@greatapps/common 1.1.785 → 1.1.786

package/dist/index.mjs

@@ -197,7 +197,7 @@ import { formatShortDate, formatDateTime, calendarDateSchema, toCalendarDate, da
 import { buildQueryParams } from "./infra/utils/params";
 import { parseSchema, parseResult } from "./infra/utils/parser";
 import { withAction } from "./utils/withAction";
-import { resolveSafeRedirect, sameHostOr } from "./utils/redirect";
+import { resolveSafeRedirect, sameHostOr, isSameSiteUrl } from "./utils/redirect";
 import { COUNTRIES, flagUrl } from "./utils/countries";
 import {
   MainLayout,
@@ -765,6 +765,7 @@ export {
   hideCrisp,
   isBrazilianBillingAccount,
   isPaymentMethodAllowed,
+  isSameSiteUrl,
   isSubscriptionPendingPixResponse,
   isUsdAccount,
   isUsdGateway,

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Types\nexport * from \"./modules/auth/schema\";\nexport * from \"./modules/users/schema\";\nexport * from \"./modules/whitelabel/schema\";\n// Style types now come from whitelabel schema directly\nexport * from \"./infra/api/types\";\n\n// Contexts\nexport * from \"./providers/query.provider\";\nexport * from \"./providers/auth.provider\";\nexport * from \"./providers/whitelabel.provider\";\nexport {\n  NavigationProvider,\n  useNavigationFallback,\n} from \"./providers/navigation.provider\";\n\n// Navigation (safe drop-in replacement for next/navigation)\nexport { useRouter } from \"./hooks/useRouter\";\nexport type { SafeAppRouter } from \"./hooks/useRouter\";\nexport {\n  usePathname,\n  useSearchParams,\n  useParams,\n  redirect,\n  notFound,\n} from \"./utils/next-navigation\";\n\n// Hooks\nexport {\n  useListProjectUsers,\n  LIST_PROJECT_USERS_QUERY_KEY,\n  LIST_PROJECT_USERS_BASE_KEY,\n} from \"./modules/projects/hooks/list-project-users.hook\";\nexport {\n  useListAvailableUsers,\n  LIST_AVAILABLE_USERS_QUERY_KEY,\n  LIST_AVAILABLE_USERS_BASE_KEY,\n} from \"./modules/projects/hooks/list-available-users.hook\";\nexport {\n  useListAllAccountUsers,\n  LIST_ALL_ACCOUNT_USERS_QUERY_KEY,\n  LIST_ALL_ACCOUNT_USERS_BASE_KEY,\n} from \"./modules/projects/hooks/list-all-account-users.hook\";\nexport {\n  useProjects,\n  PROJECTS_BASE_KEY,\n  PROJECTS_QUERY_KEY,\n} from \"./modules/projects/hooks/list-projects.hook\";\nexport {\n  useInfiniteProjects,\n  INFINITE_PROJECTS_QUERY_KEY,\n} from \"./modules/projects/hooks/list-infinite-projects.hook\";\nexport { useProject } from \"./modules/projects/hooks/find-project.hook\";\nexport { useCreateProject } from \"./modules/projects/hooks/create-project.hook\";\nexport { useUpdateProject } from \"./modules/projects/hooks/update-project.hook\";\nexport { useDeleteProject } from \"./modules/projects/hooks/delete-project.hook\";\nexport type {\n  Project,\n  ProjectsPage,\n  CreateProjectRequest,\n  UpdateProjectRequest,\n  ProjectUser,\n  AccountUser,\n  AddRemoveProjectUsersParams,\n  ListUsersParams,\n  UsersPage,\n} from \"./modules/projects/types\";\nexport { ProjectSchema } from \"./modules/projects/types\";\nexport type { ListProjectsActionParams } from \"./modules/projects/actions/list-projects.action\";\nexport {\n  useUserQuery,\n  useUserValidateSession,\n  useInvalidateUser,\n  useSetUserData,\n  useTwoFactorVerify,\n  USER_QUERY_KEY,\n} from \"./modules/auth/hooks/useUserQuery\";\nexport { useManagementPermissions } from \"./modules/auth/hooks/useManagementPermissions\";\nexport type { ManagementPermission } from \"./modules/auth/types/management-permission.type\";\nexport { useSocialGoogleLogin } from \"./modules/auth/hooks/social-google-login.hook\";\nexport { useSocialGoogleOnboarding } from \"./modules/auth/hooks/social-google-onboarding.hook\";\nexport { useUnlinkGoogle } from \"./modules/auth/hooks/unlink-google.hook\";\nexport { useSubscriptions } from \"./modules/subscriptions/hooks/list-subscriptions.hook\";\nexport {\n  SUBSCRIPTIONS_QUERY_KEY,\n  CHARGES_QUERY_KEY,\n  FREEZE_NOTICE_QUERY_KEY,\n} from \"./modules/subscriptions/constants/query-keys.constants\";\nexport { useActiveSubscription } from \"./modules/subscriptions/hooks/find-active-subscription.hook\";\nexport { useCancelledSubscriptionGuard } from \"./modules/subscriptions/hooks/use-cancelled-subscription-guard\";\nexport { useAccountFreeze } from \"./modules/subscriptions/hooks/use-account-freeze.hook\";\nexport { useFreezeNotice } from \"./modules/subscriptions/hooks/use-freeze-notice.hook\";\nexport { usePlanById } from \"./modules/plans/hooks/use-plan-by-id.hook\";\nexport { useHasPlanAddon } from \"./modules/plans/hooks/use-has-plan-addon.hook\";\nexport { useCalculateSubscription } from \"./modules/subscriptions/hooks/calculate-subscription.hook\";\nexport { useUpdateSubscriptionPlan } from \"./modules/subscriptions/hooks/update-subscription-plan.hook\";\nexport { useUpdateSubscriptionPayment } from \"./modules/subscriptions/hooks/update-subscription-payment.hook\";\nexport { useCards, CARDS_QUERY_KEY } from \"./modules/cards/hooks/cards.hook\";\nexport { useCardById } from \"./modules/cards/hooks/card-by-id.hook\";\nexport { useCreateCard } from \"./modules/cards/hooks/create-card.hook\";\nexport { useCreateSetupIntent } from \"./modules/cards/hooks/create-setup-intent.hook\";\nexport { useSetDefaultCard } from \"./modules/cards/hooks/set-default-card.hook\";\nexport { useDeleteCard } from \"./modules/cards/hooks/delete-card.hook\";\nexport { useDeleteConfirmation } from \"./modules/cards/hooks/delete-confirmation.hook\";\nexport type { DeleteConfirmationFormData } from \"./modules/cards/hooks/delete-confirmation.hook\";\nexport { useHandleDeleteCard } from \"./modules/cards/hooks/handle-delete-card.hook\";\nexport { useCharges } from \"./modules/charges/hooks/charges.hook\";\nexport { useChargeById } from \"./modules/charges/hooks/charge-by-id.hook\";\nexport { useChargeAction } from \"./modules/charges/hooks/charge-action.hook\";\nexport { useIaCredits } from \"./modules/ia-credits/hooks/ia-credits.hook\";\nexport type {\n  IaCreditsSummary,\n  IaCreditsSummaryData,\n  IaCreditAddBatch,\n  IaCreditOperation,\n} from \"./modules/ia-credits/types\";\nexport { usePurchaseIaCredits } from \"./modules/ia-credits/hooks/purchase-ia-credits.hook\";\nexport { useAiCreditsOfferEligibility } from \"./modules/ia-credits/hooks/use-offer-eligibility.hook\";\nexport {\n  AI_CREDITS_FIRST_PURCHASE_OFFER,\n  AI_CREDITS_OFFER_ELIGIBILITY_QUERY_KEY,\n  AI_CREDITS_OFFER_MAX_REPEATS,\n  AiCreditsOfferStage,\n  PAYMENT_METHOD_CARD,\n  PAYMENT_METHOD_PIX,\n} from \"./modules/ia-credits/constants/ai-credits-offer.constants\";\nexport type {\n  AiCreditsOfferEligibility,\n  AiCreditsOfferEligibilityResponse,\n  AiCreditsOfferIneligibilityReason,\n  PurchaseIaCreditsInput,\n  PurchaseIaCreditsResult,\n} from \"./modules/ia-credits/types/ai-credits-offer.type\";\nexport {\n  readOfferStageCookie,\n  writeOfferStageCookie,\n} from \"./modules/ia-credits/utils/offer-stage-cookie\";\nexport type { OfferStageRecord } from \"./modules/ia-credits/utils/offer-stage-cookie\";\nexport type {\n  Subscription,\n  SubscriptionItem,\n  FindSubscriptionsParams,\n  ChargeNowResult,\n} from \"./modules/subscriptions/types/subscription.type\";\nexport {\n  SubscriptionSchema,\n  SubscriptionItemSchema,\n} from \"./modules/subscriptions/types/subscription.type\";\nexport {\n  ADDON_IDS,\n  aiCreditUnitPrice,\n  AI_CREDIT_SIZES,\n  AI_CREDIT_VALUES,\n  buildAiCreditOptions,\n  resolveAiCreditPrice,\n} from \"./modules/subscriptions/constants/addons.constants\";\nexport type {\n  AddonKindEnum,\n  AiCreditOption,\n} from \"./modules/subscriptions/constants/addons.constants\";\nexport type {\n  Plan,\n  PlanItem,\n  UiPlan,\n  PlanFeature,\n  PlanMainFeatures,\n  PlanPricingByPeriod,\n  PlanTooltips,\n} from \"./modules/plans/types/plan.type\";\nexport { PlanSchema, PlanItemSchema } from \"./modules/plans/types/plan.type\";\nexport {\n  mapApiPlanToUiPlan,\n  mapApiPlanToUiPlanForCurrency,\n} from \"./modules/plans/utils/map-api-plan-to-ui\";\nexport type { PlanBillingPeriod } from \"./modules/plans/utils/map-api-plan-to-ui\";\nexport {\n  usePlans,\n  PLANS_QUERY_KEY,\n} from \"./modules/plans/hooks/list-plans.hook\";\nexport type { BillingPeriod } from \"./modules/subscriptions/types/billing-period.type\";\nexport type {\n  CalculateSubscriptionRequest,\n  CalculateSubscriptionResponse,\n  UpdateSubscriptionPlanRequest,\n} from \"./modules/subscriptions/types/calculate-subscription.type\";\nexport {\n  PixPendingDataSchema,\n  SubscriptionPendingPixResponseSchema,\n  isSubscriptionPendingPixResponse,\n} from \"./modules/subscriptions/types/pix-pending.type\";\nexport type {\n  PixPendingData,\n  SubscriptionPendingPixResponse,\n} from \"./modules/subscriptions/types/pix-pending.type\";\nexport type {\n  Card as PaymentCard,\n  CreateCardRequest,\n  FindCardsParams,\n  SetupIntent,\n} from \"./modules/cards/types\";\nexport {\n  CardSchema as PaymentCardSchema,\n  CreateCardRequestSchema,\n  FindCardsParamsSchema,\n  SetupIntentSchema,\n} from \"./modules/cards/types\";\nexport type {\n  Charge,\n  FindChargesParams,\n  PayChargeInput,\n} from \"./modules/charges/types/charge.type\";\nexport {\n  ChargeSchema,\n  FindChargesParamsSchema,\n  PayChargeInputSchema,\n} from \"./modules/charges/types/charge.type\";\nexport { buildPlanExtras } from \"./modules/subscriptions/utils/build-plan-extras\";\nexport { hasSubscriptionExpired } from \"./modules/subscriptions/utils/has-subscription-expired\";\nexport { hasActivePaidSubscription } from \"./modules/subscriptions/utils/has-active-paid-subscription\";\nexport { hasPaidSubscription } from \"./modules/subscriptions/utils/has-paid-subscription\";\nexport {\n  confirmPaymentIfRequired,\n  PaymentAuthenticationError,\n} from \"./modules/subscriptions/utils/confirm-payment-if-required\";\nexport { SUBSCRIPTION_GRACE_PERIOD_DAYS } from \"./modules/subscriptions/constants/subscription.constants\";\nexport { getSubscriptionCancellationState } from \"./modules/subscriptions/utils/get-subscription-cancellation-state\";\nexport type { SubscriptionCancellationState } from \"./modules/subscriptions/utils/get-subscription-cancellation-state\";\nexport {\n  ACCOUNT_FREEZE_AFTER_DAYS,\n  FREEZE_WARNING_DAYS_BEFORE,\n} from \"./modules/subscriptions/constants/subscription.constants\";\nexport { getAccountFreezeState } from \"./modules/subscriptions/utils/get-account-freeze-state\";\nexport type { AccountFreezeState } from \"./modules/subscriptions/utils/get-account-freeze-state\";\nexport { getAccountFreezeDate } from \"./modules/subscriptions/utils/get-account-freeze-date\";\nexport type { FreezeNotice } from \"./modules/subscriptions/types/freeze-notice.type\";\nexport {\n  useCountPages,\n  COUNT_PAGES_QUERY_KEY,\n} from \"./modules/pages/hooks/count-pages.hook\";\nexport { PAGES_QUERY_KEY } from \"./modules/pages/constants/query-keys.constants\";\nexport {\n  getPriceFromCalculatedData,\n  getOriginalPriceFromCalculatedData,\n  periodicityToBillingPeriod,\n} from \"./modules/subscriptions/utils/periodicity\";\nexport { useBuyCreditsModal } from \"./store/useBuyCreditsModal\";\nexport { useCreditsDisabledModal } from \"./store/useCreditsDisabledModal\";\nexport { usePaidPlanRequiredModal } from \"./store/usePaidPlanRequiredModal\";\nexport { useAccountDeletionWarningModal } from \"./store/useAccountDeletionWarningModal\";\nexport { useAiCreditsOfferModal } from \"./store/useAiCreditsOfferModal\";\nexport { default as BuyCreditsModal } from \"./components/modals/BuyCreditsModal\";\nexport { default as AiCreditsOfferModal } from \"./components/modals/promo/AiCreditsOfferModal\";\nexport { AiCreditsOfferGate } from \"./components/layouts/AiCreditsOfferGate\";\nexport type { AiCreditsOfferGateProps } from \"./components/layouts/AiCreditsOfferGate\";\nexport { default as CreditsDisabledModal } from \"./components/modals/CreditsDisabledModal\";\nexport { default as PaidPlanRequiredModal } from \"./components/modals/PaidPlanRequiredModal\";\nexport { default as AccountFrozenModal } from \"./components/modals/AccountFrozenModal\";\nexport { default as AccountDeletionWarningModal } from \"./components/modals/AccountDeletionWarningModal\";\nexport { default as RequiredBillingDataModal } from \"./components/modals/billing/RequiredBillingDataModal\";\nexport { default as AddCardModal } from \"./components/modals/cards/AddCardModal\";\nexport { DeleteCardModal } from \"./components/modals/cards/DeleteCardModal\";\nexport { CannotDeleteCardModal } from \"./components/modals/cards/CannotDeleteCardModal\";\nexport {\n  CardFormFields,\n  cardFormSchema,\n  buildCardFormSchema,\n} from \"./components/modals/cards/CardFormFields\";\nexport type { CardFormData } from \"./components/modals/cards/CardFormFields\";\nexport { Skeleton } from \"./components/ui/feedback/Skeleton\";\nexport { PaymentInfoCard } from \"./components/ui/data-display/PaymentInfoCard\";\nexport { CardBrandIcon } from \"./components/ui/data-display/CardBrandIcons\";\nexport { GoogleIcon } from \"./components/ui/data-display/GoogleIcon\";\nexport { CardItem } from \"./components/ui/data-display/CardItem\";\n\n// Providers\nexport { QueryProvider } from \"./providers/query.provider\";\n\n// Middleware\nexport { createAuthMiddleware } from \"./middlewares/create-auth-middleware\";\nexport { createMiddlewareChain } from \"./middlewares/chain\";\nexport { continueChain, stopChain } from \"./middlewares/types\";\nexport type {\n  MiddlewareFunction,\n  MiddlewareConfig,\n  MiddlewareResult,\n} from \"./middlewares/types\";\n\n// Utils\nexport { cn } from \"./infra/utils/clsx\";\nexport { formatShortDate, formatDateTime, calendarDateSchema, toCalendarDate, daysBetween } from \"./infra/utils/date\";\nexport { buildQueryParams } from \"./infra/utils/params\";\nexport { parseSchema, parseResult } from \"./infra/utils/parser\";\nexport { withAction } from \"./utils/withAction\";\nexport { resolveSafeRedirect, sameHostOr } from \"./utils/redirect\";\nexport { COUNTRIES, flagUrl } from \"./utils/countries\";\nexport type { Country } from \"./utils/countries\";\n\n// Layout\nexport {\n  MainLayout,\n  MainLayoutContent,\n  MainLayoutSpacer,\n  MainLayoutMain,\n} from \"./components/layouts/MainLayout\";\nexport { NavBar } from \"./components/layouts/NavBar\";\nexport type { NavBarProps } from \"./components/layouts/NavBar\";\nexport { AppNavBar } from \"./components/layouts/AppNavBar\";\nexport type { AppNavBarProps } from \"./components/layouts/AppNavBar\";\nexport { AppMobileNavBar } from \"./components/layouts/AppMobileNavBar\";\nexport type { AppMobileNavBarProps } from \"./components/layouts/AppMobileNavBar\";\nexport { SideBarNavigation } from \"./components/layouts/SideBarNavigation\";\nexport { MdSideBarNavigation } from \"./components/layouts/MdSideBarNavigation\";\nexport { default as NotificationCard } from \"./components/widgets/notifications/NotificationCard\";\nexport type { NotificationCardProps } from \"./components/widgets/notifications/NotificationCard\";\nexport { NotificationsPopover } from \"./components/layouts/NotificationsPopover\";\nexport type { NotificationsPopoverProps } from \"./components/layouts/NotificationsPopover\";\nexport { NotificationPageContent } from \"./components/pages/notifications/Notifications\";\nexport { NotFoundPage } from \"./components/pages/NotFoundPage\";\nexport { UsersSelectorPopover } from \"./components/layouts/UsersSelectorPopover\";\nexport type { UsersSelectorPopoverProps } from \"./components/layouts/UsersSelectorPopover\";\nexport { ProfilePopover } from \"./components/layouts/ProfilePopover\";\nexport type {\n  ProfilePopoverProps,\n  ProfileMenuItem,\n} from \"./components/layouts/ProfilePopover\";\nexport { default as WhitelabelCodes } from \"./components/layouts/WhitelabelCodes\";\nexport { NavBarItem } from \"./components/layouts/NavBarItem\";\nexport type { NavBarItemProps } from \"./components/layouts/NavBarItem\";\n\n// Navigation\nexport { AppNavigation } from \"./components/navigation/AppNavigation\";\nexport { CancelledSubscriptionBanner } from \"./components/navigation/CancelledSubscriptionBanner\";\nexport { SubscriptionBanner } from \"./components/navigation/SubscriptionBanner\";\nexport { OverdueInvoiceBanner } from \"./components/navigation/OverdueInvoiceBanner\";\nexport { UpcomingInvoiceBanner } from \"./components/navigation/UpcomingInvoiceBanner\";\nexport { TrialBanner } from \"./components/navigation/TrialBanner\";\nexport { FrozenAccountBanner } from \"./components/navigation/FrozenAccountBanner\";\nexport { FreezeWarningBanner } from \"./components/navigation/FreezeWarningBanner\";\nexport type { NavItemConfig } from \"./components/navigation/subcomponents/NavItems\";\nexport { useMobileNavbarSheet } from \"./store/useMobileNavbarSheet\";\n\n// Auth Query Key Utilities\nexport {\n  useAuthQueryKey,\n  useWlQueryKey,\n  useWlId,\n} from \"./hooks/useAuthQueryKey\";\n\n// Hooks\nexport { default as useCopyToClipboard } from \"./hooks/copy-to-clipboard.hook\";\n\n// UI - Buttons\nexport { Button, buttonVariants } from \"./components/ui/buttons/Button\";\nexport { CopyButton } from \"./components/ui/buttons/CopyButton\";\nexport { default as CancelButton } from \"./components/ui/buttons/CancelButton\";\n\n// UI - Data Display\nexport {\n  Accordion,\n  AccordionItem,\n  AccordionTrigger,\n  AccordionContent,\n} from \"./components/ui/data-display/Accordion\";\nexport { Badge, badgeVariants } from \"./components/ui/data-display/Badge\";\nexport {\n  Card,\n  CardHeader,\n  CardFooter,\n  CardTitle,\n  CardAction,\n  CardDescription,\n  CardContent,\n} from \"./components/ui/data-display/Card\";\nexport {\n  Pagination,\n  PaginationContent,\n  PaginationLink,\n  PaginationItem,\n  PaginationPrevious,\n  PaginationNext,\n  PaginationEllipsis,\n} from \"./components/ui/data-display/Pagination\";\nexport { ScrollArea, ScrollBar } from \"./components/ui/data-display/ScrollArea\";\nexport { Separator } from \"./components/ui/data-display/Separator\";\nexport {\n  Table,\n  TableHeader,\n  TableBody,\n  TableFooter,\n  TableHead,\n  TableRow,\n  TableCell,\n  TableCaption,\n} from \"./components/ui/data-display/Table\";\nexport {\n  Tabs,\n  TabsList,\n  TabsTrigger,\n  TabsContent,\n} from \"./components/ui/data-display/Tabs\";\nexport { UserAvatar } from \"./components/ui/data-display/UserAvatar\";\nexport type { UserAvatarProps } from \"./components/ui/data-display/UserAvatar\";\n\n// UI - Feedback\nexport { default as CircularProgress } from \"./components/ui/feedback/CircularProgress\";\nexport { default as DefaultCircularProgress } from \"./components/ui/feedback/DefaultCircularProgress\";\nexport { Progress } from \"./components/ui/feedback/Progress\";\nexport { LoadingOverlay } from \"./components/ui/feedback/LoadingOverlay\";\nexport { useBrandLoadingIcon } from \"./hooks/useBrandLoadingIcon\";\nexport {\n  Toast,\n  toastVariants,\n  toastIconContainerVariants,\n} from \"./components/ui/feedback/Toast\";\nexport type { ToastProps } from \"./components/ui/feedback/Toast\";\n\n// UI - Form\nexport { Calendar, CalendarDayButton } from \"./components/ui/form/Calendar\";\nexport { Checkbox } from \"./components/ui/form/Checkbox\";\nexport { DatePicker } from \"./components/ui/form/DatePicker\";\nexport { DateRangePicker } from \"./components/ui/form/DateRangePicker\";\nexport { Input } from \"./components/ui/form/Input\";\nexport {\n  InputOTP,\n  InputOTPGroup,\n  InputOTPSlot,\n  InputOTPSeparator,\n} from \"./components/ui/form/InputOtp\";\nexport { RadioGroup, RadioGroupItem } from \"./components/ui/form/RadioGroup\";\nexport {\n  Select,\n  SelectContent,\n  SelectGroup,\n  SelectItem,\n  SelectLabel,\n  SelectScrollDownButton,\n  SelectScrollUpButton,\n  SelectSeparator,\n  SelectTrigger,\n  SelectValue,\n} from \"./components/ui/form/Select\";\nexport { Switch } from \"./components/ui/form/Switch\";\nexport { Textarea } from \"./components/ui/form/Textarea\";\n\n// UI - Overlay\nexport {\n  Command,\n  CommandDialog,\n  CommandInput,\n  CommandList,\n  CommandEmpty,\n  CommandGroup,\n  CommandItem,\n  CommandShortcut,\n  CommandSeparator,\n} from \"./components/ui/overlay/Command\";\nexport {\n  Dialog,\n  DialogClose,\n  DialogContent,\n  DialogDescription,\n  DialogFooter,\n  DialogHeader,\n  DialogOverlay,\n  DialogPortal,\n  DialogTitle,\n  DialogTrigger,\n} from \"./components/ui/overlay/Dialog\";\nexport { DialogLayer, useDialogLayer } from \"./components/ui/overlay/layers\";\nexport {\n  Popover,\n  PopoverTrigger,\n  PopoverContent,\n  PopoverAnchor,\n} from \"./components/ui/overlay/Popover\";\nexport {\n  Sheet,\n  SheetTrigger,\n  SheetClose,\n  SheetContent,\n  SheetHeader,\n  SheetFooter,\n  SheetTitle,\n  SheetDescription,\n} from \"./components/ui/overlay/Sheet\";\nexport {\n  Tooltip,\n  TooltipTrigger,\n  TooltipContent,\n  TooltipProvider,\n} from \"./components/ui/overlay/Tooltip\";\n\n// Embeds\nexport { FrillEmbed } from \"./components/embeds/FrillEmbed\";\nexport {\n  CrispEmbed,\n  openCrispHelpdesk,\n  hideCrisp,\n  showCrisp,\n  updateCrispUser,\n} from \"./components/embeds/CrispEmbed\";\nexport { EmbedWidgets } from \"./components/embeds/EmbedWidgets\";\nexport { ClarityEmbed } from \"./components/embeds/ClarityEmbed\";\n\n// Store\nexport { useMdSidebarStore } from \"./store/useMdSidebarStore\";\nexport { useDesktopSidebarStore } from \"./store/useDesktopSidebarStore\";\nexport { useModalManager } from \"./store/useModalManager\";\nexport type { ModalData } from \"./store/useModalManager\";\n\n// Enums\nexport { AccountSectionType } from \"./enums/AccountSectionType\";\n\n// Hooks\nexport { default as usePasswordVisibility } from \"./hooks/usePasswordVisibility\";\nexport { default as useCountdownTimer } from \"./hooks/useCountdownTimer\";\nexport { default as useIsMobile } from \"./hooks/useIsMobile\";\nexport { useDebounce } from \"./hooks/useDebounce\";\nexport { useDomMutationGuardHit } from \"./hooks/useDomMutationGuardHit\";\nexport type { DomMutationGuardHit } from \"./hooks/useDomMutationGuardHit\";\nexport { DOM_MUTATION_GUARD_SCRIPT } from \"./utils/dom/dom-mutation-guard\";\nexport { useDebouncedEffect } from \"./hooks/useDebouncedEffect\";\nexport { useDebounceState } from \"./hooks/useDebounceState\";\n\n// Utils\nexport {\n  formatPhone,\n  formatTimer,\n  formatFullName,\n  formatCPF,\n  formatCNPJ,\n  formatCardNumber,\n} from \"./utils/format/masks\";\nexport {\n  formatCurrency,\n  formatCurrencyNumber,\n  parseCurrencyToNumber,\n  getCurrencyForGateway,\n  getLocaleForCurrency,\n} from \"./utils/format/currency\";\nexport type { CurrencyCode } from \"./utils/format/currency\";\nexport {\n  USD_GATEWAY,\n  isUsdGateway,\n  isUsdAccount,\n  allowedPaymentMethods,\n  isPaymentMethodAllowed,\n  canBuyStandaloneAiCredits,\n} from \"./utils/format/gateway\";\nexport type { AccountGatewayLike, PaymentMethodKind } from \"./utils/format/gateway\";\nexport { isValidCPF, isValidCNPJ, isValidTaxId } from \"./utils/validators/common\";\nexport { BR_STATE_OPTIONS } from \"./utils/constants/br-states\";\nexport type { TimezoneOption } from \"./modules/accounts/services/timezone.service\";\nexport {\n  buildLocaleOptions,\n  LANGUAGE_OPTIONS as LOCALE_LANGUAGE_OPTIONS,\n} from \"./utils/intl/locales\";\nexport type { LocaleOption } from \"./utils/intl/locales\";\nexport { copyToClipboard, readFromClipboard } from \"./utils/browser/clipboard\";\n\n// UI - Form (new widgets)\nexport { FormField } from \"./components/ui/form/FormField\";\nexport { SelectField } from \"./components/ui/form/SelectField\";\nexport { ComboboxField } from \"./components/ui/form/ComboboxField\";\nexport type { ComboboxOption } from \"./components/ui/form/ComboboxField\";\nexport { default as PhoneInput } from \"./components/ui/form/PhoneInput\";\nexport { default as SwitchOptionFieldWithIcon } from \"./components/ui/form/SwitchOptionFieldWithIcon\";\nexport { TextAreaField } from \"./components/ui/form/TextAreaField\";\n\n// Account Module - Hooks\nexport {\n  useCurrentAccount,\n  ACCOUNT_QUERY_KEY,\n} from \"./modules/accounts/hooks/current-account.hook\";\nexport { useCurrencyFormatter } from \"./modules/accounts/hooks/use-currency-formatter.hook\";\nexport {\n  useUpdateAccount,\n  useUpdateAccountUser,\n  useUpdateAccountUserById,\n  useUpdateBillingData,\n  useDeleteAccountUser,\n  useDeleteAccount,\n  ACCOUNT_USERS_QUERY_KEY,\n} from \"./modules/accounts/hooks/useAccountManagement\";\nexport { useViaCep } from \"./modules/accounts/hooks/useViaCep\";\nexport { useAccountToken } from \"./modules/accounts/hooks/use-account-token.hook\";\nexport { useRequiredBillingData } from \"./modules/accounts/hooks/use-required-billing-data.hook\";\nexport {\n  hasCompleteBillingData,\n  isBrazilianBillingAccount,\n} from \"./modules/accounts/utils/billing-data\";\nexport type { BillingDataSnapshot } from \"./modules/accounts/utils/billing-data\";\n\n// Account Types\nexport type {\n  UpdateAccountRequest,\n  UpdateBillingDataRequest,\n  UpdateAccountUserRequest,\n  ChangePasswordRequest,\n  DeleteAccountActionResult,\n  DeleteUserActionResult,\n  UpdateAccountActionResult,\n  UpdateUserActionResult,\n  TwoFactorGenerateResult,\n  TwoFactorActionResult,\n  ContactResetResult,\n} from \"./modules/accounts/types\";\n\nexport { default as AccountModals } from \"./components/account/AccountModals\";\nexport { useAccountModals } from \"./store/useAccountModals\";\nexport type { AccountModalsConfig } from \"./store/useAccountModals\";\n\nexport { ModalManager } from \"./components/modals/ModalManager\";\nexport { Modals } from \"./components/modals/Modals\";\n\nexport { default as TwoFactorAuthModal } from \"./components/account/TwoFactorAuthModal\";\nexport { default as DisableTwoFactorAuthModal } from \"./components/account/DisableTwoFactorAuthModal\";\nexport { default as ConfirmGlobalPreferencesModal } from \"./components/account/ConfirmGlobalPreferencesModal\";\nexport { MyProfileSection } from \"./components/account/sections/MyProfileSection\";\nexport { PreferencesSection } from \"./components/account/sections/PreferencesSection\";\nexport { SecuritySection } from \"./components/account/sections/SecuritySection\";\nexport { ChangePasswordSection } from \"./components/account/sections/ChangePasswordSection\";\nexport { ChangeEmailModal } from \"./components/account/sections/ChangeEmailModal\";\nexport { ChangePhoneModal } from \"./components/account/sections/ChangePhoneModal\";\n\n// Account Constants\nexport {\n  GENDER_OPTIONS,\n  CURRENCY_OPTIONS,\n  TIME_FORMAT_OPTIONS,\n  NOTIFICATION_TYPES,\n  LANGUAGE_OPTIONS,\n} from \"./components/account/constants\";\n\n// Image Upload\nexport {\n  ImageUpload,\n  ImageCropModal,\n  ImageTooSmallModal,\n} from \"./components/widgets/ImageUpload\";\nexport {\n  useImageUpload,\n  type ImageTooSmallError,\n} from \"./modules/images/hooks/use-image-upload.hook\";\nexport {\n  ACCEPTED_IMAGE_FORMATS,\n  ACCEPTED_IMAGE_FORMATS_STRING,\n  MAX_FILE_SIZE_MB,\n} from \"./modules/images/constants/image.constants\";\nexport type {\n  ImageConfig,\n  CropArea,\n  ProcessedImage,\n  CompressImageOptions,\n} from \"./modules/images/types/image.type\";\nexport { compressImage } from \"./modules/images/utils/compress-image\";\nexport { cropImageToCanvas } from \"./modules/images/utils/crop-image\";\nexport { base64ToFile, fileToBase64 } from \"./modules/images/utils/base64\";\nexport {\n  validateImage,\n  validateImageFormat,\n  validateImageSize,\n  getImageDimensions,\n} from \"./modules/images/utils/validate-image\";\n"],"mappings":"AACA,cAAc;AACd,cAAc;AACd,cAAc;AAEd,cAAc;AAGd,cAAc;AACd,cAAc;AACd,cAAc;AACd;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAGP,SAAS,iBAAiB;AAE1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AAYjC,SAAS,qBAAqB;AAE9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AAEzC,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAC1C,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,qCAAqC;AAC9C,SAAS,wBAAwB;AACjC,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAC5B,SAAS,uBAAuB;AAChC,SAAS,gCAAgC;AACzC,SAAS,iCAAiC;AAC1C,SAAS,oCAAoC;AAC7C,SAAS,UAAU,uBAAuB;AAC1C,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAC9B,SAAS,4BAA4B;AACrC,SAAS,yBAAyB;AAClC,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AAEtC,SAAS,2BAA2B;AACpC,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAO7B,SAAS,4BAA4B;AACrC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP,SAAS,YAAY,sBAAsB;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP;AAAA,EACgB;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AACvC,SAAS,iCAAiC;AAC1C,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,sCAAsC;AAC/C,SAAS,wCAAwC;AAEjD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AAEtC,SAAS,4BAA4B;AAErC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AACxC,SAAS,gCAAgC;AACzC,SAAS,sCAAsC;AAC/C,SAAS,8BAA8B;AACvC,SAAoB,WAAXA,gBAAkC;AAC3C,SAAoB,WAAXA,gBAAsC;AAC/C,SAAS,0BAA0B;AAEnC,SAAoB,WAAXA,gBAAuC;AAChD,SAAoB,WAAXA,gBAAwC;AACjD,SAAoB,WAAXA,gBAAqC;AAC9C,SAAoB,WAAXA,gBAA8C;AACvD,SAAoB,WAAXA,gBAA2C;AACpD,SAAoB,WAAXA,gBAA+B;AACxC,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,gBAAgB;AACzB,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AAGzB,SAAS,qBAAqB;AAG9B,SAAS,4BAA4B;AACrC,SAAS,6BAA6B;AACtC,SAAS,eAAe,iBAAiB;AAQzC,SAAS,UAAU;AACnB,SAAS,iBAAiB,gBAAgB,oBAAoB,gBAAgB,mBAAmB;AACjG,SAAS,wBAAwB;AACjC,SAAS,aAAa,mBAAmB;AACzC,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB,kBAAkB;AAChD,SAAS,WAAW,eAAe;AAInC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AAEvB,SAAS,iBAAiB;AAE1B,SAAS,uBAAuB;AAEhC,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAoB,WAAXA,iBAAmC;AAE5C,SAAS,4BAA4B;AAErC,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AAErC,SAAS,sBAAsB;AAK/B,SAAoB,WAAXA,iBAAkC;AAC3C,SAAS,kBAAkB;AAI3B,SAAS,qBAAqB;AAC9B,SAAS,mCAAmC;AAC5C,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,6BAA6B;AACtC,SAAS,mBAAmB;AAC5B,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AAEpC,SAAS,4BAA4B;AAGrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAoB,WAAXA,iBAAqC;AAG9C,SAAS,QAAQ,sBAAsB;AACvC,SAAS,kBAAkB;AAC3B,SAAoB,WAAXA,iBAA+B;AAGxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,OAAO,qBAAqB;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAY,iBAAiB;AACtC,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAI3B,SAAoB,WAAXA,iBAAmC;AAC5C,SAAoB,WAAXA,iBAA0C;AACnD,SAAS,gBAAgB;AACzB,SAAS,sBAAsB;AAC/B,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,UAAU,yBAAyB;AAC5C,SAAS,gBAAgB;AACzB,SAAS,kBAAkB;AAC3B,SAAS,uBAAuB;AAChC,SAAS,aAAa;AACtB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAY,sBAAsB;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AACvB,SAAS,gBAAgB;AAGzB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,sBAAsB;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAG7B,SAAS,yBAAyB;AAClC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAIhC,SAAS,0BAA0B;AAGnC,SAAoB,WAAXA,iBAAwC;AACjD,SAAoB,WAAXA,iBAAoC;AAC7C,SAAoB,WAAXA,iBAA8B;AACvC,SAAS,mBAAmB;AAC5B,SAAS,8BAA8B;AAEvC,SAAS,iCAAiC;AAC1C,SAAS,0BAA0B;AACnC,SAAS,wBAAwB;AAGjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,YAAY,aAAa,oBAAoB;AACtD,SAAS,wBAAwB;AAEjC;AAAA,EACE;AAAA,EACoB;AAAA,OACf;AAEP,SAAS,iBAAiB,yBAAyB;AAGnD,SAAS,iBAAiB;AAC1B,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAE9B,SAAoB,WAAXA,iBAA6B;AACtC,SAAoB,WAAXA,iBAA4C;AACrD,SAAS,qBAAqB;AAG9B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAiB;AAC1B,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAkBP,SAAoB,WAAXA,iBAAgC;AACzC,SAAS,wBAAwB;AAGjC,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AAEvB,SAAoB,WAAXA,iBAAqC;AAC9C,SAAoB,WAAXA,iBAA4C;AACrD,SAAoB,WAAXA,iBAAgD;AACzD,SAAS,wBAAwB;AACjC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AAGjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,oBAAAC;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,cAAc,oBAAoB;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;","names":["default","LANGUAGE_OPTIONS"]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Types\nexport * from \"./modules/auth/schema\";\nexport * from \"./modules/users/schema\";\nexport * from \"./modules/whitelabel/schema\";\n// Style types now come from whitelabel schema directly\nexport * from \"./infra/api/types\";\n\n// Contexts\nexport * from \"./providers/query.provider\";\nexport * from \"./providers/auth.provider\";\nexport * from \"./providers/whitelabel.provider\";\nexport {\n  NavigationProvider,\n  useNavigationFallback,\n} from \"./providers/navigation.provider\";\n\n// Navigation (safe drop-in replacement for next/navigation)\nexport { useRouter } from \"./hooks/useRouter\";\nexport type { SafeAppRouter } from \"./hooks/useRouter\";\nexport {\n  usePathname,\n  useSearchParams,\n  useParams,\n  redirect,\n  notFound,\n} from \"./utils/next-navigation\";\n\n// Hooks\nexport {\n  useListProjectUsers,\n  LIST_PROJECT_USERS_QUERY_KEY,\n  LIST_PROJECT_USERS_BASE_KEY,\n} from \"./modules/projects/hooks/list-project-users.hook\";\nexport {\n  useListAvailableUsers,\n  LIST_AVAILABLE_USERS_QUERY_KEY,\n  LIST_AVAILABLE_USERS_BASE_KEY,\n} from \"./modules/projects/hooks/list-available-users.hook\";\nexport {\n  useListAllAccountUsers,\n  LIST_ALL_ACCOUNT_USERS_QUERY_KEY,\n  LIST_ALL_ACCOUNT_USERS_BASE_KEY,\n} from \"./modules/projects/hooks/list-all-account-users.hook\";\nexport {\n  useProjects,\n  PROJECTS_BASE_KEY,\n  PROJECTS_QUERY_KEY,\n} from \"./modules/projects/hooks/list-projects.hook\";\nexport {\n  useInfiniteProjects,\n  INFINITE_PROJECTS_QUERY_KEY,\n} from \"./modules/projects/hooks/list-infinite-projects.hook\";\nexport { useProject } from \"./modules/projects/hooks/find-project.hook\";\nexport { useCreateProject } from \"./modules/projects/hooks/create-project.hook\";\nexport { useUpdateProject } from \"./modules/projects/hooks/update-project.hook\";\nexport { useDeleteProject } from \"./modules/projects/hooks/delete-project.hook\";\nexport type {\n  Project,\n  ProjectsPage,\n  CreateProjectRequest,\n  UpdateProjectRequest,\n  ProjectUser,\n  AccountUser,\n  AddRemoveProjectUsersParams,\n  ListUsersParams,\n  UsersPage,\n} from \"./modules/projects/types\";\nexport { ProjectSchema } from \"./modules/projects/types\";\nexport type { ListProjectsActionParams } from \"./modules/projects/actions/list-projects.action\";\nexport {\n  useUserQuery,\n  useUserValidateSession,\n  useInvalidateUser,\n  useSetUserData,\n  useTwoFactorVerify,\n  USER_QUERY_KEY,\n} from \"./modules/auth/hooks/useUserQuery\";\nexport { useManagementPermissions } from \"./modules/auth/hooks/useManagementPermissions\";\nexport type { ManagementPermission } from \"./modules/auth/types/management-permission.type\";\nexport { useSocialGoogleLogin } from \"./modules/auth/hooks/social-google-login.hook\";\nexport { useSocialGoogleOnboarding } from \"./modules/auth/hooks/social-google-onboarding.hook\";\nexport { useUnlinkGoogle } from \"./modules/auth/hooks/unlink-google.hook\";\nexport { useSubscriptions } from \"./modules/subscriptions/hooks/list-subscriptions.hook\";\nexport {\n  SUBSCRIPTIONS_QUERY_KEY,\n  CHARGES_QUERY_KEY,\n  FREEZE_NOTICE_QUERY_KEY,\n} from \"./modules/subscriptions/constants/query-keys.constants\";\nexport { useActiveSubscription } from \"./modules/subscriptions/hooks/find-active-subscription.hook\";\nexport { useCancelledSubscriptionGuard } from \"./modules/subscriptions/hooks/use-cancelled-subscription-guard\";\nexport { useAccountFreeze } from \"./modules/subscriptions/hooks/use-account-freeze.hook\";\nexport { useFreezeNotice } from \"./modules/subscriptions/hooks/use-freeze-notice.hook\";\nexport { usePlanById } from \"./modules/plans/hooks/use-plan-by-id.hook\";\nexport { useHasPlanAddon } from \"./modules/plans/hooks/use-has-plan-addon.hook\";\nexport { useCalculateSubscription } from \"./modules/subscriptions/hooks/calculate-subscription.hook\";\nexport { useUpdateSubscriptionPlan } from \"./modules/subscriptions/hooks/update-subscription-plan.hook\";\nexport { useUpdateSubscriptionPayment } from \"./modules/subscriptions/hooks/update-subscription-payment.hook\";\nexport { useCards, CARDS_QUERY_KEY } from \"./modules/cards/hooks/cards.hook\";\nexport { useCardById } from \"./modules/cards/hooks/card-by-id.hook\";\nexport { useCreateCard } from \"./modules/cards/hooks/create-card.hook\";\nexport { useCreateSetupIntent } from \"./modules/cards/hooks/create-setup-intent.hook\";\nexport { useSetDefaultCard } from \"./modules/cards/hooks/set-default-card.hook\";\nexport { useDeleteCard } from \"./modules/cards/hooks/delete-card.hook\";\nexport { useDeleteConfirmation } from \"./modules/cards/hooks/delete-confirmation.hook\";\nexport type { DeleteConfirmationFormData } from \"./modules/cards/hooks/delete-confirmation.hook\";\nexport { useHandleDeleteCard } from \"./modules/cards/hooks/handle-delete-card.hook\";\nexport { useCharges } from \"./modules/charges/hooks/charges.hook\";\nexport { useChargeById } from \"./modules/charges/hooks/charge-by-id.hook\";\nexport { useChargeAction } from \"./modules/charges/hooks/charge-action.hook\";\nexport { useIaCredits } from \"./modules/ia-credits/hooks/ia-credits.hook\";\nexport type {\n  IaCreditsSummary,\n  IaCreditsSummaryData,\n  IaCreditAddBatch,\n  IaCreditOperation,\n} from \"./modules/ia-credits/types\";\nexport { usePurchaseIaCredits } from \"./modules/ia-credits/hooks/purchase-ia-credits.hook\";\nexport { useAiCreditsOfferEligibility } from \"./modules/ia-credits/hooks/use-offer-eligibility.hook\";\nexport {\n  AI_CREDITS_FIRST_PURCHASE_OFFER,\n  AI_CREDITS_OFFER_ELIGIBILITY_QUERY_KEY,\n  AI_CREDITS_OFFER_MAX_REPEATS,\n  AiCreditsOfferStage,\n  PAYMENT_METHOD_CARD,\n  PAYMENT_METHOD_PIX,\n} from \"./modules/ia-credits/constants/ai-credits-offer.constants\";\nexport type {\n  AiCreditsOfferEligibility,\n  AiCreditsOfferEligibilityResponse,\n  AiCreditsOfferIneligibilityReason,\n  PurchaseIaCreditsInput,\n  PurchaseIaCreditsResult,\n} from \"./modules/ia-credits/types/ai-credits-offer.type\";\nexport {\n  readOfferStageCookie,\n  writeOfferStageCookie,\n} from \"./modules/ia-credits/utils/offer-stage-cookie\";\nexport type { OfferStageRecord } from \"./modules/ia-credits/utils/offer-stage-cookie\";\nexport type {\n  Subscription,\n  SubscriptionItem,\n  FindSubscriptionsParams,\n  ChargeNowResult,\n} from \"./modules/subscriptions/types/subscription.type\";\nexport {\n  SubscriptionSchema,\n  SubscriptionItemSchema,\n} from \"./modules/subscriptions/types/subscription.type\";\nexport {\n  ADDON_IDS,\n  aiCreditUnitPrice,\n  AI_CREDIT_SIZES,\n  AI_CREDIT_VALUES,\n  buildAiCreditOptions,\n  resolveAiCreditPrice,\n} from \"./modules/subscriptions/constants/addons.constants\";\nexport type {\n  AddonKindEnum,\n  AiCreditOption,\n} from \"./modules/subscriptions/constants/addons.constants\";\nexport type {\n  Plan,\n  PlanItem,\n  UiPlan,\n  PlanFeature,\n  PlanMainFeatures,\n  PlanPricingByPeriod,\n  PlanTooltips,\n} from \"./modules/plans/types/plan.type\";\nexport { PlanSchema, PlanItemSchema } from \"./modules/plans/types/plan.type\";\nexport {\n  mapApiPlanToUiPlan,\n  mapApiPlanToUiPlanForCurrency,\n} from \"./modules/plans/utils/map-api-plan-to-ui\";\nexport type { PlanBillingPeriod } from \"./modules/plans/utils/map-api-plan-to-ui\";\nexport {\n  usePlans,\n  PLANS_QUERY_KEY,\n} from \"./modules/plans/hooks/list-plans.hook\";\nexport type { BillingPeriod } from \"./modules/subscriptions/types/billing-period.type\";\nexport type {\n  CalculateSubscriptionRequest,\n  CalculateSubscriptionResponse,\n  UpdateSubscriptionPlanRequest,\n} from \"./modules/subscriptions/types/calculate-subscription.type\";\nexport {\n  PixPendingDataSchema,\n  SubscriptionPendingPixResponseSchema,\n  isSubscriptionPendingPixResponse,\n} from \"./modules/subscriptions/types/pix-pending.type\";\nexport type {\n  PixPendingData,\n  SubscriptionPendingPixResponse,\n} from \"./modules/subscriptions/types/pix-pending.type\";\nexport type {\n  Card as PaymentCard,\n  CreateCardRequest,\n  FindCardsParams,\n  SetupIntent,\n} from \"./modules/cards/types\";\nexport {\n  CardSchema as PaymentCardSchema,\n  CreateCardRequestSchema,\n  FindCardsParamsSchema,\n  SetupIntentSchema,\n} from \"./modules/cards/types\";\nexport type {\n  Charge,\n  FindChargesParams,\n  PayChargeInput,\n} from \"./modules/charges/types/charge.type\";\nexport {\n  ChargeSchema,\n  FindChargesParamsSchema,\n  PayChargeInputSchema,\n} from \"./modules/charges/types/charge.type\";\nexport { buildPlanExtras } from \"./modules/subscriptions/utils/build-plan-extras\";\nexport { hasSubscriptionExpired } from \"./modules/subscriptions/utils/has-subscription-expired\";\nexport { hasActivePaidSubscription } from \"./modules/subscriptions/utils/has-active-paid-subscription\";\nexport { hasPaidSubscription } from \"./modules/subscriptions/utils/has-paid-subscription\";\nexport {\n  confirmPaymentIfRequired,\n  PaymentAuthenticationError,\n} from \"./modules/subscriptions/utils/confirm-payment-if-required\";\nexport { SUBSCRIPTION_GRACE_PERIOD_DAYS } from \"./modules/subscriptions/constants/subscription.constants\";\nexport { getSubscriptionCancellationState } from \"./modules/subscriptions/utils/get-subscription-cancellation-state\";\nexport type { SubscriptionCancellationState } from \"./modules/subscriptions/utils/get-subscription-cancellation-state\";\nexport {\n  ACCOUNT_FREEZE_AFTER_DAYS,\n  FREEZE_WARNING_DAYS_BEFORE,\n} from \"./modules/subscriptions/constants/subscription.constants\";\nexport { getAccountFreezeState } from \"./modules/subscriptions/utils/get-account-freeze-state\";\nexport type { AccountFreezeState } from \"./modules/subscriptions/utils/get-account-freeze-state\";\nexport { getAccountFreezeDate } from \"./modules/subscriptions/utils/get-account-freeze-date\";\nexport type { FreezeNotice } from \"./modules/subscriptions/types/freeze-notice.type\";\nexport {\n  useCountPages,\n  COUNT_PAGES_QUERY_KEY,\n} from \"./modules/pages/hooks/count-pages.hook\";\nexport { PAGES_QUERY_KEY } from \"./modules/pages/constants/query-keys.constants\";\nexport {\n  getPriceFromCalculatedData,\n  getOriginalPriceFromCalculatedData,\n  periodicityToBillingPeriod,\n} from \"./modules/subscriptions/utils/periodicity\";\nexport { useBuyCreditsModal } from \"./store/useBuyCreditsModal\";\nexport { useCreditsDisabledModal } from \"./store/useCreditsDisabledModal\";\nexport { usePaidPlanRequiredModal } from \"./store/usePaidPlanRequiredModal\";\nexport { useAccountDeletionWarningModal } from \"./store/useAccountDeletionWarningModal\";\nexport { useAiCreditsOfferModal } from \"./store/useAiCreditsOfferModal\";\nexport { default as BuyCreditsModal } from \"./components/modals/BuyCreditsModal\";\nexport { default as AiCreditsOfferModal } from \"./components/modals/promo/AiCreditsOfferModal\";\nexport { AiCreditsOfferGate } from \"./components/layouts/AiCreditsOfferGate\";\nexport type { AiCreditsOfferGateProps } from \"./components/layouts/AiCreditsOfferGate\";\nexport { default as CreditsDisabledModal } from \"./components/modals/CreditsDisabledModal\";\nexport { default as PaidPlanRequiredModal } from \"./components/modals/PaidPlanRequiredModal\";\nexport { default as AccountFrozenModal } from \"./components/modals/AccountFrozenModal\";\nexport { default as AccountDeletionWarningModal } from \"./components/modals/AccountDeletionWarningModal\";\nexport { default as RequiredBillingDataModal } from \"./components/modals/billing/RequiredBillingDataModal\";\nexport { default as AddCardModal } from \"./components/modals/cards/AddCardModal\";\nexport { DeleteCardModal } from \"./components/modals/cards/DeleteCardModal\";\nexport { CannotDeleteCardModal } from \"./components/modals/cards/CannotDeleteCardModal\";\nexport {\n  CardFormFields,\n  cardFormSchema,\n  buildCardFormSchema,\n} from \"./components/modals/cards/CardFormFields\";\nexport type { CardFormData } from \"./components/modals/cards/CardFormFields\";\nexport { Skeleton } from \"./components/ui/feedback/Skeleton\";\nexport { PaymentInfoCard } from \"./components/ui/data-display/PaymentInfoCard\";\nexport { CardBrandIcon } from \"./components/ui/data-display/CardBrandIcons\";\nexport { GoogleIcon } from \"./components/ui/data-display/GoogleIcon\";\nexport { CardItem } from \"./components/ui/data-display/CardItem\";\n\n// Providers\nexport { QueryProvider } from \"./providers/query.provider\";\n\n// Middleware\nexport { createAuthMiddleware } from \"./middlewares/create-auth-middleware\";\nexport { createMiddlewareChain } from \"./middlewares/chain\";\nexport { continueChain, stopChain } from \"./middlewares/types\";\nexport type {\n  MiddlewareFunction,\n  MiddlewareConfig,\n  MiddlewareResult,\n} from \"./middlewares/types\";\n\n// Utils\nexport { cn } from \"./infra/utils/clsx\";\nexport { formatShortDate, formatDateTime, calendarDateSchema, toCalendarDate, daysBetween } from \"./infra/utils/date\";\nexport { buildQueryParams } from \"./infra/utils/params\";\nexport { parseSchema, parseResult } from \"./infra/utils/parser\";\nexport { withAction } from \"./utils/withAction\";\nexport { resolveSafeRedirect, sameHostOr, isSameSiteUrl } from \"./utils/redirect\";\nexport { COUNTRIES, flagUrl } from \"./utils/countries\";\nexport type { Country } from \"./utils/countries\";\n\n// Layout\nexport {\n  MainLayout,\n  MainLayoutContent,\n  MainLayoutSpacer,\n  MainLayoutMain,\n} from \"./components/layouts/MainLayout\";\nexport { NavBar } from \"./components/layouts/NavBar\";\nexport type { NavBarProps } from \"./components/layouts/NavBar\";\nexport { AppNavBar } from \"./components/layouts/AppNavBar\";\nexport type { AppNavBarProps } from \"./components/layouts/AppNavBar\";\nexport { AppMobileNavBar } from \"./components/layouts/AppMobileNavBar\";\nexport type { AppMobileNavBarProps } from \"./components/layouts/AppMobileNavBar\";\nexport { SideBarNavigation } from \"./components/layouts/SideBarNavigation\";\nexport { MdSideBarNavigation } from \"./components/layouts/MdSideBarNavigation\";\nexport { default as NotificationCard } from \"./components/widgets/notifications/NotificationCard\";\nexport type { NotificationCardProps } from \"./components/widgets/notifications/NotificationCard\";\nexport { NotificationsPopover } from \"./components/layouts/NotificationsPopover\";\nexport type { NotificationsPopoverProps } from \"./components/layouts/NotificationsPopover\";\nexport { NotificationPageContent } from \"./components/pages/notifications/Notifications\";\nexport { NotFoundPage } from \"./components/pages/NotFoundPage\";\nexport { UsersSelectorPopover } from \"./components/layouts/UsersSelectorPopover\";\nexport type { UsersSelectorPopoverProps } from \"./components/layouts/UsersSelectorPopover\";\nexport { ProfilePopover } from \"./components/layouts/ProfilePopover\";\nexport type {\n  ProfilePopoverProps,\n  ProfileMenuItem,\n} from \"./components/layouts/ProfilePopover\";\nexport { default as WhitelabelCodes } from \"./components/layouts/WhitelabelCodes\";\nexport { NavBarItem } from \"./components/layouts/NavBarItem\";\nexport type { NavBarItemProps } from \"./components/layouts/NavBarItem\";\n\n// Navigation\nexport { AppNavigation } from \"./components/navigation/AppNavigation\";\nexport { CancelledSubscriptionBanner } from \"./components/navigation/CancelledSubscriptionBanner\";\nexport { SubscriptionBanner } from \"./components/navigation/SubscriptionBanner\";\nexport { OverdueInvoiceBanner } from \"./components/navigation/OverdueInvoiceBanner\";\nexport { UpcomingInvoiceBanner } from \"./components/navigation/UpcomingInvoiceBanner\";\nexport { TrialBanner } from \"./components/navigation/TrialBanner\";\nexport { FrozenAccountBanner } from \"./components/navigation/FrozenAccountBanner\";\nexport { FreezeWarningBanner } from \"./components/navigation/FreezeWarningBanner\";\nexport type { NavItemConfig } from \"./components/navigation/subcomponents/NavItems\";\nexport { useMobileNavbarSheet } from \"./store/useMobileNavbarSheet\";\n\n// Auth Query Key Utilities\nexport {\n  useAuthQueryKey,\n  useWlQueryKey,\n  useWlId,\n} from \"./hooks/useAuthQueryKey\";\n\n// Hooks\nexport { default as useCopyToClipboard } from \"./hooks/copy-to-clipboard.hook\";\n\n// UI - Buttons\nexport { Button, buttonVariants } from \"./components/ui/buttons/Button\";\nexport { CopyButton } from \"./components/ui/buttons/CopyButton\";\nexport { default as CancelButton } from \"./components/ui/buttons/CancelButton\";\n\n// UI - Data Display\nexport {\n  Accordion,\n  AccordionItem,\n  AccordionTrigger,\n  AccordionContent,\n} from \"./components/ui/data-display/Accordion\";\nexport { Badge, badgeVariants } from \"./components/ui/data-display/Badge\";\nexport {\n  Card,\n  CardHeader,\n  CardFooter,\n  CardTitle,\n  CardAction,\n  CardDescription,\n  CardContent,\n} from \"./components/ui/data-display/Card\";\nexport {\n  Pagination,\n  PaginationContent,\n  PaginationLink,\n  PaginationItem,\n  PaginationPrevious,\n  PaginationNext,\n  PaginationEllipsis,\n} from \"./components/ui/data-display/Pagination\";\nexport { ScrollArea, ScrollBar } from \"./components/ui/data-display/ScrollArea\";\nexport { Separator } from \"./components/ui/data-display/Separator\";\nexport {\n  Table,\n  TableHeader,\n  TableBody,\n  TableFooter,\n  TableHead,\n  TableRow,\n  TableCell,\n  TableCaption,\n} from \"./components/ui/data-display/Table\";\nexport {\n  Tabs,\n  TabsList,\n  TabsTrigger,\n  TabsContent,\n} from \"./components/ui/data-display/Tabs\";\nexport { UserAvatar } from \"./components/ui/data-display/UserAvatar\";\nexport type { UserAvatarProps } from \"./components/ui/data-display/UserAvatar\";\n\n// UI - Feedback\nexport { default as CircularProgress } from \"./components/ui/feedback/CircularProgress\";\nexport { default as DefaultCircularProgress } from \"./components/ui/feedback/DefaultCircularProgress\";\nexport { Progress } from \"./components/ui/feedback/Progress\";\nexport { LoadingOverlay } from \"./components/ui/feedback/LoadingOverlay\";\nexport { useBrandLoadingIcon } from \"./hooks/useBrandLoadingIcon\";\nexport {\n  Toast,\n  toastVariants,\n  toastIconContainerVariants,\n} from \"./components/ui/feedback/Toast\";\nexport type { ToastProps } from \"./components/ui/feedback/Toast\";\n\n// UI - Form\nexport { Calendar, CalendarDayButton } from \"./components/ui/form/Calendar\";\nexport { Checkbox } from \"./components/ui/form/Checkbox\";\nexport { DatePicker } from \"./components/ui/form/DatePicker\";\nexport { DateRangePicker } from \"./components/ui/form/DateRangePicker\";\nexport { Input } from \"./components/ui/form/Input\";\nexport {\n  InputOTP,\n  InputOTPGroup,\n  InputOTPSlot,\n  InputOTPSeparator,\n} from \"./components/ui/form/InputOtp\";\nexport { RadioGroup, RadioGroupItem } from \"./components/ui/form/RadioGroup\";\nexport {\n  Select,\n  SelectContent,\n  SelectGroup,\n  SelectItem,\n  SelectLabel,\n  SelectScrollDownButton,\n  SelectScrollUpButton,\n  SelectSeparator,\n  SelectTrigger,\n  SelectValue,\n} from \"./components/ui/form/Select\";\nexport { Switch } from \"./components/ui/form/Switch\";\nexport { Textarea } from \"./components/ui/form/Textarea\";\n\n// UI - Overlay\nexport {\n  Command,\n  CommandDialog,\n  CommandInput,\n  CommandList,\n  CommandEmpty,\n  CommandGroup,\n  CommandItem,\n  CommandShortcut,\n  CommandSeparator,\n} from \"./components/ui/overlay/Command\";\nexport {\n  Dialog,\n  DialogClose,\n  DialogContent,\n  DialogDescription,\n  DialogFooter,\n  DialogHeader,\n  DialogOverlay,\n  DialogPortal,\n  DialogTitle,\n  DialogTrigger,\n} from \"./components/ui/overlay/Dialog\";\nexport { DialogLayer, useDialogLayer } from \"./components/ui/overlay/layers\";\nexport {\n  Popover,\n  PopoverTrigger,\n  PopoverContent,\n  PopoverAnchor,\n} from \"./components/ui/overlay/Popover\";\nexport {\n  Sheet,\n  SheetTrigger,\n  SheetClose,\n  SheetContent,\n  SheetHeader,\n  SheetFooter,\n  SheetTitle,\n  SheetDescription,\n} from \"./components/ui/overlay/Sheet\";\nexport {\n  Tooltip,\n  TooltipTrigger,\n  TooltipContent,\n  TooltipProvider,\n} from \"./components/ui/overlay/Tooltip\";\n\n// Embeds\nexport { FrillEmbed } from \"./components/embeds/FrillEmbed\";\nexport {\n  CrispEmbed,\n  openCrispHelpdesk,\n  hideCrisp,\n  showCrisp,\n  updateCrispUser,\n} from \"./components/embeds/CrispEmbed\";\nexport { EmbedWidgets } from \"./components/embeds/EmbedWidgets\";\nexport { ClarityEmbed } from \"./components/embeds/ClarityEmbed\";\n\n// Store\nexport { useMdSidebarStore } from \"./store/useMdSidebarStore\";\nexport { useDesktopSidebarStore } from \"./store/useDesktopSidebarStore\";\nexport { useModalManager } from \"./store/useModalManager\";\nexport type { ModalData } from \"./store/useModalManager\";\n\n// Enums\nexport { AccountSectionType } from \"./enums/AccountSectionType\";\n\n// Hooks\nexport { default as usePasswordVisibility } from \"./hooks/usePasswordVisibility\";\nexport { default as useCountdownTimer } from \"./hooks/useCountdownTimer\";\nexport { default as useIsMobile } from \"./hooks/useIsMobile\";\nexport { useDebounce } from \"./hooks/useDebounce\";\nexport { useDomMutationGuardHit } from \"./hooks/useDomMutationGuardHit\";\nexport type { DomMutationGuardHit } from \"./hooks/useDomMutationGuardHit\";\nexport { DOM_MUTATION_GUARD_SCRIPT } from \"./utils/dom/dom-mutation-guard\";\nexport { useDebouncedEffect } from \"./hooks/useDebouncedEffect\";\nexport { useDebounceState } from \"./hooks/useDebounceState\";\n\n// Utils\nexport {\n  formatPhone,\n  formatTimer,\n  formatFullName,\n  formatCPF,\n  formatCNPJ,\n  formatCardNumber,\n} from \"./utils/format/masks\";\nexport {\n  formatCurrency,\n  formatCurrencyNumber,\n  parseCurrencyToNumber,\n  getCurrencyForGateway,\n  getLocaleForCurrency,\n} from \"./utils/format/currency\";\nexport type { CurrencyCode } from \"./utils/format/currency\";\nexport {\n  USD_GATEWAY,\n  isUsdGateway,\n  isUsdAccount,\n  allowedPaymentMethods,\n  isPaymentMethodAllowed,\n  canBuyStandaloneAiCredits,\n} from \"./utils/format/gateway\";\nexport type { AccountGatewayLike, PaymentMethodKind } from \"./utils/format/gateway\";\nexport { isValidCPF, isValidCNPJ, isValidTaxId } from \"./utils/validators/common\";\nexport { BR_STATE_OPTIONS } from \"./utils/constants/br-states\";\nexport type { TimezoneOption } from \"./modules/accounts/services/timezone.service\";\nexport {\n  buildLocaleOptions,\n  LANGUAGE_OPTIONS as LOCALE_LANGUAGE_OPTIONS,\n} from \"./utils/intl/locales\";\nexport type { LocaleOption } from \"./utils/intl/locales\";\nexport { copyToClipboard, readFromClipboard } from \"./utils/browser/clipboard\";\n\n// UI - Form (new widgets)\nexport { FormField } from \"./components/ui/form/FormField\";\nexport { SelectField } from \"./components/ui/form/SelectField\";\nexport { ComboboxField } from \"./components/ui/form/ComboboxField\";\nexport type { ComboboxOption } from \"./components/ui/form/ComboboxField\";\nexport { default as PhoneInput } from \"./components/ui/form/PhoneInput\";\nexport { default as SwitchOptionFieldWithIcon } from \"./components/ui/form/SwitchOptionFieldWithIcon\";\nexport { TextAreaField } from \"./components/ui/form/TextAreaField\";\n\n// Account Module - Hooks\nexport {\n  useCurrentAccount,\n  ACCOUNT_QUERY_KEY,\n} from \"./modules/accounts/hooks/current-account.hook\";\nexport { useCurrencyFormatter } from \"./modules/accounts/hooks/use-currency-formatter.hook\";\nexport {\n  useUpdateAccount,\n  useUpdateAccountUser,\n  useUpdateAccountUserById,\n  useUpdateBillingData,\n  useDeleteAccountUser,\n  useDeleteAccount,\n  ACCOUNT_USERS_QUERY_KEY,\n} from \"./modules/accounts/hooks/useAccountManagement\";\nexport { useViaCep } from \"./modules/accounts/hooks/useViaCep\";\nexport { useAccountToken } from \"./modules/accounts/hooks/use-account-token.hook\";\nexport { useRequiredBillingData } from \"./modules/accounts/hooks/use-required-billing-data.hook\";\nexport {\n  hasCompleteBillingData,\n  isBrazilianBillingAccount,\n} from \"./modules/accounts/utils/billing-data\";\nexport type { BillingDataSnapshot } from \"./modules/accounts/utils/billing-data\";\n\n// Account Types\nexport type {\n  UpdateAccountRequest,\n  UpdateBillingDataRequest,\n  UpdateAccountUserRequest,\n  ChangePasswordRequest,\n  DeleteAccountActionResult,\n  DeleteUserActionResult,\n  UpdateAccountActionResult,\n  UpdateUserActionResult,\n  TwoFactorGenerateResult,\n  TwoFactorActionResult,\n  ContactResetResult,\n} from \"./modules/accounts/types\";\n\nexport { default as AccountModals } from \"./components/account/AccountModals\";\nexport { useAccountModals } from \"./store/useAccountModals\";\nexport type { AccountModalsConfig } from \"./store/useAccountModals\";\n\nexport { ModalManager } from \"./components/modals/ModalManager\";\nexport { Modals } from \"./components/modals/Modals\";\n\nexport { default as TwoFactorAuthModal } from \"./components/account/TwoFactorAuthModal\";\nexport { default as DisableTwoFactorAuthModal } from \"./components/account/DisableTwoFactorAuthModal\";\nexport { default as ConfirmGlobalPreferencesModal } from \"./components/account/ConfirmGlobalPreferencesModal\";\nexport { MyProfileSection } from \"./components/account/sections/MyProfileSection\";\nexport { PreferencesSection } from \"./components/account/sections/PreferencesSection\";\nexport { SecuritySection } from \"./components/account/sections/SecuritySection\";\nexport { ChangePasswordSection } from \"./components/account/sections/ChangePasswordSection\";\nexport { ChangeEmailModal } from \"./components/account/sections/ChangeEmailModal\";\nexport { ChangePhoneModal } from \"./components/account/sections/ChangePhoneModal\";\n\n// Account Constants\nexport {\n  GENDER_OPTIONS,\n  CURRENCY_OPTIONS,\n  TIME_FORMAT_OPTIONS,\n  NOTIFICATION_TYPES,\n  LANGUAGE_OPTIONS,\n} from \"./components/account/constants\";\n\n// Image Upload\nexport {\n  ImageUpload,\n  ImageCropModal,\n  ImageTooSmallModal,\n} from \"./components/widgets/ImageUpload\";\nexport {\n  useImageUpload,\n  type ImageTooSmallError,\n} from \"./modules/images/hooks/use-image-upload.hook\";\nexport {\n  ACCEPTED_IMAGE_FORMATS,\n  ACCEPTED_IMAGE_FORMATS_STRING,\n  MAX_FILE_SIZE_MB,\n} from \"./modules/images/constants/image.constants\";\nexport type {\n  ImageConfig,\n  CropArea,\n  ProcessedImage,\n  CompressImageOptions,\n} from \"./modules/images/types/image.type\";\nexport { compressImage } from \"./modules/images/utils/compress-image\";\nexport { cropImageToCanvas } from \"./modules/images/utils/crop-image\";\nexport { base64ToFile, fileToBase64 } from \"./modules/images/utils/base64\";\nexport {\n  validateImage,\n  validateImageFormat,\n  validateImageSize,\n  getImageDimensions,\n} from \"./modules/images/utils/validate-image\";\n"],"mappings":"AACA,cAAc;AACd,cAAc;AACd,cAAc;AAEd,cAAc;AAGd,cAAc;AACd,cAAc;AACd,cAAc;AACd;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAGP,SAAS,iBAAiB;AAE1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AAYjC,SAAS,qBAAqB;AAE9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AAEzC,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAC1C,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,qCAAqC;AAC9C,SAAS,wBAAwB;AACjC,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAC5B,SAAS,uBAAuB;AAChC,SAAS,gCAAgC;AACzC,SAAS,iCAAiC;AAC1C,SAAS,oCAAoC;AAC7C,SAAS,UAAU,uBAAuB;AAC1C,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAC9B,SAAS,4BAA4B;AACrC,SAAS,yBAAyB;AAClC,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AAEtC,SAAS,2BAA2B;AACpC,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAO7B,SAAS,4BAA4B;AACrC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAQP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP,SAAS,YAAY,sBAAsB;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAOP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP;AAAA,EACgB;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AACvC,SAAS,iCAAiC;AAC1C,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,sCAAsC;AAC/C,SAAS,wCAAwC;AAEjD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AAEtC,SAAS,4BAA4B;AAErC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,+BAA+B;AACxC,SAAS,gCAAgC;AACzC,SAAS,sCAAsC;AAC/C,SAAS,8BAA8B;AACvC,SAAoB,WAAXA,gBAAkC;AAC3C,SAAoB,WAAXA,gBAAsC;AAC/C,SAAS,0BAA0B;AAEnC,SAAoB,WAAXA,gBAAuC;AAChD,SAAoB,WAAXA,gBAAwC;AACjD,SAAoB,WAAXA,gBAAqC;AAC9C,SAAoB,WAAXA,gBAA8C;AACvD,SAAoB,WAAXA,gBAA2C;AACpD,SAAoB,WAAXA,gBAA+B;AACxC,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,gBAAgB;AACzB,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AAGzB,SAAS,qBAAqB;AAG9B,SAAS,4BAA4B;AACrC,SAAS,6BAA6B;AACtC,SAAS,eAAe,iBAAiB;AAQzC,SAAS,UAAU;AACnB,SAAS,iBAAiB,gBAAgB,oBAAoB,gBAAgB,mBAAmB;AACjG,SAAS,wBAAwB;AACjC,SAAS,aAAa,mBAAmB;AACzC,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB,YAAY,qBAAqB;AAC/D,SAAS,WAAW,eAAe;AAInC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AAEvB,SAAS,iBAAiB;AAE1B,SAAS,uBAAuB;AAEhC,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAoB,WAAXA,iBAAmC;AAE5C,SAAS,4BAA4B;AAErC,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AAErC,SAAS,sBAAsB;AAK/B,SAAoB,WAAXA,iBAAkC;AAC3C,SAAS,kBAAkB;AAI3B,SAAS,qBAAqB;AAC9B,SAAS,mCAAmC;AAC5C,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,6BAA6B;AACtC,SAAS,mBAAmB;AAC5B,SAAS,2BAA2B;AACpC,SAAS,2BAA2B;AAEpC,SAAS,4BAA4B;AAGrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAoB,WAAXA,iBAAqC;AAG9C,SAAS,QAAQ,sBAAsB;AACvC,SAAS,kBAAkB;AAC3B,SAAoB,WAAXA,iBAA+B;AAGxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,OAAO,qBAAqB;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAY,iBAAiB;AACtC,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAI3B,SAAoB,WAAXA,iBAAmC;AAC5C,SAAoB,WAAXA,iBAA0C;AACnD,SAAS,gBAAgB;AACzB,SAAS,sBAAsB;AAC/B,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,UAAU,yBAAyB;AAC5C,SAAS,gBAAgB;AACzB,SAAS,kBAAkB;AAC3B,SAAS,uBAAuB;AAChC,SAAS,aAAa;AACtB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAY,sBAAsB;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AACvB,SAAS,gBAAgB;AAGzB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,sBAAsB;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAG7B,SAAS,yBAAyB;AAClC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAIhC,SAAS,0BAA0B;AAGnC,SAAoB,WAAXA,iBAAwC;AACjD,SAAoB,WAAXA,iBAAoC;AAC7C,SAAoB,WAAXA,iBAA8B;AACvC,SAAS,mBAAmB;AAC5B,SAAS,8BAA8B;AAEvC,SAAS,iCAAiC;AAC1C,SAAS,0BAA0B;AACnC,SAAS,wBAAwB;AAGjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,YAAY,aAAa,oBAAoB;AACtD,SAAS,wBAAwB;AAEjC;AAAA,EACE;AAAA,EACoB;AAAA,OACf;AAEP,SAAS,iBAAiB,yBAAyB;AAGnD,SAAS,iBAAiB;AAC1B,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAE9B,SAAoB,WAAXA,iBAA6B;AACtC,SAAoB,WAAXA,iBAA4C;AACrD,SAAS,qBAAqB;AAG9B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAiB;AAC1B,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAkBP,SAAoB,WAAXA,iBAAgC;AACzC,SAAS,wBAAwB;AAGjC,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AAEvB,SAAoB,WAAXA,iBAAqC;AAC9C,SAAoB,WAAXA,iBAA4C;AACrD,SAAoB,WAAXA,iBAAgD;AACzD,SAAS,wBAAwB;AACjC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AAGjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,oBAAAC;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,cAAc,oBAAoB;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;","names":["default","LANGUAGE_OPTIONS"]}

