@insforge/nextjs 0.8.13 → 0.9.0

package/dist/api.js

@@ -1,268 +0,0 @@
-"use client";
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/api/index.ts
-var api_exports = {};
-__export(api_exports, {
-  createAuthRouteHandlers: () => createAuthRouteHandlers
-});
-module.exports = __toCommonJS(api_exports);
-
-// src/api/route-handlers.ts
-var import_server = require("next/server");
-var import_sdk = require("@insforge/sdk");
-function createAuthRouteHandlers(config) {
-  const {
-    baseUrl,
-    cookieName = "insforge_token",
-    cookieMaxAge = 7 * 24 * 60 * 60
-    // 7 days
-  } = config;
-  const insforge = (0, import_sdk.createClient)({ baseUrl });
-  function setAuthCookie(response, token) {
-    const isProduction = process.env.NODE_ENV === "production";
-    const secure = config.secure ?? isProduction;
-    response.cookies.set({
-      name: cookieName,
-      value: token,
-      httpOnly: true,
-      // Cannot be accessed by JavaScript
-      secure,
-      // Only sent over HTTPS in production
-      sameSite: "lax",
-      maxAge: cookieMaxAge,
-      path: "/"
-    });
-    return response;
-  }
-  function clearAuthCookie(response) {
-    response.cookies.set({
-      name: cookieName,
-      value: "",
-      httpOnly: true,
-      secure: config.secure ?? process.env.NODE_ENV === "production",
-      sameSite: "lax",
-      maxAge: 0,
-      path: "/"
-    });
-    return response;
-  }
-  async function POST(request) {
-    try {
-      const body = await request.json();
-      const { action, email, password } = body;
-      if (!action) {
-        return import_server.NextResponse.json(
-          { error: "Action is required" },
-          { status: 400 }
-        );
-      }
-      switch (action) {
-        case "sign-in": {
-          if (!email || !password) {
-            return import_server.NextResponse.json(
-              { error: "Email and password are required" },
-              { status: 400 }
-            );
-          }
-          const result = await insforge.auth.signInWithPassword({
-            email,
-            password
-          });
-          if (result.error) {
-            return import_server.NextResponse.json(
-              { error: result.error.message },
-              { status: 401 }
-            );
-          }
-          if (!result.data || !result.data.user) {
-            return import_server.NextResponse.json(
-              { error: "Authentication failed" },
-              { status: 401 }
-            );
-          }
-          const response = import_server.NextResponse.json({
-            user: result.data.user,
-            session: {
-              userId: result.data.user.id,
-              expiresAt: "",
-              createdAt: (/* @__PURE__ */ new Date()).toISOString()
-            }
-          });
-          setAuthCookie(response, result.data.accessToken || "");
-          return response;
-        }
-        case "sign-up": {
-          if (!email || !password) {
-            return import_server.NextResponse.json(
-              { error: "Email and password are required" },
-              { status: 400 }
-            );
-          }
-          const result = await insforge.auth.signUp({ email, password });
-          if (result.error) {
-            return import_server.NextResponse.json(
-              { error: result.error.message },
-              { status: 400 }
-            );
-          }
-          if (!result.data || !result.data.user) {
-            return import_server.NextResponse.json(
-              { error: "Sign up failed" },
-              { status: 400 }
-            );
-          }
-          const response = import_server.NextResponse.json({
-            user: result.data.user,
-            session: {
-              userId: result.data.user.id,
-              expiresAt: "",
-              createdAt: (/* @__PURE__ */ new Date()).toISOString()
-            }
-          });
-          setAuthCookie(response, result.data.accessToken || "");
-          return response;
-        }
-        case "sync-token": {
-          const { token } = body;
-          if (!token) {
-            return import_server.NextResponse.json(
