B,CAAC,KAAkB;EAAA,IAAAC,oBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,qBAAA;EAC/C,MAAM;IAAEC,OAAO;IAAEC,IAAI;IAAEC,OAAO;IAAEC;EAAa,CAAC,GAAGZ,OAAO;EACxD,MAAM;IAAEa,WAAW;IAAEC;EAAa,CAAC,GAAGL,OAAO,WAAPA,OAAO,GAAI,CAAC,CAAC;EAEnD,MAAMM,cAAoD,OAAAC,SAAA,CAAAC,OAAA;IACxDC,kBAAkB,EAAE;EAA+B,GAChDlB,OAAO,CAACe,cAAc;IACzBI,yBAAyB,EAAE,MAAAA,CAAA,KAAY;MAAA,IAAAC,qBAAA;MACrC,MAAMC,iBAAiC,GAAG,EAAE;MAC5C,MAAMC,iCAAiC,IAAAF,qBAAA,GAAGpB,OAAO,CAACe,cAAc,qBAAtBK,qBAAA,CAAwBD,yBAAyB;MAC3F,IAAI,OAAOG,iCAAiC,KAAK,UAAU,EAAE;QAC3D,IAAI;UACFD,iBAAiB,CAACE,IAAI,CAAC,IAAI,MAAMD,iCAAiC,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,OAAOE,CAAC,EAAE;UACV;QAAA;MAEJ,CAAC,MAAM,IAAIC,KAAK,CAACC,OAAO,CAACJ,iCAAiC,CAAC,EAAE;QAC3DD,iBAAiB,CAACE,IAAI,CAAC,GAAID,iCAAoD,CAAC;MAClF;MACAD,iBAAiB,CAACE,IAAI,CAAC;QACrBI,GAAG,EAAE,sBAAsB;QAC3BC,KAAK,EAAE,QAAQC,gBAAS,CAACC,OAAO;MAClC,CAAC,CAAC;MACFT,iBAAiB,CAACE,IAAI,CAAC;QACrBI,GAAG,EAAE,gBAAgB;QACrBC,KAAK,EAAE,oBAAoBG,mBAAU,CAACD,OAAO;MAC/C,CAAC,CAAC;MACF,OAAOT,iBAAiB;IAC1B,CAAC;IACDW,aAAa,EAAEhC,OAAO,CAACiC,gBAAgB,GAAG,MAAM,EAAE,GAAGC,SAAS;IAC9DC,OAAO,EAAGC,IAAY,IAAK;MACzB,IAAI,IAAAC,uBAAgB,EAACD,IAAI,CAAC,IAAIpC,OAAO,CAACiC,gBAAgB,EAAE;QACtD,OAAO,GAAGjC,OAAO,CAACsC,SAAS,MAAM;MACnC,CAAC,MAAM;QACL,OAAOtC,OAAO,CAACuC,UAAU;MAC3B;IACF,CAAC;IACDC,wBAAwB,EAAEA,CAACC,UAAU,EAAEC,GAAG,KAAK;MAC7C;AACN;AACA;AACA;MACM,IAAI;QACF,IAAIA,GAAG,IAAID,UAAU,CAACE,OAAO,EAAE;UAC7B,MAAM;YAAEC,QAAQ;YAAEC;UAAO,CAAC,GAAG,IAAIC,GAAG,CAACJ,GAAG,CAAC;UACzC,IAAI,OAAOK,MAAM,KAAK,WAAW,IAAIF,MAAM,KAAKE,MAAM,CAACC,QAAQ,CAACH,MAAM,EAAE;YACtE,WAAA7B,SAAA,CAAAC,OAAA,MAAYwB,UAAU;cAAEC;YAAG;UAC7B;UAEA,MAAMO,aAAa,GAAG,CACpBC,gBAAU,CAACpC,YAAY,CAACqC,QAAQ,EAChCD,gBAAU,CAACpC,YAAY,CAACsC,MAAM,EAC9BF,gBAAU,CAACG,eAAe,CAACC,QAAQ,EACnCJ,gBAAU,CAACK,MAAM,CAClB;UAED,IAAIN,aAAa,CAACO,IAAI,CAAEpB,IAAI,IAAKQ,QAAQ,CAACa,QAAQ,CAACrB,IAAI,CAAC,CAAC,EAAE;YACzD,OAAOK,UAAU,CAACE,OAAO,CAAC,eAAe,CAAC;YAC1C,OAAOF,UAAU,CAACE,OAAO,CAAC,eAAe,CAAC;UAC5C;QACF;MACF,CAAC,CAAC,OAAOnB,CAAC,EAAE;QACV;MAAA;MAEF,WAAAR,SAAA,CAAAC,OAAA,MAAYwB,UAAU;QAAEC;MAAG;IAC7B,CAAC;IACDgB,QAAQ,EAAE1D,OAAO,CAAC2D,WAAW;IAC7BC,KAAK,EAAE5D,OAAO,CAAC6D;EAAQ,EACxB;EAED,MAAMC,YAAY,OAAA9C,SAAA,CAAAC,OAAA;IAChBN,OAAO,EAAEA,OAAO,IAAI,EAAE;IACtBC;EAAY,IAAAR,oBAAA,GACTJ,OAAO,CAAC+D,WAAW,qBAAnB3D,oBAAA,CAAqB0D,YAAY,CACrC;EACD,MAAME,QAAQ,GAAGtD,IAAI,OAAAM,SAAA,CAAAC,OAAA,MAEZP,IAAI;IACPG,WAAW,EAAEA,WAAW,WAAXA,WAAW,GAAI,EAAE;IAC9BC,YAAY,EAAEA,YAAY,WAAZA,YAAY,GAAIoB;EAAS,IAAA7B,qBAAA,GACpCL,OAAO,CAAC+D,WAAW,qBAAnB1D,qBAAA,CAAqBK,IAAI,IAE9B,IAAI;EAER,MAAMqD,WAA8C,OAAA/C,SAAA,CAAAC,OAAA,MAC/CjB,OAAO,CAAC+D,WAAW;IACtB9D,YAAY;IACZgE,SAAS,EAAE,KAAK;IAChBC,eAAe,EAAE,CAAC,CAAClE,OAAO,CAACS,OAAO;IAClC0D,cAAc,GAAA7D,qBAAA,GAAEN,OAAO,CAACmE,cAAc,YAAA7D,qBAAA,GAAI,KAAK;IAC/C8D,oBAAoB,GAAA7D,qBAAA,IAAAC,qBAAA,GAAER,OAAO,CAAC+D,WAAW,qBAAnBvD,qBAAA,CAAqB4D,oBAAoB,YAAA7D,qBAAA,GAAI,IAAI;IACvEG,IAAI,EAAEsD,QAAQ;IACdF,YAAY,EAAEA;EAAyC,EACxD;EAED,IAAIO,WAAW,GAAGlE,WAAW,CAACmE,KAAK;EACnC,IAAI,CAACD,WAAW,EAAE;IAChBA,WAAW,GAAG,IAAAE,uBAAW,EAAC;MACxBC,OAAO,EAAEzD,cAAc;MACvBZ,WAAW;MACXsE,WAAW,EAAEzE,OAAO,CAACyE,WAAW;MAChCC,IAAI,EAAExE,OAAO,WAAPA,OAAO,GAAI,SAAS;MAC1ByE,WAAW,EAAE3E,OAAO,CAAC2E,WAAW;MAChCC,WAAW,EAAE,KAAK;MAClBC,YAAY,EAAE;QACZC,IAAI,EAAEf;MACR;IACF,CAAC,CAAC;IACF5D,WAAW,CAACmE,KAAK,GAAGD,WAAW;EACjC;EAEA,IAAIU,UAAU;EACd,IAAI;IACFA,UAAU,GAAGC,aAAS,CAACC,WAAW,CAAC/E,OAAO,WAAPA,OAAO,GAAI,SAAS,CAAC;IACxD6E,UAAU,CAACT,KAAK,GAAGD,WAAW;EAChC,CAAC,CAAC,OAAO7C,CAAC,EAAE;IAAA,IAAA0D,sBAAA,EAAAC,qBAAA;IACVJ,UAAU,GAAG,IAAAK,cAAU,MAAApE,SAAA,CAAAC,OAAA,MAEhBjB,OAAO;MACVsE,KAAK,EAAED,WAAW;MAClBF,cAAc,GAAAe,sBAAA,GAAElF,OAAO,CAACmE,cAAc,YAAAe,sBAAA,GAAI,KAAK;MAC/CG,cAAc,GAAAF,qBAAA,GAAEnF,OAAO,CAACqF,cAAc,YAAAF,qBAAA,GAAI,KAAK;MAC/CG,QAAQ,EAAEtF,OAAO,CAACsF,QAAQ;MAC1BvB,WAAW;MACXhD,cAAc;MACdd;IAAY,IAEdC,OAAO,WAAPA,OAAO,GAAI,SACb,CAAC;EACH;EACA,OAAO6E,UAAU;AACnB,CAAC;AAAC,IAAAQ,QAAA,GAAAC,OAAA,CAAAvE,OAAA,GACalB,qBAAqB","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_js","require","_reduxStore","_sdkVersion","_interopRequireDefault","_package","_utils","_urls","initializeFronteggApp","options","onRedirectTo","appName","storeHolder","_options$authOptions","_options$authOptions2","_options$hostedLoginB","_options$authOptions$","_options$authOptions3","session","user","tenants","activeTenant","accessToken","refreshToken","contextOptions","_extends2","default","requestCredentials","additionalHeadersResolver","_options$contextOptio","additionalHeaders","originalAdditionalHeadersResolver","push","e","Array","isArray","key","value","nextjsPkg","version","sdkVersion","tokenResolver","secureJwtEnabled","undefined","baseUrl","path","isMiddlewarePath","envAppUrl","envBaseUrl","beforeRequestInterceptor","url","headers","pathname","origin","URL","window","location","CommonUrls","embedded","hosted","activateAccount","activate","logout","find","endsWith","clientId","envClientId","appId","envAppId","tenantsState","authOptions","userData","isLoading","isAuthenticated","hostedLoginBox","disableSilentRefresh","sharedStore","store","createStore","context","previewMode","name","urlStrategy","builderMode","initialState","auth","createdApp","AppHolder","getInstance","_options$hostedLoginB2","_options$customLoginB","initialize","customLoginBox","basename","_default","exports"],"sources":["../../../../../packages/nextjs/src/utils/initializeFronteggApp/index.ts"],"sourcesContent":["import { AppHolder, FronteggApp, initialize } from '@frontegg/js';\nimport { createStore, AuthState } from '@frontegg/redux-store';\nimport { KeyValuePair } from '@frontegg/rest-api';\nimport { FronteggAppOptions } from '@frontegg/types';\nimport sdkVersion from '../../sdkVersion';\nimport type { FronteggProviderOptions } from '../../types';\nimport nextjsPkg from 'next/package.json';\nimport { isMiddlewarePath } from '../../api/utils';\nimport { CommonUrls } from '../common/urls';\n\ntype CreateOrGetFronteggAppParams = {\n  options: FronteggProviderOptions;\n  onRedirectTo: AuthState['onRedirectTo'];\n  appName?: string;\n  storeHolder: any;\n};\n\nconst initializeFronteggApp = ({\n  options,\n  onRedirectTo,\n  appName,\n  storeHolder,\n}: CreateOrGetFronteggAppParams): FronteggApp => {\n  const { session, user, tenants, activeTenant } = options;\n  const { accessToken, refreshToken } = session ?? {};\n\n  const contextOptions: FronteggAppOptions['contextOptions'] = {\n    requestCredentials: 'include' as RequestCredentials,\n    ...options.contextOptions,\n    additionalHeadersResolver: async () => {\n      const additionalHeaders: KeyValuePair[] = [];\n      const originalAdditionalHeadersResolver = options.contextOptions?.additionalHeadersResolver;\n      if (typeof originalAdditionalHeadersResolver === 'function') {\n        try {\n          additionalHeaders.push(...(await originalAdditionalHeadersResolver()));\n        } catch (e) {\n          /** ignore failed additionalHeadersResolver */\n        }\n      } else if (Array.isArray(originalAdditionalHeadersResolver)) {\n        additionalHeaders.push(...(originalAdditionalHeadersResolver as KeyValuePair[]));\n      }\n      additionalHeaders.push({\n        key: 'x-frontegg-framework',\n        value: `next@${nextjsPkg.version}`,\n      });\n      additionalHeaders.push({\n        key: 'x-frontegg-sdk',\n        value: `@frontegg/nextjs@${sdkVersion.version}`,\n      });\n      return additionalHeaders;\n    },\n    tokenResolver: options.secureJwtEnabled ? () => '' : undefined,\n    baseUrl: (path: string) => {\n      if (isMiddlewarePath(path) || options.secureJwtEnabled) {\n        return `${options.envAppUrl}/api`;\n      } else {\n        return options.envBaseUrl;\n      }\n    },\n    beforeRequestInterceptor: (options, url) => {\n      /**\n       * Determines whether the authorization header should be removed from a request.