@insforge/nextjs 0.6.8 → 0.7.0

package/dist/middleware.d.mts

@@ -0,0 +1,20 @@
+import { NextRequest, NextResponse } from 'next/server';
+
+interface InsforgeMiddlewareConfig {
+    baseUrl: string;
+    frontendUrl?: string;
+    publicRoutes?: string[];
+    afterSignInUrl?: string;
+    signInUrl?: string;
+    signUpUrl?: string;
+    cookieName?: string;
+    useBuiltInAuth?: boolean;
+}
+declare function InsforgeMiddleware(config: InsforgeMiddlewareConfig): (request: NextRequest) => Promise<NextResponse<unknown>>;
+declare const withAuth: typeof InsforgeMiddleware;
+declare const withInsforgeAuth: typeof InsforgeMiddleware;
+declare function getAuthUserId(headers: Headers): string | null;
+declare const getAuthUser: typeof getAuthUserId;
+declare function getAuthToken(headers: Headers): string | null;
+
+export { InsforgeMiddleware, type InsforgeMiddlewareConfig, getAuthToken, getAuthUser, getAuthUserId, withAuth, withInsforgeAuth };

package/dist/middleware.d.ts

@@ -0,0 +1,20 @@
+import { NextRequest, NextResponse } from 'next/server';
+
+interface InsforgeMiddlewareConfig {
+    baseUrl: string;
+    frontendUrl?: string;
+    publicRoutes?: string[];
+    afterSignInUrl?: string;
+    signInUrl?: string;
+    signUpUrl?: string;
+    cookieName?: string;
+    useBuiltInAuth?: boolean;
+}
+declare function InsforgeMiddleware(config: InsforgeMiddlewareConfig): (request: NextRequest) => Promise<NextResponse<unknown>>;
+declare const withAuth: typeof InsforgeMiddleware;
+declare const withInsforgeAuth: typeof InsforgeMiddleware;
+declare function getAuthUserId(headers: Headers): string | null;
+declare const getAuthUser: typeof getAuthUserId;
+declare function getAuthToken(headers: Headers): string | null;
+
+export { InsforgeMiddleware, type InsforgeMiddlewareConfig, getAuthToken, getAuthUser, getAuthUserId, withAuth, withInsforgeAuth };

package/dist/middleware.js

@@ -31,6 +31,7 @@ module.exports = __toCommonJS(middleware_exports);
 
 // src/middleware/InsforgeMiddleware.ts
 var import_server = require("next/server");
+var import_sdk = require("@insforge/sdk");
 function InsforgeMiddleware(config) {
   const {
     baseUrl,
@@ -57,52 +58,47 @@ function InsforgeMiddleware(config) {
       }
       return pathname === route || pathname.startsWith(route + "/");
     });
-    console.log("[Insforge Middleware]", {
-      pathname,
-      isPublicRoute,
-      publicRoutes,
-      hasToken: !!request.cookies.get(cookieName)?.value
-    });
     if (isPublicRoute) {
       return import_server.NextResponse.next();
     }
     const token = request.cookies.get(cookieName)?.value;
-    console.log("[Insforge Middleware] Token:", token);
     if (!token) {
       if (useBuiltInAuth) {
         const callbackUrl = new URL("/auth/callback", request.url);
         const backendSignInUrl = new URL("/auth/signin", frontendUrl || baseUrl);
         backendSignInUrl.searchParams.set("redirect", callbackUrl.toString());
-        console.log("[Insforge Middleware] Redirecting to built-in auth:", backendSignInUrl.toString());
         return import_server.NextResponse.redirect(backendSignInUrl);
       } else {
         const localSignInUrl = new URL(signInUrl, request.url);
         localSignInUrl.searchParams.set("redirect", pathname);
-        console.log("[Insforge Middleware] Redirecting to local auth:", localSignInUrl.toString());
         return import_server.NextResponse.redirect(localSignInUrl);
       }
     }
     try {
-      const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {
-        headers: {
-          Authorization: `Bearer ${token}`,
-          "Content-Type": "application/json"
-        }
+      const insforge = (0, import_sdk.createClient)({
+        baseUrl,
+        edgeFunctionToken: token,
+        // Use token from cookie for this request
+        fetch: globalThis.fetch
+        // Ensure fetch is available in server environment
       });
-      if (!response.ok) {
-        const errorText = await response.text();
-        console.error("[Insforge Middleware] Backend validation failed:", {
-          status: response.status,
-          statusText: response.statusText,
-          error: errorText
+      const { data: sessionData, error } = await insforge.auth.getCurrentUser();
+      if (error || !sessionData) {
+        console.error("[Insforge Middleware] Token validation failed:", {
+          error: error?.message,
+          statusCode: error?.statusCode
         });
         throw new Error("Invalid session");
       }
-      const session = await response.json();
+      const session = sessionData;
       const nextResponse = import_server.NextResponse.next();
       nextResponse.headers.set("x-user-id", session.user.id);
       nextResponse.headers.set("x-user-email", session.user.email);
       nextResponse.headers.set("x-user-token", token);
+      if (session.profile) {
+        const profileJson = JSON.stringify(session.profile);
+        nextResponse.headers.set("x-user-profile", profileJson);
+      }
       return nextResponse;
     } catch (error) {
       console.error("[Insforge Middleware] Token validation error:", error);

package/dist/middleware.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/middleware/index.ts","../src/middleware/InsforgeMiddleware.ts"],"sourcesContent":["// Middleware exports - NO 'use client' directive here!\r\n// Middleware runs in Edge Runtime, not in client browser\r\n\r\nexport { \r\n  InsforgeMiddleware, \r\n  withAuth,\r\n  withInsforgeAuth,\r\n  getAuthUserId, \r\n  getAuthUser,\r\n  getAuthToken \r\n} from './InsforgeMiddleware';\r\n\r\nexport type { InsforgeMiddlewareConfig } from './InsforgeMiddleware';\r\n\r\n","import { NextRequest, NextResponse } from 'next/server';\r\n\r\nexport interface InsforgeMiddlewareConfig {\r\n  /**\r\n   * Base URL of your Insforge backend (for API calls)\r\n   * @example 'http://localhost:3001'\r\n   */\r\n  baseUrl: string;\r\n\r\n  /**\r\n   * Base URL of your frontend application (for redirects)\r\n   * If not provided, will use baseUrl for redirects\r\n   * @example 'http://localhost:3000'\r\n   */\r\n  frontendUrl?: string;\r\n\r\n  /**\r\n   * Routes that are public and don't require authentication\r\n   * @example ['/sign-in', '/sign-up', '/']\r\n   */\r\n  publicRoutes?: string[];\r\n\r\n  /**\r\n   * URL to redirect to after sign in\r\n   * @default '/dashboard'\r\n   */\r\n  afterSignInUrl?: string;\r\n\r\n  /**\r\n   * URL to redirect to when user is not authenticated\r\n   * @default '/sign-in'\r\n   */\r\n  signInUrl?: string;\r\n\r\n  /**\r\n * URL to redirect to when user is signing up\r\n * @default '/sign-up'\r\n */\r\n  signUpUrl?: string;\r\n\r\n  /**\r\n   * Cookie name for the auth token\r\n   * @default 'insforge_token'\r\n   */\r\n  cookieName?: string;\r\n\r\n  /**\r\n   * Whether to use built-in authentication pages hosted on the backend\r\n   * When true, middleware won't redirect to local sign-in pages\r\n   * @default true\r\n   */\r\n  useBuiltInAuth?: boolean;\r\n}\r\n\r\n/**\r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * This function generates a Next.js middleware that:\r\n * - Validates user authentication on each request\r\n * - Redirects unauthenticated users to sign-in page\r\n * - Allows public routes to be accessed without authentication\r\n * - Injects user information into request headers for server components\r\n * \r\n * @param config - Middleware