-              { error: "Token is required" },
-              { status: 400 }
-            );
-          }
-          try {
-            const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {
-              headers: {
-                Authorization: `Bearer ${token}`,
-                "Content-Type": "application/json"
-              }
-            });
-            if (!response.ok) {
-              const errorText = await response.text();
-              console.error("[Auth API] Token validation failed:", errorText);
-              return import_server.NextResponse.json(
-                { error: "Invalid token", details: errorText },
-                { status: 401 }
-              );
-            }
-            const session = await response.json();
-            const nextResponse = import_server.NextResponse.json({
-              user: session.user,
-              session: {
-                userId: session.user.id,
-                expiresAt: "",
-                createdAt: (/* @__PURE__ */ new Date()).toISOString()
-              }
-            });
-            setAuthCookie(nextResponse, token);
-            return nextResponse;
-          } catch (error) {
-            console.error("[Auth API] Token validation error:", error);
-            return import_server.NextResponse.json(
-              { error: "Token validation failed", details: String(error) },
-              { status: 401 }
-            );
-          }
-        }
-        default:
-          return import_server.NextResponse.json(
-            { error: "Invalid action" },
-            { status: 400 }
-          );
-      }
-    } catch (error) {
-      console.error("[Auth API Error]:", error);
-      return import_server.NextResponse.json(
-        { error: "Internal server error" },
-        { status: 500 }
-      );
-    }
-  }
-  async function GET(request) {
-    try {
-      const token = request.cookies.get(cookieName)?.value;
-      if (!token) {
-        return import_server.NextResponse.json({ user: null, session: null });
-      }
-      const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {
-        headers: {
-          Authorization: `Bearer ${token}`,
-          "Content-Type": "application/json"
-        }
-      });
-      if (!response.ok) {
-        const nextResponse = import_server.NextResponse.json({ user: null, session: null });
-        clearAuthCookie(nextResponse);
-        return nextResponse;
-      }
-      const session = await response.json();
-      return import_server.NextResponse.json({
-        user: session.user,
-        session: {
-          userId: session.user.id,
-          token,
-          expiresAt: "",
-          createdAt: (/* @__PURE__ */ new Date()).toISOString()
-        }
-      });
-    } catch (error) {
-      console.error("[Auth API Error]:", error);
-      return import_server.NextResponse.json({ user: null, session: null });
-    }
-  }
-  async function DELETE(request) {
-    try {
-      const token = request.cookies.get(cookieName)?.value;
-      if (token) {
-        try {
-          await fetch(`${baseUrl}/auth/sessions/current`, {
-            method: "DELETE",
-            headers: {
-              Authorization: `Bearer ${token}`,
-              "Content-Type": "application/json"
-            }
-          });
-        } catch (error) {
-          console.error("[Auth API] Sign out error:", error);
-        }
-      }
-      const response = import_server.NextResponse.json({ success: true });
-      clearAuthCookie(response);
-      return response;
-    } catch (error) {
-      console.error("[Auth API Error]:", error);
-      return import_server.NextResponse.json(
-        { error: "Internal server error" },
-        { status: 500 }
-      );
-    }
-  }
-  return {
-    POST,
-    GET,
-    DELETE
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  createAuthRouteHandlers
-});
