@geekapps/auth-nextjs 0.12.0 → 0.14.0

package/dist/middleware.d.ts

@@ -1,22 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-
-type AuthMiddlewareConfig = {
-    issuer?: string;
-    basePath?: string;
-    /**
-     * @deprecated cookiePrefix is now auto-derived from GEEKAPPS_AUTH_CLIENT_ID.
-     * This field is kept for backwards compatibility but is ignored.
-     */
-    cookiePrefix?: string;
-    secureCookies?: boolean;
-    /** Base URL of this app (e.g. "https://meuapp.com"). Overrides the GEEKAPPS_APP_URL env var. */
-    appUrl?: string;
-    /**
-     * When true, unauthenticated requests are redirected to sign-in.
-     * Defaults to false — the app controls its own auth-gating.
-     */
-    forceLoginOnUnauthenticated?: boolean;
-};
-declare function createAuthMiddleware(input?: AuthMiddlewareConfig): (request: NextRequest) => Promise<NextResponse>;
-
-export { type AuthMiddlewareConfig, createAuthMiddleware };

package/dist/server.d.ts

@@ -1,138 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { JWTPayload } from 'jose';
-
-/**
- * A sessão não vale mais: expirou, foi revogada no painel ou o refresh token
- * foi invalidado. Os cookies já foram limpos quando este erro é lançado, então
- * o tratamento normal é redirecionar para o login.
- */
-declare class GeekappsSessionExpiredError extends Error {
-    readonly code: "session_expired";
-    constructor(message?: string);
-}
-/**
- * Fixed URL of the Geekapps Auth Server (OIDC issuer + API). This never
- * changes per-environment, so it is hardcoded rather than read from env.
- */
-declare const GEEKAPPS_AUTH_SERVER_URL = "https://accounts-api.geekapps.com.br";
-type GeekappsAuthConfig = {
-    /**
-     * Auth Server (OIDC) issuer URL. Defaults to GEEKAPPS_AUTH_SERVER_URL and
-     * should not need overriding in normal use.
-     *
-     * Deprecated (still supported as a fallback): GEEKAPPS_AUTH_SERVER_ISSUER,
-     * GEEKAPPS_AUTH_ISSUER, GEEKAPPS_AUTH_SERVER_URL env, GEEKAPPS_AUTH_API_URL
-     */
-    issuer?: string;
-    /**
-     * OAuth client id. Optional when GEEKAPPS_AUTH_CLIENT_ID is defined.
-     */
-    clientId?: string;
-    /**
-     * OAuth client secret for confidential clients. Optional when
-     * GEEKAPPS_AUTH_CLIENT_SECRET is defined.
-     */
-    clientSecret?: string;
-    /**
-     * Callback URL. Optional when GEEKAPPS_AUTH_REDIRECT_URI is defined.
-     * If omitted, it is inferred from the current request origin + basePath/callback.
-     */
-    redirectUri?: string;
-    scopes?: string[];
-    basePath?: string;
-    /**
-     * @deprecated cookiePrefix is now auto-derived from clientId.
-     * This field is kept for backwards compatibility but is ignored.
-     */
-    cookiePrefix?: string;
-    secureCookies?: boolean;
-    /**
-     * Friendly alias used by apps. Same as afterSignInRedirectTo.
-     */
-    redirectTo?: string;
-    afterSignInRedirectTo?: string;
-    afterSignOutRedirectTo?: string;
-};
-type SessionTokens = {
-    accessToken: string | null;
-    refreshToken: string | null;
-    idToken: string | null;
-    sessionId: string | null;
-};
-type StoredAccount = {
-    /** Stable identifier — `sub` from id_token or fallback to sessionId. */
-    id: string;
-    accessToken: string;
-    refreshToken: string | null;
-    idToken: string | null;
-    sessionId: string | null;
-    user: {
-        sub: string;
-        name?: string | null;
-        email?: string | null;
-        picture?: string | null;
-        phone?: string | null;
-    };
-};
-type ServerAuthApiClient = {
-    get: <T>(path: string) => Promise<T>;
-    post: <T>(path: string, body?: unknown) => Promise<T>;
-    patch: <T>(path: string, body?: unknown) => Promise<T>;
-    put: <T>(path: string, body?: unknown) => Promise<T>;
-    delete: <T>(path: string) => Promise<T>;
-};
-type ServiceAccountConfig = {
-    issuer?: string;
-    clientId?: string;
-    clientSecret?: string;
-};
-/**
- * Returns a service account access token.
- * The issuer is always the Geekapps Auth Server (GEEKAPPS_AUTH_SERVER_URL) —
- * it does not need to be configured. Reads GEEKAPPS_SERVICE_ACCOUNT_CLIENT_ID,
- * GEEKAPPS_SERVICE_ACCOUNT_CLIENT_SECRET by default.
- * Any field can be overridden via the optional config argument.
- * Tokens are cached per client and auto-renewed before expiry (~7 min TTL).
- */
-declare function getServiceAccountToken(override?: ServiceAccountConfig): Promise<string | null>;
-declare function verifyToken(token: string, issuer: string): Promise<JWTPayload | null>;
-declare function configureGeekappsAuth(input?: GeekappsAuthConfig): {
-    handlers: {
-        GET: (request: NextRequest) => Promise<NextResponse<any>>;
-        POST: (request: NextRequest) => Promise<NextResponse<any>>;
-        PATCH: (request: NextRequest) => Promise<NextResponse<any>>;
-        DELETE: (request: NextRequest) => Promise<NextResponse<any>>;
-    };
-    GetSession: () => Promise<SessionTokens | null>;
-    GetUser: () => Promise<StoredAccount["user"] | null>;
-    GetUserById: (userId: string, applicationId?: string) => Promise<unknown | null>;
-    GetOrganizations: () => Promise<{
-        organizations: unknown[];
-        currentOrgId: string | null;
-    }>;
-    SaveSession: (tokens: SessionTokens) => Promise<void>;
-    GetAccessToken: () => Promise<string | null>;
-    GetRefreshToken: () => Promise<string | null>;
-    IsAuthenticated: () => Promise<boolean>;
-    TryRefreshTokens: () => Promise<string | null>;
-    RequireUser: (options?: {
-        redirectTo?: string;
-    }) => Promise<string>;
-    CreateAuthApiClient: () => ServerAuthApiClient;
-    cookiePrefix: string;
-    VerifyToken: (token: string) => Promise<JWTPayload | null>;
-    SignInUrl: (redirectTo?: string) => Promise<string>;
-};
-declare function handlers(options?: GeekappsAuthConfig): {
-    GET: (request: NextRequest) => Promise<NextResponse<any>>;
-    POST: (request: NextRequest) => Promise<NextResponse<any>>;
-    PATCH: (request: NextRequest) => Promise<NextResponse<any>>;
-    DELETE: (request: NextRequest) => Promise<NextResponse<any>>;
-};
-/**
- * Returns true if the current request has a valid access token in cookies.
- * Safe to call in Server Components, Server Actions, and Route Handlers.
- */
-declare function isAuthenticated(options?: GeekappsAuthConfig): Promise<boolean>;
-
-export { GEEKAPPS_AUTH_SERVER_URL, type GeekappsAuthConfig, GeekappsSessionExpiredError, type ServerAuthApiClient, type SessionTokens, type StoredAccount, configureGeekappsAuth, getServiceAccountToken, handlers, isAuthenticated, verifyToken };