configuration\r\n * @returns Next.js middleware function\r\n *\r\n * @example\r\n * ```ts\r\n * // middleware.ts - Local development with separate frontend/backend URLs\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,        // Backend API (e.g., http://localhost:3001)\r\n *   frontendUrl: process.env.INSFORGE_FRONTEND_URL!, // Frontend app (e.g., http://localhost:3000)\r\n *   publicRoutes: ['/auth/callback', '/'],\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Using custom SignIn/SignUp components\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   frontendUrl: process.env.INSFORGE_FRONTEND_URL,  // Optional: for redirects\r\n *   publicRoutes: ['/sign-in', '/sign-up', '/'],\r\n *   signInUrl: '/sign-in',\r\n *   useBuiltInAuth: false,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n */\r\nexport function InsforgeMiddleware(config: InsforgeMiddlewareConfig) {\r\n  const {\r\n    baseUrl,\r\n    publicRoutes = [],\r\n    signInUrl = '/sign-in',\r\n    signUpUrl = '/sign-up',\r\n    cookieName = 'insforge_token',\r\n    useBuiltInAuth = true,\r\n    frontendUrl,\r\n  } = config;\r\n\r\n  return async function middleware(request: NextRequest) {\r\n    const { pathname } = request.nextUrl;\r\n\r\n    // Special handling for built-in auth: redirect /sign-in, /sign-up to OSS frontend\r\n    if (useBuiltInAuth && (pathname === signInUrl || pathname === signUpUrl)) {\r\n      const callbackUrl = new URL('/auth/callback', request.url);\r\n      const ossAuthUrl = new URL(`/auth${pathname}`, frontendUrl || baseUrl);\r\n      ossAuthUrl.searchParams.set('redirect', callbackUrl.toString());\r\n      setTimeout(() => {\r\n        return NextResponse.redirect(ossAuthUrl.toString());\r\n      }, 100);\r\n    }\r\n\r\n    // Check if route is public\r\n    const isPublicRoute = publicRoutes.some((route) => {\r\n      if (route.endsWith('*')) {\r\n        return pathname.startsWith(route.slice(0, -1));\r\n      }\r\n      return pathname === route || pathname.startsWith(route + '/');\r\n    });\r\n\r\n    console.log('[Insforge Middleware]', {\r\n      pathname,\r\n      isPublicRoute,\r\n      publicRoutes,\r\n      hasToken: !!request.cookies.get(cookieName)?.value,\r\n    });\r\n\r\n    if (isPublicRoute) {\r\n      return NextResponse.next();\r\n    }\r\n\r\n    // Get token from cookie\r\n    const token = request.cookies.get(cookieName)?.value;\r\n\r\n    console.log('[Insforge Middleware] Token:', token);\r\n\r\n    if (!token) {\r\n      if (useBuiltInAuth) {\r\n        // Built-in auth: redirect to backend's auth page\r\n        const callbackUrl = new URL('/auth/callback', request.url);\r\n        const backendSignInUrl = new URL('/auth/signin', frontendUrl || baseUrl);\r\n        backendSignInUrl.searchParams.set('redirect', callbackUrl.toString());\r\n        console.log('[Insforge Middleware] Redirecting to built-in auth:', backendSignInUrl.toString());\r\n        return NextResponse.redirect(backendSignInUrl);\r\n      } else {\r\n        // Custom auth: redirect to local sign-in page\r\n        const localSignInUrl = new URL(signInUrl, request.url);\r\n        localSignInUrl.searchParams.set('redirect', pathname);\r\n        console.log('[Insforge Middleware] Redirecting to local auth:', localSignInUrl.toString());\r\n        return NextResponse.redirect(localSignInUrl);\r\n      }\r\n    }\r\n\r\n    try {\r\n      // Verify token with Insforge backend\r\n      const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\r\n        headers: {\r\n          Authorization: `Bearer ${token}`,\r\n          'Content-Type': 'application/json',\r\n        },\r\n      });\r\n\r\n      if (!response.ok) {\r\n        const errorText = await response.text();\r\n        console.error('[Insforge Middleware] Backend validation failed:', {\r\n          status: response.status,\r\n          statusText: response.statusText,\r\n          error: errorText,\r\n        });\r\n        throw new Error('Invalid session');\r\n      }\r\n\r\n      const session = await response.json();\r\n\r\n      // Add user info to headers for server components\r\n      const nextResponse = NextResponse.next();\r\n      nextResponse.headers.set('x-user-id', session.user.id);\r\n      nextResponse.headers.set('x-user-email', session.user.email);\r\n      nextResponse.headers.set('x-user-token', token);\r\n\r\n      return nextResponse;\r\n    } catch (error) {\r\n      console.error('[Insforge Middleware] Token validation error:', error);\r\n\r\n      // Clear invalid token first\r\n      const response = useBuiltInAuth\r\n        ? (() => {\r\n          // Built-in auth: redirect to backend's auth page\r\n          const callbackUrl = new URL('/auth/callback', request.url);\r\n          const backendSignInUrl = new URL('/auth/signin', frontendUrl || baseUrl);\r\n          backendSignInUrl.searchParams.set('redirect', callbackUrl.toString());\r\n          return NextResponse.redirect(backendSignInUrl);\r\n        })()\r\n        : (() => {\r\n          // Custom auth: redirect to local sign-in page\r\n          const localSignInUrl = new URL(signInUrl, request.url);\r\n          localSignInUrl.searchParams.set('redirect', pathname);\r\n          return NextResponse.redirect(localSignInUrl);\r\n        })();\r\n\r\n      response.cookies.delete(cookieName);\r\n      return response;\r\n    }\r\n  };\r\n}\r\n\r\n/**\r\n * @deprecated Use `InsforgeMiddleware` instead. This alias is kept for backward compatibility.\r\n * \r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * @see InsforgeMiddleware\r\n */\r\nexport const withAuth = InsforgeMiddleware;\r\n\r\n/**\r\n * Alternative name for `InsforgeMiddleware` with Insforge branding.\r\n * Useful when you want to be explicit about using Insforge authentication.\r\n * \r\n * @see InsforgeMiddleware\r\n */\r\nexport const withInsforgeAuth = InsforgeMiddleware;\r\n\r\n/**\r\n * Utility to get authenticated user ID from request headers in server components.\r\n * \r\n * The middleware automatically injects user information into request headers,\r\n * which can be accessed in server components using Next.js `headers()`.\r\n * \r\n * @param headers - Request headers from Next.js\r\n * @returns User ID if authenticated, null otherwise\r\n *\r\n * @example\r\n * ```ts\r\n * import { headers } from 'next/headers';\r\n * import { getAuthUserId } from '@insforge/nextjs/middleware';\r\n *\r\n * export default async function DashboardPage() {\r\n *   const userId = getAuthUserId(headers());\r\n *   \r\n *   if (!userId) {\r\n *     return <div>Not authenticated</div>;\r\n *   }\r\n *   \r\n *   return <div>User ID: {userId}</div>;\r\n * }\r\n * ```\r\n */\r\nexport function getAuthUserId(headers: Headers): string | null {\r\n  return headers.get('x-user-id');\r\n}\r\n\r\n/**\r\n * @deprecated Use `getAuthUserId` instead. This alias is kept for backward compatibility.\r\n * @see getAuthUserId\r\n */\r\nexport const getAuthUser = getAuthUserId;\r\n\r\n/**\r\n * Utility to get auth token from request headers in server components.\r\n * \r\n * The middleware automatically injects the authentication token into request headers,\r\n * which can be used to make authenticated API calls from server components.