-//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/api/index.ts","../src/api/route-handlers.ts"],"sourcesContent":["export { createAuthRouteHandlers } from './route-handlers';\r\nexport type { AuthRouteConfig } from './route-handlers';","import { NextRequest, NextResponse } from 'next/server';\nimport { createClient } from '@insforge/sdk';\n\nexport interface AuthRouteConfig {\n  /**\n   * Base URL of your Insforge backend\n   */\n  baseUrl: string;\n\n  /**\n   * Cookie name for the auth token\n   * @default 'insforge_token'\n   */\n  cookieName?: string;\n\n  /**\n   * Cookie max age in seconds (default: 7 days)\n   * @default 604800\n   */\n  cookieMaxAge?: number;\n\n  /**\n   * Whether to use secure cookies (HTTPS only)\n   * Auto-detected based on environment\n   */\n  secure?: boolean;\n}\n\n/**\n * Creates authentication route handlers for Next.js App Router\n * These handlers set HTTP-only cookies that can be read by middleware\n *\n * @example\n * ```ts\n * // app/api/auth/[...auth]/route.ts\n * import { createAuthRouteHandlers } from '@insforge/nextjs/api';\n *\n * const handlers = createAuthRouteHandlers({\n *   baseUrl: process.env.NEXT_PUBLIC_INSFORGE_BASE_URL!,\n * });\n *\n * export const POST = handlers.POST;\n * export const GET = handlers.GET;\n * export const DELETE = handlers.DELETE;\n * ```\n */\nexport function createAuthRouteHandlers(config: AuthRouteConfig) {\n  const {\n    baseUrl,\n    cookieName = 'insforge_token',\n    cookieMaxAge = 7 * 24 * 60 * 60, // 7 days\n  } = config;\n\n  const insforge = createClient({ baseUrl });\n\n  /**\n   * Helper to set auth cookie\n   */\n  function setAuthCookie(response: NextResponse, token: string) {\n    // NODE_ENV is automatically set by Next.js runtime ('development' | 'production' | 'test')\n    // In production, cookies are sent over HTTPS only (secure flag)\n    const isProduction = process.env.NODE_ENV === 'production';\n    const secure = config.secure ?? isProduction;\n\n    response.cookies.set({\n      name: cookieName,\n      value: token,\n      httpOnly: true, // Cannot be accessed by JavaScript\n      secure, // Only sent over HTTPS in production\n      sameSite: 'lax',\n      maxAge: cookieMaxAge,\n      path: '/',\n    });\n\n    return response;\n  }\n\n  /**\n   * Helper to clear auth cookie\n   */\n  function clearAuthCookie(response: NextResponse) {\n    response.cookies.set({\n      name: cookieName,\n      value: '',\n      httpOnly: true,\n      secure: config.secure ?? (process.env.NODE_ENV === 'production'),\n      sameSite: 'lax',\n      maxAge: 0,\n      path: '/',\n    });\n\n    return response;\n  }\n\n  /**\n   * POST handler for authentication actions\n   * Supports: sign-in, sign-up\n   */\n  async function POST(request: NextRequest) {\n    try {\n      const body = await request.json();\n      const { action, email, password } = body;\n\n      if (!action) {\n        return NextResponse.json(\n          { error: 'Action is required' },\n          { status: 400 }\n        );\n      }\n\n      switch (action) {\n        case 'sign-in': {\n          if (!email || !password) {\n            return NextResponse.json(\n              { error: 'Email and password are required' },\n              { status: 400 }\n            );\n          }\n\n          const result = await insforge.auth.signInWithPassword({\n            email,\n            password,\n          });\n\n          if (result.error) {\n            return NextResponse.json(\n              { error: result.error.message },\n              { status: 401 }\n            );\n          }\n\n        if (!result.data || !result.data.user) {\n          return NextResponse.json(\n            { error: 'Authentication failed' },\n            { status: 401 }\n          );\n        }\n\n        const response = NextResponse.json({\n          user: result.data.user,\n          session: {\n            userId: result.data.user.id,\n            expiresAt: '',\n            createdAt: new Date().toISOString(),\n          },\n        });\n\n          setAuthCookie(response, result.data.accessToken || '');\n\n          return response;\n        }\n\n        case 'sign-up': {\n          if (!email || !password) {\n            return NextResponse.json(\n              { error: 'Email and password are required' },\n              { status: 400 }\n            );\n          }\n\n          const result = await insforge.auth.signUp({ email, password });\n\n          if (result.error) {\n            