@imtbl/auth-nextjs 2.12.4-alpha.5 → 2.12.4-alpha.7

package/dist/node/client/index.cjs

@@ -254,7 +254,7 @@ function useAccessToken() {
 
 // src/client/callback.tsx
 var import_react3 = require("react");
-var import_router = require("next/router");
+var import_navigation = require("next/navigation");
 var import_react4 = require("next-auth/react");
 var import_auth3 = require("@imtbl/auth");
 var import_jsx_runtime2 = require("react/jsx-runtime");
@@ -262,9 +262,12 @@ function CallbackPage({
   config,
   redirectTo = "/",
   loadingComponent = null,
-  errorComponent
+  errorComponent,
+  onSuccess,
+  onError
 }) {
-  const router = (0, import_router.useRouter)();
+  const router = (0, import_navigation.useRouter)();
+  const searchParams = (0, import_navigation.useSearchParams)();
   const [error, setError] = (0, import_react3.useState)(null);
   const callbackProcessedRef = (0, import_react3.useRef)(false);
   (0, import_react3.useEffect)(() => {
@@ -283,6 +286,14 @@ function CallbackPage({
           if (!authUser) {
             throw new Error("Authentication failed: no user data received from login callback");
           }
+          const user = {
+            sub: authUser.profile.sub,
+            email: authUser.profile.email,
+            nickname: authUser.profile.nickname
+          };
+          if (onSuccess) {
+            await onSuccess(user);
+          }
           window.close();
         } else if (authUser) {
           const tokenData = {
@@ -307,40 +318,45 @@ function CallbackPage({
           if (!result?.ok) {
             throw new Error("NextAuth sign-in failed: unknown error");
           }
-          router.replace(redirectTo);
+          const user = {
+            sub: authUser.profile.sub,
+            email: authUser.profile.email,
+            nickname: authUser.profile.nickname
+          };
+          if (onSuccess) {
+            await onSuccess(user);
+          }
+          const resolvedRedirectTo = typeof redirectTo === "function" ? redirectTo(user) || "/" : redirectTo;
+          router.replace(resolvedRedirectTo);
         } else {
           throw new Error("Authentication failed: no user data received from login callback");
         }
       } catch (err) {
-        setError(err instanceof Error ? err.message : "Authentication failed");
+        const errorMessage = err instanceof Error ? err.message : "Authentication failed";
+        if (onError) {
+          onError(errorMessage);
+        }
+        setError(errorMessage);
       }
     };
     const handleOAuthError = () => {
-      const errorCode = router.query.error;
-      const errorDescription = router.query.error_description;
+      const errorCode = searchParams.get("error");
+      const errorDescription = searchParams.get("error_description");
       const errorMessage = errorDescription || errorCode || "Authentication failed";
+      if (onError) {
+        onError(errorMessage);
+      }
       setError(errorMessage);
     };
-    if (!router.isReady) {
-      return;
-    }
-    if (router.query.error) {
+    if (searchParams.get("error")) {
       handleOAuthError();
       return;
     }
-    if (router.query.code && !callbackProcessedRef.current) {
+    if (searchParams.get("code") && !callbackProcessedRef.current) {
       callbackProcessedRef.current = true;
       handleCallback();
     }
-  }, [
-    router.isReady,
-    router.query.code,
-    router.query.error,
-    router.query.error_description,
-    router,
-    config,
-    redirectTo
-  ]);
+  }, [searchParams, router, config, redirectTo, onSuccess, onError]);
   if (error) {
     if (errorComponent) {
       return errorComponent(error);
@@ -352,6 +368,7 @@ function CallbackPage({
         "button",
         {
           onClick: () => router.push("/"),
+          type: "button",
           style: {
             padding: "0.5rem 1rem",
             marginTop: "1rem",