package/dist/middlewares/create-auth-middleware.mjs

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import { continueChain, stopChain } from "./types";
 import { whitelabelService } from "../modules/whitelabel/services/whitelabel.service";
+import { isSameSiteUrl } from "../utils/redirect";
 function isRouteEquals(pathname, routes) {
   return routes.some((route) => pathname === route || pathname.startsWith(`${route}/`));
 }
@@ -17,7 +18,16 @@ function createAuthMiddleware(options) {
       const host = request.headers.get("host") || "";
       const whitelabel = await whitelabelService.getTokenByDomain(host).catch(() => null);
       const accountsUrl = whitelabel?.accounts_url;
-      const loginUrl = accountsUrl ? new URL("/login", accountsUrl) : new URL("/login", request.url);
+      const accountsUrlIsSameSite = !!accountsUrl && isSameSiteUrl(accountsUrl, host);
+      if (accountsUrl && !accountsUrlIsSameSite) {
+        console.error("[auth-middleware] accounts_url fora do site do host da requisi\xE7\xE3o", {
+          host,
+          pathname,
+          whitelabelId: whitelabel?.id,
+          accountsUrl
+        });
+      }
+      const loginUrl = accountsUrlIsSameSite ? new URL("/login", accountsUrl) : new URL("/login", request.url);
       if (pathname !== "/") {
         const proto = request.headers.get("x-forwarded-proto") || request.nextUrl.protocol.replace(/:$/, "") || "https";
         loginUrl.searchParams.set("redirect", `${proto}://${host}${pathname}${request.nextUrl.search}`);

package/dist/middlewares/create-auth-middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/middlewares/create-auth-middleware.ts"],"sourcesContent":["import { NextRequest, NextResponse } from 'next/server';\r\n\r\nimport { continueChain, MiddlewareConfig, MiddlewareFunction, MiddlewareResult, stopChain } from './types';\r\nimport { whitelabelService } from '../modules/whitelabel/services/whitelabel.service';\r\n\r\nfunction isRouteEquals(pathname: string, routes: string[]): boolean {\r\n  return routes.some((route) => pathname === route || pathname.startsWith(`${route}/`));\r\n}\r\n\r\ninterface CreateAuthMiddlewareOptions {\r\n  publicRoutes?: string[];\r\n  authRoutes?: string[];\r\n}\r\n\r\nexport function createAuthMiddleware(options?: CreateAuthMiddlewareOptions): MiddlewareFunction {\r\n  return async (request: NextRequest) => {\r\n    const { pathname } = request.nextUrl;\r\n    const token = process.env.DUMMY_AUTH_TOKEN || request.cookies.get('greatapps')?.value;\r\n    const isPublicRoute = isRouteEquals(pathname, options?.publicRoutes || []);\r\n    const isAuthRoute = isRouteEquals(pathname, options?.authRoutes || []);\r\n\r\n    if (token && isAuthRoute) {\r\n      return stopChain(NextResponse.redirect(new URL('/', request.url)));\r\n    }\r\n\r\n    if (!token && !isPublicRoute && !isAuthRoute) {\r\n      const host = request.headers.get('host') || '';\r\n      const whitelabel = await whitelabelService.getTokenByDomain(host).catch(() => null);\r\n      const accountsUrl = whitelabel?.accounts_url;\r\n\r\n      const loginUrl = accountsUrl\r\n        ? new URL('/login', accountsUrl)\r\n        : new URL('/login', request.url);\r\n\r\n      if (pathname !== '/') {\r\n        // URL absoluta da página de origem — o login vive em outro domínio (accounts),\r\n        // então só o pathname faria o redirect cair no host do accounts.\r\n        const proto =\r\n          request.headers.get('x-forwarded-proto') ||\r\n          request.nextUrl.protocol.replace(/:$/, '') ||\r\n          'https';\r\n        loginUrl.searchParams.set('redirect', `${proto}://${host}${pathname}${request.nextUrl.search}`);\r\n      }\r\n\r\n      return stopChain(NextResponse.redirect(loginUrl));\r\n    }\r\n\r\n    return continueChain();\r\n  }\r\n}"],"mappings":"AAAA,SAAsB,oBAAoB;AAE1C,SAAS,eAAuE,iBAAiB;AACjG,SAAS,yBAAyB;AAElC,SAAS,cAAc,UAAkB,QAA2B;AAClE,SAAO,OAAO,KAAK,CAAC,UAAU,aAAa,SAAS,SAAS,WAAW,GAAG,KAAK,GAAG,CAAC;AACtF;AAOO,SAAS,qBAAqB,SAA2D;AAC9F,SAAO,OAAO,YAAyB;AACrC,UAAM,EAAE,SAAS,IAAI,QAAQ;AAC7B,UAAM,QAAQ,QAAQ,IAAI,oBAAoB,QAAQ,QAAQ,IAAI,WAAW,GAAG;AAChF,UAAM,gBAAgB,cAAc,UAAU,SAAS,gBAAgB,CAAC,CAAC;AACzE,UAAM,cAAc,cAAc,UAAU,SAAS,cAAc,CAAC,CAAC;AAErE,QAAI,SAAS,aAAa;AACxB,aAAO,UAAU,aAAa,SAAS,IAAI,IAAI,KAAK,QAAQ,GAAG,CAAC,CAAC;AAAA,IACnE;AAEA,QAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,aAAa;AAC5C,YAAM,OAAO,QAAQ,QAAQ,IAAI,MAAM,KAAK;AAC5C,YAAM,aAAa,MAAM,kBAAkB,iBAAiB,IAAI,EAAE,MAAM,MAAM,IAAI;AAClF,YAAM,cAAc,YAAY;AAEhC,YAAM,WAAW,cACb,IAAI,IAAI,UAAU,WAAW,IAC7B,IAAI,IAAI,UAAU,QAAQ,GAAG;AAEjC,UAAI,aAAa,KAAK;AAGpB,cAAM,QACJ,QAAQ,QAAQ,IAAI,mBAAmB,KACvC,QAAQ,QAAQ,SAAS,QAAQ,MAAM,EAAE,KACzC;AACF,iBAAS,aAAa,IAAI,YAAY,GAAG,KAAK,MAAM,IAAI,GAAG,QAAQ,GAAG,QAAQ,QAAQ,MAAM,EAAE;AAAA,MAChG;AAEA,aAAO,UAAU,aAAa,SAAS,QAAQ,CAAC;AAAA,IAClD;AAEA,WAAO,cAAc;AAAA,EACvB;AACF;","names":[]}
+{"version":3,"sources":["../../src/middlewares/create-auth-middleware.ts"],"sourcesContent":["import { NextRequest, NextResponse } from 'next/server';\r\n\r\nimport { continueChain, MiddlewareConfig, MiddlewareFunction, MiddlewareResult, stopChain } from './types';\r\nimport { whitelabelService } from '../modules/whitelabel/services/whitelabel.service';\r\nimport { isSameSiteUrl } from '../utils/redirect';\r\n\r\nfunction isRouteEquals(pathname: string, routes: string[]): boolean {\r\n  return routes.some((route) => pathname === route || pathname.startsWith(`${route}/`));\r\n}\r\n\r\ninterface CreateAuthMiddlewareOptions {\r\n  publicRoutes?: string[];\r\n  authRoutes?: string[];\r\n}\r\n\r\nexport function createAuthMiddleware(options?: CreateAuthMiddlewareOptions): MiddlewareFunction {\r\n  return async (request: NextRequest) => {\r\n    const { pathname } = request.nextUrl;\r\n    const token = process.env.DUMMY_AUTH_TOKEN || request.cookies.get('greatapps')?.value;\r\n    const isPublicRoute = isRouteEquals(pathname, options?.publicRoutes || []);\r\n    const isAuthRoute = isRouteEquals(pathname, options?.authRoutes || []);\r\n\r\n    if (token && isAuthRoute) {\r\n      return stopChain(NextResponse.redirect(new URL('/', request.url)));\r\n    }\r\n\r\n    if (!token && !isPublicRoute && !isAuthRoute) {\r\n      const host = request.headers.get('host') || '';\r\n      const whitelabel = await whitelabelService.getTokenByDomain(host).catch(() => null);\r\n      const accountsUrl = whitelabel?.accounts_url;\r\n      const accountsUrlIsSameSite = !!accountsUrl && isSameSiteUrl(accountsUrl, host);\r\n\r\n      if (accountsUrl && !accountsUrlIsSameSite) {\r\n        console.error('[auth-middleware] accounts_url fora do site do host da requisição', {\r\n          host,\r\n          pathname,\r\n          whitelabelId: whitelabel?.id,\r\n          accountsUrl,\r\n        });\r\n      }\r\n\r\n      const loginUrl = accountsUrlIsSameSite\r\n        ? new URL('/login', accountsUrl)\r\n        : new URL('/login', request.url);\r\n\r\n      if (pathname !== '/') {\r\n        // URL absoluta da página de origem — o login vive em outro domínio (accounts),\r\n        // então só o pathname faria o redirect cair no host do accounts.\r\n        const proto =\r\n          request.headers.get('x-forwarded-proto') ||\r\n          request.nextUrl.protocol.replace(/:$/, '') ||\r\n          'https';\r\n        loginUrl.searchParams.set('redirect', `${proto}://${host}${pathname}${request.nextUrl.search}`);\r\n      }\r\n\r\n      return stopChain(NextResponse.redirect(loginUrl));\r\n    }\r\n\r\n    return continueChain();\r\n  }\r\n}"],"mappings":"AAAA,SAAsB,oBAAoB;AAE1C,SAAS,eAAuE,iBAAiB;AACjG,SAAS,yBAAyB;AAClC,SAAS,qBAAqB;AAE9B,SAAS,cAAc,UAAkB,QAA2B;AAClE,SAAO,OAAO,KAAK,CAAC,UAAU,aAAa,SAAS,SAAS,WAAW,GAAG,KAAK,GAAG,CAAC;AACtF;AAOO,SAAS,qBAAqB,SAA2D;AAC9F,SAAO,OAAO,YAAyB;AACrC,UAAM,EAAE,SAAS,IAAI,QAAQ;AAC7B,UAAM,QAAQ,QAAQ,IAAI,oBAAoB,QAAQ,QAAQ,IAAI,WAAW,GAAG;AAChF,UAAM,gBAAgB,cAAc,UAAU,SAAS,gBAAgB,CAAC,CAAC;AACzE,UAAM,cAAc,cAAc,UAAU,SAAS,cAAc,CAAC,CAAC;AAErE,QAAI,SAAS,aAAa;AACxB,aAAO,UAAU,aAAa,SAAS,IAAI,IAAI,KAAK,QAAQ,GAAG,CAAC,CAAC;AAAA,IACnE;AAEA,QAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,aAAa;AAC5C,YAAM,OAAO,QAAQ,QAAQ,IAAI,MAAM,KAAK;AAC5C,YAAM,aAAa,MAAM,kBAAkB,iBAAiB,IAAI,EAAE,MAAM,MAAM,IAAI;AAClF,YAAM,cAAc,YAAY;AAChC,YAAM,wBAAwB,CAAC,CAAC,eAAe,cAAc,aAAa,IAAI;AAE9E,UAAI,eAAe,CAAC,uBAAuB;AACzC,gBAAQ,MAAM,2EAAqE;AAAA,UACjF;AAAA,UACA;AAAA,UACA,cAAc,YAAY;AAAA,UAC1B;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM,WAAW,wBACb,IAAI,IAAI,UAAU,WAAW,IAC7B,IAAI,IAAI,UAAU,QAAQ,GAAG;AAEjC,UAAI,aAAa,KAAK;AAGpB,cAAM,QACJ,QAAQ,QAAQ,IAAI,mBAAmB,KACvC,QAAQ,QAAQ,SAAS,QAAQ,MAAM,EAAE,KACzC;AACF,iBAAS,aAAa,IAAI,YAAY,GAAG,KAAK,MAAM,IAAI,GAAG,QAAQ,GAAG,QAAQ,QAAQ,MAAM,EAAE;AAAA,MAChG;AAEA,aAAO,UAAU,aAAa,SAAS,QAAQ,CAAC;AAAA,IAClD;AAEA,WAAO,cAAc;AAAA,EACvB;AACF;","names":[]}