return NextResponse.json(\n              { error: result.error.message },\n              { status: 400 }\n            );\n          }\n\n        if (!result.data || !result.data.user) {\n          return NextResponse.json(\n            { error: 'Sign up failed' },\n            { status: 400 }\n          );\n        }\n\n        const response = NextResponse.json({\n          user: result.data.user,\n          session: {\n            userId: result.data.user.id,\n            expiresAt: '',\n            createdAt: new Date().toISOString(),\n          },\n        });\n\n          setAuthCookie(response, result.data.accessToken || '');\n\n          return response;\n        }\n\n        case 'sync-token': {\n          // Syncs a token from localStorage to HTTP-only cookie\n          const { token } = body;\n\n          if (!token) {\n            return NextResponse.json(\n              { error: 'Token is required' },\n              { status: 400 }\n            );\n          }\n\n          // Verify the token is valid by checking with backend\n          try {\n            const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\n              headers: {\n                Authorization: `Bearer ${token}`,\n                'Content-Type': 'application/json',\n              },\n            });\n\n            if (!response.ok) {\n              const errorText = await response.text();\n              console.error('[Auth API] Token validation failed:', errorText);\n              return NextResponse.json(\n                { error: 'Invalid token', details: errorText },\n                { status: 401 }\n              );\n            }\n\n            const session = await response.json();\n\n            const nextResponse = NextResponse.json({\n              user: session.user,\n              session: {\n                userId: session.user.id,\n                expiresAt: '',\n                createdAt: new Date().toISOString(),\n              },\n            });\n\n            setAuthCookie(nextResponse, token);\n\n            return nextResponse;\n          } catch (error) {\n            console.error('[Auth API] Token validation error:', error);\n            return NextResponse.json(\n              { error: 'Token validation failed', details: String(error) },\n              { status: 401 }\n            );\n          }\n        }\n\n        default:\n          return NextResponse.json(\n            { error: 'Invalid action' },\n            { status: 400 }\n          );\n      }\n    } catch (error) {\n      console.error('[Auth API Error]:', error);\n      return NextResponse.json(\n        { error: 'Internal server error' },\n        { status: 500 }\n      );\n    }\n  }\n\n  /**\n   * GET handler to check current session\n   */\n  async function GET(request: NextRequest) {\n    try {\n      const token = request.cookies.get(cookieName)?.value;\n\n      if (!token) {\n        return NextResponse.json({ user: null, session: null });\n      }\n\n      // Verify token with backend\n      const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\n        headers: {\n          Authorization: `Bearer ${token}`,\n          'Content-Type': 'application/json',\n        },\n      });\n\n      if (!response.ok) {\n        const nextResponse = NextResponse.json({ user: null, session: null });\n        clearAuthCookie(nextResponse);\n        return nextResponse;\n      }\n\n      const session = await response.json();\n\n      return NextResponse.json({\n        user: session.user,\n        session: {\n          userId: session.user.id,\n          token,\n          expiresAt: '',\n          createdAt: new Date().toISOString(),\n        },\n      });\n    } catch (error) {\n      console.error('[Auth API Error]:', error);\n      return NextResponse.json({ user: null, session: null });\n    }\n  }\n\n  /**\n   * DELETE handler for sign out\n   */\n  async function DELETE(request: NextRequest) {\n    try {\n      const token = request.cookies.get(cookieName)?.value;\n\n      if (token) {\n        // Call backend sign out\n        try {\n          await fetch(`${baseUrl}/auth/sessions/current`, {\n            method: 'DELETE',\n            