\n       * @param {String} urlStr - The URL of the request.\n       */\n      try {\n        if (url && options.headers) {\n          const { pathname, origin } = new URL(url);\n          if (typeof window !== 'undefined' && origin != window.location.origin) {\n            return { ...options, url };\n          }\n          if (\n            [\n              CommonUrls.refreshToken.embedded,\n              CommonUrls.refreshToken.hosted,\n              CommonUrls.activateAccount.activate,\n              CommonUrls.logout,\n            ].find((path) => pathname.endsWith(path)) != undefined\n          ) {\n            delete options.headers['authorization'];\n            delete options.headers['Authorization'];\n          }\n        }\n      } catch (e) {\n        /** ignore */\n      }\n      return { ...options, url };\n    },\n    clientId: options.envClientId,\n    appId: options.envAppId,\n  };\n\n  const tenantsState = {\n    tenants: tenants || [],\n    activeTenant,\n    ...options.authOptions?.tenantsState,\n  };\n  const userData = user\n    ? {\n        ...user,\n        accessToken: accessToken ?? '',\n        refreshToken: refreshToken ?? undefined,\n        ...options.authOptions?.user,\n      }\n    : null;\n\n  const authOptions: FronteggAppOptions['authOptions'] = {\n    ...options.authOptions,\n    onRedirectTo,\n    isLoading: false,\n    isAuthenticated: !!options.session,\n    hostedLoginBox: options.hostedLoginBox ?? false,\n    disableSilentRefresh: options.authOptions?.disableSilentRefresh ?? true,\n    user: userData,\n    tenantsState: tenantsState as AuthState['tenantsState'],\n  };\n\n  let sharedStore = storeHolder.store;\n  if (!sharedStore) {\n    sharedStore = createStore({\n      context: contextOptions,\n      storeHolder,\n      previewMode: options.previewMode,\n      name: appName ?? 'default',\n      urlStrategy: options.urlStrategy,\n      builderMode: false,\n      initialState: {\n        auth: authOptions,\n      },\n    });\n    storeHolder.store = sharedStore;\n  }\n\n  let createdApp;\n  try {\n    createdApp = AppHolder.getInstance(appName ?? 'default');\n    createdApp.store = sharedStore;\n  } catch (e) {\n    createdApp = initialize(\n      {\n        ...options,\n        store: sharedStore,\n        hostedLoginBox: options.hostedLoginBox ?? false,\n        customLoginBox: options.customLoginBox ?? false,\n        basename: options.basename,\n        authOptions,\n        contextOptions,\n        onRedirectTo,\n      },\n      appName ?? 'default'\n    );\n  }\n  return createdApp;\n};\nexport default initializeFronteggApp;\n"],"mappings":";;;;;;;;AAAA,IAAAA,GAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AAGA,IAAAE,WAAA,GAAAC,sBAAA,CAAAH,OAAA;AAEA,IAAAI,QAAA,GAAAD,sBAAA,CAAAH,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,KAAA,GAAAN,OAAA;AASA,MAAMO,qBAAqB,GAAGA,CAAC;EAC7BC,OAAO;EACPC,YAAY;EACZC,OAAO;EACPC;AAC4B,CAAC,KAAkB;EAAA,IAAAC,oBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,qBAAA;EAC/C,MAAM;IAAEC,OAAO;IAAEC,IAAI;IAAEC,OAAO;IAAEC;EAAa,CAAC,GAAGZ,OAAO;EACxD,MAAM;IAAEa,WAAW;IAAEC;EAAa,CAAC,GAAGL,OAAO,WAAPA,OAAO,GAAI,CAAC,CAAC;EAEnD,MAAMM,cAAoD,OAAAC,SAAA,CAAAC,OAAA;IACxDC,kBAAkB,EAAE;EAA+B,GAChDlB,OAAO,CAACe,cAAc;IACzBI,yBAAyB,EAAE,MAAAA,CAAA,KAAY;MAAA,IAAAC,qBAAA;MACrC,MAAMC,iBAAiC,GAAG,EAAE;MAC5C,MAAMC,iCAAiC,IAAAF,qBAAA,GAAGpB,OAAO,CAACe,cAAc,qBAAtBK,qBAAA,CAAwBD,yBAAyB;MAC3F,IAAI,OAAOG,iCAAiC,KAAK,UAAU,EAAE;QAC3D,IAAI;UACFD,iBAAiB,CAACE,IAAI,CAAC,IAAI,MAAMD,iCAAiC,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,OAAOE,CAAC,EAAE;UACV;QAAA;MAEJ,CAAC,MAAM,IAAIC,KAAK,CAACC,OAAO,CAACJ,iCAAiC,CAAC,EAAE;QAC3DD,iBAAiB,CAACE,IAAI,CAAC,GAAID,iCAAoD,CAAC;MAClF;MACAD,iBAAiB,CAACE,IAAI,CAAC;QACrBI,GAAG,EAAE,sBAAsB;QAC3BC,KAAK,EAAE,QAAQC,gBAAS,CAACC,OAAO;MAClC,CAAC,CAAC;MACFT,iBAAiB,CAACE,IAAI,CAAC;QACrBI,GAAG,EAAE,gBAAgB;QACrBC,KAAK,EAAE,oBAAoBG,mBAAU,CAACD,OAAO;MAC/C,CAAC,CAAC;MACF,OAAOT,iBAAiB;IAC1B,CAAC;IACDW,aAAa,EAAEhC,OAAO,CAACiC,gBAAgB,GAAG,MAAM,EAAE,GAAGC,SAAS;IAC9DC,OAAO,EAAGC,IAAY,IAAK;MACzB,IAAI,IAAAC,uBAAgB,EAACD,IAAI,CAAC,IAAIpC,OAAO,CAACiC,gBAAgB,EAAE;QACtD,OAAO,GAAGjC,OAAO,CAACsC,SAAS,MAAM;MACnC,CAAC,MAAM;QACL,OAAOtC,OAAO,CAACuC,UAAU;MAC3B;IACF,CAAC;IACDC,wBAAwB,EAAEA,CAACxC,OAAO,EAAEyC,GAAG,KAAK;MAC1C;AACN;AACA;AACA;MACM,IAAI;QACF,IAAIA,GAAG,IAAIzC,OAAO,CAAC0C,OAAO,EAAE;UAC1B,MAAM;YAAEC,QAAQ;YAAEC;UAAO,CAAC,GAAG,IAAIC,GAAG,CAACJ,GAAG,CAAC;UACzC,IAAI,OAAOK,MAAM,KAAK,WAAW,IAAIF,MAAM,IAAIE,MAAM,CAACC,QAAQ,CAACH,MAAM,EAAE;YACrE,WAAA5B,SAAA,CAAAC,OAAA,MAAYjB,OAAO;cAAEyC;YAAG;UAC1B;UACA,IACE,CACEO,gBAAU,CAAClC,YAAY,CAACmC,QAAQ,EAChCD,gBAAU,CAAClC,YAAY,CAACoC,MAAM,EAC9BF,gBAAU,CAACG,eAAe,CAACC,QAAQ,EACnCJ,gBAAU,CAACK,MAAM,CAClB,CAACC,IAAI,CAAElB,IAAI,IAAKO,QAAQ,CAACY,QAAQ,CAACnB,IAAI,CAAC,CAAC,IAAIF,SAAS,EACtD;YACA,OAAOlC,OAAO,CAAC0C,OAAO,CAAC,eAAe,CAAC;YACvC,OAAO1C,OAAO,CAAC0C,OAAO,CAAC,eAAe,CAAC;UACzC;QACF;MACF,CAAC,CAAC,OAAOlB,CAAC,EAAE;QACV;MAAA;MAEF,WAAAR,SAAA,CAAAC,OAAA,MAAYjB,OAAO;QAAEyC;MAAG;IAC1B,CAAC;IACDe,QAAQ,EAAExD,OAAO,CAACyD,WAAW;IAC7BC,KAAK,EAAE1D,OAAO,CAAC2D;EAAQ,EACxB;EAED,MAAMC,YAAY,OAAA5C,SAAA,CAAAC,OAAA;IAChBN,OAAO,EAAEA,OAAO,IAAI,EAAE;IACtBC;EAAY,IAAAR,oBAAA,GACTJ,OAAO,CAAC6D,WAAW,qBAAnBzD,oBAAA,CAAqBwD,YAAY,CACrC;EACD,MAAME,QAAQ,GAAGpD,IAAI,OAAAM,SAAA,CAAAC,OAAA,MAEZP,IAAI;IACPG,WAAW,EAAEA,WAAW,WAAXA,WAAW,GAAI,EAAE;IAC9BC,YAAY,EAAEA,YAAY,WAAZA,YAAY,GAAIoB;EAAS,IAAA7B,qBAAA,GACpCL,OAAO,CAAC6D,WAAW,qBAAnBxD,qBAAA,CAAqBK,IAAI,IAE9B,IAAI;EAER,MAAMmD,WAA8C,OAAA7C,SAAA,CAAAC,OAAA,MAC/CjB,OAAO,CAAC6D,WAAW;IACtB5D,YAAY;IACZ8D,SAAS,EAAE,KAAK;IAChBC,eAAe,EAAE,CAAC,CAAChE,OAAO,CAACS,OAAO;IAClCwD,cAAc,GAAA3D,qBAAA,GAAEN,OAAO,CAACiE,cAAc,YAAA3D,qBAAA,GAAI,KAAK;IAC/C4D,oBAAoB,GAAA3D,qBAAA,IAAAC,qBAAA,GAAER,OAAO,CAAC6D,WAAW,qBAAnBrD,qBAAA,CAAqB0D,oBAAoB,YAAA3D,qBAAA,GAAI,IAAI;IACvEG,IAAI,EAAEoD,QAAQ;IACdF,YAAY,EAAEA;EAAyC,EACxD;EAED,IAAIO,WAAW,GAAGhE,WAAW,CAACiE,KAAK;EACnC,IAAI,CAACD,WAAW,EAAE;IAChBA,WAAW,GAAG,IAAAE,uBAAW,EAAC;MACxBC,OAAO,EAAEvD,cAAc;MACvBZ,WAAW;MACXoE,WAAW,EAAEvE,OAAO,CAACuE,WAAW;MAChCC,IAAI,EAAEtE,OAAO,WAAPA,OAAO,GAAI,SAAS;MAC1BuE,WAAW,EAAEzE,OAAO,CAACyE,WAAW;MAChCC,WAAW,EAAE,KAAK;MAClBC,YAAY,EAAE;QACZC,IAAI,EAAEf;MACR;IACF,CAAC,CAAC;IACF1D,WAAW,CAACiE,KAAK,GAAGD,WAAW;EACjC;EAEA,IAAIU,UAAU;EACd,IAAI;IACFA,UAAU,GAAGC,aAAS,CAACC,WAAW,CAAC7E,OAAO,WAAPA,OAAO,GAAI,SAAS,CAAC;IACxD2E,UAAU,CAACT,KAAK,GAAGD,WAAW;EAChC,CAAC,CAAC,OAAO3C,CAAC,EAAE;IAAA,IAAAwD,sBAAA,EAAAC,qBAAA;IACVJ,UAAU,GAAG,IAAAK,cAAU,MAAAlE,SAAA,CAAAC,OAAA,MAEhBjB,OAAO;MACVoE,KAAK,EAAED,WAAW;MAClBF,cAAc,GAAAe,sBAAA,GAAEhF,OAAO,CAACiE,cAAc,YAAAe,sBAAA,GAAI,KAAK;MAC/CG,cAAc,GAAAF,qBAAA,GAAEjF,OAAO,CAACmF,cAAc,YAAAF,qBAAA,GAAI,KAAK;MAC/CG,QAAQ,EAAEpF,OAAO,CAACoF,QAAQ;MAC1BvB,WAAW;MACX9C,cAAc;MACdd;IAAY,IAEdC,OAAO,WAAPA,OAAO,GAAI,SACb,CAAC;EACH;EACA,OAAO2E,UAAU;AACnB,CAAC;AAAC,IAAAQ,QAAA,GAAAC,OAAA,CAAArE,OAAA,GACalB,qBAAqB","ignoreList":[]}

package/utils/refreshAccessTokenIfNeeded/helpers.d.ts

@@ -25,6 +25,12 @@ export declare function isSamlCallback(url: string): boolean;
  * is posting an http request to the nextjs backend middleware after successfully logged in the user
  */
 export declare function isSSOPostRequest(url: string): boolean;
+/**
+ * Checks if the request URL is a refresh token request.