\r\n * \r\n * @param headers - Request headers from Next.js\r\n * @returns Auth token if authenticated, null otherwise\r\n * \r\n * @example\r\n * ```ts\r\n * import { headers } from 'next/headers';\r\n * import { getAuthToken } from '@insforge/nextjs/middleware';\r\n *\r\n * export default async function ProfilePage() {\r\n *   const token = getAuthToken(headers());\r\n *   \r\n *   if (!token) {\r\n *     return <div>Not authenticated</div>;\r\n *   }\r\n *   \r\n *   // Use token for API calls\r\n *   const response = await fetch('https://api.example.com/profile', {\r\n *     headers: { Authorization: `Bearer ${token}` }\r\n *   });\r\n *   \r\n *   return <div>Profile data</div>;\r\n * }\r\n * ```\r\n */\r\nexport function getAuthToken(headers: Headers): string | null {\r\n  return headers.get('x-user-token');\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAA0C;AAoGnC,SAAS,mBAAmB,QAAkC;AACnE,QAAM;AAAA,IACJ;AAAA,IACA,eAAe,CAAC;AAAA,IAChB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB;AAAA,EACF,IAAI;AAEJ,SAAO,eAAe,WAAW,SAAsB;AACrD,UAAM,EAAE,SAAS,IAAI,QAAQ;AAG7B,QAAI,mBAAmB,aAAa,aAAa,aAAa,YAAY;AACxE,YAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,YAAM,aAAa,IAAI,IAAI,QAAQ,QAAQ,IAAI,eAAe,OAAO;AACrE,iBAAW,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AAC9D,iBAAW,MAAM;AACf,eAAO,2BAAa,SAAS,WAAW,SAAS,CAAC;AAAA,MACpD,GAAG,GAAG;AAAA,IACR;AAGA,UAAM,gBAAgB,aAAa,KAAK,CAAC,UAAU;AACjD,UAAI,MAAM,SAAS,GAAG,GAAG;AACvB,eAAO,SAAS,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/C;AACA,aAAO,aAAa,SAAS,SAAS,WAAW,QAAQ,GAAG;AAAA,IAC9D,CAAC;AAED,YAAQ,IAAI,yBAAyB;AAAA,MACnC;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,CAAC,CAAC,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAAA,IAC/C,CAAC;AAED,QAAI,eAAe;AACjB,aAAO,2BAAa,KAAK;AAAA,IAC3B;AAGA,UAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,YAAQ,IAAI,gCAAgC,KAAK;AAEjD,QAAI,CAAC,OAAO;AACV,UAAI,gBAAgB;AAElB,cAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,cAAM,mBAAmB,IAAI,IAAI,gBAAgB,eAAe,OAAO;AACvE,yBAAiB,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AACpE,gBAAQ,IAAI,uDAAuD,iBAAiB,SAAS,CAAC;AAC9F,eAAO,2BAAa,SAAS,gBAAgB;AAAA,MAC/C,OAAO;AAEL,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,gBAAQ,IAAI,oDAAoD,eAAe,SAAS,CAAC;AACzF,eAAO,2BAAa,SAAS,cAAc;AAAA,MAC7C;AAAA,IACF;AAEA,QAAI;AAEF,YAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,QACnE,SAAS;AAAA,UACP,eAAe,UAAU,KAAK;AAAA,UAC9B,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,YAAY,MAAM,SAAS,KAAK;AACtC,gBAAQ,MAAM,oDAAoD;AAAA,UAChE,QAAQ,SAAS;AAAA,UACjB,YAAY,SAAS;AAAA,UACrB,OAAO;AAAA,QACT,CAAC;AACD,cAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAGpC,YAAM,eAAe,2BAAa,KAAK;AACvC,mBAAa,QAAQ,IAAI,aAAa,QAAQ,KAAK,EAAE;AACrD,mBAAa,QAAQ,IAAI,gBAAgB,QAAQ,KAAK,KAAK;AAC3D,mBAAa,QAAQ,IAAI,gBAAgB,KAAK;AAE9C,aAAO;AAAA,IACT,SAAS,OAAO;AACd,cAAQ,MAAM,iDAAiD,KAAK;AAGpE,YAAM,WAAW,kBACZ,MAAM;AAEP,cAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,cAAM,mBAAmB,IAAI,IAAI,gBAAgB,eAAe,OAAO;AACvE,yBAAiB,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AACpE,eAAO,2BAAa,SAAS,gBAAgB;AAAA,MAC/C,GAAG,KACA,MAAM;AAEP,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,eAAO,2BAAa,SAAS,cAAc;AAAA,MAC7C,GAAG;AAEL,eAAS,QAAQ,OAAO,UAAU;AAClC,aAAO;AAAA,IACT;AAAA,EACF;AACF;AASO,IAAM,WAAW;AAQjB,IAAM,mBAAmB;AA2BzB,SAAS,cAAc,SAAiC;AAC7D,SAAO,QAAQ,IAAI,WAAW;AAChC;AAMO,IAAM,cAAc;AAgCpB,SAAS,aAAa,SAAiC;AAC5D,SAAO,QAAQ,IAAI,cAAc;AACnC;","names":[]}
+{"version":3,"sources":["../src/middleware/index.ts","../src/middleware/InsforgeMiddleware.ts"],"sourcesContent":["// Middleware exports - NO 'use client' directive here!\r\n// Middleware runs in Edge Runtime, not in client browser\r\n\r\nexport { \r\n  InsforgeMiddleware, \r\n  withAuth,\r\n  withInsforgeAuth,\r\n  getAuthUserId, \r\n  getAuthUser,\r\n  getAuthToken \r\n} from './InsforgeMiddleware';\r\n\r\nexport type { InsforgeMiddlewareConfig } from './InsforgeMiddleware';\r\n\r\n","import { NextRequest, NextResponse } from 'next/server';\r\nimport { createClient } from '@insforge/sdk';\r\n\r\nexport interface InsforgeMiddlewareConfig {\r\n  /**\r\n   * Base URL of your Insforge backend (for API calls)\r\n   * @example 'http://localhost:3001'\r\n   */\r\n  baseUrl: string;\r\n\r\n  /**\r\n   * Base URL of your frontend application (for redirects)\r\n   * If not provided, will use baseUrl for redirects\r\n   * @example 'http://localhost:3000'\r\n   */\r\n  frontendUrl?: string;\r\n\r\n  /**\r\n   * Routes that are public and don't require authentication\r\n   * @example ['/sign-in', '/sign-up', '/']\r\n   */\r\n  publicRoutes?: string[];\r\n\r\n  /**\r\n   * URL to redirect to after sign in\r\n   * @default '/dashboard'\r\n   */\r\n  afterSignInUrl?: string;\r\n\r\n  /**\r\n   * URL to redirect to when user is not authenticated\r\n   * @default '/sign-in'\r\n   */\r\n  signInUrl?: string;\r\n\r\n  /**\r\n * URL to redirect to when user is signing up\r\n * @default '/sign-up'\r\n */\r\n  signUpUrl?: string;\r\n\r\n  /**\r\n   * Cookie name for the auth token\r\n   * @default 'insforge_token'\r\n   */\r\n  cookieName?: string;\r\n\r\n  /**\r\n   * Whether to use built-in authentication pages hosted on the backend\r\n   * When true, middleware won't redirect to local sign-in pages\r\n   * @default true\r\n   */\r\n  useBuiltInAuth?: boolean;\r\n}\r\n\r\n/**\r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * This function generates a Next.js middleware that:\r\n * - Validates user authentication on each request\r\n * - Redirects unauthenticated users to sign-in page\r\n * - Allows public routes to be accessed without authentication\r\n * - Injects user information into request headers for server components\r\n * \r\n * @param config - Middleware configuration\r\n * @returns Next.js middleware function\r\n *\r\n * @example\r\n * ```ts\r\n * // middleware.ts - Local development with separate frontend/backend URLs\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,        // Backend API (e.g., http://localhost:3001)\r\n *   frontendUrl: process.env.INSFORGE_FRONTEND_URL!, // Frontend app (e.g., http://localhost:3000)\r\n *   publicRoutes: ['/auth/callback', '/'],\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Using custom SignIn/SignUp components\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   frontendUrl: process.env.INSFORGE_FRONTEND_URL,  // Optional: for redirects\r\n *   publicRoutes: ['/sign-in', '/sign-up', '/'],\r\n *   signInUrl: '/sign-in',\r\n *   useBuiltInAuth: false,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n */\r\nexport function InsforgeMiddleware(config: InsforgeMiddlewareConfig) {\r\n  const {\r\n    baseUrl,\r\n    publicRoutes = [],\r\n    signInUrl = '/sign-in',\r\n    signUpUrl = '/sign-up',\r\n    cookieName = 'insforge_token',\r\n    useBuiltInAuth = true,\r\n    frontendUrl,\r\n  } = config;\r\n\r\n  return async function middleware(request: NextRequest) {\r\n    const { pathname } = request.nextUrl;\r\n\r\n    // Special handling for built-in auth: redirect /sign-in, /sign-up to OSS frontend\r\n    if (useBuiltInAuth && (pathname === signInUrl || pathname === signUpUrl)) {\r\n      const callbackUrl = new URL('/auth/callback', request.url);\r\n      const ossAuthUrl = new URL(`/auth${pathname}`, frontendUrl || baseUrl);\r\n      ossAuthUrl.searchParams.set('redirect', callbackUrl.toString());\r\n      setTimeout(() => {\r\n        return NextResponse.redirect(ossAuthUrl.toString());\r\n      }, 100);\r\n    }\r\n\r\n    // Check if route is public\r\n    const isPublicRoute = publicRoutes.some((route) => {\r\n      if (route.endsWith('*')) {\r\n        return