@iaurelius/accounts-nextjs 0.1.0

package/dist/session.d.ts

@@ -0,0 +1,48 @@
+import { type SessionUser } from "@iaurelius/accounts/oidc";
+import type { AccountsConfig } from "./config.js";
+import { type CookieOptions } from "./cookies.js";
+export declare const SESSION_COOKIE = "__accounts_session";
+/** The person's profile as userinfo gave it: Accounts keeps it out of the ID token. */
+export type Profile = {
+    email?: string;
+    email_verified?: boolean;
+    name?: string;
+    picture?: string;
+};
+/** What the cookie keeps: the tokens, when the access token expires (Unix seconds) and the profile. */
+export type Session = {
+    at: string;
+    rt?: string;
+    it?: string;
+    exp: number;
+    u?: Profile;
+};
+export type SessionInfo = {
+    user: SessionUser;
+    sessionId: string | null;
+    orgId: string | null;
+    /** When the access token expires (Unix seconds). */
+    expiresAt: number;
+};
+export declare const cookieOptions: (cfg: AccountsConfig, secure: boolean, maxAge?: number) => CookieOptions;
+export declare function readSession(cookies: Map<string, string>, cfg: AccountsConfig): Promise<Session | null>;
+export declare function writeSession(s: Session, cookies: Map<string, string>, cfg: AccountsConfig, secure: boolean): Promise<string[]>;
+export declare const clearSession: (cookies: Map<string, string>, cfg: AccountsConfig, secure: boolean) => string[];
+/** Who is signed in, from the session's ID token (verified when it was received, kept encrypted). */
+export declare function infoOf(s: Session): SessionInfo | null;
+export type Resolved = {
+    session: Session | null;
+    setCookies: string[];
+};
+/** The profile claims worth keeping, from userinfo. */
+export declare function profileOf(cfg: AccountsConfig, accessToken: string): Promise<Profile | undefined>;
+/**
+ * The request's session, refreshed if its access token is about to expire. A refresh the application
+ * refuses (revoked, banned, session over) signs the person out here; one that cannot reach it keeps
+ * the cookie for the next request and treats this one as signed out only if the token already expired.
+ */
+export declare function resolveSession(cookies: Map<string, string>, cfg: AccountsConfig, secure: boolean): Promise<Resolved>;
+/** The request's cookies with the ones just set applied: what the rest of this request must see. */
+export declare function applySetCookies(cookies: Map<string, string>, setCookies: string[]): Map<string, string>;
+export declare const cookieHeader: (cookies: Map<string, string>) => string;
+//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyE,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACnI,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAyD,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAEzG,eAAO,MAAM,cAAc,uBAAuB,CAAC;AAEnD,uFAAuF;AACvF,MAAM,MAAM,OAAO,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpG,uGAAuG;AACvG,MAAM,MAAM,OAAO,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEzF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,aAAa,QAAS,cAAc,UAAU,OAAO,WAAW,MAAM,KAAG,aAAgD,CAAC;AAEvI,wBAAsB,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAI5G;AAED,wBAAsB,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,qBAIhH;AAED,eAAO,MAAM,YAAY,YAAa,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,cAAc,UAAU,OAAO,aAAsE,CAAC;AAEtK,qGAAqG;AACrG,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAQrD;AAED,MAAM,MAAM,QAAQ,GAAG;IAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEzE,uDAAuD;AACvD,wBAAsB,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAStG;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAmB1H;AAED,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAWvG;AAED,eAAO,MAAM,YAAY,YAAa,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,WAAyD,CAAC"}