package/dist/node/client/index.js

@@ -240,7 +240,7 @@ function useAccessToken() {
 
 // src/client/callback.tsx
 import { useEffect as useEffect2, useState as useState2, useRef as useRef2 } from "react";
-import { useRouter } from "next/router";
+import { useRouter, useSearchParams } from "next/navigation";
 import { signIn as signIn2 } from "next-auth/react";
 import { Auth as Auth2 } from "@imtbl/auth";
 import { jsx as jsx2, jsxs } from "react/jsx-runtime";
@@ -248,9 +248,12 @@ function CallbackPage({
   config,
   redirectTo = "/",
   loadingComponent = null,
-  errorComponent
+  errorComponent,
+  onSuccess,
+  onError
 }) {
   const router = useRouter();
+  const searchParams = useSearchParams();
   const [error, setError] = useState2(null);
   const callbackProcessedRef = useRef2(false);
   useEffect2(() => {
@@ -269,6 +272,14 @@ function CallbackPage({
           if (!authUser) {
             throw new Error("Authentication failed: no user data received from login callback");
           }
+          const user = {
+            sub: authUser.profile.sub,
+            email: authUser.profile.email,
+            nickname: authUser.profile.nickname
+          };
+          if (onSuccess) {
+            await onSuccess(user);
+          }
           window.close();
         } else if (authUser) {
           const tokenData = {
@@ -293,40 +304,45 @@ function CallbackPage({
           if (!result?.ok) {
             throw new Error("NextAuth sign-in failed: unknown error");
           }
-          router.replace(redirectTo);
+          const user = {
+            sub: authUser.profile.sub,
+            email: authUser.profile.email,
+            nickname: authUser.profile.nickname
+          };
+          if (onSuccess) {
+            await onSuccess(user);
+          }
+          const resolvedRedirectTo = typeof redirectTo === "function" ? redirectTo(user) || "/" : redirectTo;
+          router.replace(resolvedRedirectTo);
         } else {
           throw new Error("Authentication failed: no user data received from login callback");
         }
       } catch (err) {
-        setError(err instanceof Error ? err.message : "Authentication failed");
+        const errorMessage = err instanceof Error ? err.message : "Authentication failed";
+        if (onError) {
+          onError(errorMessage);
+        }
+        setError(errorMessage);
       }
     };
     const handleOAuthError = () => {
-      const errorCode = router.query.error;
-      const errorDescription = router.query.error_description;
+      const errorCode = searchParams.get("error");
+      const errorDescription = searchParams.get("error_description");
       const errorMessage = errorDescription || errorCode || "Authentication failed";
+      if (onError) {
+        onError(errorMessage);
+      }
       setError(errorMessage);
     };
-    if (!router.isReady) {
-      return;
-    }
-    if (router.query.error) {
+    if (searchParams.get("error")) {
       handleOAuthError();
       return;
     }
-    if (router.query.code && !callbackProcessedRef.current) {
+    if (searchParams.get("code") && !callbackProcessedRef.current) {
       callbackProcessedRef.current = true;
       handleCallback();
     }
-  }, [
-    router.isReady,
-    router.query.code,
-    router.query.error,
-    router.query.error_description,
-    router,
-    config,
-    redirectTo
-  ]);
+  }, [searchParams, router, config, redirectTo, onSuccess, onError]);
   if (error) {
     if (errorComponent) {
       return errorComponent(error);
@@ -338,6 +354,7 @@ function CallbackPage({
         "button",
         {
           onClick: () => router.push("/"),
+          type: "button",
           style: {
             padding: "0.5rem 1rem",
             marginTop: "1rem",

package/dist/node/index.cjs

@@ -30,8 +30,14 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  DEFAULT_AUDIENCE: () => DEFAULT_AUDIENCE,
+  DEFAULT_AUTH_DOMAIN: () => DEFAULT_AUTH_DOMAIN,
+  DEFAULT_NEXTAUTH_BASE_PATH: () => DEFAULT_NEXTAUTH_BASE_PATH,
+  DEFAULT_SCOPE: () => DEFAULT_SCOPE,
   ImmutableAuth: () => ImmutableAuth,
   MarketingConsentStatus: () => import_auth.MarketingConsentStatus,
+  createAuthConfig: () => createAuthConfig,
+  createImmutableAuth: () => createImmutableAuth,
   isTokenExpired: () => isTokenExpired,
   refreshAccessToken: () => refreshAccessToken
 });
@@ -43,7 +49,10 @@ var import_credentials = __toESM(require("next-auth/providers/credentials"), 1);
 