headers: {\n              Authorization: `Bearer ${token}`,\n              'Content-Type': 'application/json',\n            },\n          });\n        } catch (error) {\n          // Ignore backend errors during sign out\n          console.error('[Auth API] Sign out error:', error);\n        }\n      }\n\n      const response = NextResponse.json({ success: true });\n      clearAuthCookie(response);\n\n      return response;\n    } catch (error) {\n      console.error('[Auth API Error]:', error);\n      return NextResponse.json(\n        { error: 'Internal server error' },\n        { status: 500 }\n      );\n    }\n  }\n\n  return {\n    POST,\n    GET,\n    DELETE,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAA0C;AAC1C,iBAA6B;AA6CtB,SAAS,wBAAwB,QAAyB;AAC/D,QAAM;AAAA,IACJ;AAAA,IACA,aAAa;AAAA,IACb,eAAe,IAAI,KAAK,KAAK;AAAA;AAAA,EAC/B,IAAI;AAEJ,QAAM,eAAW,yBAAa,EAAE,QAAQ,CAAC;AAKzC,WAAS,cAAc,UAAwB,OAAe;AAG5D,UAAM,eAAe,QAAQ,IAAI,aAAa;AAC9C,UAAM,SAAS,OAAO,UAAU;AAEhC,aAAS,QAAQ,IAAI;AAAA,MACnB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA;AAAA,MACV;AAAA;AAAA,MACA,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,IACR,CAAC;AAED,WAAO;AAAA,EACT;AAKA,WAAS,gBAAgB,UAAwB;AAC/C,aAAS,QAAQ,IAAI;AAAA,MACnB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA,MACV,QAAQ,OAAO,UAAW,QAAQ,IAAI,aAAa;AAAA,MACnD,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,IACR,CAAC;AAED,WAAO;AAAA,EACT;AAMA,iBAAe,KAAK,SAAsB;AACxC,QAAI;AACF,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,EAAE,QAAQ,OAAO,SAAS,IAAI;AAEpC,UAAI,CAAC,QAAQ;AACX,eAAO,2BAAa;AAAA,UAClB,EAAE,OAAO,qBAAqB;AAAA,UAC9B,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,cAAQ,QAAQ;AAAA,QACd,KAAK,WAAW;AACd,cAAI,CAAC,SAAS,CAAC,UAAU;AACvB,mBAAO,2BAAa;AAAA,cAClB,EAAE,OAAO,kCAAkC;AAAA,cAC3C,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,KAAK,mBAAmB;AAAA,YACpD;AAAA,YACA;AAAA,UACF,CAAC;AAED,cAAI,OAAO,OAAO;AAChB,mBAAO,2BAAa;AAAA,cAClB,EAAE,OAAO,OAAO,MAAM,QAAQ;AAAA,cAC9B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEF,cAAI,CAAC,OAAO,QAAQ,CAAC,OAAO,KAAK,MAAM;AACrC,mBAAO,2BAAa;AAAA,cAClB,EAAE,OAAO,wBAAwB;AAAA,cACjC,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,WAAW,2BAAa,KAAK;AAAA,YACjC,MAAM,OAAO,KAAK;AAAA,YAClB,SAAS;AAAA,cACP,QAAQ,OAAO,KAAK,KAAK;AAAA,cACzB,WAAW;AAAA,cACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YACpC;AAAA,UACF,CAAC;AAEC,wBAAc,UAAU,OAAO,KAAK,eAAe,EAAE;AAErD,iBAAO;AAAA,QACT;AAAA,QAEA,KAAK,WAAW;AACd,cAAI,CAAC,SAAS,CAAC,UAAU;AACvB,mBAAO,2BAAa;AAAA,cAClB,EAAE,OAAO,kCAAkC;AAAA,cAC3C,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,KAAK,OAAO,EAAE,OAAO,SAAS,CAAC;AAE7D,cAAI,OAAO,OAAO;AAChB,mBAAO,2BAAa;AAAA,cAClB,EAAE,OAAO,OAAO,MAAM,QAAQ;AAAA,cAC9B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEF,cAAI,CAAC,OAAO,QAAQ,CAAC,OAAO,KAAK,MAAM;AACrC,mBAAO,2BAAa;AAAA,cAClB,EAAE,OAAO,iBAAiB;AAAA,cAC1B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,WAAW,2BAAa,KAAK;AAAA,YACjC,MAAM,OAAO,KAAK;AAAA,YAClB,SAAS;AAAA,cACP,QAAQ,OAAO,KAAK,KAAK;AAAA,cACzB,WAAW;AAAA,cACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YACpC;AAAA,UACF,CAAC;AAEC,wBAAc,UAAU,OAAO,KAAK,eAAe,EAAE;AAErD,iBAAO;AAAA,QACT;AAAA,QAEA,KAAK,cAAc;AAEjB,gBAAM,EAAE,MAAM,IAAI;AAElB,cAAI,CAAC,OAAO;AACV,mBAAO,2BAAa;AAAA,cAClB,EAAE,OAAO,oBAAoB;AAAA,cAC7B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAGA,cAAI;AACF,kBAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,cACnE,SAAS;AAAA,gBACP,eAAe,UAAU,KAAK;AAAA,gBAC9B,gBAAgB;AAAA,cAClB;AAAA,YACF,CAAC;AAED,gBAAI,CAAC,SAAS,IAAI;AAChB,oBAAM,YAAY,MAAM,SAAS,KAAK;AACtC,sBAAQ,MAAM,uCAAuC,SAAS;AAC9D,qBAAO,2BAAa;AAAA,gBAClB,EAAE,OAAO,iBAAiB,SAAS,UAAU;AAAA,gBAC7C,EAAE,QAAQ,IAAI;AAAA,cAChB;AAAA,YACF;AAEA,kBAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,kBAAM,eAAe,2BAAa,KAAK;AAAA,cACrC,MAAM,QAAQ;AAAA,cACd,SAAS;AAAA,gBACP,QAAQ,QAAQ,KAAK;AAAA,gBACrB,WAAW;AAAA,gBACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,cACpC;AAAA,YACF,CAAC;AAED,0BAAc,cAAc,KAAK;AAEjC,mBAAO;AAAA,UACT,SAAS,OAAO;AACd,oBAAQ,MAAM,sCAAsC,KAAK;AACzD,mBAAO,2BAAa;AAAA,cAClB,EAAE,OAAO,2BAA2B,SAAS,OAAO,KAAK,EAAE;AAAA,cAC3D,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAAA,QACF;AAAA,QAEA;AACE,iBAAO,2BAAa;AAAA,YAClB,EAAE,OAAO,iBAAiB;AAAA,YAC1B,