package/dist/session.js

@@ -0,0 +1,89 @@
+import { OAuthError, fetchUserInfo, readIdToken, refreshTokens, userFromClaims } from "@iaurelius/accounts/oidc";
+import { clearChunked, readChunked, seal, unseal, writeChunked } from "./cookies.js";
+export const SESSION_COOKIE = "__accounts_session";
+export const cookieOptions = (cfg, secure, maxAge) => ({ secure, maxAge, path: "/" });
+export async function readSession(cookies, cfg) {
+    // The access token's expiry travels as `ax`: `exp` is the cookie's own (the JWE's expiration).
+    const s = await unseal(readChunked(SESSION_COOKIE, cookies), cfg.cookieSecret, "session");
+    return s && s.typ === "session" && typeof s.at === "string" && typeof s.ax === "number" ? { at: s.at, rt: s.rt, it: s.it, exp: s.ax, u: s.u } : null;
+}
+export async function writeSession(s, cookies, cfg, secure) {
+    const maxAge = cfg.sessionMaxAgeDays * 86_400;
+    const value = await seal({ typ: "session", at: s.at, ...(s.rt && { rt: s.rt }), ...(s.it && { it: s.it }), ax: s.exp, ...(s.u && { u: s.u }) }, cfg.cookieSecret, "session", maxAge);
+    return writeChunked(SESSION_COOKIE, value, cookies, cookieOptions(cfg, secure, maxAge));
+}
+export const clearSession = (cookies, cfg, secure) => clearChunked(SESSION_COOKIE, cookies, cookieOptions(cfg, secure));
+/** Who is signed in, from the session's ID token (verified when it was received, kept encrypted). */
+export function infoOf(s) {
+    if (!s.it)
+        return null;
+    try {
+        const c = readIdToken(s.it);
+        return { user: userFromClaims({ ...c, ...s.u, sub: c.sub }), sessionId: typeof c.sid === "string" ? c.sid : null, orgId: typeof c.org_id === "string" ? c.org_id : null, expiresAt: s.exp };
+    }
+    catch {
+        return null;
+    }
+}
+/** The profile claims worth keeping, from userinfo. */
+export async function profileOf(cfg, accessToken) {
+    const c = await fetchUserInfo({ issuer: cfg.issuer, accessToken, fetch: cfg.fetch });
+    if (!c)
+        return undefined;
+    const p = {};
+    if (typeof c.email === "string")
+        p.email = c.email;
+    if (typeof c.email_verified === "boolean")
+        p.email_verified = c.email_verified;
+    if (typeof c.name === "string" && c.name)
+        p.name = c.name;
+    if (typeof c.picture === "string" && c.picture)
+        p.picture = c.picture;
+    return p;
+}
+/**
+ * The request's session, refreshed if its access token is about to expire. A refresh the application
+ * refuses (revoked, banned, session over) signs the person out here; one that cannot reach it keeps
+ * the cookie for the next request and treats this one as signed out only if the token already expired.
+ */
+export async function resolveSession(cookies, cfg, secure) {
+    const s = await readSession(cookies, cfg);
+    const now = Math.floor(Date.now() / 1000);
+    if (!s) {
+        // A cookie we cannot read (another secret, tampered, expired) is dropped.
+        const stale = readChunked(SESSION_COOKIE, cookies) !== undefined;
+        return { session: null, setCookies: stale ? clearSession(cookies, cfg, secure) : [] };
+    }
+    if (s.exp - now > cfg.refreshBeforeSeconds)
+        return { session: s, setCookies: [] };
+    if (!s.rt)
+        return s.exp > now ? { session: s, setCookies: [] } : { session: null, setCookies: clearSession(cookies, cfg, secure) };
+    try {
+        const t = await refreshTokens({ issuer: cfg.issuer, clientId: cfg.clientId, clientSecret: cfg.clientSecret, fetch: cfg.fetch }, { refreshToken: s.rt, resource: cfg.audience });
+        // The profile may have changed (a new name): read again, keeping the old one if userinfo does not answer.
+        const next = { at: t.accessToken, rt: t.refreshToken ?? s.rt, it: t.idToken ?? s.it, exp: t.expiresAt, u: (await profileOf(cfg, t.accessToken)) ?? s.u };
+        return { session: next, setCookies: await writeSession(next, cookies, cfg, secure) };
+    }
+    catch (e) {
+        if (e instanceof OAuthError && e.status >= 400 && e.status < 500)
+            return { session: null, setCookies: clearSession(cookies, cfg, secure) };
+        return { session: s.exp > now ? s : null, setCookies: [] };
+    }
+}
+/** The request's cookies with the ones just set applied: what the rest of this request must see. */
+export function applySetCookies(cookies, setCookies) {
+    const out = new Map(cookies);
+    for (const sc of setCookies) {
+        const [pair, ...attrs] = sc.split(";");
+        const i = pair.indexOf("=");
+        const name = pair.slice(0, i);
+        const removed = attrs.some((a) => a.trim().toLowerCase() === "max-age=0");
+        if (removed)
+            out.delete(name);
+        else
+            out.set(name, pair.slice(i + 1));
+    }
+    return out;
+}
+export const cookieHeader = (cookies) => [...cookies].map(([k, v]) => `${k}=${v}`).join("; ");
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAoB,MAAM,0BAA0B,CAAC;AAEnI,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAEzG,MAAM,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAgBnD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAmB,EAAE,MAAe,EAAE,MAAe,EAAiB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;AAEvI,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA4B,EAAE,GAAmB;IACjF,+FAA+F;IAC/F,MAAM,CAAC,GAAG,MAAM,MAAM,CAAoF,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC7K,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,CAAU,EAAE,OAA4B,EAAE,GAAmB,EAAE,MAAe;IAC/G,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACrL,OAAO,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAA4B,EAAE,GAAmB,EAAE,MAAe,EAAE,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtK,qGAAqG;AACrG,MAAM,UAAU,MAAM,CAAC,CAAU;IAC/B,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9L,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAID,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAmB,EAAE,WAAmB;IACtE,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAY,EAAE,CAAC;IACtB,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACnD,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,SAAS;QAAE,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;IAC/E,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI;QAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO;QAAE,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA4B,EAAE,GAAmB,EAAE,MAAe;IACrG,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,0EAA0E;QAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,KAAK,SAAS,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,oBAAoB;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAClF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;IACnI,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChL,0GAA0G;QAC1G,MAAM,IAAI,GAAY,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAClK,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,UAAU,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QAC3I,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,eAAe,CAAC,OAA4B,EAAE,UAAoB;IAChF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,IAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CAAC;QAC1E,IAAI,OAAO;YAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;YACzB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAA4B,EAAE,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@iaurelius/accounts-nextjs",
+  "version": "0.1.0",
+  "description": "Accounts by iAurelius for Next.js (App Router): sign-in on the hosted page, sessions in an encrypted cookie, auth() on the server and <UserButton /> in your UI.",
+  "keywords": [
+    "auth",
+    "authentication",
+    "nextjs",
+    "oidc",
+    "passkeys"
+  ],
+  "homepage": "https://accounts.iaurelius.com",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "react-server": "./dist/index.server.js",
+      "default": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "default": "./dist/server.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@iaurelius/accounts": "^0.1.0",
+    "jose": "^6.2.12"
+  },
+  "peerDependencies": {
+    "next": ">=15.3.0",
+    "react": ">=19.0.0"
+  },
+  "devDependencies": {
+    "@types/react": "19.3.0",
+    "@types/react-dom": "19.3.0",
+    "next": "16.3.6",
+    "react": "19.3.0",
+    "react-dom": "19.3.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}