pathname.startsWith(route.slice(0, -1));\r\n      }\r\n      return pathname === route || pathname.startsWith(route + '/');\r\n    });\r\n\r\n    if (isPublicRoute) {\r\n      return NextResponse.next();\r\n    }\r\n\r\n    // Get token from cookie\r\n    const token = request.cookies.get(cookieName)?.value;\r\n\r\n    if (!token) {\r\n      if (useBuiltInAuth) {\r\n        // Built-in auth: redirect to backend's auth page\r\n        const callbackUrl = new URL('/auth/callback', request.url);\r\n        const backendSignInUrl = new URL('/auth/signin', frontendUrl || baseUrl);\r\n        backendSignInUrl.searchParams.set('redirect', callbackUrl.toString());\r\n        return NextResponse.redirect(backendSignInUrl);\r\n      } else {\r\n        // Custom auth: redirect to local sign-in page\r\n        const localSignInUrl = new URL(signInUrl, request.url);\r\n        localSignInUrl.searchParams.set('redirect', pathname);\r\n        return NextResponse.redirect(localSignInUrl);\r\n      }\r\n    }\r\n\r\n    try {\r\n      // Use Insforge SDK to verify token and get session\r\n      // SDK provides consistent error handling and returns complete user data\r\n      const insforge = createClient({\r\n        baseUrl,\r\n        edgeFunctionToken: token, // Use token from cookie for this request\r\n        fetch: globalThis.fetch, // Ensure fetch is available in server environment\r\n      });\r\n\r\n      const { data: sessionData, error } = await insforge.auth.getCurrentUser();\r\n\r\n      if (error || !sessionData) {\r\n        console.error('[Insforge Middleware] Token validation failed:', {\r\n          error: error?.message,\r\n          statusCode: error?.statusCode,\r\n        });\r\n        throw new Error('Invalid session');\r\n      }\r\n\r\n      const session = sessionData;\r\n\r\n      // Add user info to headers for server components\r\n      const nextResponse = NextResponse.next();\r\n      nextResponse.headers.set('x-user-id', session.user.id);\r\n      nextResponse.headers.set('x-user-email', session.user.email);\r\n      nextResponse.headers.set('x-user-token', token);\r\n      // Optionally add profile fields if needed\r\n      if (session.profile) {\r\n        const profileJson = JSON.stringify(session.profile);\r\n        nextResponse.headers.set('x-user-profile', profileJson);\r\n      }\r\n\r\n      return nextResponse;\r\n    } catch (error) {\r\n      console.error('[Insforge Middleware] Token validation error:', error);\r\n\r\n      // Clear invalid token first\r\n      const response = useBuiltInAuth\r\n        ? (() => {\r\n          // Built-in auth: redirect to backend's auth page\r\n          const callbackUrl = new URL('/auth/callback', request.url);\r\n          const backendSignInUrl = new URL('/auth/signin', frontendUrl || baseUrl);\r\n          backendSignInUrl.searchParams.set('redirect', callbackUrl.toString());\r\n          return NextResponse.redirect(backendSignInUrl);\r\n        })()\r\n        : (() => {\r\n          // Custom auth: redirect to local sign-in page\r\n          const localSignInUrl = new URL(signInUrl, request.url);\r\n          localSignInUrl.searchParams.set('redirect', pathname);\r\n          return NextResponse.redirect(localSignInUrl);\r\n        })();\r\n\r\n      response.cookies.delete(cookieName);\r\n      return response;\r\n    }\r\n  };\r\n}\r\n\r\n/**\r\n * @deprecated Use `InsforgeMiddleware` instead. This alias is kept for backward compatibility.\r\n * \r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * @see InsforgeMiddleware\r\n */\r\nexport const withAuth = InsforgeMiddleware;\r\n\r\n/**\r\n * Alternative name for `InsforgeMiddleware` with Insforge branding.\r\n * Useful when you want to be explicit about using Insforge authentication.\r\n * \r\n * @see InsforgeMiddleware\r\n */\r\nexport const withInsforgeAuth = InsforgeMiddleware;\r\n\r\n/**\r\n * Utility to get authenticated user ID from request headers in server components.\r\n * \r\n * The middleware automatically injects user information into request headers,\r\n * which can be accessed in server components using Next.js `headers()`.\r\n * \r\n * @param headers - Request headers from Next.js\r\n * @returns User ID if authenticated, null otherwise\r\n *\r\n * @example\r\n * ```ts\r\n * import { headers } from 'next/headers';\r\n * import { getAuthUserId } from '@insforge/nextjs/middleware';\r\n *\r\n * export default async function DashboardPage() {\r\n *   const userId = getAuthUserId(headers());\r\n *   \r\n *   if (!userId) {\r\n *     return <div>Not authenticated</div>;\r\n *   }\r\n *   \r\n *   return <div>User ID: {userId}</div>;\r\n * }\r\n * ```\r\n */\r\nexport function getAuthUserId(headers: Headers): string | null {\r\n  return headers.get('x-user-id');\r\n}\r\n\r\n/**\r\n * @deprecated Use `getAuthUserId` instead. This alias is kept for backward compatibility.\r\n * @see getAuthUserId\r\n */\r\nexport const getAuthUser = getAuthUserId;\r\n\r\n/**\r\n * Utility to get auth token from request headers in server components.\r\n * \r\n * The middleware automatically injects the authentication token into request headers,\r\n * which can be used to make authenticated API calls from server components.\r\n * \r\n * @param headers - Request headers from Next.js\r\n * @returns Auth token if authenticated, null otherwise\r\n * \r\n * @example\r\n * ```ts\r\n * import { headers } from 'next/headers';\r\n * import { getAuthToken } from '@insforge/nextjs/middleware';\r\n *\r\n * export default async function ProfilePage() {\r\n *   const token = getAuthToken(headers());\r\n *   \r\n *   if (!token) {\r\n *     return <div>Not authenticated</div>;\r\n *   }\r\n *   \r\n *   // Use token for API calls\r\n *   const response = await fetch('https://api.example.com/profile', {\r\n *     headers: { Authorization: `Bearer ${token}` }\r\n *   });\r\n *   \r\n *   return <div>Profile data</div>;\r\n * }\r\n * ```\r\n */\r\nexport function getAuthToken(headers: Headers): string | null {\r\n  return headers.get('x-user-token');\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAA0C;AAC1C,iBAA6B;AAoGtB,SAAS,mBAAmB,QAAkC;AACnE,QAAM;AAAA,IACJ;AAAA,IACA,eAAe,CAAC;AAAA,IAChB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB;AAAA,EACF,IAAI;AAEJ,SAAO,eAAe,WAAW,SAAsB;AACrD,UAAM,EAAE,SAAS,IAAI,QAAQ;AAG7B,QAAI,mBAAmB,aAAa,aAAa,aAAa,YAAY;AACxE,YAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,YAAM,aAAa,IAAI,IAAI,QAAQ,QAAQ,IAAI,eAAe,OAAO;AACrE,iBAAW,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AAC9D,iBAAW,MAAM;AACf,eAAO,2BAAa,SAAS,WAAW,SAAS,CAAC;AAAA,MACpD,GAAG,GAAG;AAAA,IACR;AAGA,UAAM,gBAAgB,aAAa,KAAK,CAAC,UAAU;AACjD,UAAI,MAAM,SAAS,GAAG,GAAG;AACvB,eAAO,SAAS,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/C;AACA,aAAO,aAAa,SAAS,SAAS,WAAW,QAAQ,GAAG;AAAA,IAC9D,CAAC;AAED,QAAI,eAAe;AACjB,aAAO,2BAAa,KAAK;AAAA,IAC3B;AAGA,UAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,QAAI,CAAC,OAAO;AACV,UAAI,gBAAgB;AAElB,cAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,cAAM,mBAAmB,IAAI,IAAI,gBAAgB,eAAe,OAAO;AACvE,yBAAiB,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AACpE,eAAO,2BAAa,SAAS,gBAAgB;AAAA,MAC/C,OAAO;AAEL,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,eAAO,2BAAa,SAAS,cAAc;AAAA,MAC7C;AAAA,IACF;AAEA,QAAI;AAGF,YAAM,eAAW,yBAAa;AAAA,QAC5B;AAAA,QACA,mBAAmB;AAAA;AAAA,QACnB,OAAO,WAAW;AAAA;AAAA,MACpB,CAAC;AAED,YAAM,EAAE,MAAM,aAAa,MAAM,IAAI,MAAM,SAAS,KAAK,eAAe;AAExE,UAAI,SAAS,CAAC,aAAa;AACzB,gBAAQ,MAAM,kDAAkD;AAAA,UAC9D,OAAO,OAAO;AAAA,UACd,YAAY,OAAO;AAAA,QACrB,CAAC;AACD,cAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC;AAEA,YAAM,UAAU;AAGhB,YAAM,eAAe,2BAAa,KAAK;AACvC,mBAAa,QAAQ,IAAI,aAAa,QAAQ,KAAK,EAAE;AACrD,mBAAa,QAAQ,IAAI,gBAAgB,QAAQ,KAAK,KAAK;AAC3D,mBAAa,QAAQ,IAAI,gBAAgB,KAAK;AAE9C,UAAI,QAAQ,SAAS;AACnB,cAAM,cAAc,KAAK,UAAU,QAAQ,OAAO;AAClD,qBAAa,QAAQ,IAAI,kBAAkB,WAAW;AAAA,MACxD;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,cAAQ,MAAM,iDAAiD,KAAK;AAGpE,YAAM,WAAW,kBACZ,MAAM;AAEP,cAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,cAAM,mBAAmB,IAAI,IAAI,gBAAgB,eAAe,OAAO;AACvE,yBAAiB,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AACpE,eAAO,2BAAa,SAAS,gBAAgB;AAAA,MAC/C,GAAG,KACA,MAAM;AAEP,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,eAAO,2BAAa,SAAS,cAAc;AAAA,MAC7C,GAAG;AAEL,eAAS,QAAQ,OAAO,UAAU;AAClC,aAAO;AAAA,IACT;AAAA,EACF;AACF;AASO,IAAM,WAAW;AAQjB,IAAM,mBAAmB;AA2BzB,SAAS,cAAc,SAAiC;AAC7D,SAAO,QAAQ,IAAI,WAAW;AAChC;AAMO,IAAM,cAAc;AAgCpB,SAAS,aAAa,SAAiC;AAC5D,SAAO,QAAQ,IAAI,cAAc;AACnC;","names":[]}