 // src/constants.ts
 var DEFAULT_AUTH_DOMAIN = "https://auth.immutable.com";
+var DEFAULT_AUDIENCE = "platform_api";
+var DEFAULT_SCOPE = "openid profile email offline_access transact";
 var IMMUTABLE_PROVIDER_ID = "immutable";
+var DEFAULT_NEXTAUTH_BASE_PATH = "/api/auth";
 var DEFAULT_TOKEN_EXPIRY_SECONDS = 900;
 var DEFAULT_TOKEN_EXPIRY_MS = DEFAULT_TOKEN_EXPIRY_SECONDS * 1e3;
 var TOKEN_EXPIRY_BUFFER_SECONDS = 60;
@@ -111,7 +120,7 @@ function isTokenExpired(accessTokenExpires, bufferSeconds = TOKEN_EXPIRY_BUFFER_
 }
 
 // src/config.ts
-var CredentialsProvider = import_credentials.default.default || import_credentials.default;
+var Credentials = import_credentials.default.default || import_credentials.default;
 async function validateTokens(accessToken, authDomain) {
   try {
     const response = await fetch(`${authDomain}/userinfo`, {
@@ -130,18 +139,18 @@ async function validateTokens(accessToken, authDomain) {
     return null;
   }
 }
-function createAuthOptions(config) {
+function createAuthConfig(config) {
   const authDomain = config.authenticationDomain || DEFAULT_AUTH_DOMAIN;
   return {
     providers: [
-      CredentialsProvider({
+      Credentials({
         id: IMMUTABLE_PROVIDER_ID,
         name: "Immutable",
         credentials: {
           tokens: { label: "Tokens", type: "text" }
         },
         async authorize(credentials) {
-          if (!credentials?.tokens) {
+          if (!credentials?.tokens || typeof credentials.tokens !== "string") {
             return null;
           }
           let tokenData;
@@ -184,6 +193,7 @@ function createAuthOptions(config) {
       })
     ],
     callbacks: {
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
       async jwt({
         token,
         user,
@@ -204,13 +214,14 @@ function createAuthOptions(config) {
           };
         }
         if (trigger === "update" && sessionUpdate) {
+          const update = sessionUpdate;
           return {
             ...token,
-            ...sessionUpdate.accessToken && { accessToken: sessionUpdate.accessToken },
-            ...sessionUpdate.refreshToken && { refreshToken: sessionUpdate.refreshToken },
-            ...sessionUpdate.idToken && { idToken: sessionUpdate.idToken },
-            ...sessionUpdate.accessTokenExpires && { accessTokenExpires: sessionUpdate.accessTokenExpires },
-            ...sessionUpdate.zkEvm && { zkEvm: sessionUpdate.zkEvm }
+            ...update.accessToken ? { accessToken: update.accessToken } : {},
+            ...update.refreshToken ? { refreshToken: update.refreshToken } : {},
+            ...update.idToken ? { idToken: update.idToken } : {},
+            ...update.accessTokenExpires ? { accessTokenExpires: update.accessTokenExpires } : {},
+            ...update.zkEvm ? { zkEvm: update.zkEvm } : {}
           };
         }
         if (!isTokenExpired(token.accessTokenExpires)) {
@@ -218,10 +229,12 @@ function createAuthOptions(config) {
         }
         return refreshAccessToken(token, config);
       },
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
       async session({ session, token }) {
         return {
           ...session,
           user: {
+            ...session.user,
             sub: token.sub,
             email: token.email,
             nickname: token.nickname
@@ -239,26 +252,24 @@ function createAuthOptions(config) {
       strategy: "jwt",
       // Session max age in seconds (30 days default)
       maxAge: DEFAULT_SESSION_MAX_AGE_SECONDS
-    },
-    // Use NEXTAUTH_SECRET from environment
-    secret: process.env.NEXTAUTH_SECRET
+    }
   };
 }
 