+ * This is used to determine if the current request is targeting
+ * one of the predefined refresh token URLs (embedded or hosted modes).
+ */
+export declare function isRefreshTokenRequest(url: string): boolean;
 /**
  * This function verifies if the headers includes a 'set-cookie' header
  * from a prior refresh token request. If it's the case, we can infer that the

package/utils/refreshAccessTokenIfNeeded/helpers.js

@@ -8,6 +8,7 @@ exports.getForwardedSession = getForwardedSession;
 exports.hasRefreshTokenCookie = hasRefreshTokenCookie;
 exports.hasSetSessionCookie = hasSetSessionCookie;
 exports.isOauthCallback = isOauthCallback;
+exports.isRefreshTokenRequest = isRefreshTokenRequest;
 exports.isRuntimeNextRequest = isRuntimeNextRequest;
 exports.isSSOPostRequest = isSSOPostRequest;
 exports.isSamlCallback = isSamlCallback;
@@ -20,6 +21,7 @@ var _api = _interopRequireDefault(require("../../api"));
 var _common = require("../../common");
 var _config = _interopRequireDefault(require("../../config"));
 var _constants = require("../common/constants");
+var _urls = require("../common/urls");
 function hasRefreshTokenCookie(cookies) {
   if (cookies == null) {
     return false;
@@ -117,6 +119,16 @@ function isSSOPostRequest(url) {
   return url === '/frontegg/auth/saml/callback' || url === '/frontegg/auth/oidc/callback';
 }
 
+/**
+ * Checks if the request URL is a refresh token request.
+ * This is used to determine if the current request is targeting
+ * one of the predefined refresh token URLs (embedded or hosted modes).
+ */
+function isRefreshTokenRequest(url) {
+  const refreshTokenUrls = [_urls.CommonUrls.refreshToken.embedded, _urls.CommonUrls.refreshToken.hosted];
+  return refreshTokenUrls.includes(url);
+}
+
 /**
  * This function verifies if the headers includes a 'set-cookie' header
  * from a prior refresh token request. If it's the case, we can infer that the

package/utils/refreshAccessTokenIfNeeded/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","names":["_fronteggLogger","_interopRequireDefault","require","_cookies","_api","_common","_config","_constants","hasRefreshTokenCookie","cookies","logger","fronteggLogger","child","tag","refreshTokenKey","CookieManager","debug","cookieKey","Object","keys","find","cookie","replace","exists","refreshAccessTokenEmbedded","request","headers","info","config","appId","api","refreshTokenEmbedded","refreshAccessTokenHostedLogin","sealFromCookies","getSessionCookieFromRequest","tokens","getTokensFromCookie","refreshToken","secureJwtEnabled","clientId","clientSecret","refreshTokenHostedLogin","e","error","isRuntimeNextRequest","url","startsWith","isOauthCallback","isSamlCallback","isSSOPostRequest","hasSetSessionCookie","cookieHeader","cookieName","indexOf","Array","isArray","some","header","saveForwardedSession","holder","session","FRONTEGG_FORWARDED_SESSION_KEY","getForwardedSession"],"sources":["../../../../../packages/nextjs/src/utils/refreshAccessTokenIfNeeded/helpers.ts"],"sourcesContent":["import fronteggLogger from '../fronteggLogger';\nimport CookieManager from '../cookies';\nimport { NextApiRequest } from 'next/dist/shared/lib/utils';\nimport api from '../../api';\nimport { getTokensFromCookie } from '../../common';\nimport { IncomingMessage } from 'http';\nimport config from '../../config';\n\nimport { FRONTEGG_FORWARDED_SESSION_KEY } from '../common/constants';\nimport { FronteggNextJSSession } from '../../types';\n\nexport function hasRefreshTokenCookie(cookies: Record<string, any>): boolean {\n  if (cookies == null) {\n    return false;\n  }\n  const logger = fronteggLogger.child({ tag: 'refreshToken.hasRefreshTokenCookie' });\n  const refreshTokenKey = CookieManager.refreshTokenKey;\n  logger.debug(`Checking if '${refreshTokenKey}' exists in cookies`);\n  const cookieKey = Object.keys(cookies).find((cookie) => {\n    return cookie.replace(/-/g, '') === refreshTokenKey;\n  });\n  const exists: boolean = cookieKey != null;\n  logger.debug(`Cookie '${refreshTokenKey}' ${exists ? 'exists' : 'NOT exists'} in cookies`);\n  return exists;\n}\n\nexport async function refreshAccessTokenEmbedded(request: IncomingMessage): Promise<Response | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.refreshAccessTokenEmbedded' });\n\n  const headers = request.headers as Record<string, string>;\n  const cookies = (request as NextApiRequest).cookies;\n\n  logger.info('check if has refresh token headers');\n  if (hasRefreshTokenCookie(cookies)) {\n    logger.info('going to refresh token (embedded mode)');\n    if (config.appId) {\n      headers['frontegg-requested-application-id'] = config.appId;\n    }\n    return await api.refreshTokenEmbedded(headers);\n  }\n  return null;\n}\n\nexport async function refreshAccessTokenHostedLogin(request: IncomingMessage): Promise<Response | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.refreshAccessTokenHostedLogin' });\n  const headers = request.headers as Record<string, string>;\n\n  logger.info('trying to get token from cookies');\n\n  const sealFromCookies = CookieManager.getSessionCookieFromRequest(request);\n  try {\n    const tokens = await getTokensFromCookie(sealFromCookies);\n    if (!tokens?.refreshToken) {\n      logger.info('refresh token not found');\n      return null;\n    }\n    if (config.appId) {\n      headers['frontegg-requested-application-id'] = config.appId;\n    }\n    if (config.secureJwtEnabled) {\n      const clientId = config.clientId;\n      const clientSecret = config.clientSecret;\n\n      logger.info('going to refresh token (hosted-login mode) (secure-jwt mode)');\n      return await api.refreshTokenHostedLogin(headers, tokens.refreshToken, clientId, clientSecret);\n    } else {\n      logger.info('going to refresh token (hosted-login mode) ', tokens.refreshToken);\n      return await api.refreshTokenHostedLogin(headers, tokens.refreshToken);\n    }\n  } catch (e) {\n    logger.error(e);\n    return null;\n  }\n}\n\n/**\n * If url starts with /_next/ means that the user trying to navigate\n * to a new nextjs page, in this scenario no need to refresh token\n * we can just return the actual stateless session from\n * the encrypted cookie\n */\nexport function isRuntimeNextRequest(url: string): boolean {\n  return url.startsWith('/_next/');\n}\n\n/**\n * If url starts with '/oauth/callback' means that the user navigated back\n * from frontegg hosted login, in this scenario no need to SSR refresh token\n */\nexport function isOauthCallback(url: string): boolean {\n  return url.startsWith('/oauth/callback');\n}\n\n/**\n * If url starts with '/account/saml/callback' means that the user navigated back\n * from sso login, in this scenario no need to SSR refresh token\n */\nexport function isSamlCallback(url: string): boolean {\n  return url.startsWith('/account/saml/callback') || url.startsWith('/account/oidc/callback');\n}\n\n/**\n * If the url equals to '/frontegg/auth/{provider}/callback', it means that the SSO provider\n * is posting an http request to the nextjs backend middleware after successfully logged in the user\n */\nexport function isSSOPostRequest(url: string): boolean {\n  return url === '/frontegg/auth/saml/callback' || url === '/frontegg/auth/oidc/callback';\n}\n\n/**\n * This function verifies if the headers includes a 'set-cookie' header\n * from a prior refresh token request. If it's the case, we can infer that the\n * session cookie has been initialized, thus we can disable the double refresh token\n * for server-side redirects such as '/_error' or any other server-side redirects.\n */\nexport function hasSetSessionCookie(cookieHeader: number | string | string[] | undefined): boolean {\n  if (!cookieHeader || typeof cookieHeader === 'number') {\n    return false;\n  }\n  const cookieName = config.cookieName;\n  if (typeof cookieHeader === 'string') {\n    return cookieHeader.indexOf(cookieName) !