package/dist/middleware.mjs

@@ -1,5 +1,6 @@
 // src/middleware/InsforgeMiddleware.ts
 import { NextResponse } from "next/server";
+import { createClient } from "@insforge/sdk";
 function InsforgeMiddleware(config) {
   const {
     baseUrl,
@@ -26,52 +27,47 @@ function InsforgeMiddleware(config) {
       }
       return pathname === route || pathname.startsWith(route + "/");
     });
-    console.log("[Insforge Middleware]", {
-      pathname,
-      isPublicRoute,
-      publicRoutes,
-      hasToken: !!request.cookies.get(cookieName)?.value
-    });
     if (isPublicRoute) {
       return NextResponse.next();
     }
     const token = request.cookies.get(cookieName)?.value;
-    console.log("[Insforge Middleware] Token:", token);
     if (!token) {
       if (useBuiltInAuth) {
         const callbackUrl = new URL("/auth/callback", request.url);
         const backendSignInUrl = new URL("/auth/signin", frontendUrl || baseUrl);
         backendSignInUrl.searchParams.set("redirect", callbackUrl.toString());
-        console.log("[Insforge Middleware] Redirecting to built-in auth:", backendSignInUrl.toString());
         return NextResponse.redirect(backendSignInUrl);
       } else {
         const localSignInUrl = new URL(signInUrl, request.url);
         localSignInUrl.searchParams.set("redirect", pathname);
-        console.log("[Insforge Middleware] Redirecting to local auth:", localSignInUrl.toString());
         return NextResponse.redirect(localSignInUrl);
       }
     }
     try {
-      const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {
-        headers: {
-          Authorization: `Bearer ${token}`,
-          "Content-Type": "application/json"
-        }
+      const insforge = createClient({
+        baseUrl,
+        edgeFunctionToken: token,
+        // Use token from cookie for this request
+        fetch: globalThis.fetch
+        // Ensure fetch is available in server environment
       });
-      if (!response.ok) {
-        const errorText = await response.text();
-        console.error("[Insforge Middleware] Backend validation failed:", {
-          status: response.status,
-          statusText: response.statusText,
-          error: errorText
+      const { data: sessionData, error } = await insforge.auth.getCurrentUser();
+      if (error || !sessionData) {
+        console.error("[Insforge Middleware] Token validation failed:", {
+          error: error?.message,
+          statusCode: error?.statusCode
         });
         throw new Error("Invalid session");
       }
-      const session = await response.json();
+      const session = sessionData;
       const nextResponse = NextResponse.next();
       nextResponse.headers.set("x-user-id", session.user.id);
       nextResponse.headers.set("x-user-email", session.user.email);
       nextResponse.headers.set("x-user-token", token);
+      if (session.profile) {
+        const profileJson = JSON.stringify(session.profile);
+        nextResponse.headers.set("x-user-profile", profileJson);
+      }
       return nextResponse;
     } catch (error) {
       console.error("[Insforge Middleware] Token validation error:", error);

package/dist/middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/middleware/InsforgeMiddleware.ts"],"sourcesContent":["import { NextRequest, NextResponse } from 'next/server';\r\n\r\nexport interface InsforgeMiddlewareConfig {\r\n  /**\r\n   * Base URL of your Insforge backend (for API calls)\r\n   * @example 'http://localhost:3001'\r\n   */\r\n  baseUrl: string;\r\n\r\n  /**\r\n   * Base URL of your frontend application (for redirects)\r\n   * If not provided, will use baseUrl for redirects\r\n   * @example 'http://localhost:3000'\r\n   */\r\n  frontendUrl?: string;\r\n\r\n  /**\r\n   * Routes that are public and don't require authentication\r\n   * @example ['/sign-in', '/sign-up', '/']\r\n   */\r\n  publicRoutes?: string[];\r\n\r\n  /**\r\n   * URL to redirect to after sign in\r\n   * @default '/dashboard'\r\n   */\r\n  afterSignInUrl?: string;\r\n\r\n  /**\r\n   * URL to redirect to when user is not authenticated\r\n   * @default '/sign-in'\r\n   */\r\n  signInUrl?: string;\r\n\r\n  /**\r\n * URL to redirect to when user is signing up\r\n * @default '/sign-up'\r\n */\r\n  signUpUrl?: string;\r\n\r\n  /**\r\n   * Cookie name for the auth token\r\n   * @default 'insforge_token'\r\n   */\r\n  cookieName?: string;\r\n\r\n  /**\r\n   * Whether to use built-in authentication pages hosted on the backend\r\n   * When true, middleware won't redirect to local sign-in pages\r\n   * @default true\r\n   */\r\n  useBuiltInAuth?: boolean;\r\n}\r\n\r\n/**\r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * This function generates a Next.js middleware that:\r\n * - Validates user authentication on each request\r\n * - Redirects unauthenticated users to sign-in page\r\n * - Allows public routes to be accessed without authentication\r\n * - Injects user information into request headers for server components\r\n * \r\n * @param config - Middleware configuration\r\n * @returns Next.js middleware function\r\n *\r\n * @example\r\n * ```ts\r\n * // middleware.ts - Local development with separate frontend/backend URLs\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,        // Backend API (e.g., http://localhost:3001)\r\n *   frontendUrl: process.env.INSFORGE_FRONTEND_URL!, // Frontend app (e.g., http://localhost:3000)\r\n *   publicRoutes: ['/auth/callback', '/'],\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Using custom SignIn/SignUp components\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   frontendUrl: process.env.INSFORGE_FRONTEND_URL,  // Optional: for redirects\r\n *   publicRoutes: ['/sign-in', '/sign-up', '/'],\r\n *   signInUrl: '/sign-in',\r\n *   useBuiltInAuth: false,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n */\r\nexport function InsforgeMiddleware(config: InsforgeMiddlewareConfig) {\r\n  const {\r\n    baseUrl,\r\n    publicRoutes = [],\r\n    signInUrl = '/sign-in',\r\n    signUpUrl = '/sign-up',\r\n    cookieName = 'insforge_token',\r\n    useBuiltInAuth = true,\r\n    frontendUrl,\r\n  } = config;\r\n\r\n  return async function middleware(request: NextRequest) {\r\n    const { pathname } = request.nextUrl;\r\n\r\n    // Special handling for built-in auth: redirect /sign-in, /sign-up to OSS frontend\r\n    if (useBuiltInAuth && (pathname === signInUrl || pathname === signUpUrl)) {\r\n      const callbackUrl = new URL('/auth/callback', request.url);\r\n      const ossAuthUrl = new URL(`/auth${pathname}`, frontendUrl || baseUrl);\r\n      ossAuthUrl.searchParams.set('redirect', callbackUrl.toString());\r\n      setTimeout(() => {\r\n        return NextResponse.redirect(ossAuthUrl.toString());\r\n      }, 100);\r\n    }\r\n\r\n    // Check if route is public\r\n    const isPublicRoute = publicRoutes.some((route) => {\r\n      if (route.endsWith('*')) {\r\n        return pathname.startsWith(route.slice(0, -1));\r\n      }\r\n      return pathname === route || pathname.startsWith(route + '/');\r\n    });\r\n\r\n    console.log('[Insforge Middleware]', {\r\n      pathname,\r\n      isPublicRoute,\r\n      publicRoutes,\r\n      hasToken: !!request.cookies.get(cookieName)?.value,\r\n    });\r\n\r\n    if (isPublicRoute) {\r\n      return NextResponse.next();\r\n    }\r\n\r\n    // Get token from cookie\r\n    const token = request.cookies.get(cookieName)?.value;\r\n\r\n    console.log('[Insforge Middleware] Token:', token);\r\n\r\n    if (!token) {\r\n      if (useBuiltInAuth) {\r\n        // Built-in auth: redirect to backend's auth page\r\n        const callbackUrl = new URL('/auth/callback', request.url);\r\n        const backendSignInUrl = new URL('/auth/signin', frontendUrl || baseUrl);\r\n        backendSignInUrl.searchParams.set('redirect', callbackUrl.toString());\r\n        console.log('[Insforge Middleware] Redirecting to built-in auth:', backendSignInUrl.toString());\r\n        return NextResponse.redirect(backendSignInUrl);\r\n      } else {\r\n        // Custom auth: redirect to local sign-in page\r\n        const localSignInUrl = new URL(signInUrl, request.url);\r\n        localSignInUrl.searchParams.set('redirect', pathname);\r\n        console.log('[Insforge Middleware] Redirecting to local auth:', localSignInUrl.toString());\r\n        return NextResponse.redirect(localSignInUrl);\r\n      }\r\n    }\r\n\r\n    try {\r\n      // Verify token with Insforge backend\r\n      const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\r\n        headers: {\r\n          Authorization: `Bearer ${token}`,\r\n          'Content-Type': 'application/json',\r\n        },\r\n      });\r\n\r\n      if (!response.ok) {\r\n        const errorText = await response.text();\r\n        console.error('[Insforge Middleware] Backend validation failed:', {\r\n          status: response.status,\r\n          statusText: response.statusText,\r\n          error: errorText,\r\n        });\r\n        throw new Error('Invalid session');\r\n      }\r\n\r\n      const session = await response.json();\r\n\r\n      // Add user info to headers for server components\r\n      const nextResponse = NextResponse.next();\r\n      nextResponse.headers.set('x-user-id', session.user.id);\r\n      nextResponse.headers.set('x-user-email', session.user.email);\r\n      nextResponse.headers.set('x-user-token', token);\r\n\r\n      return nextResponse;\r\n    } catch (error) {\r\n      console.error('[Insforge Middleware] Token validation error:', error);\r\n\r\n      // Clear invalid token first\r\n      const response = useBuiltInAuth\r\n        ? (() => {\r\n          // Built-in auth: redirect to backend's auth page\r\n          const callbackUrl = new URL('/auth/callback', request.url);\r\n          const backendSignInUrl = new URL('/auth/signin', frontendUrl || baseUrl);\r\n          backendSignInUrl.searchParams.set('redirect', callbackUrl.toString());\r\n          return NextResponse.redirect(backendSignInUrl);\r\n        })()\r\n        : (() => {\r\n          // Custom auth: redirect to local sign-in page\r\n          const localSignInUrl = new URL(signInUrl, request.url);\r\n          localSignInUrl.searchParams.set('redirect', pathname);\r\n          return NextResponse.redirect(localSignInUrl);\r\n        })();\r\n\r\n      response.cookies.delete(cookieName);\r\n      return response;\r\n    }\r\n  };\r\n}\r\n\r\n/**\r\n * @deprecated Use `InsforgeMiddleware` instead. This alias is kept for backward compatibility.\r\n * \r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * @see InsforgeMiddleware\r\n */\r\nexport const withAuth = InsforgeMiddleware;\r\n\r\n/**\r\n * Alternative name for `InsforgeMiddleware` with Insforge branding.\r\n * Useful when you want to be explicit about using Insforge authentication.\r\n * \r\n * @see InsforgeMiddleware\r\n */\r\nexport const withInsforgeAuth = InsforgeMiddleware;\r\n\r\n/**\r\n * Utility to get authenticated user ID from request headers in server components.\r\n * \r\n * The middleware automatically injects user information into request headers,\r\n * which can be accessed in server components using Next.js `headers()`.\r\n * \r\n * @param headers - Request headers from Next.js\r\n * @returns User ID if authenticated, null otherwise\r\n *\r\n * @example\r\n * ```ts\r\n * import { headers } from 'next/headers';\r\n * import { getAuthUserId } from '@insforge/nextjs/middleware';\r\n *\r\n * export default async function DashboardPage() {\r\n *   const userId = getAuthUserId(headers());\r\n *   \r\n *   if (!userId) {\r\n *     return <div>Not authenticated</div>;\r\n *   }\r\n *   \r\n *   return <div>User ID: {userId}</div>;\r\n * }\r\n * ```\r\n */\r\nexport function getAuthUserId(headers: Headers): string | null {\r\n  return headers.get('x-user-id');\r\n}\r\n\r\n/**\r\n * @deprecated Use `getAuthUserId` instead. This alias is kept for backward compatibility.\r\n * @see getAuthUserId\r\n */\r\nexport const getAuthUser = getAuthUserId;\r\n\r\n/**\r\n * Utility to get auth token from request headers in server components.\r\n * \r\n * The middleware automatically injects the authentication token into request headers,\r\n * which can be used to make authenticated API calls from server components.\r\n * \r\n * @param headers - Request headers from Next.js\r\n * @returns Auth token if authenticated, null otherwise\r\n * \r\n * @example\r\n * ```ts\r\n * import { headers } from 'next/headers';\r\n * import { getAuthToken } from '@insforge/nextjs/middleware';\r\n *\r\n * export default async function ProfilePage() {\r\n *   const token = getAuthToken(headers());\r\n *   \r\n *   if (!token) {\r\n *     return <div>Not authenticated</div>;\r\n *   }\r\n *   \r\n *   // Use token for API calls\r\n *   const response = await fetch('https://api.example.com/profile', {\r\n *     headers: { Authorization: `Bearer ${token}` }\r\n *   });\r\n *   \r\n *   return <div>Profile data</div>;\r\n * }\r\n * ```\r\n */\r\nexport function getAuthToken(headers: Headers): string | null {\r\n  return