package/dist/modules/whitelabel/actions/find-whitelabel.action.mjs

@@ -3,18 +3,21 @@ import { headers } from "next/headers";
 import { whitelabelService } from "../services/whitelabel.service";
 import { ApiError } from "../../../infra/api/types";
 import { cache } from "react";
-const findWhitelabel = cache(async () => {
-  const headersList = await headers();
-  const host = headersList.get("host");
-  if (!host) {
-    throw new ApiError("Host header not found", "HOST_NOT_FOUND", 400);
-  }
+const findWhitelabelByHost = cache(async (host) => {
   const whitelabel = await whitelabelService.getTokenByDomain(host);
   if (!whitelabel) {
     throw new ApiError("Whitelabel not found", "WL_NOT_FOUND", 404);
   }
   return whitelabel;
 });
+const findWhitelabel = async () => {
+  const headersList = await headers();
+  const host = headersList.get("host");
+  if (!host) {
+    throw new ApiError("Host header not found", "HOST_NOT_FOUND", 400);
+  }
+  return findWhitelabelByHost(host);
+};
 export {
   findWhitelabel
 };

package/dist/modules/whitelabel/actions/find-whitelabel.action.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/whitelabel/actions/find-whitelabel.action.ts"],"sourcesContent":["'use server';\n\n\nimport { headers } from \"next/headers\";\nimport { whitelabelService } from \"../services/whitelabel.service\";\nimport { ApiError } from \"../../../infra/api/types\";\nimport { cache } from \"react\";\n\nexport const findWhitelabel = cache(async () => {\n    const headersList = await headers();\n    const host = headersList.get('host');\n\n    if (!host) {\n        throw new ApiError('Host header not found', 'HOST_NOT_FOUND', 400);\n    }\n\n    const whitelabel = await whitelabelService.getTokenByDomain(host);\n\n    if (!whitelabel) {\n        throw new ApiError('Whitelabel not found', 'WL_NOT_FOUND', 404);\n    }\n\n    return whitelabel;\n});"],"mappings":";AAGA,SAAS,eAAe;AACxB,SAAS,yBAAyB;AAClC,SAAS,gBAAgB;AACzB,SAAS,aAAa;AAEf,MAAM,iBAAiB,MAAM,YAAY;AAC5C,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,OAAO,YAAY,IAAI,MAAM;AAEnC,MAAI,CAAC,MAAM;AACP,UAAM,IAAI,SAAS,yBAAyB,kBAAkB,GAAG;AAAA,EACrE;AAEA,QAAM,aAAa,MAAM,kBAAkB,iBAAiB,IAAI;AAEhE,MAAI,CAAC,YAAY;AACb,UAAM,IAAI,SAAS,wBAAwB,gBAAgB,GAAG;AAAA,EAClE;AAEA,SAAO;AACX,CAAC;","names":[]}
+{"version":3,"sources":["../../../../src/modules/whitelabel/actions/find-whitelabel.action.ts"],"sourcesContent":["'use server';\n\n\nimport { headers } from \"next/headers\";\nimport { whitelabelService } from \"../services/whitelabel.service\";\nimport { ApiError } from \"../../../infra/api/types\";\nimport { cache } from \"react\";\n\nconst findWhitelabelByHost = cache(async (host: string) => {\n    const whitelabel = await whitelabelService.getTokenByDomain(host);\n\n    if (!whitelabel) {\n        throw new ApiError('Whitelabel not found', 'WL_NOT_FOUND', 404);\n    }\n\n    return whitelabel;\n});\n\nexport const findWhitelabel = async () => {\n    const headersList = await headers();\n    const host = headersList.get('host');\n\n    if (!host) {\n        throw new ApiError('Host header not found', 'HOST_NOT_FOUND', 400);\n    }\n\n    return findWhitelabelByHost(host);\n};\n"],"mappings":";AAGA,SAAS,eAAe;AACxB,SAAS,yBAAyB;AAClC,SAAS,gBAAgB;AACzB,SAAS,aAAa;AAEtB,MAAM,uBAAuB,MAAM,OAAO,SAAiB;AACvD,QAAM,aAAa,MAAM,kBAAkB,iBAAiB,IAAI;AAEhE,MAAI,CAAC,YAAY;AACb,UAAM,IAAI,SAAS,wBAAwB,gBAAgB,GAAG;AAAA,EAClE;AAEA,SAAO;AACX,CAAC;AAEM,MAAM,iBAAiB,YAAY;AACtC,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,OAAO,YAAY,IAAI,MAAM;AAEnC,MAAI,CAAC,MAAM;AACP,UAAM,IAAI,SAAS,yBAAyB,kBAAkB,GAAG;AAAA,EACrE;AAEA,SAAO,qBAAqB,IAAI;AACpC;","names":[]}

package/dist/modules/whitelabel/services/whitelabel.service.mjs

@@ -76,13 +76,39 @@ class WhitelabelService {
       cachedData
     });
     if (cachedData.status == 1 && "data" in cachedData && cachedData.data) {
-      console.log("[WhitelabelService] Cache hit for domain", { hostname });
-      return JSON.parse(cachedData.data);
+      const cachedWhitelabel = JSON.parse(cachedData.data);
+      if (this.#matchesHostname(cachedWhitelabel, hostname)) {
+        console.log("[WhitelabelService] Cache hit for domain", { hostname });
+        return cachedWhitelabel;
+      }
+      console.error("[WhitelabelService] Cached whitelabel does not match hostname", {
+        hostname,
+        cacheKey,
+        whitelabelId: cachedWhitelabel.id,
+        whitelabelDomain: cachedWhitelabel.domain
+      });
+      await cache.delete(cacheKey);
     }
     const data = await this.fetchFromApi(hostname);
+    if (!this.#matchesHostname(data, hostname)) {
+      console.error("[WhitelabelService] API returned whitelabel of another hostname", {
+        hostname,
+        whitelabelId: data.id,
+        whitelabelDomain: data.domain
+      });
+      return data;
+    }
     await cache.insert(cacheKey, JSON.stringify(data), 604800);
     return data;
   }
+  #matchesHostname(data, hostname) {
+    if (!data.domain) return true;
+    try {
+      return normalizeHostname(new URL(data.domain).hostname) === hostname;
+    } catch {
+      return true;
+    }
+  }
   async getTokenByWhitelabelId(idWl) {
     const apiUrl = this.getApiUrl();
     const masterToken = this.getToken();

package/dist/modules/whitelabel/services/whitelabel.service.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/whitelabel/services/whitelabel.service.ts"],"sourcesContent":["import greatCache from \"@greatapps/cache\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport { WhitelabelTokenApiResponse, WhitelabelTokenData } from \"../schema\";\r\nimport { normalizeHostname } from \"../utils/normalize-hostname\";\r\n\r\nclass WhitelabelService {\r\n  private getApiUrl(): string {\r\n    const apiUrl = process.env.GAPPS_R3_API_URL;\r\n    if (!apiUrl) {\r\n      throw new ApiError(\r\n        \"GAPPS_R3_API_URL not configured\",\r\n        \"CONFIG_ERROR\",\r\n        500,\r\n      );\r\n    }\r\n    return apiUrl;\r\n  }\r\n\r\n  private getToken(): string {\r\n    const token = process.env.WHITELABEL_TOKEN_MASTER;\r\n    if (!token) {\r\n      throw new ApiError(\r\n        \"WHITELABEL_TOKEN_MASTER not configured\",\r\n        \"CONFIG_ERROR\",\r\n        500,\r\n      );\r\n    }\r\n    return token;\r\n  }\r\n\r\n  private createCache() {\r\n    return new greatCache({\r\n      service: \"whitelabel-service\",\r\n      version: \"1.0.3\",\r\n      domain: \"whitelabel-cache.greatapps.com.br\",\r\n      ambient: process.env.NODE_ENV || \"development\",\r\n    });\r\n  }\r\n\r\n  private getCacheKey(hostname: string): string {\r\n    return `whitelabel-token-${hostname}`;\r\n  }\r\n\r\n  private async fetchFromApi(hostname: string): Promise<WhitelabelTokenData> {\r\n    const apiUrl = this.getApiUrl();\r\n    const whitelabelMasterToken = this.getToken();\r\n    const url = `${apiUrl}/v1/pt-br/1/whitelabel/${hostname}/token`;\r\n\r\n    console.log(\"[WhitelabelService] Fetching token for domain\", { url });\r\n\r\n    const response = await fetch(url, {\r\n      method: \"GET\",\r\n      headers: {\r\n        authorization: whitelabelMasterToken,\r\n      },\r\n    });\r\n\r\n    if (!response.ok) {\r\n      console.error(\"[WhitelabelService] Failed to fetch whitelabel token\", {\r\n        response,\r\n      });\r\n      throw new ApiError(\r\n        `Failed to fetch whitelabel token: ${response.status}`,\r\n        \"FETCH_ERROR\",\r\n        response.status,\r\n      );\r\n    }\r\n\r\n    const result: WhitelabelTokenApiResponse = await response.json();\r\n\r\n    if (result.status !== 1 || !result.data?.length) {\r\n      throw new ApiError(\"Whitelabel token not found\", \"TOKEN_NOT_FOUND\", 404);\r\n    }\r\n\r\n    return result.data[0];\r\n  }\r\n\r\n  async getTokenByDomain(hostname: string): Promise<WhitelabelTokenData> {\r\n    hostname = `${normalizeHostname(process.env.WHITELABEL_DOMAIN || hostname)}`;\r\n    console.debug(\"[WhitelabelService] Getting token for domain\", {\r\n      hostname,\r\n      byEnv: process.env.WHITELABEL_DOMAIN,\r\n    });\r\n\r\n    const cache = this.createCache();\r\n    const cacheKey = this.getCacheKey(hostname);\r\n\r\n    const cachedData = await cache.select(cacheKey);\r\n    console.debug(\"[WhitelabelService] Cache lookup for domain\", {\r\n      cacheKey,\r\n      cachedData,\r\n    });\r\n\r\n    if (cachedData.status == 1 && \"data\" in cachedData && cachedData.data) {\r\n      console.log(\"[WhitelabelService] Cache hit for domain\", { hostname });\r\n      return JSON.parse(cachedData.data) as WhitelabelTokenData;\r\n    }\r\n\r\n    const data = await this.fetchFromApi(hostname);\r\n\r\n    await cache.insert(cacheKey, JSON.stringify(data), 604800);\r\n\r\n    return data;\r\n  }\r\n\r\n  async getTokenByWhitelabelId(idWl: number): Promise<string> {\r\n    const apiUrl = this.getApiUrl();\r\n    const masterToken = this.getToken();\r\n    const url = `${apiUrl}/v1/pt-br/${idWl}/tokens?limit=1&page=1&sort=id:desc`;\r\n    console.debug(\"[WhitelabelService] Fetching token by whitelabel ID\", {\r\n      url,\r\n      config: {\r\n        method: \"GET\",\r\n        headers: { authorization: masterToken },\r\n      },\r\n    });\r\n\r\n    const response = await fetch(url, {\r\n      method: \"GET\",\r\n      headers: { authorization: masterToken },\r\n    });\r\n\r\n    console.debug(\"[WhitelabelService] Response received for whitelabel ID\", {\r\n      response,\r\n    });\r\n\r\n    if (!response.ok) {\r\n      throw new ApiError(\r\n        `Failed to fetch whitelabel token: ${response.status}`,\r\n        \"WL_TOKEN_NOT_FOUND\",\r\n        response.status,\r\n      );\r\n    }\r\n\r\n    const result: WhitelabelTokenApiResponse = await response.json();\r\n\r\n    if (result.status !== 1 || !result.data?.length) {\r\n      throw new ApiError(\r\n        \"Token do whitelabel não encontrado\",\r\n        \"WL_TOKEN_NOT_FOUND\",\r\n        404,\r\n      );\r\n    }\r\n\r\n    return result.data[0].token;\r\n  }\r\n\r\n  async revalidateByDomain(hostname: string): Promise<WhitelabelTokenData> {\r\n    hostname = `${normalizeHostname(process.env.WHITELABEL_DOMAIN || hostname)}`;\r\n    console.debug(\"[WhitelabelService] Getting token for domain\", {\r\n      hostname,\r\n      byEnv: process.env.WHITELABEL_DOMAIN,\r\n    });\r\n\r\n    const cache = this.createCache();\r\n    const cacheKey = this.getCacheKey(hostname);\r\n\r\n    console.log(\"[WhitelabelService] Revalidating cache for domain\", {\r\n      hostname,\r\n      cacheKey,\r\n    });\r\n    \r\n    await cache.delete(cacheKey);\r\n\r\n    const data = await this.fetchFromApi(hostname);\r\n\r\n    await cache.insert(cacheKey, JSON.stringify(data), 604800);\r\n\r\n    console.log(\"[WhitelabelService] Cache revalidated for domain\", {\r\n      hostname,\r\n    });\r\n\r\n    return data;\r\n  }\r\n}\r\n\r\nexport const whitelabelService = new WhitelabelService();\r\n"],"mappings":"AAAA,OAAO,gBAAgB;AACvB,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,MAAM,kBAAkB;AAAA,EACd,YAAoB;AAC1B,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,WAAmB;AACzB,UAAM,QAAQ,QAAQ,IAAI;AAC1B,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc;AACpB,WAAO,IAAI,WAAW;AAAA,MACpB,SAAS;AAAA,MACT,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,SAAS,QAAQ,IAAI,YAAY;AAAA,IACnC,CAAC;AAAA,EACH;AAAA,EAEQ,YAAY,UAA0B;AAC5C,WAAO,oBAAoB,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAc,aAAa,UAAgD;AACzE,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,wBAAwB,KAAK,SAAS;AAC5C,UAAM,MAAM,GAAG,MAAM,0BAA0B,QAAQ;AAEvD,YAAQ,IAAI,iDAAiD,EAAE,IAAI,CAAC;AAEpE,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,cAAQ,MAAM,wDAAwD;AAAA,QACpE;AAAA,MACF,CAAC;AACD,YAAM,IAAI;AAAA,QACR,qCAAqC,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,SAAqC,MAAM,SAAS,KAAK;AAE/D,QAAI,OAAO,WAAW,KAAK,CAAC,OAAO,MAAM,QAAQ;AAC/C,YAAM,IAAI,SAAS,8BAA8B,mBAAmB,GAAG;AAAA,IACzE;AAEA,WAAO,OAAO,KAAK,CAAC;AAAA,EACtB;AAAA,EAEA,MAAM,iBAAiB,UAAgD;AACrE,eAAW,GAAG,kBAAkB,QAAQ,IAAI,qBAAqB,QAAQ,CAAC;AAC1E,YAAQ,MAAM,gDAAgD;AAAA,MAC5D;AAAA,MACA,OAAO,QAAQ,IAAI;AAAA,IACrB,CAAC;AAED,UAAM,QAAQ,KAAK,YAAY;AAC/B,UAAM,WAAW,KAAK,YAAY,QAAQ;AAE1C,UAAM,aAAa,MAAM,MAAM,OAAO,QAAQ;AAC9C,YAAQ,MAAM,+CAA+C;AAAA,MAC3D;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,WAAW,UAAU,KAAK,UAAU,cAAc,WAAW,MAAM;AACrE,cAAQ,IAAI,4CAA4C,EAAE,SAAS,CAAC;AACpE,aAAO,KAAK,MAAM,WAAW,IAAI;AAAA,IACnC;AAEA,UAAM,OAAO,MAAM,KAAK,aAAa,QAAQ;AAE7C,UAAM,MAAM,OAAO,UAAU,KAAK,UAAU,IAAI,GAAG,MAAM;AAEzD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,uBAAuB,MAA+B;AAC1D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,cAAc,KAAK,SAAS;AAClC,UAAM,MAAM,GAAG,MAAM,aAAa,IAAI;AACtC,YAAQ,MAAM,uDAAuD;AAAA,MACnE;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,YAAY;AAAA,MACxC;AAAA,IACF,CAAC;AAED,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,YAAY;AAAA,IACxC,CAAC;AAED,YAAQ,MAAM,2DAA2D;AAAA,MACvE;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,qCAAqC,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,SAAqC,MAAM,SAAS,KAAK;AAE/D,QAAI,OAAO,WAAW,KAAK,CAAC,OAAO,MAAM,QAAQ;AAC/C,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,OAAO,KAAK,CAAC,EAAE;AAAA,EACxB;AAAA,EAEA,MAAM,mBAAmB,UAAgD;AACvE,eAAW,GAAG,kBAAkB,QAAQ,IAAI,qBAAqB,QAAQ,CAAC;AAC1E,YAAQ,MAAM,gDAAgD;AAAA,MAC5D;AAAA,MACA,OAAO,QAAQ,IAAI;AAAA,IACrB,CAAC;AAED,UAAM,QAAQ,KAAK,YAAY;AAC/B,UAAM,WAAW,KAAK,YAAY,QAAQ;AAE1C,YAAQ,IAAI,qDAAqD;AAAA,MAC/D;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,MAAM,OAAO,QAAQ;AAE3B,UAAM,OAAO,MAAM,KAAK,aAAa,QAAQ;AAE7C,UAAM,MAAM,OAAO,UAAU,KAAK,UAAU,IAAI,GAAG,MAAM;AAEzD,YAAQ,IAAI,oDAAoD;AAAA,MAC9D;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AACF;AAEO,MAAM,oBAAoB,IAAI,kBAAkB;","names":[]}
+{"version":3,"sources":["../../../../src/modules/whitelabel/services/whitelabel.service.ts"],"sourcesContent":["import greatCache from \"@greatapps/cache\";\r\nimport { ApiError } from \"../../../infra/api/types\";\r\nimport { WhitelabelTokenApiResponse, WhitelabelTokenData } from \"../schema\";\r\nimport { normalizeHostname } from \"../utils/normalize-hostname\";\r\n\r\nclass WhitelabelService {\r\n  private getApiUrl(): string {\r\n    const apiUrl = process.env.GAPPS_R3_API_URL;\r\n    if (!apiUrl) {\r\n      throw new ApiError(\r\n        \"GAPPS_R3_API_URL not configured\",\r\n        \"CONFIG_ERROR\",\r\n        500,\r\n      );\r\n    }\r\n    return apiUrl;\r\n  }\r\n\r\n  private getToken(): string {\r\n    const token = process.env.WHITELABEL_TOKEN_MASTER;\r\n    if (!token) {\r\n      throw new ApiError(\r\n        \"WHITELABEL_TOKEN_MASTER not configured\",\r\n        \"CONFIG_ERROR\",\r\n        500,\r\n      );\r\n    }\r\n    return token;\r\n  }\r\n\r\n  private createCache() {\r\n    return new greatCache({\r\n      service: \"whitelabel-service\",\r\n      version: \"1.0.3\",\r\n      domain: \"whitelabel-cache.greatapps.com.br\",\r\n      ambient: process.env.NODE_ENV || \"development\",\r\n    });\r\n  }\r\n\r\n  private getCacheKey(hostname: string): string {\r\n    return `whitelabel-token-${hostname}`;\r\n  }\r\n\r\n  private async fetchFromApi(hostname: string): Promise<WhitelabelTokenData> {\r\n    const apiUrl = this.getApiUrl();\r\n    const whitelabelMasterToken = this.getToken();\r\n    const url = `${apiUrl}/v1/pt-br/1/whitelabel/${hostname}/token`;\r\n\r\n    console.log(\"[WhitelabelService] Fetching token for domain\", { url });\r\n\r\n    const response = await fetch(url, {\r\n      method: \"GET\",\r\n      headers: {\r\n        authorization: whitelabelMasterToken,\r\n      },\r\n    });\r\n\r\n    if (!response.ok) {\r\n      console.error(\"[WhitelabelService] Failed to fetch whitelabel token\", {\r\n        response,\r\n      });\r\n      throw new ApiError(\r\n        `Failed to fetch whitelabel token: ${response.status}`,\r\n        \"FETCH_ERROR\",\r\n        response.status,\r\n      );\r\n    }\r\n\r\n    const result: WhitelabelTokenApiResponse = await response.json();\r\n\r\n    if (result.status !== 1 || !result.data?.length) {\r\n      throw new ApiError(\"Whitelabel token not found\", \"TOKEN_NOT_FOUND\", 404);\r\n    }\r\n\r\n    return result.data[0];\r\n  }\r\n\r\n  async getTokenByDomain(hostname: string): Promise<WhitelabelTokenData> {\r\n    hostname = `${normalizeHostname(process.env.WHITELABEL_DOMAIN || hostname)}`;\r\n    console.debug(\"[WhitelabelService] Getting token for domain\", {\r\n      hostname,\r\n      byEnv: process.env.WHITELABEL_DOMAIN,\r\n    });\r\n\r\n    const cache = this.createCache();\r\n    const cacheKey = this.getCacheKey(hostname);\r\n\r\n    const cachedData = await cache.select(cacheKey);\r\n    console.debug(\"[WhitelabelService] Cache lookup for domain\", {\r\n      cacheKey,\r\n      cachedData,\r\n    });\r\n\r\n    if (cachedData.status == 1 && \"data\" in cachedData && cachedData.data) {\r\n      const cachedWhitelabel = JSON.parse(cachedData.data) as WhitelabelTokenData;\r\n\r\n      if (this.#matchesHostname(cachedWhitelabel, hostname)) {\r\n        console.log(\"[WhitelabelService] Cache hit for domain\", { hostname });\r\n        return cachedWhitelabel;\r\n      }\r\n\r\n      console.error(\"[WhitelabelService] Cached whitelabel does not match hostname\", {\r\n        hostname,\r\n        cacheKey,\r\n        whitelabelId: cachedWhitelabel.id,\r\n        whitelabelDomain: cachedWhitelabel.domain,\r\n      });\r\n\r\n      await cache.delete(cacheKey);\r\n    }\r\n\r\n    const data = await this.fetchFromApi(hostname);\r\n\r\n    if (!this.#matchesHostname(data, hostname)) {\r\n      console.error(\"[WhitelabelService] API returned whitelabel of another hostname\", {\r\n        hostname,\r\n        whitelabelId: data.id,\r\n        whitelabelDomain: data.domain,\r\n      });\r\n      return data;\r\n    }\r\n\r\n    await cache.insert(cacheKey, JSON.stringify(data), 604800);\r\n\r\n    return data;\r\n  }\r\n\r\n  #matchesHostname(data: WhitelabelTokenData, hostname: string): boolean {\r\n    if (!data.domain) return true;\r\n\r\n    try {\r\n      return normalizeHostname(new URL(data.domain).hostname) === hostname;\r\n    } catch {\r\n      return true;\r\n    }\r\n  }\r\n\r\n  async getTokenByWhitelabelId(idWl: number): Promise<string> {\r\n    const apiUrl = this.getApiUrl();\r\n    const masterToken = this.getToken();\r\n    const url = `${apiUrl}/v1/pt-br/${idWl}/tokens?limit=1&page=1&sort=id:desc`;\r\n    console.debug(\"[WhitelabelService] Fetching token by whitelabel ID\", {\r\n      url,\r\n      config: {\r\n        method: \"GET\",\r\n        headers: { authorization: masterToken },\r\n      },\r\n    });\r\n\r\n    const response = await fetch(url, {\r\n      method: \"GET\",\r\n      headers: { authorization: masterToken },\r\n    });\r\n\r\n    console.debug(\"[WhitelabelService] Response received for whitelabel ID\", {\r\n      response,\r\n    });\r\n\r\n    if (!response.ok) {\r\n      throw new ApiError(\r\n        `Failed to fetch whitelabel token: ${response.status}`,\r\n        \"WL_TOKEN_NOT_FOUND\",\r\n        response.status,\r\n      );\r\n    }\r\n\r\n    const result: WhitelabelTokenApiResponse = await response.json();\r\n\r\n    if (result.status !== 1 || !result.data?.length) {\r\n      throw new ApiError(\r\n        \"Token do whitelabel não encontrado\",\r\n        \"WL_TOKEN_NOT_FOUND\",\r\n        404,\r\n      );\r\n    }\r\n\r\n    return result.data[0].token;\r\n  }\r\n\r\n  async revalidateByDomain(hostname: string): Promise<WhitelabelTokenData> {\r\n    hostname = `${normalizeHostname(process.env.WHITELABEL_DOMAIN || hostname)}`;\r\n    console.debug(\"[WhitelabelService] Getting token for domain\", {\r\n      hostname,\r\n      byEnv: process.env.WHITELABEL_DOMAIN,\r\n    });\r\n\r\n    const cache = this.createCache();\r\n    const cacheKey = this.getCacheKey(hostname);\r\n\r\n    console.log(\"[WhitelabelService] Revalidating cache for domain\", {\r\n      hostname,\r\n      cacheKey,\r\n    });\r\n    \r\n    await cache.delete(cacheKey);\r\n\r\n    const data = await this.fetchFromApi(hostname);\r\n\r\n    await cache.insert(cacheKey, JSON.stringify(data), 604800);\r\n\r\n    console.log(\"[WhitelabelService] Cache revalidated for domain\", {\r\n      hostname,\r\n    });\r\n\r\n    return data;\r\n  }\r\n}\r\n\r\nexport const whitelabelService = new WhitelabelService();\r\n"],"mappings":"AAAA,OAAO,gBAAgB;AACvB,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,MAAM,kBAAkB;AAAA,EACd,YAAoB;AAC1B,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,WAAmB;AACzB,UAAM,QAAQ,QAAQ,IAAI;AAC1B,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc;AACpB,WAAO,IAAI,WAAW;AAAA,MACpB,SAAS;AAAA,MACT,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,SAAS,QAAQ,IAAI,YAAY;AAAA,IACnC,CAAC;AAAA,EACH;AAAA,EAEQ,YAAY,UAA0B;AAC5C,WAAO,oBAAoB,QAAQ;AAAA,EACrC;AAAA,EAEA,MAAc,aAAa,UAAgD;AACzE,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,wBAAwB,KAAK,SAAS;AAC5C,UAAM,MAAM,GAAG,MAAM,0BAA0B,QAAQ;AAEvD,YAAQ,IAAI,iDAAiD,EAAE,IAAI,CAAC;AAEpE,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,cAAQ,MAAM,wDAAwD;AAAA,QACpE;AAAA,MACF,CAAC;AACD,YAAM,IAAI;AAAA,QACR,qCAAqC,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,SAAqC,MAAM,SAAS,KAAK;AAE/D,QAAI,OAAO,WAAW,KAAK,CAAC,OAAO,MAAM,QAAQ;AAC/C,YAAM,IAAI,SAAS,8BAA8B,mBAAmB,GAAG;AAAA,IACzE;AAEA,WAAO,OAAO,KAAK,CAAC;AAAA,EACtB;AAAA,EAEA,MAAM,iBAAiB,UAAgD;AACrE,eAAW,GAAG,kBAAkB,QAAQ,IAAI,qBAAqB,QAAQ,CAAC;AAC1E,YAAQ,MAAM,gDAAgD;AAAA,MAC5D;AAAA,MACA,OAAO,QAAQ,IAAI;AAAA,IACrB,CAAC;AAED,UAAM,QAAQ,KAAK,YAAY;AAC/B,UAAM,WAAW,KAAK,YAAY,QAAQ;AAE1C,UAAM,aAAa,MAAM,MAAM,OAAO,QAAQ;AAC9C,YAAQ,MAAM,+CAA+C;AAAA,MAC3D;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,WAAW,UAAU,KAAK,UAAU,cAAc,WAAW,MAAM;AACrE,YAAM,mBAAmB,KAAK,MAAM,WAAW,IAAI;AAEnD,UAAI,KAAK,iBAAiB,kBAAkB,QAAQ,GAAG;AACrD,gBAAQ,IAAI,4CAA4C,EAAE,SAAS,CAAC;AACpE,eAAO;AAAA,MACT;AAEA,cAAQ,MAAM,iEAAiE;AAAA,QAC7E;AAAA,QACA;AAAA,QACA,cAAc,iBAAiB;AAAA,QAC/B,kBAAkB,iBAAiB;AAAA,MACrC,CAAC;AAED,YAAM,MAAM,OAAO,QAAQ;AAAA,IAC7B;AAEA,UAAM,OAAO,MAAM,KAAK,aAAa,QAAQ;AAE7C,QAAI,CAAC,KAAK,iBAAiB,MAAM,QAAQ,GAAG;AAC1C,cAAQ,MAAM,mEAAmE;AAAA,QAC/E;AAAA,QACA,cAAc,KAAK;AAAA,QACnB,kBAAkB,KAAK;AAAA,MACzB,CAAC;AACD,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,OAAO,UAAU,KAAK,UAAU,IAAI,GAAG,MAAM;AAEzD,WAAO;AAAA,EACT;AAAA,EAEA,iBAAiB,MAA2B,UAA2B;AACrE,QAAI,CAAC,KAAK,OAAQ,QAAO;AAEzB,QAAI;AACF,aAAO,kBAAkB,IAAI,IAAI,KAAK,MAAM,EAAE,QAAQ,MAAM;AAAA,IAC9D,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,uBAAuB,MAA+B;AAC1D,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,cAAc,KAAK,SAAS;AAClC,UAAM,MAAM,GAAG,MAAM,aAAa,IAAI;AACtC,YAAQ,MAAM,uDAAuD;AAAA,MACnE;AAAA,MACA,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,YAAY;AAAA,MACxC;AAAA,IACF,CAAC;AAED,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,YAAY;AAAA,IACxC,CAAC;AAED,YAAQ,MAAM,2DAA2D;AAAA,MACvE;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,qCAAqC,SAAS,MAAM;AAAA,QACpD;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,SAAqC,MAAM,SAAS,KAAK;AAE/D,QAAI,OAAO,WAAW,KAAK,CAAC,OAAO,MAAM,QAAQ;AAC/C,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,OAAO,KAAK,CAAC,EAAE;AAAA,EACxB;AAAA,EAEA,MAAM,mBAAmB,UAAgD;AACvE,eAAW,GAAG,kBAAkB,QAAQ,IAAI,qBAAqB,QAAQ,CAAC;AAC1E,YAAQ,MAAM,gDAAgD;AAAA,MAC5D;AAAA,MACA,OAAO,QAAQ,IAAI;AAAA,IACrB,CAAC;AAED,UAAM,QAAQ,KAAK,YAAY;AAC/B,UAAM,WAAW,KAAK,YAAY,QAAQ;AAE1C,YAAQ,IAAI,qDAAqD;AAAA,MAC/D;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,MAAM,OAAO,QAAQ;AAE3B,UAAM,OAAO,MAAM,KAAK,aAAa,QAAQ;AAE7C,UAAM,MAAM,OAAO,UAAU,KAAK,UAAU,IAAI,GAAG,MAAM;AAEzD,YAAQ,IAAI,oDAAoD;AAAA,MAC9D;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AACF;AAEO,MAAM,oBAAoB,IAAI,kBAAkB;","names":[]}