== -1;\n  }\n  if (Array.isArray(cookieHeader)) {\n    return cookieHeader.some((header) => header.startsWith(cookieName));\n  }\n  return false;\n}\n\n/**\n * This function stores the Frontegg session instance for use\n * within the Next.js application during the token refresh process\n * in the redirect request page.\n */\nexport function saveForwardedSession(holder: any, session: FronteggNextJSSession | undefined) {\n  holder[FRONTEGG_FORWARDED_SESSION_KEY] = session;\n}\n\n/**\n * This function retrieves the stored session from the previous redirected page request.\n * This helps in preventing the token from being refreshed twice during a single client page request.\n */\n\nexport function getForwardedSession(holder: any): FronteggNextJSSession | null {\n  return holder[FRONTEGG_FORWARDED_SESSION_KEY];\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,IAAAA,eAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,IAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AAEA,IAAAI,OAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,IAAAK,UAAA,GAAAL,OAAA;AAGO,SAASM,qBAAqBA,CAACC,OAA4B,EAAW;EAC3E,IAAIA,OAAO,IAAI,IAAI,EAAE;IACnB,OAAO,KAAK;EACd;EACA,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAAqC,CAAC,CAAC;EAClF,MAAMC,eAAe,GAAGC,gBAAa,CAACD,eAAe;EACrDJ,MAAM,CAACM,KAAK,CAAC,gBAAgBF,eAAe,qBAAqB,CAAC;EAClE,MAAMG,SAAS,GAAGC,MAAM,CAACC,IAAI,CAACV,OAAO,CAAC,CAACW,IAAI,CAAEC,MAAM,IAAK;IACtD,OAAOA,MAAM,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAKR,eAAe;EACrD,CAAC,CAAC;EACF,MAAMS,MAAe,GAAGN,SAAS,IAAI,IAAI;EACzCP,MAAM,CAACM,KAAK,CAAC,WAAWF,eAAe,KAAKS,MAAM,GAAG,QAAQ,GAAG,YAAY,aAAa,CAAC;EAC1F,OAAOA,MAAM;AACf;AAEO,eAAeC,0BAA0BA,CAACC,OAAwB,EAA4B;EACnG,MAAMf,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA0C,CAAC,CAAC;EAEvF,MAAMa,OAAO,GAAGD,OAAO,CAACC,OAAiC;EACzD,MAAMjB,OAAO,GAAIgB,OAAO,CAAoBhB,OAAO;EAEnDC,MAAM,CAACiB,IAAI,CAAC,oCAAoC,CAAC;EACjD,IAAInB,qBAAqB,CAACC,OAAO,CAAC,EAAE;IAClCC,MAAM,CAACiB,IAAI,CAAC,wCAAwC,CAAC;IACrD,IAAIC,eAAM,CAACC,KAAK,EAAE;MAChBH,OAAO,CAAC,mCAAmC,CAAC,GAAGE,eAAM,CAACC,KAAK;IAC7D;IACA,OAAO,MAAMC,YAAG,CAACC,oBAAoB,CAACL,OAAO,CAAC;EAChD;EACA,OAAO,IAAI;AACb;AAEO,eAAeM,6BAA6BA,CAACP,OAAwB,EAA4B;EACtG,MAAMf,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA6C,CAAC,CAAC;EAC1F,MAAMa,OAAO,GAAGD,OAAO,CAACC,OAAiC;EAEzDhB,MAAM,CAACiB,IAAI,CAAC,kCAAkC,CAAC;EAE/C,MAAMM,eAAe,GAAGlB,gBAAa,CAACmB,2BAA2B,CAACT,OAAO,CAAC;EAC1E,IAAI;IACF,MAAMU,MAAM,GAAG,MAAM,IAAAC,2BAAmB,EAACH,eAAe,CAAC;IACzD,IAAI,EAACE,MAAM,YAANA,MAAM,CAAEE,YAAY,GAAE;MACzB3B,MAAM,CAACiB,IAAI,CAAC,yBAAyB,CAAC;MACtC,OAAO,IAAI;IACb;IACA,IAAIC,eAAM,CAACC,KAAK,EAAE;MAChBH,OAAO,CAAC,mCAAmC,CAAC,GAAGE,eAAM,CAACC,KAAK;IAC7D;IACA,IAAID,eAAM,CAACU,gBAAgB,EAAE;MAC3B,MAAMC,QAAQ,GAAGX,eAAM,CAACW,QAAQ;MAChC,MAAMC,YAAY,GAAGZ,eAAM,CAACY,YAAY;MAExC9B,MAAM,CAACiB,IAAI,CAAC,8DAA8D,CAAC;MAC3E,OAAO,MAAMG,YAAG,CAACW,uBAAuB,CAACf,OAAO,EAAES,MAAM,CAACE,YAAY,EAAEE,QAAQ,EAAEC,YAAY,CAAC;IAChG,CAAC,MAAM;MACL9B,MAAM,CAACiB,IAAI,CAAC,6CAA6C,EAAEQ,MAAM,CAACE,YAAY,CAAC;MAC/E,OAAO,MAAMP,YAAG,CAACW,uBAAuB,CAACf,OAAO,EAAES,MAAM,CAACE,YAAY,CAAC;IACxE;EACF,CAAC,CAAC,OAAOK,CAAC,EAAE;IACVhC,MAAM,CAACiC,KAAK,CAACD,CAAC,CAAC;IACf,OAAO,IAAI;EACb;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,oBAAoBA,CAACC,GAAW,EAAW;EACzD,OAAOA,GAAG,CAACC,UAAU,CAAC,SAAS,CAAC;AAClC;;AAEA;AACA;AACA;AACA;AACO,SAASC,eAAeA,CAACF,GAAW,EAAW;EACpD,OAAOA,GAAG,CAACC,UAAU,CAAC,iBAAiB,CAAC;AAC1C;;AAEA;AACA;AACA;AACA;AACO,SAASE,cAAcA,CAACH,GAAW,EAAW;EACnD,OAAOA,GAAG,CAACC,UAAU,CAAC,wBAAwB,CAAC,IAAID,GAAG,CAACC,UAAU,CAAC,wBAAwB,CAAC;AAC7F;;AAEA;AACA;AACA;AACA;AACO,SAASG,gBAAgBA,CAACJ,GAAW,EAAW;EACrD,OAAOA,GAAG,KAAK,8BAA8B,IAAIA,GAAG,KAAK,8BAA8B;AACzF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASK,mBAAmBA,CAACC,YAAoD,EAAW;EACjG,IAAI,CAACA,YAAY,IAAI,OAAOA,YAAY,KAAK,QAAQ,EAAE;IACrD,OAAO,KAAK;EACd;EACA,MAAMC,UAAU,GAAGxB,eAAM,CAACwB,UAAU;EACpC,IAAI,OAAOD,YAAY,KAAK,QAAQ,EAAE;IACpC,OAAOA,YAAY,CAACE,OAAO,CAACD,UAAU,CAAC,KAAK,CAAC,CAAC;EAChD;EACA,IAAIE,KAAK,CAACC,OAAO,CAACJ,YAAY,CAAC,EAAE;IAC/B,OAAOA,YAAY,CAACK,IAAI,CAAEC,MAAM,IAAKA,MAAM,CAACX,UAAU,CAACM,UAAU,CAAC,CAAC;EACrE;EACA,OAAO,KAAK;AACd;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASM,oBAAoBA,CAACC,MAAW,EAAEC,OAA0C,EAAE;EAC5FD,MAAM,CAACE,yCAA8B,CAAC,GAAGD,OAAO;AAClD;;AAEA;AACA;AACA;AACA;;AAEO,SAASE,mBAAmBA,CAACH,MAAW,EAAgC;EAC7E,OAAOA,MAAM,CAACE,yCAA8B,CAAC;AAC/C","ignoreList":[]}
+{"version":3,"file":"helpers.js","names":["_fronteggLogger","_interopRequireDefault","require","_cookies","_api","_common","_config","_constants","_urls","hasRefreshTokenCookie","cookies","logger","fronteggLogger","child","tag","refreshTokenKey","CookieManager","debug","cookieKey","Object","keys","find","cookie","replace","exists","refreshAccessTokenEmbedded","request","headers","info","config","appId","api","refreshTokenEmbedded","refreshAccessTokenHostedLogin","sealFromCookies","getSessionCookieFromRequest","tokens","getTokensFromCookie","refreshToken","secureJwtEnabled","clientId","clientSecret","refreshTokenHostedLogin","e","error","isRuntimeNextRequest","url","startsWith","isOauthCallback","isSamlCallback","isSSOPostRequest","isRefreshTokenRequest","refreshTokenUrls","CommonUrls","embedded","hosted","includes","hasSetSessionCookie","cookieHeader","cookieName","indexOf","Array","isArray","some","header","saveForwardedSession","holder","session","FRONTEGG_FORWARDED_SESSION_KEY","getForwardedSession"],"sources":["../../../../../packages/nextjs/src/utils/refreshAccessTokenIfNeeded/helpers.ts"],"sourcesContent":["import fronteggLogger from '../fronteggLogger';\nimport CookieManager from '../cookies';\nimport { NextApiRequest } from 'next/dist/shared/lib/utils';\nimport api from '../../api';\nimport { getTokensFromCookie } from '../../common';\nimport { IncomingMessage } from 'http';\nimport config from '../../config';\n\nimport { FRONTEGG_FORWARDED_SESSION_KEY } from '../common/constants';\nimport { FronteggNextJSSession } from '../../types';\nimport { CommonUrls } from '../common/urls';\n\nexport function hasRefreshTokenCookie(cookies: Record<string, any>): boolean {\n  if (cookies == null) {\n    return false;\n  }\n  const logger = fronteggLogger.child({ tag: 'refreshToken.hasRefreshTokenCookie' });\n  const refreshTokenKey = CookieManager.refreshTokenKey;\n  logger.debug(`Checking if '${refreshTokenKey}' exists in cookies`);\n  const cookieKey = Object.keys(cookies).find((cookie) => {\n    return cookie.replace(/-/g, '') === refreshTokenKey;\n  });\n  const exists: boolean = cookieKey != null;\n  logger.debug(`Cookie '${refreshTokenKey}' ${exists ? 'exists' : 'NOT exists'} in cookies`);\n  return exists;\n}\n\nexport async function refreshAccessTokenEmbedded(request: IncomingMessage): Promise<Response | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.refreshAccessTokenEmbedded' });\n\n  const headers = request.headers as Record<string, string>;\n  const cookies = (request as NextApiRequest).cookies;\n\n  logger.info('check if has refresh token headers');\n  if (hasRefreshTokenCookie(cookies)) {\n    logger.info('going to refresh token (embedded mode)');\n    if (config.appId) {\n      headers['frontegg-requested-application-id'] = config.appId;\n    }\n    return await api.refreshTokenEmbedded(headers);\n  }\n  return null;\n}\n\nexport async function refreshAccessTokenHostedLogin(request: IncomingMessage): Promise<Response | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshToken.refreshAccessTokenHostedLogin' });\n  const headers = request.headers as Record<string, string>;\n\n  logger.info('trying to get token from cookies');\n\n  const sealFromCookies = CookieManager.getSessionCookieFromRequest(request);\n  try {\n    const tokens = await getTokensFromCookie(sealFromCookies);\n    if (!tokens?.refreshToken) {\n      logger.info('refresh token not found');\n      return null;\n    }\n    if (config.appId) {\n      headers['frontegg-requested-application-id'] = config.appId;\n    }\n    if (config.secureJwtEnabled) {\n      