headers.get('x-user-token');\r\n}\r\n"],"mappings":";AAAA,SAAsB,oBAAoB;AAoGnC,SAAS,mBAAmB,QAAkC;AACnE,QAAM;AAAA,IACJ;AAAA,IACA,eAAe,CAAC;AAAA,IAChB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB;AAAA,EACF,IAAI;AAEJ,SAAO,eAAe,WAAW,SAAsB;AACrD,UAAM,EAAE,SAAS,IAAI,QAAQ;AAG7B,QAAI,mBAAmB,aAAa,aAAa,aAAa,YAAY;AACxE,YAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,YAAM,aAAa,IAAI,IAAI,QAAQ,QAAQ,IAAI,eAAe,OAAO;AACrE,iBAAW,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AAC9D,iBAAW,MAAM;AACf,eAAO,aAAa,SAAS,WAAW,SAAS,CAAC;AAAA,MACpD,GAAG,GAAG;AAAA,IACR;AAGA,UAAM,gBAAgB,aAAa,KAAK,CAAC,UAAU;AACjD,UAAI,MAAM,SAAS,GAAG,GAAG;AACvB,eAAO,SAAS,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/C;AACA,aAAO,aAAa,SAAS,SAAS,WAAW,QAAQ,GAAG;AAAA,IAC9D,CAAC;AAED,YAAQ,IAAI,yBAAyB;AAAA,MACnC;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,CAAC,CAAC,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAAA,IAC/C,CAAC;AAED,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK;AAAA,IAC3B;AAGA,UAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,YAAQ,IAAI,gCAAgC,KAAK;AAEjD,QAAI,CAAC,OAAO;AACV,UAAI,gBAAgB;AAElB,cAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,cAAM,mBAAmB,IAAI,IAAI,gBAAgB,eAAe,OAAO;AACvE,yBAAiB,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AACpE,gBAAQ,IAAI,uDAAuD,iBAAiB,SAAS,CAAC;AAC9F,eAAO,aAAa,SAAS,gBAAgB;AAAA,MAC/C,OAAO;AAEL,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,gBAAQ,IAAI,oDAAoD,eAAe,SAAS,CAAC;AACzF,eAAO,aAAa,SAAS,cAAc;AAAA,MAC7C;AAAA,IACF;AAEA,QAAI;AAEF,YAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,QACnE,SAAS;AAAA,UACP,eAAe,UAAU,KAAK;AAAA,UAC9B,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,YAAY,MAAM,SAAS,KAAK;AACtC,gBAAQ,MAAM,oDAAoD;AAAA,UAChE,QAAQ,SAAS;AAAA,UACjB,YAAY,SAAS;AAAA,UACrB,OAAO;AAAA,QACT,CAAC;AACD,cAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAGpC,YAAM,eAAe,aAAa,KAAK;AACvC,mBAAa,QAAQ,IAAI,aAAa,QAAQ,KAAK,EAAE;AACrD,mBAAa,QAAQ,IAAI,gBAAgB,QAAQ,KAAK,KAAK;AAC3D,mBAAa,QAAQ,IAAI,gBAAgB,KAAK;AAE9C,aAAO;AAAA,IACT,SAAS,OAAO;AACd,cAAQ,MAAM,iDAAiD,KAAK;AAGpE,YAAM,WAAW,kBACZ,MAAM;AAEP,cAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,cAAM,mBAAmB,IAAI,IAAI,gBAAgB,eAAe,OAAO;AACvE,yBAAiB,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AACpE,eAAO,aAAa,SAAS,gBAAgB;AAAA,MAC/C,GAAG,KACA,MAAM;AAEP,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,eAAO,aAAa,SAAS,cAAc;AAAA,MAC7C,GAAG;AAEL,eAAS,QAAQ,OAAO,UAAU;AAClC,aAAO;AAAA,IACT;AAAA,EACF;AACF;AASO,IAAM,WAAW;AAQjB,IAAM,mBAAmB;AA2BzB,SAAS,cAAc,SAAiC;AAC7D,SAAO,QAAQ,IAAI,WAAW;AAChC;AAMO,IAAM,cAAc;AAgCpB,SAAS,aAAa,SAAiC;AAC5D,SAAO,QAAQ,IAAI,cAAc;AACnC;","names":[]}
+{"version":3,"sources":["../src/middleware/InsforgeMiddleware.ts"],"sourcesContent":["import { NextRequest, NextResponse } from 'next/server';\r\nimport { createClient } from '@insforge/sdk';\r\n\r\nexport interface InsforgeMiddlewareConfig {\r\n  /**\r\n   * Base URL of your Insforge backend (for API calls)\r\n   * @example 'http://localhost:3001'\r\n   */\r\n  baseUrl: string;\r\n\r\n  /**\r\n   * Base URL of your frontend application (for redirects)\r\n   * If not provided, will use baseUrl for redirects\r\n   * @example 'http://localhost:3000'\r\n   */\r\n  frontendUrl?: string;\r\n\r\n  /**\r\n   * Routes that are public and don't require authentication\r\n   * @example ['/sign-in', '/sign-up', '/']\r\n   */\r\n  publicRoutes?: string[];\r\n\r\n  /**\r\n   * URL to redirect to after sign in\r\n   * @default '/dashboard'\r\n   */\r\n  afterSignInUrl?: string;\r\n\r\n  /**\r\n   * URL to redirect to when user is not authenticated\r\n   * @default '/sign-in'\r\n   */\r\n  signInUrl?: string;\r\n\r\n  /**\r\n * URL to redirect to when user is signing up\r\n * @default '/sign-up'\r\n */\r\n  signUpUrl?: string;\r\n\r\n  /**\r\n   * Cookie name for the auth token\r\n   * @default 'insforge_token'\r\n   */\r\n  cookieName?: string;\r\n\r\n  /**\r\n   * Whether to use built-in authentication pages hosted on the backend\r\n   * When true, middleware won't redirect to local sign-in pages\r\n   * @default true\r\n   */\r\n  useBuiltInAuth?: boolean;\r\n}\r\n\r\n/**\r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * This function generates a Next.js middleware that:\r\n * - Validates user authentication on each request\r\n * - Redirects unauthenticated users to sign-in page\r\n * - Allows public routes to be accessed without authentication\r\n * - Injects user information into request headers for server components\r\n * \r\n * @param config - Middleware configuration\r\n * @returns Next.js middleware function\r\n *\r\n * @example\r\n * ```ts\r\n * // middleware.ts - Local development with separate frontend/backend URLs\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,        // Backend API (e.g., http://localhost:3001)\r\n *   frontendUrl: process.env.INSFORGE_FRONTEND_URL!, // Frontend app (e.g., http://localhost:3000)\r\n *   publicRoutes: ['/auth/callback', '/'],\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Using custom SignIn/SignUp components\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   frontendUrl: process.env.INSFORGE_FRONTEND_URL,  // Optional: for redirects\r\n *   publicRoutes: ['/sign-in', '/sign-up', '/'],\r\n *   signInUrl: '/sign-in',\r\n *   useBuiltInAuth: false,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n */\r\nexport function InsforgeMiddleware(config: InsforgeMiddlewareConfig) {\r\n  const {\r\n    baseUrl,\r\n    publicRoutes = [],\r\n    signInUrl = '/sign-in',\r\n    signUpUrl = '/sign-up',\r\n    cookieName = 'insforge_token',\r\n    useBuiltInAuth = true,\r\n    frontendUrl,\r\n  } = config;\r\n\r\n  return async function middleware(request: NextRequest) {\r\n    const { pathname } = request.nextUrl;\r\n\r\n    // Special handling for built-in auth: redirect /sign-in, /sign-up to OSS frontend\r\n    if (useBuiltInAuth && (pathname === signInUrl || pathname === signUpUrl)) {\r\n      const callbackUrl = new URL('/auth/callback', request.url);\r\n      const ossAuthUrl = new URL(`/auth${pathname}`, frontendUrl || baseUrl);\r\n      ossAuthUrl.searchParams.set('redirect', callbackUrl.toString());\r\n      setTimeout(() => {\r\n        return NextResponse.redirect(ossAuthUrl.toString());\r\n      }, 100);\r\n    }\r\n\r\n    // Check if route is public\r\n    const isPublicRoute = publicRoutes.some((route) => {\r\n      if (route.endsWith('*')) {\r\n        return pathname.startsWith(route.slice(0, -1));\r\n      }\r\n      return pathname === route || pathname.startsWith(route + '/');\r\n    });\r\n\r\n    if (isPublicRoute) {\r\n      return NextResponse.next();\r\n    }\r\n\r\n    // Get token from cookie\r\n    const token = request.cookies.get(cookieName)?.value;\r\n\r\n    if (!token) {\r\n      if (useBuiltInAuth) {\r\n        // Built-in auth: redirect to backend's auth page\r\n        const callbackUrl = new URL('/auth/callback', request.url);\r\n        const backendSignInUrl = new URL('/auth/signin', frontendUrl || baseUrl);\r\n        backendSignInUrl.searchParams.set('redirect', callbackUrl.toString());\r\n        return NextResponse.redirect(backendSignInUrl);\r\n      } else {\r\n        // Custom auth: redirect to local sign-in page\r\n        const localSignInUrl = new URL(signInUrl, request.url);\r\n        localSignInUrl.searchParams.set('redirect', pathname);\r\n        return NextResponse.redirect(localSignInUrl);\r\n      }\r\n    }\r\n\r\n    try {\r\n      // Use Insforge SDK to verify token and get session\r\n      // SDK provides consistent error handling and returns complete user data\r\n      const insforge = createClient({\r\n        baseUrl,\r\n        edgeFunctionToken: token, // Use token from cookie for this request\r\n        fetch: globalThis.fetch, // Ensure fetch is available in server environment\r\n      });\r\n\r\n      const { data: sessionData, error } = await insforge.auth.getCurrentUser();\r\n\r\n      if (error || !sessionData) {\r\n        console.error('[Insforge Middleware] Token validation failed:', {\r\n          error: error?.message,\r\n          statusCode: error?.statusCode,\r\n        });\r\n        throw new Error('Invalid session');\r\n      }\r\n\r\n      