package/dist/providers/auth.provider.mjs

@@ -26,6 +26,7 @@ import { useWhitelabelUrls, useWhitelabel } from "./whitelabel.provider";
 import { useWlQueryKey } from "../hooks/useAuthQueryKey";
 import { normalizeLocale } from "../i18n/normalize";
 import { setLocaleCookie } from "../utils/intl/locale-cookie";
+import { isSameSiteUrl } from "../utils/redirect";
 const AuthContext = createContext(
   void 0
 );
@@ -124,16 +125,18 @@ function AuthProvider({ children, publicRoutes = [] }) {
     [googleOnboardingMutate, queryClient, setUserData, accountKey]
   );
   const resolveLogoutRedirect = useCallback(() => {
-    try {
-      const currentOrigin = window.location.origin;
-      const pagesOrigin = pagesUrl ? new URL(pagesUrl).origin : "";
-      if (pagesOrigin && currentOrigin === pagesOrigin) {
-        return `${accountsUrl}/login?redirect=${encodeURIComponent(pagesUrl)}`;
-      }
-    } catch {
+    const host = window.location.host;
+    if (accountsUrl && !isSameSiteUrl(accountsUrl, host)) {
+      console.error("[auth-provider] accounts_url fora do site do host atual", {
+        host,
+        whitelabelId: whitelabel?.id,
+        accountsUrl
+      });
+      return "/login";
     }
-    return `${accountsUrl}/login?redirect=${encodeURIComponent(pagesUrl || "/")}`;
-  }, [accountsUrl, pagesUrl]);
+    const safePagesUrl = pagesUrl && isSameSiteUrl(pagesUrl, host) ? pagesUrl : "/";
+    return `${accountsUrl}/login?redirect=${encodeURIComponent(safePagesUrl)}`;
+  }, [accountsUrl, pagesUrl, whitelabel?.id]);
   const logout = useCallback(async () => {
     try {
       await logoutMutate(void 0);