const clientId = config.clientId;\n      const clientSecret = config.clientSecret;\n\n      logger.info('going to refresh token (hosted-login mode) (secure-jwt mode)');\n      return await api.refreshTokenHostedLogin(headers, tokens.refreshToken, clientId, clientSecret);\n    } else {\n      logger.info('going to refresh token (hosted-login mode) ', tokens.refreshToken);\n      return await api.refreshTokenHostedLogin(headers, tokens.refreshToken);\n    }\n  } catch (e) {\n    logger.error(e);\n    return null;\n  }\n}\n\n/**\n * If url starts with /_next/ means that the user trying to navigate\n * to a new nextjs page, in this scenario no need to refresh token\n * we can just return the actual stateless session from\n * the encrypted cookie\n */\nexport function isRuntimeNextRequest(url: string): boolean {\n  return url.startsWith('/_next/');\n}\n\n/**\n * If url starts with '/oauth/callback' means that the user navigated back\n * from frontegg hosted login, in this scenario no need to SSR refresh token\n */\nexport function isOauthCallback(url: string): boolean {\n  return url.startsWith('/oauth/callback');\n}\n\n/**\n * If url starts with '/account/saml/callback' means that the user navigated back\n * from sso login, in this scenario no need to SSR refresh token\n */\nexport function isSamlCallback(url: string): boolean {\n  return url.startsWith('/account/saml/callback') || url.startsWith('/account/oidc/callback');\n}\n\n/**\n * If the url equals to '/frontegg/auth/{provider}/callback', it means that the SSO provider\n * is posting an http request to the nextjs backend middleware after successfully logged in the user\n */\nexport function isSSOPostRequest(url: string): boolean {\n  return url === '/frontegg/auth/saml/callback' || url === '/frontegg/auth/oidc/callback';\n}\n\n/**\n * Checks if the request URL is a refresh token request.\n * This is used to determine if the current request is targeting\n * one of the predefined refresh token URLs (embedded or hosted modes).\n */\nexport function isRefreshTokenRequest(url: string): boolean {\n  const refreshTokenUrls = [CommonUrls.refreshToken.embedded, CommonUrls.refreshToken.hosted];\n  return refreshTokenUrls.includes(url);\n}\n\n/**\n * This function verifies if the headers includes a 'set-cookie' header\n * from a prior refresh token request. If it's the case, we can infer that the\n * session cookie has been initialized, thus we can disable the double refresh token\n * for server-side redirects such as '/_error' or any other server-side redirects.\n */\nexport function hasSetSessionCookie(cookieHeader: number | string | string[] | undefined): boolean {\n  if (!cookieHeader || typeof cookieHeader === 'number') {\n    return false;\n  }\n  const cookieName = config.cookieName;\n  if (typeof cookieHeader === 'string') {\n    return cookieHeader.indexOf(cookieName) !== -1;\n  }\n  if (Array.isArray(cookieHeader)) {\n    return cookieHeader.some((header) => header.startsWith(cookieName));\n  }\n  return false;\n}\n\n/**\n * This function stores the Frontegg session instance for use\n * within the Next.js application during the token refresh process\n * in the redirect request page.\n */\nexport function saveForwardedSession(holder: any, session: FronteggNextJSSession | undefined) {\n  holder[FRONTEGG_FORWARDED_SESSION_KEY] = session;\n}\n\n/**\n * This function retrieves the stored session from the previous redirected page request.\n * This helps in preventing the token from being refreshed twice during a single client page request.\n */\n\nexport function getForwardedSession(holder: any): FronteggNextJSSession | null {\n  return holder[FRONTEGG_FORWARDED_SESSION_KEY];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA,IAAAA,eAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,IAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AAEA,IAAAI,OAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,IAAAK,UAAA,GAAAL,OAAA;AAEA,IAAAM,KAAA,GAAAN,OAAA;AAEO,SAASO,qBAAqBA,CAACC,OAA4B,EAAW;EAC3E,IAAIA,OAAO,IAAI,IAAI,EAAE;IACnB,OAAO,KAAK;EACd;EACA,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAAqC,CAAC,CAAC;EAClF,MAAMC,eAAe,GAAGC,gBAAa,CAACD,eAAe;EACrDJ,MAAM,CAACM,KAAK,CAAC,gBAAgBF,eAAe,qBAAqB,CAAC;EAClE,MAAMG,SAAS,GAAGC,MAAM,CAACC,IAAI,CAACV,OAAO,CAAC,CAACW,IAAI,CAAEC,MAAM,IAAK;IACtD,OAAOA,MAAM,CAACC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAKR,eAAe;EACrD,CAAC,CAAC;EACF,MAAMS,MAAe,GAAGN,SAAS,IAAI,IAAI;EACzCP,MAAM,CAACM,KAAK,CAAC,WAAWF,eAAe,KAAKS,MAAM,GAAG,QAAQ,GAAG,YAAY,aAAa,CAAC;EAC1F,OAAOA,MAAM;AACf;AAEO,eAAeC,0BAA0BA,CAACC,OAAwB,EAA4B;EACnG,MAAMf,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA0C,CAAC,CAAC;EAEvF,MAAMa,OAAO,GAAGD,OAAO,CAACC,OAAiC;EACzD,MAAMjB,OAAO,GAAIgB,OAAO,CAAoBhB,OAAO;EAEnDC,MAAM,CAACiB,IAAI,CAAC,oCAAoC,CAAC;EACjD,IAAInB,qBAAqB,CAACC,OAAO,CAAC,EAAE;IAClCC,MAAM,CAACiB,IAAI,CAAC,wCAAwC,CAAC;IACrD,IAAIC,eAAM,CAACC,KAAK,EAAE;MAChBH,OAAO,CAAC,mCAAmC,CAAC,GAAGE,eAAM,CAACC,KAAK;IAC7D;IACA,OAAO,MAAMC,YAAG,CAACC,oBAAoB,CAACL,OAAO,CAAC;EAChD;EACA,OAAO,IAAI;AACb;AAEO,eAAeM,6BAA6BA,CAACP,OAAwB,EAA4B;EACtG,MAAMf,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA6C,CAAC,CAAC;EAC1F,MAAMa,OAAO,GAAGD,OAAO,CAACC,OAAiC;EAEzDhB,MAAM,CAACiB,IAAI,CAAC,kCAAkC,CAAC;EAE/C,MAAMM,eAAe,GAAGlB,gBAAa,CAACmB,2BAA2B,CAACT,OAAO,CAAC;EAC1E,IAAI;IACF,MAAMU,MAAM,GAAG,MAAM,IAAAC,2BAAmB,EAACH,eAAe,CAAC;IACzD,IAAI,EAACE,MAAM,YAANA,MAAM,CAAEE,YAAY,GAAE;MACzB3B,MAAM,CAACiB,IAAI,CAAC,yBAAyB,CAAC;MACtC,OAAO,IAAI;IACb;IACA,IAAIC,eAAM,CAACC,KAAK,EAAE;MAChBH,OAAO,CAAC,mCAAmC,CAAC,GAAGE,eAAM,CAACC,KAAK;IAC7D;IACA,IAAID,eAAM,CAACU,gBAAgB,EAAE;MAC3B,MAAMC,QAAQ,GAAGX,eAAM,CAACW,QAAQ;MAChC,MAAMC,YAAY,GAAGZ,eAAM,CAACY,YAAY;MAExC9B,MAAM,CAACiB,IAAI,CAAC,8DAA8D,CAAC;MAC3E,OAAO,MAAMG,YAAG,CAACW,uBAAuB,CAACf,OAAO,EAAES,MAAM,CAACE,YAAY,EAAEE,QAAQ,EAAEC,YAAY,CAAC;IAChG,CAAC,MAAM;MACL9B,MAAM,CAACiB,IAAI,CAAC,6CAA6C,EAAEQ,MAAM,CAACE,YAAY,CAAC;MAC/E,OAAO,MAAMP,YAAG,CAACW,uBAAuB,CAACf,OAAO,EAAES,MAAM,CAACE,YAAY,CAAC;IACxE;EACF,CAAC,CAAC,OAAOK,CAAC,EAAE;IACVhC,MAAM,CAACiC,KAAK,CAACD,CAAC,CAAC;IACf,OAAO,IAAI;EACb;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,oBAAoBA,CAACC,GAAW,EAAW;EACzD,OAAOA,GAAG,CAACC,UAAU,CAAC,SAAS,CAAC;AAClC;;AAEA;AACA;AACA;AACA;AACO,SAASC,eAAeA,CAACF,GAAW,EAAW;EACpD,OAAOA,GAAG,CAACC,UAAU,CAAC,iBAAiB,CAAC;AAC1C;;AAEA;AACA;AACA;AACA;AACO,SAASE,cAAcA,CAACH,GAAW,EAAW;EACnD,OAAOA,GAAG,CAACC,UAAU,CAAC,wBAAwB,CAAC,IAAID,GAAG,CAACC,UAAU,CAAC,wBAAwB,CAAC;AAC7F;;AAEA;AACA;AACA;AACA;AACO,SAASG,gBAAgBA,CAACJ,GAAW,EAAW;EACrD,OAAOA,GAAG,KAAK,8BAA8B,IAAIA,GAAG,KAAK,8BAA8B;AACzF;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASK,qBAAqBA,CAACL,GAAW,EAAW;EAC1D,MAAMM,gBAAgB,GAAG,CAACC,gBAAU,CAACf,YAAY,CAACgB,QAAQ,EAAED,gBAAU,CAACf,YAAY,CAACiB,MAAM,CAAC;EAC3F,OAAOH,gBAAgB,CAACI,QAAQ,CAACV,GAAG,CAAC;AACvC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASW,mBAAmBA,CAACC,YAAoD,EAAW;EACjG,IAAI,CAACA,YAAY,IAAI,OAAOA,YAAY,KAAK,QAAQ,EAAE;IACrD,OAAO,KAAK;EACd;EACA,MAAMC,UAAU,GAAG9B,eAAM,CAAC8B,UAAU;EACpC,IAAI,OAAOD,YAAY,KAAK,QAAQ,EAAE;IACpC,OAAOA,YAAY,CAACE,OAAO,CAACD,UAAU,CAAC,KAAK,CAAC,CAAC;EAChD;EACA,IAAIE,KAAK,CAACC,OAAO,CAACJ,YAAY,CAAC,EAAE;IAC/B,OAAOA,YAAY,CAACK,IAAI,CAAEC,MAAM,IAAKA,MAAM,CAACjB,UAAU,CAACY,UAAU,CAAC,CAAC;EACrE;EACA,OAAO,KAAK;AACd;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASM,oBAAoBA,CAACC,MAAW,EAAEC,OAA0C,EAAE;EAC5FD,MAAM,CAACE,yCAA8B,CAAC,GAAGD,OAAO;AAClD;;AAEA;AACA;AACA;AACA;;AAEO,SAASE,mBAAmBA,CAACH,MAAW,EAAgC;EAC7E,OAAOA,MAAM,CAACE,yCAA8B,CAAC;AAC/C","ignoreList":[]}

package/utils/refreshAccessTokenIfNeeded/index.js

@@ -19,6 +19,7 @@ var _fronteggLogger = _interopRequireDefault(require("../fronteggLogger"));
 var _encryption = _interopRequireDefault(require("../encryption"));
 var _createSession = _interopRequireDefault(require("../createSession"));
 var _utils = require("../../api/utils");
+var _headers = require("../headers");
 /**
  * Refreshes the access token for the current session.