 // src/index.ts
 var import_auth = require("@imtbl/auth");
 var NextAuth = import_next_auth.default.default || import_next_auth.default;
-function ImmutableAuth(config, overrides) {
-  const authOptions = createAuthOptions(config);
+function createImmutableAuth(config, overrides) {
+  const authConfig = createAuthConfig(config);
   if (!overrides) {
-    return NextAuth(authOptions);
+    return NextAuth(authConfig);
   }
   const composedCallbacks = {
-    ...authOptions.callbacks
+    ...authConfig.callbacks
   };
   if (overrides.callbacks) {
     if (overrides.callbacks.jwt) {
-      const internalJwt = authOptions.callbacks?.jwt;
+      const internalJwt = authConfig.callbacks?.jwt;
       const userJwt = overrides.callbacks.jwt;
       composedCallbacks.jwt = async (params) => {
         const token = internalJwt ? await internalJwt(params) : params.token;
@@ -266,7 +277,7 @@ function ImmutableAuth(config, overrides) {
       };
     }
     if (overrides.callbacks.session) {
-      const internalSession = authOptions.callbacks?.session;
+      const internalSession = authConfig.callbacks?.session;
       const userSession = overrides.callbacks.session;
       composedCallbacks.session = async (params) => {
         const session = internalSession ? await internalSession(params) : params.session;
@@ -280,17 +291,24 @@ function ImmutableAuth(config, overrides) {
       composedCallbacks.redirect = overrides.callbacks.redirect;
     }
   }
-  const mergedOptions = {
-    ...authOptions,
+  const mergedConfig = {
+    ...authConfig,
     ...overrides,
     callbacks: composedCallbacks
   };
-  return NextAuth(mergedOptions);
+  return NextAuth(mergedConfig);
 }
+var ImmutableAuth = createImmutableAuth;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  DEFAULT_AUDIENCE,
+  DEFAULT_AUTH_DOMAIN,
+  DEFAULT_NEXTAUTH_BASE_PATH,
+  DEFAULT_SCOPE,
   ImmutableAuth,
   MarketingConsentStatus,
+  createAuthConfig,
+  createImmutableAuth,
   isTokenExpired,
   refreshAccessToken
 });

package/dist/node/index.js

@@ -1,55 +1,24 @@
 import {
-  createAuthOptions,
+  DEFAULT_AUDIENCE,
+  DEFAULT_AUTH_DOMAIN,
+  DEFAULT_NEXTAUTH_BASE_PATH,
+  DEFAULT_SCOPE,
+  ImmutableAuth,
+  MarketingConsentStatus,
+  createAuthConfig,
+  createImmutableAuth,
   isTokenExpired,
   refreshAccessToken
-} from "./chunk-OPPMGNFZ.js";
-
-// src/index.ts
-import NextAuthDefault from "next-auth";
-import { MarketingConsentStatus } from "@imtbl/auth";
-var NextAuth = NextAuthDefault.default || NextAuthDefault;
-function ImmutableAuth(config, overrides) {
-  const authOptions = createAuthOptions(config);
-  if (!overrides) {
-    return NextAuth(authOptions);
-  }
-  const composedCallbacks = {
-    ...authOptions.callbacks
-  };
-  if (overrides.callbacks) {
-    if (overrides.callbacks.jwt) {
-      const internalJwt = authOptions.callbacks?.jwt;
-      const userJwt = overrides.callbacks.jwt;
-      composedCallbacks.jwt = async (params) => {
-        const token = internalJwt ? await internalJwt(params) : params.token;
-        return userJwt({ ...params, token });
-      };
-    }
-    if (overrides.callbacks.session) {
-      const internalSession = authOptions.callbacks?.session;
-      const userSession = overrides.callbacks.session;
-      composedCallbacks.session = async (params) => {
-        const session = internalSession ? await internalSession(params) : params.session;
-        return userSession({ ...params, session });
-      };
-    }
-    if (overrides.callbacks.signIn) {
-      composedCallbacks.signIn = overrides.callbacks.signIn;
-    }
-    if (overrides.callbacks.redirect) {
-      composedCallbacks.redirect = overrides.callbacks.redirect;
-    }
-  }
-  const mergedOptions = {
-    ...authOptions,
-    ...overrides,
-    callbacks: composedCallbacks
-  };
-  return NextAuth(mergedOptions);
-}
+} from "./chunk-BRDI4KXS.js";
 export {
+  DEFAULT_AUDIENCE,
+  DEFAULT_AUTH_DOMAIN,
+  DEFAULT_NEXTAUTH_BASE_PATH,
+  DEFAULT_SCOPE,
   ImmutableAuth,
   MarketingConsentStatus,
+  createAuthConfig,
+  createImmutableAuth,
   isTokenExpired,
   refreshAccessToken
 };