const session = sessionData;\r\n\r\n      // Add user info to headers for server components\r\n      const nextResponse = NextResponse.next();\r\n      nextResponse.headers.set('x-user-id', session.user.id);\r\n      nextResponse.headers.set('x-user-email', session.user.email);\r\n      nextResponse.headers.set('x-user-token', token);\r\n      // Optionally add profile fields if needed\r\n      if (session.profile) {\r\n        const profileJson = JSON.stringify(session.profile);\r\n        nextResponse.headers.set('x-user-profile', profileJson);\r\n      }\r\n\r\n      return nextResponse;\r\n    } catch (error) {\r\n      console.error('[Insforge Middleware] Token validation error:', error);\r\n\r\n      // Clear invalid token first\r\n      const response = useBuiltInAuth\r\n        ? (() => {\r\n          // Built-in auth: redirect to backend's auth page\r\n          const callbackUrl = new URL('/auth/callback', request.url);\r\n          const backendSignInUrl = new URL('/auth/signin', frontendUrl || baseUrl);\r\n          backendSignInUrl.searchParams.set('redirect', callbackUrl.toString());\r\n          return NextResponse.redirect(backendSignInUrl);\r\n        })()\r\n        : (() => {\r\n          // Custom auth: redirect to local sign-in page\r\n          const localSignInUrl = new URL(signInUrl, request.url);\r\n          localSignInUrl.searchParams.set('redirect', pathname);\r\n          return NextResponse.redirect(localSignInUrl);\r\n        })();\r\n\r\n      response.cookies.delete(cookieName);\r\n      return response;\r\n    }\r\n  };\r\n}\r\n\r\n/**\r\n * @deprecated Use `InsforgeMiddleware` instead. This alias is kept for backward compatibility.\r\n * \r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * @see InsforgeMiddleware\r\n */\r\nexport const withAuth = InsforgeMiddleware;\r\n\r\n/**\r\n * Alternative name for `InsforgeMiddleware` with Insforge branding.\r\n * Useful when you want to be explicit about using Insforge authentication.\r\n * \r\n * @see InsforgeMiddleware\r\n */\r\nexport const withInsforgeAuth = InsforgeMiddleware;\r\n\r\n/**\r\n * Utility to get authenticated user ID from request headers in server components.\r\n * \r\n * The middleware automatically injects user information into request headers,\r\n * which can be accessed in server components using Next.js `headers()`.\r\n * \r\n * @param headers - Request headers from Next.js\r\n * @returns User ID if authenticated, null otherwise\r\n *\r\n * @example\r\n * ```ts\r\n * import { headers } from 'next/headers';\r\n * import { getAuthUserId } from '@insforge/nextjs/middleware';\r\n *\r\n * export default async function DashboardPage() {\r\n *   const userId = getAuthUserId(headers());\r\n *   \r\n *   if (!userId) {\r\n *     return <div>Not authenticated</div>;\r\n *   }\r\n *   \r\n *   return <div>User ID: {userId}</div>;\r\n * }\r\n * ```\r\n */\r\nexport function getAuthUserId(headers: Headers): string | null {\r\n  return headers.get('x-user-id');\r\n}\r\n\r\n/**\r\n * @deprecated Use `getAuthUserId` instead. This alias is kept for backward compatibility.\r\n * @see getAuthUserId\r\n */\r\nexport const getAuthUser = getAuthUserId;\r\n\r\n/**\r\n * Utility to get auth token from request headers in server components.\r\n * \r\n * The middleware automatically injects the authentication token into request headers,\r\n * which can be used to make authenticated API calls from server components.\r\n * \r\n * @param headers - Request headers from Next.js\r\n * @returns Auth token if authenticated, null otherwise\r\n * \r\n * @example\r\n * ```ts\r\n * import { headers } from 'next/headers';\r\n * import { getAuthToken } from '@insforge/nextjs/middleware';\r\n *\r\n * export default async function ProfilePage() {\r\n *   const token = getAuthToken(headers());\r\n *   \r\n *   if (!token) {\r\n *     return <div>Not authenticated</div>;\r\n *   }\r\n *   \r\n *   // Use token for API calls\r\n *   const response = await fetch('https://api.example.com/profile', {\r\n *     headers: { Authorization: `Bearer ${token}` }\r\n *   });\r\n *   \r\n *   return <div>Profile data</div>;\r\n * }\r\n * ```\r\n */\r\nexport function getAuthToken(headers: Headers): string | null {\r\n  return headers.get('x-user-token');\r\n}\r\n"],"mappings":";AAAA,SAAsB,oBAAoB;AAC1C,SAAS,oBAAoB;AAoGtB,SAAS,mBAAmB,QAAkC;AACnE,QAAM;AAAA,IACJ;AAAA,IACA,eAAe,CAAC;AAAA,IAChB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB;AAAA,EACF,IAAI;AAEJ,SAAO,eAAe,WAAW,SAAsB;AACrD,UAAM,EAAE,SAAS,IAAI,QAAQ;AAG7B,QAAI,mBAAmB,aAAa,aAAa,aAAa,YAAY;AACxE,YAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,YAAM,aAAa,IAAI,IAAI,QAAQ,QAAQ,IAAI,eAAe,OAAO;AACrE,iBAAW,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AAC9D,iBAAW,MAAM;AACf,eAAO,aAAa,SAAS,WAAW,SAAS,CAAC;AAAA,MACpD,GAAG,GAAG;AAAA,IACR;AAGA,UAAM,gBAAgB,aAAa,KAAK,CAAC,UAAU;AACjD,UAAI,MAAM,SAAS,GAAG,GAAG;AACvB,eAAO,SAAS,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/C;AACA,aAAO,aAAa,SAAS,SAAS,WAAW,QAAQ,GAAG;AAAA,IAC9D,CAAC;AAED,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK;AAAA,IAC3B;AAGA,UAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,QAAI,CAAC,OAAO;AACV,UAAI,gBAAgB;AAElB,cAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,cAAM,mBAAmB,IAAI,IAAI,gBAAgB,eAAe,OAAO;AACvE,yBAAiB,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AACpE,eAAO,aAAa,SAAS,gBAAgB;AAAA,MAC/C,OAAO;AAEL,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,eAAO,aAAa,SAAS,cAAc;AAAA,MAC7C;AAAA,IACF;AAEA,QAAI;AAGF,YAAM,WAAW,aAAa;AAAA,QAC5B;AAAA,QACA,mBAAmB;AAAA;AAAA,QACnB,OAAO,WAAW;AAAA;AAAA,MACpB,CAAC;AAED,YAAM,EAAE,MAAM,aAAa,MAAM,IAAI,MAAM,SAAS,KAAK,eAAe;AAExE,UAAI,SAAS,CAAC,aAAa;AACzB,gBAAQ,MAAM,kDAAkD;AAAA,UAC9D,OAAO,OAAO;AAAA,UACd,YAAY,OAAO;AAAA,QACrB,CAAC;AACD,cAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC;AAEA,YAAM,UAAU;AAGhB,YAAM,eAAe,aAAa,KAAK;AACvC,mBAAa,QAAQ,IAAI,aAAa,QAAQ,KAAK,EAAE;AACrD,mBAAa,QAAQ,IAAI,gBAAgB,QAAQ,KAAK,KAAK;AAC3D,mBAAa,QAAQ,IAAI,gBAAgB,KAAK;AAE9C,UAAI,QAAQ,SAAS;AACnB,cAAM,cAAc,KAAK,UAAU,QAAQ,OAAO;AAClD,qBAAa,QAAQ,IAAI,kBAAkB,WAAW;AAAA,MACxD;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,cAAQ,MAAM,iDAAiD,KAAK;AAGpE,YAAM,WAAW,kBACZ,MAAM;AAEP,cAAM,cAAc,IAAI,IAAI,kBAAkB,QAAQ,GAAG;AACzD,cAAM,mBAAmB,IAAI,IAAI,gBAAgB,eAAe,OAAO;AACvE,yBAAiB,aAAa,IAAI,YAAY,YAAY,SAAS,CAAC;AACpE,eAAO,aAAa,SAAS,gBAAgB;AAAA,MAC/C,GAAG,KACA,MAAM;AAEP,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,eAAO,aAAa,SAAS,cAAc;AAAA,MAC7C,GAAG;AAEL,eAAS,QAAQ,OAAO,UAAU;AAClC,aAAO;AAAA,IACT;AAAA,EACF;AACF;AASO,IAAM,WAAW;AAQjB,IAAM,mBAAmB;AA2BzB,SAAS,cAAc,SAAiC;AAC7D,SAAO,QAAQ,IAAI,WAAW;AAChC;AAMO,IAAM,cAAc;AAgCpB,SAAS,aAAa,SAAiC;AAC5D,SAAO,QAAQ,IAAI,cAAc;AACnC;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insforge/nextjs",
-  "version": "0.6.8",
+  "version": "0.7.0",
   "description": "Pre-built authentication UI components for Next.js with Insforge backend - zero configuration required",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -51,13 +51,14 @@
     "react-dom": "^19.0.0"
   },
   "dependencies": {
-    "@insforge/sdk": "^0.0.56",
+    "@insforge/sdk": "0.0.58-dev.1",
+    "@insforge/shared-schemas": "^1.1.11",
     "lucide-react": "^0.546.0"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",
-    "@types/react": "^18.2.0",
-    "@types/react-dom": "^18.2.0",
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
     "tsup": "^8.0.0",
     "typescript": "^5.3.0"
   }