  *
@@ -75,10 +76,11 @@ async function refreshAccessTokenIfNeeded(ctx) {
         return null;
       }
     }
-    const clientIp = nextJsRequest.headers['cf-connecting-ip'] || nextJsRequest.headers['x-forwarded-for'] || ((_nextJsRequest$socket = nextJsRequest.socket) == null ? void 0 : _nextJsRequest$socket.remoteAddress);
+    const clientIp = (0, _headers.getClientIp)(nextJsRequest.headers['cf-connecting-ip'] || nextJsRequest.headers['x-forwarded-for']) || ((_nextJsRequest$socket = nextJsRequest.socket) == null ? void 0 : _nextJsRequest$socket.remoteAddress);
     if (clientIp && _config.default.shouldForwardIp) {
-      var _config$sharedSecret;
+      var _nextJsRequest$socket2, _config$sharedSecret;
       nextJsRequest.headers[_utils.FRONTEGG_FORWARD_IP_HEADER] = clientIp;
+      nextJsRequest.headers['refresh-access-token-if-needed'] = `nextJsRequest.headers['cf-connecting-ip'] ${nextJsRequest.headers['cf-connecting-ip']} | nextJsRequest.headers['x-forwarded-for']${nextJsRequest.headers['x-forwarded-for']} | nextJsRequest.socket?.remoteAddress ${(_nextJsRequest$socket2 = nextJsRequest.socket) == null ? void 0 : _nextJsRequest$socket2.remoteAddress}`;
       nextJsRequest.headers[_utils.FRONTEGG_HEADERS_VERIFIER_HEADER] = (_config$sharedSecret = _config.default.sharedSecret) != null ? _config$sharedSecret : '';
     }
     let response;

package/utils/refreshAccessTokenIfNeeded/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_common","require","_config","_interopRequireDefault","_cookies","_helpers","_fronteggLogger","_encryption","_createSession","_utils","refreshAccessTokenIfNeeded","ctx","logger","fronteggLogger","child","tag","info","pathname","nextJsRequest","req","nextJsResponse","res","url","debug","hasSetSessionCookie","getHeader","cookies","CookieManager","getSessionCookieFromRedirectedResponse","session","createSession","encryption","getForwardedSession","_nextJsRequest$socket","_ref","_ref2","_response$headers$raw","_response$headers","_response$headers$raw2","_response$headers2","_response$headers2$ge","_response$headers3","_response$headers3$ge","_CookieManager$modify","_data$accessToken","isRuntimeNextRequest","config","disableInitialPropsRefreshToken","getSessionCookieFromRequest","isHostedLogin","isOauthCallback","removeCookies","isSecured","isSSL","cookieDomain","isSamlCallback","clientIp","headers","socket","remoteAddress","shouldForwardIp","_config$sharedSecret","FRONTEGG_FORWARD_IP_HEADER","FRONTEGG_HEADERS_VERIFIER_HEADER","sharedSecret","response","refreshAccessTokenHostedLogin","refreshAccessTokenEmbedded","ok","data","json","cookieHeader","raw","call","getSetCookie","get","newSetCookie","modifySetCookie","decodedJwt","refreshToken","createSessionFromAccessToken","cookieValue","create","value","expires","Date","exp","secure","push","setHeader","fronteggSession","accessToken","access_token","user","saveForwardedSession","e","error"],"sources":["../../../../../packages/nextjs/src/utils/refreshAccessTokenIfNeeded/index.ts"],"sourcesContent":["import type { NextPageContext } from 'next/dist/shared/lib/utils';\nimport type { FronteggNextJSSession } from '../../types';\nimport { createSessionFromAccessToken } from '../../common';\nimport config from '../../config';\nimport CookieManager from '../cookies';\nimport {\n  isOauthCallback,\n  hasSetSessionCookie,\n  isRuntimeNextRequest,\n  isSamlCallback,\n  refreshAccessTokenEmbedded,\n  refreshAccessTokenHostedLogin,\n  saveForwardedSession,\n  getForwardedSession,\n} from './helpers';\nimport fronteggLogger from '../fronteggLogger';\nimport encryption from '../encryption';\nimport createSession from '../createSession';\nimport { FRONTEGG_HEADERS_VERIFIER_HEADER, FRONTEGG_FORWARD_IP_HEADER } from '../../api/utils';\n\nexport { isRuntimeNextRequest };\n/**\n * Refreshes the access token for the current session.\n *\n * @param {NextPageContext} ctx - The Next.js Page Context object.\n * @returns {Promise<FronteggNextJSSession | null>} A Promise that resolves to the updated session object, or `null` if the refresh failed.\n */\nexport default async function refreshAccessTokenIfNeeded(ctx: NextPageContext): Promise<FronteggNextJSSession | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshAccessTokenIfNeeded' });\n\n  logger.info(`Refreshing token by for PageContext ${ctx.pathname}`);\n  const nextJsRequest = ctx.req;\n  const nextJsResponse = ctx.res;\n  const url = nextJsRequest?.url;\n  if (!nextJsResponse || !nextJsRequest || !url) {\n    logger.debug(`abandon refreshToken due to PageContext.req = null`);\n    return null;\n  }\n\n  if (hasSetSessionCookie(nextJsResponse.getHeader('set-cookie'))) {\n    const cookies = CookieManager.getSessionCookieFromRedirectedResponse(nextJsResponse);\n    const session = await createSession(cookies, encryption);\n    logger.debug('Abandon refreshToken due to a previous redirect to /_error or other server-side redirect.');\n    return session ?? getForwardedSession(nextJsResponse);\n  }\n\n  try {\n    logger.info(`Check if should request made from first application load`);\n\n    if (isRuntimeNextRequest(url) || config.disableInitialPropsRefreshToken) {\n      logger.debug(`Detect runtime next.js request, resolving existing session from cookies if exists`);\n\n      const cookies = CookieManager.getSessionCookieFromRequest(nextJsRequest);\n      const session = await createSession(cookies, encryption);\n\n      if (session) {\n        logger.debug(`session resolved from session cookie`);\n        return session;\n      } else {\n        logger.info('Failed to resolve session from cookie, going to refresh token');\n      }\n    }\n\n    if (config.isHostedLogin) {\n      // hosted login bypassed urls\n      if (isOauthCallback(url)) {\n        logger.debug(`abandon refreshToken for HostedLogin Callback ${url}`);\n        CookieManager.removeCookies({\n          isSecured: config.isSSL,\n          cookieDomain: config.cookieDomain,\n          res: nextJsResponse,\n          req: nextJsRequest,\n        });\n      }\n    } else {\n      // embedded login bypassed urls\n      if (isSamlCallback(url)) {\n        logger.debug(`abandon refreshToken for Saml Callback ${url}`);\n        return null;\n      }\n    }\n\n    const clientIp =\n      nextJsRequest.headers['cf-connecting-ip'] ||\n      nextJsRequest.headers['x-forwarded-for'] ||\n      nextJsRequest.socket?.remoteAddress;\n\n    if (clientIp && config.shouldForwardIp) {\n      nextJsRequest.headers[FRONTEGG_FORWARD_IP_HEADER] = clientIp;\n      nextJsRequest.headers[FRONTEGG_HEADERS_VERIFIER_HEADER] = config.sharedSecret ?? '';\n    }\n\n    let response: Response | null;\n    if (config.isHostedLogin) {\n      response = await refreshAccessTokenHostedLogin(nextJsRequest);\n    } else {\n      response = await refreshAccessTokenEmbedded(nextJsRequest);\n    }\n\n    const isSecured = config.isSSL;\n    if (response === null || !response.ok) {\n      CookieManager.removeCookies({\n        cookieDomain: config.cookieDomain,\n        isSecured,\n        req: nextJsRequest,\n        res: nextJsResponse,\n      });\n      return null;\n    }\n\n    const data = await response.json();\n\n    const cookieHeader: string[] =\n      // @ts-ignore the first argument \"raw\" will only work before nextjs 13.4 and the second argument \"getSetCookie\" will only work after\n      response.headers?.raw?.()['set-cookie'] ??\n      // @ts-ignore the first argument \"raw\" will only work before nextjs 13.4 and the second argument \"getSetCookie\" will only work after\n      response.headers?.getSetCookie?.() ??\n      response.headers?.get?.('set-cookie') ??