package/dist/providers/auth.provider.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/auth.provider.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  createContext,\n  ReactNode,\n  useCallback,\n  useContext,\n  useEffect,\n  useMemo,\n} from \"react\";\nimport { useQueryClient } from \"@tanstack/react-query\";\nimport {\n  useUserQuery,\n  useSetUserData,\n  useUserValidateSession,\n} from \"../modules/auth/hooks/useUserQuery\";\nimport { useLogin } from \"../modules/auth/hooks/login.hook\";\nimport { useRegister } from \"../modules/auth/hooks/register.hook\";\nimport { useLogout } from \"../modules/auth/hooks/logout.hook\";\nimport { useSocialGoogleLogin } from \"../modules/auth/hooks/social-google-login.hook\";\nimport { useSocialGoogleOnboarding } from \"../modules/auth/hooks/social-google-onboarding.hook\";\nimport {\n  AuthState,\n  LoginRequest,\n  RegisterRequest,\n  SocialGooglePartial,\n  SocialOnboardingRequest,\n} from \"../modules/auth/schema\";\n\nexport type LoginResult =\n  | { result: \"success\" }\n  | { result: \"two_factor_required\"; cookie: string; twoFactorMode: \"verify\" | \"setup\" }\n  | { result: \"error\"; message: string };\n\nexport type GoogleLoginResult =\n  | { result: \"success\" }\n  | { result: \"two_factor_required\"; cookie: string; twoFactorMode: \"verify\" | \"setup\" }\n  | { result: \"needs_onboarding\"; onboardingToken: string; partial: SocialGooglePartial }\n  | { result: \"link_requires_password\"; message: string }\n  | { result: \"error\"; message: string };\nimport {\n  useCurrentAccount,\n  ACCOUNT_QUERY_KEY,\n} from \"../modules/accounts/hooks/current-account.hook\";\nimport { useWhitelabelUrls, useWhitelabel } from \"./whitelabel.provider\";\nimport { useWlQueryKey } from \"../hooks/useAuthQueryKey\";\nimport { normalizeLocale } from \"../i18n/normalize\";\nimport { setLocaleCookie } from \"../utils/intl/locale-cookie\";\n\ninterface AuthContextProps extends AuthState {\n  login: (credentials: LoginRequest) => Promise<LoginResult>;\n  register: (data: RegisterRequest) => Promise<void>;\n  logout: () => Promise<void>;\n  loginWithGoogle: (code: string) => Promise<GoogleLoginResult>;\n  completeGoogleOnboarding: (data: SocialOnboardingRequest) => Promise<void>;\n}\n\nexport const AuthContext = createContext<AuthContextProps | undefined>(\n  undefined,\n);\n\ninterface AuthProviderProps {\n  children: ReactNode;\n  /**\n   * Rotas públicas (sources de RegExp) que NÃO devem redirecionar para o login mesmo\n   * sem sessão. Informadas pelo consumer app — a lib não conhece rotas específicas.\n   */\n  publicRoutes?: string[];\n}\n\nexport function AuthProvider({ children, publicRoutes = [] }: AuthProviderProps) {\n  const { data: user, isLoading: isQueryLoading } = useUserQuery();\n  const { data: account, isLoading: isAccountLoading } = useCurrentAccount();\n  const { isLoading: isSessionLoading } = useUserValidateSession(publicRoutes);\n\n  const queryClient = useQueryClient();\n  const setUserData = useSetUserData();\n  const { accountsUrl, pagesUrl } = useWhitelabelUrls();\n  const { whitelabel } = useWhitelabel();\n  const accountKey = useWlQueryKey([...ACCOUNT_QUERY_KEY]);\n\n  // Mantém o cookie NEXT_LOCALE alinhado à preferência da conta (login, sessão existente,\n  // atualização). Compartilhado entre subdomínios via domínio do whitelabel. A próxima\n  // navegação/requisição passa a resolver o locale pela preferência do usuário.\n  useEffect(() => {\n    const locale = normalizeLocale(user?.language);\n    if (locale) setLocaleCookie(locale, whitelabel?.domain);\n  }, [user?.language, whitelabel?.domain]);\n\n  const { mutateAsync: loginMutate, isPending: isLogging } = useLogin();\n  const { mutateAsync: registerMutate, isPending: isRegistering } =\n    useRegister();\n  const { mutateAsync: logoutMutate, isPending: isLoggingOut } = useLogout();\n  const { mutateAsync: googleLoginMutate, isPending: isGoogleLogging } =\n    useSocialGoogleLogin();\n  const { mutateAsync: googleOnboardingMutate, isPending: isGoogleOnboarding } =\n    useSocialGoogleOnboarding();\n\n  const isAuthenticated = !!user;\n  const isLoading =\n    isLogging ||\n    isRegistering ||\n    isLoggingOut ||\n    isGoogleLogging ||\n    isGoogleOnboarding ||\n    isQueryLoading ||\n    isAccountLoading ||\n    isSessionLoading;\n\n  const login = useCallback(\n    async (credentials: LoginRequest): Promise<LoginResult> => {\n      try {\n        const data = await loginMutate(credentials);\n\n        if (data.result === \"two_factor_required\") {\n          return { result: \"two_factor_required\", cookie: data.cookie, twoFactorMode: data.twoFactorMode };\n        }\n\n        queryClient.clear();\n        setUserData(data.user);\n        queryClient.setQueryData(accountKey, data.account);\n\n        return { result: \"success\" };\n      } catch (error) {\n        const message =\n          error instanceof Error\n            ? error.message\n            : \"Ocorreu um erro ao fazer login. Tente novamente.\";\n        return { result: \"error\", message };\n      }\n    },\n    [queryClient, setUserData, accountKey],\n  );\n\n  const register = useCallback(\n    async (data: RegisterRequest): Promise<void> => {\n      await registerMutate(data, {\n        onSuccess: (data) => {\n          queryClient.clear();\n          setUserData(data.user);\n          queryClient.setQueryData(accountKey, data.account);\n        },\n      });\n    },\n    [queryClient, setUserData, accountKey],\n  );\n\n  const loginWithGoogle = useCallback(\n    async (code: string): Promise<GoogleLoginResult> => {\n      try {\n        const data = await googleLoginMutate(code);\n\n        if (data.result === \"two_factor_required\") {\n          return {\n            result: \"two_factor_required\",\n            cookie: data.cookie,\n            twoFactorMode: data.twoFactorMode,\n          };\n        }\n\n        if (data.result === \"needs_onboarding\") {\n          return {\n            result: \"needs_onboarding\",\n            onboardingToken: data.onboardingToken,\n            partial: data.partial,\n          };\n        }\n\n        if (data.result === \"link_requires_password\") {\n          return { result: \"link_requires_password\", message: data.message };\n        }\n\n        queryClient.clear();\n        setUserData(data.user);\n        queryClient.setQueryData(accountKey, data.account);\n\n        return { result: \"success\" };\n      } catch (error) {\n        const message =\n          error instanceof Error\n            ? error.message\n            : \"Ocorreu um erro ao fazer login com Google. Tente novamente.\";\n        return { result: \"error\", message };\n      }\n    },\n    [googleLoginMutate, queryClient, setUserData, accountKey],\n  );\n\n  const completeGoogleOnboarding = useCallback(\n    async (data: SocialOnboardingRequest): Promise<void> => {\n      await googleOnboardingMutate(data, {\n        onSuccess: (data) => {\n          queryClient.clear();\n          setUserData(data.user);\n          queryClient.setQueryData(accountKey, data.account);\n        },\n      });\n    },\n    [googleOnboardingMutate, queryClient, setUserData, accountKey],\n  );\n\n  const resolveLogoutRedirect = useCallback(() => {\n    try {\n      const currentOrigin = window.location.origin;\n      const pagesOrigin = pagesUrl ? new URL(pagesUrl).origin : \"\";\n\n      if (pagesOrigin && currentOrigin === pagesOrigin) {\n        return `${accountsUrl}/login?redirect=${encodeURIComponent(pagesUrl)}`;\n      }\n    } catch {\n      // fallback below\n    }\n\n    return `${accountsUrl}/login?redirect=${encodeURIComponent(pagesUrl || \"/\")}`;\n  }, [accountsUrl, pagesUrl]);\n\n  const logout = useCallback(async (): Promise<void> => {\n    try {\n      await logoutMutate(undefined);\n    } catch {\n      // cookie já removido no servidor mesmo se a API falhou\n    } finally {\n      queryClient.clear();\n      window.location.assign(resolveLogoutRedirect());\n    }\n  }, [queryClient, logoutMutate, resolveLogoutRedirect]);\n\n  const value: AuthContextProps = useMemo(\n    () => ({\n      user: user ?? null,\n      account: account ?? null,\n      isAuthenticated,\n      isLoading,\n      login,\n      register,\n      logout,\n      loginWithGoogle,\n      completeGoogleOnboarding,\n    }),\n    [\n      user,\n      account,\n      isAuthenticated,\n      isLoading,\n      login,\n      register,\n      logout,\n      loginWithGoogle,\n      completeGoogleOnboarding,\n    ],\n  );\n\n  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;\n}\n\nexport function useAuth(): AuthContextProps {\n  const context = useContext(AuthContext);\n\n  if (context === undefined) {\n    throw new Error(\"useAuth deve ser usado dentro de um AuthProvider\");\n  }\n\n  return context;\n}\n"],"mappings":";AA4PS;AA1PT;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB;AACzB,SAAS,mBAAmB;AAC5B,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAoB1C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,mBAAmB,qBAAqB;AACjD,SAAS,qBAAqB;AAC9B,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAUzB,MAAM,cAAc;AAAA,EACzB;AACF;AAWO,SAAS,aAAa,EAAE,UAAU,eAAe,CAAC,EAAE,GAAsB;AAC/E,QAAM,EAAE,MAAM,MAAM,WAAW,eAAe,IAAI,aAAa;AAC/D,QAAM,EAAE,MAAM,SAAS,WAAW,iBAAiB,IAAI,kBAAkB;AACzE,QAAM,EAAE,WAAW,iBAAiB,IAAI,uBAAuB,YAAY;AAE3E,QAAM,cAAc,eAAe;AACnC,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,aAAa,SAAS,IAAI,kBAAkB;AACpD,QAAM,EAAE,WAAW,IAAI,cAAc;AACrC,QAAM,aAAa,cAAc,CAAC,GAAG,iBAAiB,CAAC;AAKvD,YAAU,MAAM;AACd,UAAM,SAAS,gBAAgB,MAAM,QAAQ;AAC7C,QAAI,OAAQ,iBAAgB,QAAQ,YAAY,MAAM;AAAA,EACxD,GAAG,CAAC,MAAM,UAAU,YAAY,MAAM,CAAC;AAEvC,QAAM,EAAE,aAAa,aAAa,WAAW,UAAU,IAAI,SAAS;AACpE,QAAM,EAAE,aAAa,gBAAgB,WAAW,cAAc,IAC5D,YAAY;AACd,QAAM,EAAE,aAAa,cAAc,WAAW,aAAa,IAAI,UAAU;AACzE,QAAM,EAAE,aAAa,mBAAmB,WAAW,gBAAgB,IACjE,qBAAqB;AACvB,QAAM,EAAE,aAAa,wBAAwB,WAAW,mBAAmB,IACzE,0BAA0B;AAE5B,QAAM,kBAAkB,CAAC,CAAC;AAC1B,QAAM,YACJ,aACA,iBACA,gBACA,mBACA,sBACA,kBACA,oBACA;AAEF,QAAM,QAAQ;AAAA,IACZ,OAAO,gBAAoD;AACzD,UAAI;AACF,cAAM,OAAO,MAAM,YAAY,WAAW;AAE1C,YAAI,KAAK,WAAW,uBAAuB;AACzC,iBAAO,EAAE,QAAQ,uBAAuB,QAAQ,KAAK,QAAQ,eAAe,KAAK,cAAc;AAAA,QACjG;AAEA,oBAAY,MAAM;AAClB,oBAAY,KAAK,IAAI;AACrB,oBAAY,aAAa,YAAY,KAAK,OAAO;AAEjD,eAAO,EAAE,QAAQ,UAAU;AAAA,MAC7B,SAAS,OAAO;AACd,cAAM,UACJ,iBAAiB,QACb,MAAM,UACN;AACN,eAAO,EAAE,QAAQ,SAAS,QAAQ;AAAA,MACpC;AAAA,IACF;AAAA,IACA,CAAC,aAAa,aAAa,UAAU;AAAA,EACvC;AAEA,QAAM,WAAW;AAAA,IACf,OAAO,SAAyC;AAC9C,YAAM,eAAe,MAAM;AAAA,QACzB,WAAW,CAACA,UAAS;AACnB,sBAAY,MAAM;AAClB,sBAAYA,MAAK,IAAI;AACrB,sBAAY,aAAa,YAAYA,MAAK,OAAO;AAAA,QACnD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,CAAC,aAAa,aAAa,UAAU;AAAA,EACvC;AAEA,QAAM,kBAAkB;AAAA,IACtB,OAAO,SAA6C;AAClD,UAAI;AACF,cAAM,OAAO,MAAM,kBAAkB,IAAI;AAEzC,YAAI,KAAK,WAAW,uBAAuB;AACzC,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,QAAQ,KAAK;AAAA,YACb,eAAe,KAAK;AAAA,UACtB;AAAA,QACF;AAEA,YAAI,KAAK,WAAW,oBAAoB;AACtC,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,iBAAiB,KAAK;AAAA,YACtB,SAAS,KAAK;AAAA,UAChB;AAAA,QACF;AAEA,YAAI,KAAK,WAAW,0BAA0B;AAC5C,iBAAO,EAAE,QAAQ,0BAA0B,SAAS,KAAK,QAAQ;AAAA,QACnE;AAEA,oBAAY,MAAM;AAClB,oBAAY,KAAK,IAAI;AACrB,oBAAY,aAAa,YAAY,KAAK,OAAO;AAEjD,eAAO,EAAE,QAAQ,UAAU;AAAA,MAC7B,SAAS,OAAO;AACd,cAAM,UACJ,iBAAiB,QACb,MAAM,UACN;AACN,eAAO,EAAE,QAAQ,SAAS,QAAQ;AAAA,MACpC;AAAA,IACF;AAAA,IACA,CAAC,mBAAmB,aAAa,aAAa,UAAU;AAAA,EAC1D;AAEA,QAAM,2BAA2B;AAAA,IAC/B,OAAO,SAAiD;AACtD,YAAM,uBAAuB,MAAM;AAAA,QACjC,WAAW,CAACA,UAAS;AACnB,sBAAY,MAAM;AAClB,sBAAYA,MAAK,IAAI;AACrB,sBAAY,aAAa,YAAYA,MAAK,OAAO;AAAA,QACnD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,CAAC,wBAAwB,aAAa,aAAa,UAAU;AAAA,EAC/D;AAEA,QAAM,wBAAwB,YAAY,MAAM;AAC9C,QAAI;AACF,YAAM,gBAAgB,OAAO,SAAS;AACtC,YAAM,cAAc,WAAW,IAAI,IAAI,QAAQ,EAAE,SAAS;AAE1D,UAAI,eAAe,kBAAkB,aAAa;AAChD,eAAO,GAAG,WAAW,mBAAmB,mBAAmB,QAAQ,CAAC;AAAA,MACtE;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,WAAO,GAAG,WAAW,mBAAmB,mBAAmB,YAAY,GAAG,CAAC;AAAA,EAC7E,GAAG,CAAC,aAAa,QAAQ,CAAC;AAE1B,QAAM,SAAS,YAAY,YAA2B;AACpD,QAAI;AACF,YAAM,aAAa,MAAS;AAAA,IAC9B,QAAQ;AAAA,IAER,UAAE;AACA,kBAAY,MAAM;AAClB,aAAO,SAAS,OAAO,sBAAsB,CAAC;AAAA,IAChD;AAAA,EACF,GAAG,CAAC,aAAa,cAAc,qBAAqB,CAAC;AAErD,QAAM,QAA0B;AAAA,IAC9B,OAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,SAAS,WAAW;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAEO,SAAS,UAA4B;AAC1C,QAAM,UAAU,WAAW,WAAW;AAEtC,MAAI,YAAY,QAAW;AACzB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAEA,SAAO;AACT;","names":["data"]}
+{"version":3,"sources":["../../src/providers/auth.provider.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  createContext,\n  ReactNode,\n  useCallback,\n  useContext,\n  useEffect,\n  useMemo,\n} from \"react\";\nimport { useQueryClient } from \"@tanstack/react-query\";\nimport {\n  useUserQuery,\n  useSetUserData,\n  useUserValidateSession,\n} from \"../modules/auth/hooks/useUserQuery\";\nimport { useLogin } from \"../modules/auth/hooks/login.hook\";\nimport { useRegister } from \"../modules/auth/hooks/register.hook\";\nimport { useLogout } from \"../modules/auth/hooks/logout.hook\";\nimport { useSocialGoogleLogin } from \"../modules/auth/hooks/social-google-login.hook\";\nimport { useSocialGoogleOnboarding } from \"../modules/auth/hooks/social-google-onboarding.hook\";\nimport {\n  AuthState,\n  LoginRequest,\n  RegisterRequest,\n  SocialGooglePartial,\n  SocialOnboardingRequest,\n} from \"../modules/auth/schema\";\n\nexport type LoginResult =\n  | { result: \"success\" }\n  | { result: \"two_factor_required\"; cookie: string; twoFactorMode: \"verify\" | \"setup\" }\n  | { result: \"error\"; message: string };\n\nexport type GoogleLoginResult =\n  | { result: \"success\" }\n  | { result: \"two_factor_required\"; cookie: string; twoFactorMode: \"verify\" | \"setup\" }\n  | { result: \"needs_onboarding\"; onboardingToken: string; partial: SocialGooglePartial }\n  | { result: \"link_requires_password\"; message: string }\n  | { result: \"error\"; message: string };\nimport {\n  useCurrentAccount,\n  ACCOUNT_QUERY_KEY,\n} from \"../modules/accounts/hooks/current-account.hook\";\nimport { useWhitelabelUrls, useWhitelabel } from \"./whitelabel.provider\";\nimport { useWlQueryKey } from \"../hooks/useAuthQueryKey\";\nimport { normalizeLocale } from \"../i18n/normalize\";\nimport { setLocaleCookie } from \"../utils/intl/locale-cookie\";\nimport { isSameSiteUrl } from \"../utils/redirect\";\n\ninterface AuthContextProps extends AuthState {\n  login: (credentials: LoginRequest) => Promise<LoginResult>;\n  register: (data: RegisterRequest) => Promise<void>;\n  logout: () => Promise<void>;\n  loginWithGoogle: (code: string) => Promise<GoogleLoginResult>;\n  completeGoogleOnboarding: (data: SocialOnboardingRequest) => Promise<void>;\n}\n\nexport const AuthContext = createContext<AuthContextProps | undefined>(\n  undefined,\n);\n\ninterface AuthProviderProps {\n  children: ReactNode;\n  /**\n   * Rotas públicas (sources de RegExp) que NÃO devem redirecionar para o login mesmo\n   * sem sessão. Informadas pelo consumer app — a lib não conhece rotas específicas.\n   */\n  publicRoutes?: string[];\n}\n\nexport function AuthProvider({ children, publicRoutes = [] }: AuthProviderProps) {\n  const { data: user, isLoading: isQueryLoading } = useUserQuery();\n  const { data: account, isLoading: isAccountLoading } = useCurrentAccount();\n  const { isLoading: isSessionLoading } = useUserValidateSession(publicRoutes);\n\n  const queryClient = useQueryClient();\n  const setUserData = useSetUserData();\n  const { accountsUrl, pagesUrl } = useWhitelabelUrls();\n  const { whitelabel } = useWhitelabel();\n  const accountKey = useWlQueryKey([...ACCOUNT_QUERY_KEY]);\n\n  // Mantém o cookie NEXT_LOCALE alinhado à preferência da conta (login, sessão existente,\n  // atualização). Compartilhado entre subdomínios via domínio do whitelabel. A próxima\n  // navegação/requisição passa a resolver o locale pela preferência do usuário.\n  useEffect(() => {\n    const locale = normalizeLocale(user?.language);\n    if (locale) setLocaleCookie(locale, whitelabel?.domain);\n  }, [user?.language, whitelabel?.domain]);\n\n  const { mutateAsync: loginMutate, isPending: isLogging } = useLogin();\n  const { mutateAsync: registerMutate, isPending: isRegistering } =\n    useRegister();\n  const { mutateAsync: logoutMutate, isPending: isLoggingOut } = useLogout();\n  const { mutateAsync: googleLoginMutate, isPending: isGoogleLogging } =\n    useSocialGoogleLogin();\n  const { mutateAsync: googleOnboardingMutate, isPending: isGoogleOnboarding } =\n    useSocialGoogleOnboarding();\n\n  const isAuthenticated = !!user;\n  const isLoading =\n    isLogging ||\n    isRegistering ||\n    isLoggingOut ||\n    isGoogleLogging ||\n    isGoogleOnboarding ||\n    isQueryLoading ||\n    isAccountLoading ||\n    isSessionLoading;\n\n  const login = useCallback(\n    async (credentials: LoginRequest): Promise<LoginResult> => {\n      try {\n        const data = await loginMutate(credentials);\n\n        if (data.result === \"two_factor_required\") {\n          return { result: \"two_factor_required\", cookie: data.cookie, twoFactorMode: data.twoFactorMode };\n        }\n\n        queryClient.clear();\n        setUserData(data.user);\n        queryClient.setQueryData(accountKey, data.account);\n\n        return { result: \"success\" };\n      } catch (error) {\n        const message =\n          error instanceof Error\n            ? error.message\n            : \"Ocorreu um erro ao fazer login. Tente novamente.\";\n        return { result: \"error\", message };\n      }\n    },\n    [queryClient, setUserData, accountKey],\n  );\n\n  const register = useCallback(\n    async (data: RegisterRequest): Promise<void> => {\n      await registerMutate(data, {\n        onSuccess: (data) => {\n          queryClient.clear();\n          setUserData(data.user);\n          queryClient.setQueryData(accountKey, data.account);\n        },\n      });\n    },\n    [queryClient, setUserData, accountKey],\n  );\n\n  const loginWithGoogle = useCallback(\n    async (code: string): Promise<GoogleLoginResult> => {\n      try {\n        const data = await googleLoginMutate(code);\n\n        if (data.result === \"two_factor_required\") {\n          return {\n            result: \"two_factor_required\",\n            cookie: data.cookie,\n            twoFactorMode: data.twoFactorMode,\n          };\n        }\n\n        if (data.result === \"needs_onboarding\") {\n          return {\n            result: \"needs_onboarding\",\n            onboardingToken: data.onboardingToken,\n            partial: data.partial,\n          };\n        }\n\n        if (data.result === \"link_requires_password\") {\n          return { result: \"link_requires_password\", message: data.message };\n        }\n\n        queryClient.clear();\n        setUserData(data.user);\n        queryClient.setQueryData(accountKey, data.account);\n\n        return { result: \"success\" };\n      } catch (error) {\n        const message =\n          error instanceof Error\n            ? error.message\n            : \"Ocorreu um erro ao fazer login com Google. Tente novamente.\";\n        return { result: \"error\", message };\n      }\n    },\n    [googleLoginMutate, queryClient, setUserData, accountKey],\n  );\n\n  const completeGoogleOnboarding = useCallback(\n    async (data: SocialOnboardingRequest): Promise<void> => {\n      await googleOnboardingMutate(data, {\n        onSuccess: (data) => {\n          queryClient.clear();\n          setUserData(data.user);\n          queryClient.setQueryData(accountKey, data.account);\n        },\n      });\n    },\n    [googleOnboardingMutate, queryClient, setUserData, accountKey],\n  );\n\n  const resolveLogoutRedirect = useCallback(() => {\n    const host = window.location.host;\n\n    if (accountsUrl && !isSameSiteUrl(accountsUrl, host)) {\n      console.error(\"[auth-provider] accounts_url fora do site do host atual\", {\n        host,\n        whitelabelId: whitelabel?.id,\n        accountsUrl,\n      });\n      return \"/login\";\n    }\n\n    const safePagesUrl = pagesUrl && isSameSiteUrl(pagesUrl, host) ? pagesUrl : \"/\";\n\n    return `${accountsUrl}/login?redirect=${encodeURIComponent(safePagesUrl)}`;\n  }, [accountsUrl, pagesUrl, whitelabel?.id]);\n\n  const logout = useCallback(async (): Promise<void> => {\n    try {\n      await logoutMutate(undefined);\n    } catch {\n      // cookie já removido no servidor mesmo se a API falhou\n    } finally {\n      queryClient.clear();\n      window.location.assign(resolveLogoutRedirect());\n    }\n  }, [queryClient, logoutMutate, resolveLogoutRedirect]);\n\n  const value: AuthContextProps = useMemo(\n    () => ({\n      user: user ?? null,\n      account: account ?? null,\n      isAuthenticated,\n      isLoading,\n      login,\n      register,\n      logout,\n      loginWithGoogle,\n      completeGoogleOnboarding,\n    }),\n    [\n      user,\n      account,\n      isAuthenticated,\n      isLoading,\n      login,\n      register,\n      logout,\n      loginWithGoogle,\n      completeGoogleOnboarding,\n    ],\n  );\n\n  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;\n}\n\nexport function useAuth(): AuthContextProps {\n  const context = useContext(AuthContext);\n\n  if (context === undefined) {\n    throw new Error(\"useAuth deve ser usado dentro de um AuthProvider\");\n  }\n\n  return context;\n}\n"],"mappings":";AA+PS;AA7PT;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB;AACzB,SAAS,mBAAmB;AAC5B,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAoB1C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,mBAAmB,qBAAqB;AACjD,SAAS,qBAAqB;AAC9B,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAUvB,MAAM,cAAc;AAAA,EACzB;AACF;AAWO,SAAS,aAAa,EAAE,UAAU,eAAe,CAAC,EAAE,GAAsB;AAC/E,QAAM,EAAE,MAAM,MAAM,WAAW,eAAe,IAAI,aAAa;AAC/D,QAAM,EAAE,MAAM,SAAS,WAAW,iBAAiB,IAAI,kBAAkB;AACzE,QAAM,EAAE,WAAW,iBAAiB,IAAI,uBAAuB,YAAY;AAE3E,QAAM,cAAc,eAAe;AACnC,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,aAAa,SAAS,IAAI,kBAAkB;AACpD,QAAM,EAAE,WAAW,IAAI,cAAc;AACrC,QAAM,aAAa,cAAc,CAAC,GAAG,iBAAiB,CAAC;AAKvD,YAAU,MAAM;AACd,UAAM,SAAS,gBAAgB,MAAM,QAAQ;AAC7C,QAAI,OAAQ,iBAAgB,QAAQ,YAAY,MAAM;AAAA,EACxD,GAAG,CAAC,MAAM,UAAU,YAAY,MAAM,CAAC;AAEvC,QAAM,EAAE,aAAa,aAAa,WAAW,UAAU,IAAI,SAAS;AACpE,QAAM,EAAE,aAAa,gBAAgB,WAAW,cAAc,IAC5D,YAAY;AACd,QAAM,EAAE,aAAa,cAAc,WAAW,aAAa,IAAI,UAAU;AACzE,QAAM,EAAE,aAAa,mBAAmB,WAAW,gBAAgB,IACjE,qBAAqB;AACvB,QAAM,EAAE,aAAa,wBAAwB,WAAW,mBAAmB,IACzE,0BAA0B;AAE5B,QAAM,kBAAkB,CAAC,CAAC;AAC1B,QAAM,YACJ,aACA,iBACA,gBACA,mBACA,sBACA,kBACA,oBACA;AAEF,QAAM,QAAQ;AAAA,IACZ,OAAO,gBAAoD;AACzD,UAAI;AACF,cAAM,OAAO,MAAM,YAAY,WAAW;AAE1C,YAAI,KAAK,WAAW,uBAAuB;AACzC,iBAAO,EAAE,QAAQ,uBAAuB,QAAQ,KAAK,QAAQ,eAAe,KAAK,cAAc;AAAA,QACjG;AAEA,oBAAY,MAAM;AAClB,oBAAY,KAAK,IAAI;AACrB,oBAAY,aAAa,YAAY,KAAK,OAAO;AAEjD,eAAO,EAAE,QAAQ,UAAU;AAAA,MAC7B,SAAS,OAAO;AACd,cAAM,UACJ,iBAAiB,QACb,MAAM,UACN;AACN,eAAO,EAAE,QAAQ,SAAS,QAAQ;AAAA,MACpC;AAAA,IACF;AAAA,IACA,CAAC,aAAa,aAAa,UAAU;AAAA,EACvC;AAEA,QAAM,WAAW;AAAA,IACf,OAAO,SAAyC;AAC9C,YAAM,eAAe,MAAM;AAAA,QACzB,WAAW,CAACA,UAAS;AACnB,sBAAY,MAAM;AAClB,sBAAYA,MAAK,IAAI;AACrB,sBAAY,aAAa,YAAYA,MAAK,OAAO;AAAA,QACnD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,CAAC,aAAa,aAAa,UAAU;AAAA,EACvC;AAEA,QAAM,kBAAkB;AAAA,IACtB,OAAO,SAA6C;AAClD,UAAI;AACF,cAAM,OAAO,MAAM,kBAAkB,IAAI;AAEzC,YAAI,KAAK,WAAW,uBAAuB;AACzC,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,QAAQ,KAAK;AAAA,YACb,eAAe,KAAK;AAAA,UACtB;AAAA,QACF;AAEA,YAAI,KAAK,WAAW,oBAAoB;AACtC,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,iBAAiB,KAAK;AAAA,YACtB,SAAS,KAAK;AAAA,UAChB;AAAA,QACF;AAEA,YAAI,KAAK,WAAW,0BAA0B;AAC5C,iBAAO,EAAE,QAAQ,0BAA0B,SAAS,KAAK,QAAQ;AAAA,QACnE;AAEA,oBAAY,MAAM;AAClB,oBAAY,KAAK,IAAI;AACrB,oBAAY,aAAa,YAAY,KAAK,OAAO;AAEjD,eAAO,EAAE,QAAQ,UAAU;AAAA,MAC7B,SAAS,OAAO;AACd,cAAM,UACJ,iBAAiB,QACb,MAAM,UACN;AACN,eAAO,EAAE,QAAQ,SAAS,QAAQ;AAAA,MACpC;AAAA,IACF;AAAA,IACA,CAAC,mBAAmB,aAAa,aAAa,UAAU;AAAA,EAC1D;AAEA,QAAM,2BAA2B;AAAA,IAC/B,OAAO,SAAiD;AACtD,YAAM,uBAAuB,MAAM;AAAA,QACjC,WAAW,CAACA,UAAS;AACnB,sBAAY,MAAM;AAClB,sBAAYA,MAAK,IAAI;AACrB,sBAAY,aAAa,YAAYA,MAAK,OAAO;AAAA,QACnD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,CAAC,wBAAwB,aAAa,aAAa,UAAU;AAAA,EAC/D;AAEA,QAAM,wBAAwB,YAAY,MAAM;AAC9C,UAAM,OAAO,OAAO,SAAS;AAE7B,QAAI,eAAe,CAAC,cAAc,aAAa,IAAI,GAAG;AACpD,cAAQ,MAAM,2DAA2D;AAAA,QACvE;AAAA,QACA,cAAc,YAAY;AAAA,QAC1B;AAAA,MACF,CAAC;AACD,aAAO;AAAA,IACT;AAEA,UAAM,eAAe,YAAY,cAAc,UAAU,IAAI,IAAI,WAAW;AAE5E,WAAO,GAAG,WAAW,mBAAmB,mBAAmB,YAAY,CAAC;AAAA,EAC1E,GAAG,CAAC,aAAa,UAAU,YAAY,EAAE,CAAC;AAE1C,QAAM,SAAS,YAAY,YAA2B;AACpD,QAAI;AACF,YAAM,aAAa,MAAS;AAAA,IAC9B,QAAQ;AAAA,IAER,UAAE;AACA,kBAAY,MAAM;AAClB,aAAO,SAAS,OAAO,sBAAsB,CAAC;AAAA,IAChD;AAAA,EACF,GAAG,CAAC,aAAa,cAAc,qBAAqB,CAAC;AAErD,QAAM,QAA0B;AAAA,IAC9B,OAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,SAAS,WAAW;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAEO,SAAS,UAA4B;AAC1C,QAAM,UAAU,WAAW,WAAW;AAEtC,MAAI,YAAY,QAAW;AACzB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAEA,SAAO;AACT;","names":["data"]}

