@imtbl/auth-next-server 2.12.5-alpha.13

package/src/types.ts

@@ -0,0 +1,124 @@
+/**
+ * Server-side types for @imtbl/auth-next-server
+ */
+
+import type { DefaultSession } from 'next-auth';
+
+/**
+ * zkEVM wallet information for module augmentation
+ */
+interface ZkEvmInfo {
+  ethAddress: string;
+  userAdminAddress: string;
+}
+
+/**
+ * Auth.js v5 module augmentation to add Immutable-specific fields
+ * This extends the Session type to include our custom fields
+ */
+declare module 'next-auth' {
+  // eslint-disable-next-line @typescript-eslint/no-shadow
+  interface Session extends DefaultSession {
+    user: {
+      sub: string;
+      email?: string;
+      nickname?: string;
+    } & DefaultSession['user'];
+    accessToken: string;
+    refreshToken?: string;
+    idToken?: string;
+    accessTokenExpires: number;
+    zkEvm?: ZkEvmInfo;
+    error?: string;
+  }
+
+  interface User {
+    id: string;
+    sub: string;
+    email?: string | null;
+    nickname?: string;
+    accessToken: string;
+    refreshToken?: string;
+    idToken?: string;
+    accessTokenExpires: number;
+    zkEvm?: ZkEvmInfo;
+  }
+}
+
+/**
+ * Configuration options for Immutable authentication
+ */
+export interface ImmutableAuthConfig {
+  /**
+   * Your Immutable application client ID
+   */
+  clientId: string;
+
+  /**
+   * The OAuth redirect URI configured in your Immutable Hub project
+   */
+  redirectUri: string;
+
+  /**
+   * OAuth audience (default: "platform_api")
+   */
+  audience?: string;
+
+  /**
+   * OAuth scopes (default: "openid profile email offline_access transact")
+   */
+  scope?: string;
+
+  /**
+   * The Immutable authentication domain (default: "https://auth.immutable.com")
+   */
+  authenticationDomain?: string;
+}
+
+/**
+ * Token data passed from client to server during authentication
+ */
+export interface ImmutableTokenData {
+  accessToken: string;
+  refreshToken?: string;
+  idToken?: string;
+  accessTokenExpires: number;
+  profile: {
+    sub: string;
+    email?: string;
+    nickname?: string;
+  };
+  zkEvm?: {
+    ethAddress: string;
+    userAdminAddress: string;
+  };
+}
+
+/**
+ * Response from the userinfo endpoint
+ */
+export interface UserInfoResponse {
+  sub: string;
+  email?: string;
+  email_verified?: boolean;
+  nickname?: string;
+  [key: string]: unknown;
+}
+
+/**
+ * zkEVM user data stored in session
+ */
+export interface ZkEvmUser {
+  ethAddress: string;
+  userAdminAddress: string;
+}
+
+/**
+ * Immutable user data structure
+ */
+export interface ImmutableUser {
+  sub: string;
+  email?: string;
+  nickname?: string;
+  zkEvm?: ZkEvmUser;
+}

package/src/utils/pathMatch.ts

@@ -0,0 +1,16 @@
+/**
+ * Check if pathname matches a string pattern as a path prefix.
+ * Ensures proper path boundary checking: '/api' matches '/api' and '/api/users'
+ * but NOT '/apiversion' or '/api-docs'.
+ *
+ * @param pathname - The URL pathname to check
+ * @param pattern - The string pattern to match against
+ * @returns true if pathname matches the pattern with proper path boundaries
+ */
+export function matchPathPrefix(pathname: string, pattern: string): boolean {
+  if (pathname === pattern) return true;
+  // Ensure pattern acts as a complete path segment prefix
+  // Add trailing slash if pattern doesn't end with one to enforce boundary
+  const prefix = pattern.endsWith('/') ? pattern : `${pattern}/`;
+  return pathname.startsWith(prefix);
+}

package/tsconfig.eslint.json

@@ -0,0 +1,5 @@
+{
+  "extends": "./tsconfig.json",
+  "exclude": [],
+  "include": ["src"]
+}

package/tsconfig.json

@@ -0,0 +1,16 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDirs": ["src"],
+    "customConditions": ["development"],
+    "types": ["node"]
+  },
+  "include": ["src"],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "src/**/*.test.ts",
+    "src/**/*.spec.ts"
+  ]
+}

package/tsconfig.types.json

@@ -0,0 +1,8 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "declaration": true,
+    "emitDeclarationOnly": true,
+    "declarationDir": "./dist/node"
+  }
+}

package/tsup.config.ts

@@ -0,0 +1,29 @@
+import { defineConfig, type Options } from "tsup";
+
+// Peer dependencies that should never be bundled
+const peerExternal = [
+  "next",
+  "next-auth",
+  "next/navigation",
+  "next/headers",
+  "next/server",
+];
+
+const baseConfig: Options = {
+  outDir: "dist/node",
+  format: ["esm", "cjs"],
+  target: "es2022",
+  platform: "node",
+  dts: false,
+};
+
+export default defineConfig([
+  {
+    ...baseConfig,
+    entry: {
+      index: "src/index.ts",
+    },
+    external: peerExternal,
+    clean: true,
+  },
+]);