\n      [];\n\n    const newSetCookie = CookieManager.modifySetCookie(cookieHeader, isSecured) ?? [];\n    const [session, decodedJwt, refreshToken] = await createSessionFromAccessToken(data);\n\n    if (!session) {\n      return null;\n    }\n    const cookieValue = CookieManager.create({\n      value: session,\n      expires: new Date(decodedJwt.exp * 1000),\n      secure: isSecured,\n      req: nextJsRequest,\n    });\n    newSetCookie.push(...cookieValue);\n    nextJsResponse.setHeader('set-cookie', newSetCookie);\n\n    const fronteggSession = {\n      accessToken: data.accessToken ?? data.access_token,\n      user: decodedJwt,\n      refreshToken,\n    };\n\n    saveForwardedSession(nextJsResponse, fronteggSession);\n    return fronteggSession;\n  } catch (e) {\n    logger.error('[refreshToken] Failed to create session e', e);\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAEA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,QAAA,GAAAD,sBAAA,CAAAF,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AAUA,IAAAK,eAAA,GAAAH,sBAAA,CAAAF,OAAA;AACA,IAAAM,WAAA,GAAAJ,sBAAA,CAAAF,OAAA;AACA,IAAAO,cAAA,GAAAL,sBAAA,CAAAF,OAAA;AACA,IAAAQ,MAAA,GAAAR,OAAA;AAGA;AACA;AACA;AACA;AACA;AACA;AACe,eAAeS,0BAA0BA,CAACC,GAAoB,EAAyC;EACpH,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA6B,CAAC,CAAC;EAE1EH,MAAM,CAACI,IAAI,CAAC,uCAAuCL,GAAG,CAACM,QAAQ,EAAE,CAAC;EAClE,MAAMC,aAAa,GAAGP,GAAG,CAACQ,GAAG;EAC7B,MAAMC,cAAc,GAAGT,GAAG,CAACU,GAAG;EAC9B,MAAMC,GAAG,GAAGJ,aAAa,oBAAbA,aAAa,CAAEI,GAAG;EAC9B,IAAI,CAACF,cAAc,IAAI,CAACF,aAAa,IAAI,CAACI,GAAG,EAAE;IAC7CV,MAAM,CAACW,KAAK,CAAC,oDAAoD,CAAC;IAClE,OAAO,IAAI;EACb;EAEA,IAAI,IAAAC,4BAAmB,EAACJ,cAAc,CAACK,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE;IAC/D,MAAMC,OAAO,GAAGC,gBAAa,CAACC,sCAAsC,CAACR,cAAc,CAAC;IACpF,MAAMS,OAAO,GAAG,MAAM,IAAAC,sBAAa,EAACJ,OAAO,EAAEK,mBAAU,CAAC;IACxDnB,MAAM,CAACW,KAAK,CAAC,2FAA2F,CAAC;IACzG,OAAOM,OAAO,WAAPA,OAAO,GAAI,IAAAG,4BAAmB,EAACZ,cAAc,CAAC;EACvD;EAEA,IAAI;IAAA,IAAAa,qBAAA,EAAAC,IAAA,EAAAC,KAAA,EAAAC,qBAAA,EAAAC,iBAAA,EAAAC,sBAAA,EAAAC,kBAAA,EAAAC,qBAAA,EAAAC,kBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,iBAAA;IACFhC,MAAM,CAACI,IAAI,CAAC,0DAA0D,CAAC;IAEvE,IAAI,IAAA6B,6BAAoB,EAACvB,GAAG,CAAC,IAAIwB,eAAM,CAACC,+BAA+B,EAAE;MACvEnC,MAAM,CAACW,KAAK,CAAC,mFAAmF,CAAC;MAEjG,MAAMG,OAAO,GAAGC,gBAAa,CAACqB,2BAA2B,CAAC9B,aAAa,CAAC;MACxE,MAAMW,OAAO,GAAG,MAAM,IAAAC,sBAAa,EAACJ,OAAO,EAAEK,mBAAU,CAAC;MAExD,IAAIF,OAAO,EAAE;QACXjB,MAAM,CAACW,KAAK,CAAC,sCAAsC,CAAC;QACpD,OAAOM,OAAO;MAChB,CAAC,MAAM;QACLjB,MAAM,CAACI,IAAI,CAAC,+DAA+D,CAAC;MAC9E;IACF;IAEA,IAAI8B,eAAM,CAACG,aAAa,EAAE;MACxB;MACA,IAAI,IAAAC,wBAAe,EAAC5B,GAAG,CAAC,EAAE;QACxBV,MAAM,CAACW,KAAK,CAAC,iDAAiDD,GAAG,EAAE,CAAC;QACpEK,gBAAa,CAACwB,aAAa,CAAC;UAC1BC,SAAS,EAAEN,eAAM,CAACO,KAAK;UACvBC,YAAY,EAAER,eAAM,CAACQ,YAAY;UACjCjC,GAAG,EAAED,cAAc;UACnBD,GAAG,EAAED;QACP,CAAC,CAAC;MACJ;IACF,CAAC,MAAM;MACL;MACA,IAAI,IAAAqC,uBAAc,EAACjC,GAAG,CAAC,EAAE;QACvBV,MAAM,CAACW,KAAK,CAAC,0CAA0CD,GAAG,EAAE,CAAC;QAC7D,OAAO,IAAI;MACb;IACF;IAEA,MAAMkC,QAAQ,GACZtC,aAAa,CAACuC,OAAO,CAAC,kBAAkB,CAAC,IACzCvC,aAAa,CAACuC,OAAO,CAAC,iBAAiB,CAAC,MAAAxB,qBAAA,GACxCf,aAAa,CAACwC,MAAM,qBAApBzB,qBAAA,CAAsB0B,aAAa;IAErC,IAAIH,QAAQ,IAAIV,eAAM,CAACc,eAAe,EAAE;MAAA,IAAAC,oBAAA;MACtC3C,aAAa,CAACuC,OAAO,CAACK,iCAA0B,CAAC,GAAGN,QAAQ;MAC5DtC,aAAa,CAACuC,OAAO,CAACM,uCAAgC,CAAC,IAAAF,oBAAA,GAAGf,eAAM,CAACkB,YAAY,YAAAH,oBAAA,GAAI,EAAE;IACrF;IAEA,IAAII,QAAyB;IAC7B,IAAInB,eAAM,CAACG,aAAa,EAAE;MACxBgB,QAAQ,GAAG,MAAM,IAAAC,sCAA6B,EAAChD,aAAa,CAAC;IAC/D,CAAC,MAAM;MACL+C,QAAQ,GAAG,MAAM,IAAAE,mCAA0B,EAACjD,aAAa,CAAC;IAC5D;IAEA,MAAMkC,SAAS,GAAGN,eAAM,CAACO,KAAK;IAC9B,IAAIY,QAAQ,KAAK,IAAI,IAAI,CAACA,QAAQ,CAACG,EAAE,EAAE;MACrCzC,gBAAa,CAACwB,aAAa,CAAC;QAC1BG,YAAY,EAAER,eAAM,CAACQ,YAAY;QACjCF,SAAS;QACTjC,GAAG,EAAED,aAAa;QAClBG,GAAG,EAAED;MACP,CAAC,CAAC;MACF,OAAO,IAAI;IACb;IAEA,MAAMiD,IAAI,GAAG,MAAMJ,QAAQ,CAACK,IAAI,CAAC,CAAC;IAElC,MAAMC,YAAsB,GAC1B;IAAA,CAAArC,IAAA,IAAAC,KAAA,IAAAC,qBAAA,IAAAC,iBAAA,GACA4B,QAAQ,CAACR,OAAO,cAAAnB,sBAAA,GAAhBD,iBAAA,CAAkBmC,GAAG,qBAArBlC,sBAAA,CAAAmC,IAAA,CAAApC,iBAAwB,CAAC,CAAC,YAAY,CAAC,YAAAD,qBAAA,GACvC;IAAA,CAAAG,kBAAA,GACA0B,QAAQ,CAACR,OAAO,cAAAjB,qBAAA,GAAhBD,kBAAA,CAAkBmC,YAAY,qBAA9BlC,qBAAA,CAAAiC,IAAA,CAAAlC,kBAAiC,CAAC,YAAAJ,KAAA,IAAAM,kBAAA,GAClCwB,QAAQ,CAACR,OAAO,cAAAf,qBAAA,GAAhBD,kBAAA,CAAkBkC,GAAG,qBAArBjC,qBAAA,CAAA+B,IAAA,CAAAhC,kBAAA,EAAwB,YAAY,CAAC,YAAAP,IAAA,GACrC,EAAE;IAEJ,MAAM0C,YAAY,IAAAjC,qBAAA,GAAGhB,gBAAa,CAACkD,eAAe,CAACN,YAAY,EAAEnB,SAAS,CAAC,YAAAT,qBAAA,GAAI,EAAE;IACjF,MAAM,CAACd,OAAO,EAAEiD,UAAU,EAAEC,YAAY,CAAC,GAAG,MAAM,IAAAC,oCAA4B,EAACX,IAAI,CAAC;IAEpF,IAAI,CAACxC,OAAO,EAAE;MACZ,OAAO,IAAI;IACb;IACA,MAAMoD,WAAW,GAAGtD,gBAAa,CAACuD,MAAM,CAAC;MACvCC,KAAK,EAAEtD,OAAO;MACduD,OAAO,EAAE,IAAIC,IAAI,CAACP,UAAU,CAACQ,GAAG,GAAG,IAAI,CAAC;MACxCC,MAAM,EAAEnC,SAAS;MACjBjC,GAAG,EAAED;IACP,CAAC,CAAC;IACF0D,YAAY,CAACY,IAAI,CAAC,GAAGP,WAAW,CAAC;IACjC7D,cAAc,CAACqE,SAAS,CAAC,YAAY,EAAEb,YAAY,CAAC;IAEpD,MAAMc,eAAe,GAAG;MACtBC,WAAW,GAAA/C,iBAAA,GAAEyB,IAAI,CAACsB,WAAW,YAAA/C,iBAAA,GAAIyB,IAAI,CAACuB,YAAY;MAClDC,IAAI,EAAEf,UAAU;MAChBC;IACF,CAAC;IAED,IAAAe,6BAAoB,EAAC1E,cAAc,EAAEsE,eAAe,CAAC;IACrD,OAAOA,eAAe;EACxB,CAAC,CAAC,OAAOK,CAAC,EAAE;IACVnF,MAAM,CAACoF,KAAK,CAAC,2CAA2C,EAAED,CAAC,CAAC;IAC5D,OAAO,IAAI;EACb;AACF","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_common","require","_config","_interopRequireDefault","_cookies","_helpers","_fronteggLogger","_encryption","_createSession","_utils","_headers","refreshAccessTokenIfNeeded","ctx","logger","fronteggLogger","child","tag","info","pathname","nextJsRequest","req","nextJsResponse","res","url","debug","hasSetSessionCookie","getHeader","cookies","CookieManager","getSessionCookieFromRedirectedResponse","session","createSession","encryption","getForwardedSession","_nextJsRequest$socket","_ref","_ref2","_response$headers$raw","_response$headers","_response$headers$raw2","_response$headers2","_response$headers2$ge","_response$headers3","_response$headers3$ge","_CookieManager$modify","_data$accessToken","isRuntimeNextRequest","config","disableInitialPropsRefreshToken","getSessionCookieFromRequest","isHostedLogin","isOauthCallback","removeCookies","isSecured","isSSL","cookieDomain","isSamlCallback","clientIp","getClientIp","headers","socket","remoteAddress","shouldForwardIp","_nextJsRequest$socket2","_config$sharedSecret","FRONTEGG_FORWARD_IP_HEADER","FRONTEGG_HEADERS_VERIFIER_HEADER","sharedSecret","response","refreshAccessTokenHostedLogin","refreshAccessTokenEmbedded","ok","data","json","cookieHeader","raw","call","getSetCookie","get","newSetCookie","modifySetCookie","decodedJwt","refreshToken","createSessionFromAccessToken","cookieValue","create","value","expires","Date","exp","secure","push","setHeader","fronteggSession","accessToken","access_token","user","saveForwardedSession","e","error"],"sources":["../../../../../packages/nextjs/src/utils/refreshAccessTokenIfNeeded/index.ts"],"sourcesContent":["import type { NextPageContext } from 'next/dist/shared/lib/utils';\nimport type { FronteggNextJSSession } from '../../types';\nimport { createSessionFromAccessToken } from '../../common';\nimport config from '../../config';\nimport CookieManager from '../cookies';\nimport {\n  isOauthCallback,\n  hasSetSessionCookie,\n  isRuntimeNextRequest,\n  isSamlCallback,\n  refreshAccessTokenEmbedded,\n  refreshAccessTokenHostedLogin,\n  saveForwardedSession,\n  getForwardedSession,\n} from './helpers';\nimport fronteggLogger from '../fronteggLogger';\nimport encryption from '../encryption';\nimport createSession from '../createSession';\nimport { FRONTEGG_HEADERS_VERIFIER_HEADER, FRONTEGG_FORWARD_IP_HEADER } from '../../api/utils';\nimport { getClientIp } from '../headers';\n\nexport { isRuntimeNextRequest };\n/**\n * Refreshes the access token for the current session.\n *\n * @param {NextPageContext} ctx - The Next.js Page Context object.\n * @returns {Promise<FronteggNextJSSession | null>} A Promise that resolves to the updated session object, or `null` if the refresh failed.