package/dist/utils/redirect.mjs

@@ -13,6 +13,15 @@ function resolveSafeRedirect(redirect, currentHostname, fallback) {
   if (!isSameSite(url.hostname, currentHostname)) return fallback;
   return url.toString();
 }
+function isSameSiteUrl(target, currentHost) {
+  let hostname;
+  try {
+    hostname = new URL(target).hostname;
+  } catch {
+    return false;
+  }
+  return isSameSite(hostname, currentHost.split(":")[0]);
+}
 function isSameSite(target, current) {
   const host = target.toLowerCase();
   const base = baseDomain(current.toLowerCase());
@@ -34,6 +43,7 @@ function sameHostOr(candidate, host, fallback) {
   }
 }
 export {
+  isSameSiteUrl,
   resolveSafeRedirect,
   sameHostOr
 };

package/dist/utils/redirect.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utils/redirect.ts"],"sourcesContent":["/**\n * Resolve o destino pós-login com proteção contra open redirect.\n *\n * Só aceita o `redirect` recebido na query quando ele aponta para o MESMO site do\n * accounts onde o usuário está — mesmo domínio-base, qualquer subdomínio. Em\n * `accounts.greatpages.com.br` libera `*.greatpages.com.br` (editor-new, editor, app…);\n * num whitelabel em `accounts.marca.com.br` libera `*.marca.com.br`. Qualquer outro host\n * (`evil.com`, `greatpages.com.br.evil.com`) cai no `fallback`.\n *\n * `currentHostname` é o host do accounts (`window.location.hostname`). O accounts vive\n * sempre num subdomínio de 1 nível (`accounts.` / `acc.` / `great-accounts.`), então o\n * domínio-base é o host sem o primeiro rótulo.\n */\nexport function resolveSafeRedirect(\n  redirect: string | null | undefined,\n  currentHostname: string,\n  fallback: string,\n): string {\n  if (!redirect) return fallback;\n\n  // path relativo same-origin — uma barra só (bloqueia `//evil.com` e `/\\evil.com`)\n  if (redirect[0] === '/' && redirect[1] !== '/' && redirect[1] !== '\\\\') {\n    return redirect;\n  }\n\n  let url: URL;\n  try {\n    url = new URL(redirect);\n  } catch {\n    return fallback;\n  }\n\n  if (url.protocol !== 'https:' && url.protocol !== 'http:') return fallback;\n  if (!isSameSite(url.hostname, currentHostname)) return fallback;\n\n  return url.toString();\n}\n\nfunction isSameSite(target: string, current: string): boolean {\n  const host = target.toLowerCase();\n  const base = baseDomain(current.toLowerCase());\n  return host === base || host.endsWith(`.${base}`);\n}\n\n// Sufixos públicos de 2 rótulos (não há PSL completa aqui — só os que aparecem nos domínios\n// dos whitelabels). Um host terminando num destes tem o domínio registrável com 1 rótulo a mais.\nconst TWO_LABEL_PUBLIC_SUFFIXES = ['com.br', 'net.br', 'org.br', 'dev.br', 'app.br', 'co.uk', 'com.mx', 'com.ar'];\n\nfunction baseDomain(host: string): string {\n  const labels = host.split('.');\n  const publicSuffix = TWO_LABEL_PUBLIC_SUFFIXES.find((s) => host === s || host.endsWith(`.${s}`));\n  // Domínio registrável = nº de rótulos do sufixo + 1 (ex.: `x.com.br` = 3; `x.app` = 2).\n  const registrableLabels = (publicSuffix ? publicSuffix.split('.').length : 1) + 1;\n  // accounts está sempre num subdomínio de 1 nível → base = host sem o 1º rótulo. Mas nunca\n  // reduz até o domínio registrável ou abaixo (senão `greatpages.com.br` viraria `com.br` e\n  // liberaria qualquer `*.com.br` — open redirect). Nesse caso exige host exato.\n  return labels.length > registrableLabels ? labels.slice(1).join('.') : host;\n}\n\n/**\n * Devolve `candidate` apenas se ele for uma URL do MESMO host; senão o `fallback`.\n *\n * Usado no bounce do `/login` de cada app (editor, pages…), que recebe no param a URL\n * absoluta da própria página de origem e a repassa ao accounts — match exato de host\n * porque o destino esperado é o do próprio app.\n */\nexport function sameHostOr(\n  candidate: string | undefined,\n  host: string,\n  fallback: string,\n): string {\n  if (!candidate) return fallback;\n  try {\n    return new URL(candidate).host === host ? candidate : fallback;\n  } catch {\n    return fallback;\n  }\n}\n"],"mappings":"AAaO,SAAS,oBACd,UACA,iBACA,UACQ;AACR,MAAI,CAAC,SAAU,QAAO;AAGtB,MAAI,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,MAAM,MAAM;AACtE,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,QAAQ;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI,IAAI,aAAa,YAAY,IAAI,aAAa,QAAS,QAAO;AAClE,MAAI,CAAC,WAAW,IAAI,UAAU,eAAe,EAAG,QAAO;AAEvD,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,WAAW,QAAgB,SAA0B;AAC5D,QAAM,OAAO,OAAO,YAAY;AAChC,QAAM,OAAO,WAAW,QAAQ,YAAY,CAAC;AAC7C,SAAO,SAAS,QAAQ,KAAK,SAAS,IAAI,IAAI,EAAE;AAClD;AAIA,MAAM,4BAA4B,CAAC,UAAU,UAAU,UAAU,UAAU,UAAU,SAAS,UAAU,QAAQ;AAEhH,SAAS,WAAW,MAAsB;AACxC,QAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAM,eAAe,0BAA0B,KAAK,CAAC,MAAM,SAAS,KAAK,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC;AAE/F,QAAM,qBAAqB,eAAe,aAAa,MAAM,GAAG,EAAE,SAAS,KAAK;AAIhF,SAAO,OAAO,SAAS,oBAAoB,OAAO,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI;AACzE;AASO,SAAS,WACd,WACA,MACA,UACQ;AACR,MAAI,CAAC,UAAW,QAAO;AACvB,MAAI;AACF,WAAO,IAAI,IAAI,SAAS,EAAE,SAAS,OAAO,YAAY;AAAA,EACxD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../../src/utils/redirect.ts"],"sourcesContent":["/**\n * Resolve o destino pós-login com proteção contra open redirect.\n *\n * Só aceita o `redirect` recebido na query quando ele aponta para o MESMO site do\n * accounts onde o usuário está — mesmo domínio-base, qualquer subdomínio. Em\n * `accounts.greatpages.com.br` libera `*.greatpages.com.br` (editor-new, editor, app…);\n * num whitelabel em `accounts.marca.com.br` libera `*.marca.com.br`. Qualquer outro host\n * (`evil.com`, `greatpages.com.br.evil.com`) cai no `fallback`.\n *\n * `currentHostname` é o host do accounts (`window.location.hostname`). O accounts vive\n * sempre num subdomínio de 1 nível (`accounts.` / `acc.` / `great-accounts.`), então o\n * domínio-base é o host sem o primeiro rótulo.\n */\nexport function resolveSafeRedirect(\n  redirect: string | null | undefined,\n  currentHostname: string,\n  fallback: string,\n): string {\n  if (!redirect) return fallback;\n\n  // path relativo same-origin — uma barra só (bloqueia `//evil.com` e `/\\evil.com`)\n  if (redirect[0] === '/' && redirect[1] !== '/' && redirect[1] !== '\\\\') {\n    return redirect;\n  }\n\n  let url: URL;\n  try {\n    url = new URL(redirect);\n  } catch {\n    return fallback;\n  }\n\n  if (url.protocol !== 'https:' && url.protocol !== 'http:') return fallback;\n  if (!isSameSite(url.hostname, currentHostname)) return fallback;\n\n  return url.toString();\n}\n\nexport function isSameSiteUrl(target: string, currentHost: string): boolean {\n  let hostname: string;\n  try {\n    hostname = new URL(target).hostname;\n  } catch {\n    return false;\n  }\n  return isSameSite(hostname, currentHost.split(':')[0]);\n}\n\nfunction isSameSite(target: string, current: string): boolean {\n  const host = target.toLowerCase();\n  const base = baseDomain(current.toLowerCase());\n  return host === base || host.endsWith(`.${base}`);\n}\n\n// Sufixos públicos de 2 rótulos (não há PSL completa aqui — só os que aparecem nos domínios\n// dos whitelabels). Um host terminando num destes tem o domínio registrável com 1 rótulo a mais.\nconst TWO_LABEL_PUBLIC_SUFFIXES = ['com.br', 'net.br', 'org.br', 'dev.br', 'app.br', 'co.uk', 'com.mx', 'com.ar'];\n\nfunction baseDomain(host: string): string {\n  const labels = host.split('.');\n  const publicSuffix = TWO_LABEL_PUBLIC_SUFFIXES.find((s) => host === s || host.endsWith(`.${s}`));\n  // Domínio registrável = nº de rótulos do sufixo + 1 (ex.: `x.com.br` = 3; `x.app` = 2).\n  const registrableLabels = (publicSuffix ? publicSuffix.split('.').length : 1) + 1;\n  // accounts está sempre num subdomínio de 1 nível → base = host sem o 1º rótulo. Mas nunca\n  // reduz até o domínio registrável ou abaixo (senão `greatpages.com.br` viraria `com.br` e\n  // liberaria qualquer `*.com.br` — open redirect). Nesse caso exige host exato.\n  return labels.length > registrableLabels ? labels.slice(1).join('.') : host;\n}\n\n/**\n * Devolve `candidate` apenas se ele for uma URL do MESMO host; senão o `fallback`.\n *\n * Usado no bounce do `/login` de cada app (editor, pages…), que recebe no param a URL\n * absoluta da própria página de origem e a repassa ao accounts — match exato de host\n * porque o destino esperado é o do próprio app.\n */\nexport function sameHostOr(\n  candidate: string | undefined,\n  host: string,\n  fallback: string,\n): string {\n  if (!candidate) return fallback;\n  try {\n    return new URL(candidate).host === host ? candidate : fallback;\n  } catch {\n    return fallback;\n  }\n}\n"],"mappings":"AAaO,SAAS,oBACd,UACA,iBACA,UACQ;AACR,MAAI,CAAC,SAAU,QAAO;AAGtB,MAAI,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,MAAM,MAAM;AACtE,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,QAAQ;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI,IAAI,aAAa,YAAY,IAAI,aAAa,QAAS,QAAO;AAClE,MAAI,CAAC,WAAW,IAAI,UAAU,eAAe,EAAG,QAAO;AAEvD,SAAO,IAAI,SAAS;AACtB;AAEO,SAAS,cAAc,QAAgB,aAA8B;AAC1E,MAAI;AACJ,MAAI;AACF,eAAW,IAAI,IAAI,MAAM,EAAE;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO,WAAW,UAAU,YAAY,MAAM,GAAG,EAAE,CAAC,CAAC;AACvD;AAEA,SAAS,WAAW,QAAgB,SAA0B;AAC5D,QAAM,OAAO,OAAO,YAAY;AAChC,QAAM,OAAO,WAAW,QAAQ,YAAY,CAAC;AAC7C,SAAO,SAAS,QAAQ,KAAK,SAAS,IAAI,IAAI,EAAE;AAClD;AAIA,MAAM,4BAA4B,CAAC,UAAU,UAAU,UAAU,UAAU,UAAU,SAAS,UAAU,QAAQ;AAEhH,SAAS,WAAW,MAAsB;AACxC,QAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAM,eAAe,0BAA0B,KAAK,CAAC,MAAM,SAAS,KAAK,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC;AAE/F,QAAM,qBAAqB,eAAe,aAAa,MAAM,GAAG,EAAE,SAAS,KAAK;AAIhF,SAAO,OAAO,SAAS,oBAAoB,OAAO,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI;AACzE;AASO,SAAS,WACd,WACA,MACA,UACQ;AACR,MAAI,CAAC,UAAW,QAAO;AACvB,MAAI;AACF,WAAO,IAAI,IAAI,SAAS,EAAE,SAAS,OAAO,YAAY;AAAA,EACxD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatapps/common",
-  "version": "1.1.785",
+  "version": "1.1.786",
   "description": "Shared library for GreatApps frontend applications",
   "main": "./dist/index.mjs",
   "types": "./src/index.ts",

package/src/index.ts

@@ -291,7 +291,7 @@ export { formatShortDate, formatDateTime, calendarDateSchema, toCalendarDate, da
 export { buildQueryParams } from "./infra/utils/params";
 export { parseSchema, parseResult } from "./infra/utils/parser";
 export { withAction } from "./utils/withAction";
-export { resolveSafeRedirect, sameHostOr } from "./utils/redirect";
+export { resolveSafeRedirect, sameHostOr, isSameSiteUrl } from "./utils/redirect";
 export { COUNTRIES, flagUrl } from "./utils/countries";
 export type { Country } from "./utils/countries";
 

package/src/middlewares/create-auth-middleware.ts

@@ -2,6 +2,7 @@ import { NextRequest, NextResponse } from 'next/server';
 
 import { continueChain, MiddlewareConfig, MiddlewareFunction, MiddlewareResult, stopChain } from './types';
 import { whitelabelService } from '../modules/whitelabel/services/whitelabel.service';
+import { isSameSiteUrl } from '../utils/redirect';
 
 function isRouteEquals(pathname: string, routes: string[]): boolean {
   return routes.some((route) => pathname === route || pathname.startsWith(`${route}/`));
@@ -27,8 +28,18 @@ export function createAuthMiddleware(options?: CreateAuthMiddlewareOptions): Mid
       const host = request.headers.get('host') || '';
       const whitelabel = await whitelabelService.getTokenByDomain(host).catch(() => null);
       const accountsUrl = whitelabel?.accounts_url;
+      const accountsUrlIsSameSite = !!accountsUrl && isSameSiteUrl(accountsUrl, host);
+
+      if (accountsUrl && !accountsUrlIsSameSite) {
+        console.error('[auth-middleware] accounts_url fora do site do host da requisição', {
+          host,
+          pathname,
+          whitelabelId: whitelabel?.id,
+          accountsUrl,
+        });
+      }
 
-      const loginUrl = accountsUrl
+      const loginUrl = accountsUrlIsSameSite
         ? new URL('/login', accountsUrl)
         : new URL('/login', request.url);
 

package/src/modules/whitelabel/actions/find-whitelabel.action.ts

@@ -6,14 +6,7 @@ import { whitelabelService } from "../services/whitelabel.service";
 import { ApiError } from "../../../infra/api/types";
 import { cache } from "react";
 
-export const findWhitelabel = cache(async () => {
-    const headersList = await headers();
-    const host = headersList.get('host');
-
-    if (!host) {
-        throw new ApiError('Host header not found', 'HOST_NOT_FOUND', 400);
-    }
-
+const findWhitelabelByHost = cache(async (host: string) => {
     const whitelabel = await whitelabelService.getTokenByDomain(host);
 
     if (!whitelabel) {
@@ -21,4 +14,15 @@ export const findWhitelabel = cache(async () => {
     }
 
     return whitelabel;
-});
+});
+
+export const findWhitelabel = async () => {
+    const headersList = await headers();
+    const host = headersList.get('host');
+
+    if (!host) {
+        throw new ApiError('Host header not found', 'HOST_NOT_FOUND', 400);
+    }
+
+    return findWhitelabelByHost(host);
+};

package/src/modules/whitelabel/services/whitelabel.service.ts

@@ -92,17 +92,49 @@ class WhitelabelService {
     });
 
     if (cachedData.status == 1 && "data" in cachedData && cachedData.data) {
-      console.log("[WhitelabelService] Cache hit for domain", { hostname });
-      return JSON.parse(cachedData.data) as WhitelabelTokenData;
+      const cachedWhitelabel = JSON.parse(cachedData.data) as WhitelabelTokenData;
+
+      if (this.#matchesHostname(cachedWhitelabel, hostname)) {
+        console.log("[WhitelabelService] Cache hit for domain", { hostname });
+        return cachedWhitelabel;
+      }
+
+      console.error("[WhitelabelService] Cached whitelabel does not match hostname", {
+        hostname,
+        cacheKey,
+        whitelabelId: cachedWhitelabel.id,
+        whitelabelDomain: cachedWhitelabel.domain,
+      });
+
+      await cache.delete(cacheKey);
     }
 
     const data = await this.fetchFromApi(hostname);
 
+    if (!this.#matchesHostname(data, hostname)) {
+      console.error("[WhitelabelService] API returned whitelabel of another hostname", {
+        hostname,
+        whitelabelId: data.id,
+        whitelabelDomain: data.domain,
+      });
+      return data;
+    }
+
     await cache.insert(cacheKey, JSON.stringify(data), 604800);
 
     return data;
   }
 
+  #matchesHostname(data: WhitelabelTokenData, hostname: string): boolean {
+    if (!data.domain) return true;
+
+    try {
+      return normalizeHostname(new URL(data.domain).hostname) === hostname;
+    } catch {
+      return true;
+    }
+  }
+
   async getTokenByWhitelabelId(idWl: number): Promise<string> {
     const apiUrl = this.getApiUrl();
     const masterToken = this.getToken();

package/src/providers/auth.provider.tsx

@@ -46,6 +46,7 @@ import { useWhitelabelUrls, useWhitelabel } from "./whitelabel.provider";
 import { useWlQueryKey } from "../hooks/useAuthQueryKey";
 import { normalizeLocale } from "../i18n/normalize";
 import { setLocaleCookie } from "../utils/intl/locale-cookie";
+import { isSameSiteUrl } from "../utils/redirect";
 
 interface AuthContextProps extends AuthState {
   login: (credentials: LoginRequest) => Promise<LoginResult>;
@@ -200,19 +201,21 @@ export function AuthProvider({ children, publicRoutes = [] }: AuthProviderProps)
   );
 
   const resolveLogoutRedirect = useCallback(() => {
-    try {
-      const currentOrigin = window.location.origin;
-      const pagesOrigin = pagesUrl ? new URL(pagesUrl).origin : "";
+    const host = window.location.host;
 
-      if (pagesOrigin && currentOrigin === pagesOrigin) {
-        return `${accountsUrl}/login?redirect=${encodeURIComponent(pagesUrl)}`;
-      }
-    } catch {
-      // fallback below
+    if (accountsUrl && !isSameSiteUrl(accountsUrl, host)) {
+      console.error("[auth-provider] accounts_url fora do site do host atual", {
+        host,
+        whitelabelId: whitelabel?.id,
+        accountsUrl,
+      });
+      return "/login";
     }
 
-    return `${accountsUrl}/login?redirect=${encodeURIComponent(pagesUrl || "/")}`;
-  }, [accountsUrl, pagesUrl]);
+    const safePagesUrl = pagesUrl && isSameSiteUrl(pagesUrl, host) ? pagesUrl : "/";
+
+    return `${accountsUrl}/login?redirect=${encodeURIComponent(safePagesUrl)}`;
+  }, [accountsUrl, pagesUrl, whitelabel?.id]);
 
   const logout = useCallback(async (): Promise<void> => {
     try {

package/src/utils/redirect.ts

@@ -36,6 +36,16 @@ export function resolveSafeRedirect(
   return url.toString();
 }
 
+export function isSameSiteUrl(target: string, currentHost: string): boolean {
+  let hostname: string;
+  try {
+    hostname = new URL(target).hostname;
+  } catch {
+    return false;
+  }
+  return isSameSite(hostname, currentHost.split(':')[0]);
+}
+
 function isSameSite(target: string, current: string): boolean {
   const host = target.toLowerCase();
   const base = baseDomain(current.toLowerCase());