\n */\nexport default async function refreshAccessTokenIfNeeded(ctx: NextPageContext): Promise<FronteggNextJSSession | null> {\n  const logger = fronteggLogger.child({ tag: 'refreshAccessTokenIfNeeded' });\n\n  logger.info(`Refreshing token by for PageContext ${ctx.pathname}`);\n  const nextJsRequest = ctx.req;\n  const nextJsResponse = ctx.res;\n  const url = nextJsRequest?.url;\n  if (!nextJsResponse || !nextJsRequest || !url) {\n    logger.debug(`abandon refreshToken due to PageContext.req = null`);\n    return null;\n  }\n\n  if (hasSetSessionCookie(nextJsResponse.getHeader('set-cookie'))) {\n    const cookies = CookieManager.getSessionCookieFromRedirectedResponse(nextJsResponse);\n    const session = await createSession(cookies, encryption);\n    logger.debug('Abandon refreshToken due to a previous redirect to /_error or other server-side redirect.');\n    return session ?? getForwardedSession(nextJsResponse);\n  }\n\n  try {\n    logger.info(`Check if should request made from first application load`);\n\n    if (isRuntimeNextRequest(url) || config.disableInitialPropsRefreshToken) {\n      logger.debug(`Detect runtime next.js request, resolving existing session from cookies if exists`);\n\n      const cookies = CookieManager.getSessionCookieFromRequest(nextJsRequest);\n      const session = await createSession(cookies, encryption);\n\n      if (session) {\n        logger.debug(`session resolved from session cookie`);\n        return session;\n      } else {\n        logger.info('Failed to resolve session from cookie, going to refresh token');\n      }\n    }\n\n    if (config.isHostedLogin) {\n      // hosted login bypassed urls\n      if (isOauthCallback(url)) {\n        logger.debug(`abandon refreshToken for HostedLogin Callback ${url}`);\n        CookieManager.removeCookies({\n          isSecured: config.isSSL,\n          cookieDomain: config.cookieDomain,\n          res: nextJsResponse,\n          req: nextJsRequest,\n        });\n      }\n    } else {\n      // embedded login bypassed urls\n      if (isSamlCallback(url)) {\n        logger.debug(`abandon refreshToken for Saml Callback ${url}`);\n        return null;\n      }\n    }\n\n    const clientIp =\n      getClientIp(nextJsRequest.headers['cf-connecting-ip'] || nextJsRequest.headers['x-forwarded-for']) ||\n      nextJsRequest.socket?.remoteAddress;\n\n    if (clientIp && config.shouldForwardIp) {\n      nextJsRequest.headers[FRONTEGG_FORWARD_IP_HEADER] = clientIp;\n      nextJsRequest.headers[\n        'refresh-access-token-if-needed'\n      ] = `nextJsRequest.headers['cf-connecting-ip'] ${nextJsRequest.headers['cf-connecting-ip']} | nextJsRequest.headers['x-forwarded-for']${nextJsRequest.headers['x-forwarded-for']} | nextJsRequest.socket?.remoteAddress ${nextJsRequest.socket?.remoteAddress}`;\n      nextJsRequest.headers[FRONTEGG_HEADERS_VERIFIER_HEADER] = config.sharedSecret ?? '';\n    }\n\n    let response: Response | null;\n    if (config.isHostedLogin) {\n      response = await refreshAccessTokenHostedLogin(nextJsRequest);\n    } else {\n      response = await refreshAccessTokenEmbedded(nextJsRequest);\n    }\n\n    const isSecured = config.isSSL;\n    if (response === null || !response.ok) {\n      CookieManager.removeCookies({\n        cookieDomain: config.cookieDomain,\n        isSecured,\n        req: nextJsRequest,\n        res: nextJsResponse,\n      });\n      return null;\n    }\n\n    const data = await response.json();\n\n    const cookieHeader: string[] =\n      // @ts-ignore the first argument \"raw\" will only work before nextjs 13.4 and the second argument \"getSetCookie\" will only work after\n      response.headers?.raw?.()['set-cookie'] ??\n      // @ts-ignore the first argument \"raw\" will only work before nextjs 13.4 and the second argument \"getSetCookie\" will only work after\n      response.headers?.getSetCookie?.() ??\n      response.headers?.get?.('set-cookie') ??\n      [];\n\n    const newSetCookie = CookieManager.modifySetCookie(cookieHeader, isSecured) ?? [];\n    const [session, decodedJwt, refreshToken] = await createSessionFromAccessToken(data);\n\n    if (!session) {\n      return null;\n    }\n    const cookieValue = CookieManager.create({\n      value: session,\n      expires: new Date(decodedJwt.exp * 1000),\n      secure: isSecured,\n      req: nextJsRequest,\n    });\n    newSetCookie.push(...cookieValue);\n    nextJsResponse.setHeader('set-cookie', newSetCookie);\n\n    const fronteggSession = {\n      accessToken: data.accessToken ?? data.access_token,\n      user: decodedJwt,\n      refreshToken,\n    };\n\n    saveForwardedSession(nextJsResponse, fronteggSession);\n    return fronteggSession;\n  } catch (e) {\n    logger.error('[refreshToken] Failed to create session e', e);\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAEA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,QAAA,GAAAD,sBAAA,CAAAF,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AAUA,IAAAK,eAAA,GAAAH,sBAAA,CAAAF,OAAA;AACA,IAAAM,WAAA,GAAAJ,sBAAA,CAAAF,OAAA;AACA,IAAAO,cAAA,GAAAL,sBAAA,CAAAF,OAAA;AACA,IAAAQ,MAAA,GAAAR,OAAA;AACA,IAAAS,QAAA,GAAAT,OAAA;AAGA;AACA;AACA;AACA;AACA;AACA;AACe,eAAeU,0BAA0BA,CAACC,GAAoB,EAAyC;EACpH,MAAMC,MAAM,GAAGC,uBAAc,CAACC,KAAK,CAAC;IAAEC,GAAG,EAAE;EAA6B,CAAC,CAAC;EAE1EH,MAAM,CAACI,IAAI,CAAC,uCAAuCL,GAAG,CAACM,QAAQ,EAAE,CAAC;EAClE,MAAMC,aAAa,GAAGP,GAAG,CAACQ,GAAG;EAC7B,MAAMC,cAAc,GAAGT,GAAG,CAACU,GAAG;EAC9B,MAAMC,GAAG,GAAGJ,aAAa,oBAAbA,aAAa,CAAEI,GAAG;EAC9B,IAAI,CAACF,cAAc,IAAI,CAACF,aAAa,IAAI,CAACI,GAAG,EAAE;IAC7CV,MAAM,CAACW,KAAK,CAAC,oDAAoD,CAAC;IAClE,OAAO,IAAI;EACb;EAEA,IAAI,IAAAC,4BAAmB,EAACJ,cAAc,CAACK,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE;IAC/D,MAAMC,OAAO,GAAGC,gBAAa,CAACC,sCAAsC,CAACR,cAAc,CAAC;IACpF,MAAMS,OAAO,GAAG,MAAM,IAAAC,sBAAa,EAACJ,OAAO,EAAEK,mBAAU,CAAC;IACxDnB,MAAM,CAACW,KAAK,CAAC,2FAA2F,CAAC;IACzG,OAAOM,OAAO,WAAPA,OAAO,GAAI,IAAAG,4BAAmB,EAACZ,cAAc,CAAC;EACvD;EAEA,IAAI;IAAA,IAAAa,qBAAA,EAAAC,IAAA,EAAAC,KAAA,EAAAC,qBAAA,EAAAC,iBAAA,EAAAC,sBAAA,EAAAC,kBAAA,EAAAC,qBAAA,EAAAC,kBAAA,EAAAC,qBAAA,EAAAC,qBAAA,EAAAC,iBAAA;IACFhC,MAAM,CAACI,IAAI,CAAC,0DAA0D,CAAC;IAEvE,IAAI,IAAA6B,6BAAoB,EAACvB,GAAG,CAAC,IAAIwB,eAAM,CAACC,+BAA+B,EAAE;MACvEnC,MAAM,CAACW,KAAK,CAAC,mFAAmF,CAAC;MAEjG,MAAMG,OAAO,GAAGC,gBAAa,CAACqB,2BAA2B,CAAC9B,aAAa,CAAC;MACxE,MAAMW,OAAO,GAAG,MAAM,IAAAC,sBAAa,EAACJ,OAAO,EAAEK,mBAAU,CAAC;MAExD,IAAIF,OAAO,EAAE;QACXjB,MAAM,CAACW,KAAK,CAAC,sCAAsC,CAAC;QACpD,OAAOM,OAAO;MAChB,CAAC,MAAM;QACLjB,MAAM,CAACI,IAAI,CAAC,+DAA+D,CAAC;MAC9E;IACF;IAEA,IAAI8B,eAAM,CAACG,aAAa,EAAE;MACxB;MACA,IAAI,IAAAC,wBAAe,EAAC5B,GAAG,CAAC,EAAE;QACxBV,MAAM,CAACW,KAAK,CAAC,iDAAiDD,GAAG,EAAE,CAAC;QACpEK,gBAAa,CAACwB,aAAa,CAAC;UAC1BC,SAAS,EAAEN,eAAM,CAACO,KAAK;UACvBC,YAAY,EAAER,eAAM,CAACQ,YAAY;UACjCjC,GAAG,EAAED,cAAc;UACnBD,GAAG,EAAED;QACP,CAAC,CAAC;MACJ;IACF,CAAC,MAAM;MACL;MACA,IAAI,IAAAqC,uBAAc,EAACjC,GAAG,CAAC,EAAE;QACvBV,MAAM,CAACW,KAAK,CAAC,0CAA0CD,GAAG,EAAE,CAAC;QAC7D,OAAO,IAAI;MACb;IACF;IAEA,MAAMkC,QAAQ,GACZ,IAAAC,oBAAW,EAACvC,aAAa,CAACwC,OAAO,CAAC,kBAAkB,CAAC,IAAIxC,aAAa,CAACwC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAAzB,qBAAA,GAClGf,aAAa,CAACyC,MAAM,qBAApB1B,qBAAA,CAAsB2B,aAAa;IAErC,IAAIJ,QAAQ,IAAIV,eAAM,CAACe,eAAe,EAAE;MAAA,IAAAC,sBAAA,EAAAC,oBAAA;MACtC7C,aAAa,CAACwC,OAAO,CAACM,iCAA0B,CAAC,GAAGR,QAAQ;MAC5DtC,aAAa,CAACwC,OAAO,CACnB,gCAAgC,CACjC,GAAG,6CAA6CxC,aAAa,CAACwC,OAAO,CAAC,kBAAkB,CAAC,8CAA8CxC,aAAa,CAACwC,OAAO,CAAC,iBAAiB,CAAC,2CAAAI,sBAAA,GAA0C5C,aAAa,CAACyC,MAAM,qBAApBG,sBAAA,CAAsBF,aAAa,EAAE;MAC/P1C,aAAa,CAACwC,OAAO,CAACO,uCAAgC,CAAC,IAAAF,oBAAA,GAAGjB,eAAM,CAACoB,YAAY,YAAAH,oBAAA,GAAI,EAAE;IACrF;IAEA,IAAII,QAAyB;IAC7B,IAAIrB,eAAM,CAACG,aAAa,EAAE;MACxBkB,QAAQ,GAAG,MAAM,IAAAC,sCAA6B,EAAClD,aAAa,CAAC;IAC/D,CAAC,MAAM;MACLiD,QAAQ,GAAG,MAAM,IAAAE,mCAA0B,EAACnD,aAAa,CAAC;IAC5D;IAEA,MAAMkC,SAAS,GAAGN,eAAM,CAACO,KAAK;IAC9B,IAAIc,QAAQ,KAAK,IAAI,IAAI,CAACA,QAAQ,CAACG,EAAE,EAAE;MACrC3C,gBAAa,CAACwB,aAAa,CAAC;QAC1BG,YAAY,EAAER,eAAM,CAACQ,YAAY;QACjCF,SAAS;QACTjC,GAAG,EAAED,aAAa;QAClBG,GAAG,EAAED;MACP,CAAC,CAAC;MACF,OAAO,IAAI;IACb;IAEA,MAAMmD,IAAI,GAAG,MAAMJ,QAAQ,CAACK,IAAI,CAAC,CAAC;IAElC,MAAMC,YAAsB,GAC1B;IAAA,CAAAvC,IAAA,IAAAC,KAAA,IAAAC,qBAAA,IAAAC,iBAAA,GACA8B,QAAQ,CAACT,OAAO,cAAApB,sBAAA,GAAhBD,iBAAA,CAAkBqC,GAAG,qBAArBpC,sBAAA,CAAAqC,IAAA,CAAAtC,iBAAwB,CAAC,CAAC,YAAY,CAAC,YAAAD,qBAAA,GACvC;IAAA,CAAAG,kBAAA,GACA4B,QAAQ,CAACT,OAAO,cAAAlB,qBAAA,GAAhBD,kBAAA,CAAkBqC,YAAY,qBAA9BpC,qBAAA,CAAAmC,IAAA,CAAApC,kBAAiC,CAAC,YAAAJ,KAAA,IAAAM,kBAAA,GAClC0B,QAAQ,CAACT,OAAO,cAAAhB,qBAAA,GAAhBD,kBAAA,CAAkBoC,GAAG,qBAArBnC,qBAAA,CAAAiC,IAAA,CAAAlC,kBAAA,EAAwB,YAAY,CAAC,YAAAP,IAAA,GACrC,EAAE;IAEJ,MAAM4C,YAAY,IAAAnC,qBAAA,GAAGhB,gBAAa,CAACoD,eAAe,CAACN,YAAY,EAAErB,SAAS,CAAC,YAAAT,qBAAA,GAAI,EAAE;IACjF,MAAM,CAACd,OAAO,EAAEmD,UAAU,EAAEC,YAAY,CAAC,GAAG,MAAM,IAAAC,oCAA4B,EAACX,IAAI,CAAC;IAEpF,IAAI,CAAC1C,OAAO,EAAE;MACZ,OAAO,IAAI;IACb;IACA,MAAMsD,WAAW,GAAGxD,gBAAa,CAACyD,MAAM,CAAC;MACvCC,KAAK,EAAExD,OAAO;MACdyD,OAAO,EAAE,IAAIC,IAAI,CAACP,UAAU,CAACQ,GAAG,GAAG,IAAI,CAAC;MACxCC,MAAM,EAAErC,SAAS;MACjBjC,GAAG,EAAED;IACP,CAAC,CAAC;IACF4D,YAAY,CAACY,IAAI,CAAC,GAAGP,WAAW,CAAC;IACjC/D,cAAc,CAACuE,SAAS,CAAC,YAAY,EAAEb,YAAY,CAAC;IAEpD,MAAMc,eAAe,GAAG;MACtBC,WAAW,GAAAjD,iBAAA,GAAE2B,IAAI,CAACsB,WAAW,YAAAjD,iBAAA,GAAI2B,IAAI,CAACuB,YAAY;MAClDC,IAAI,EAAEf,UAAU;MAChBC;IACF,CAAC;IAED,IAAAe,6BAAoB,EAAC5E,cAAc,EAAEwE,eAAe,CAAC;IACrD,OAAOA,eAAe;EACxB,CAAC,CAAC,OAAOK,CAAC,EAAE;IACVrF,MAAM,CAACsF,KAAK,CAAC,2CAA2C,EAAED,CAAC,CAAC;IAC5D,OAAO,IAAI;EACb;AACF","ignoreList":[]}