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,MACJ;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,2BAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAKA,iBAAe,IAAI,SAAsB;AACvC,QAAI;AACF,YAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,UAAI,CAAC,OAAO;AACV,eAAO,2BAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,MACxD;AAGA,YAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,QACnE,SAAS;AAAA,UACP,eAAe,UAAU,KAAK;AAAA,UAC9B,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,eAAe,2BAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AACpE,wBAAgB,YAAY;AAC5B,eAAO;AAAA,MACT;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,aAAO,2BAAa,KAAK;AAAA,QACvB,MAAM,QAAQ;AAAA,QACd,SAAS;AAAA,UACP,QAAQ,QAAQ,KAAK;AAAA,UACrB;AAAA,UACA,WAAW;AAAA,UACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,2BAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,IACxD;AAAA,EACF;AAKA,iBAAe,OAAO,SAAsB;AAC1C,QAAI;AACF,YAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,UAAI,OAAO;AAET,YAAI;AACF,gBAAM,MAAM,GAAG,OAAO,0BAA0B;AAAA,YAC9C,QAAQ;AAAA,YACR,SAAS;AAAA,cACP,eAAe,UAAU,KAAK;AAAA,cAC9B,gBAAgB;AAAA,YAClB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,OAAO;AAEd,kBAAQ,MAAM,8BAA8B,KAAK;AAAA,QACnD;AAAA,MACF;AAEA,YAAM,WAAW,2BAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AACpD,sBAAgB,QAAQ;AAExB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,2BAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/api.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/api/route-handlers.ts"],"sourcesContent":["import { NextRequest, NextResponse } from 'next/server';\nimport { createClient } from '@insforge/sdk';\n\nexport interface AuthRouteConfig {\n  /**\n   * Base URL of your Insforge backend\n   */\n  baseUrl: string;\n\n  /**\n   * Cookie name for the auth token\n   * @default 'insforge_token'\n   */\n  cookieName?: string;\n\n  /**\n   * Cookie max age in seconds (default: 7 days)\n   * @default 604800\n   */\n  cookieMaxAge?: number;\n\n  /**\n   * Whether to use secure cookies (HTTPS only)\n   * Auto-detected based on environment\n   */\n  secure?: boolean;\n}\n\n/**\n * Creates authentication route handlers for Next.js App Router\n * These handlers set HTTP-only cookies that can be read by middleware\n *\n * @example\n * ```ts\n * // app/api/auth/[...auth]/route.ts\n * import { createAuthRouteHandlers } from '@insforge/nextjs/api';\n *\n * const handlers = createAuthRouteHandlers({\n *   baseUrl: process.env.NEXT_PUBLIC_INSFORGE_BASE_URL!,\n * });\n *\n * export const POST = handlers.POST;\n * export const GET = handlers.GET;\n * export const DELETE = handlers.DELETE;\n * ```\n */\nexport function createAuthRouteHandlers(config: AuthRouteConfig) {\n  const {\n    baseUrl,\n    cookieName = 'insforge_token',\n    cookieMaxAge = 7 * 24 * 60 * 60, // 7 days\n  } = config;\n\n  const insforge = createClient({ baseUrl });\n\n  /**\n   * Helper to set auth cookie\n   */\n  function setAuthCookie(response: NextResponse, token: string) {\n    // NODE_ENV is automatically set by Next.js runtime ('development' | 'production' | 'test')\n    // In production, cookies are sent over HTTPS only (secure flag)\n    const isProduction = process.env.NODE_ENV === 'production';\n    const secure = config.secure ?? isProduction;\n\n    response.cookies.set({\n      name: cookieName,\n      value: token,\n      httpOnly: true, // Cannot be accessed by JavaScript\n      secure, // Only sent over HTTPS in production\n      sameSite: 'lax',\n      maxAge: cookieMaxAge,\n      path: '/',\n    });\n\n    return response;\n  }\n\n  /**\n   * Helper to clear auth cookie\n   */\n  function clearAuthCookie(response: NextResponse) {\n    response.cookies.set({\n      name: cookieName,\n      value: '',\n      httpOnly: true,\n      secure: config.secure ?? (process.env.NODE_ENV === 'production'),\n      sameSite: 'lax',\n      maxAge: 0,\n      path: '/',\n    });\n\n    return response;\n  }\n\n  /**\n   * POST handler for authentication actions\n   * Supports: sign-in, sign-up\n   */\n  async function POST(request: NextRequest) {\n    try {\n      const body = await request.json();\n      const { action, email, password } = body;\n\n      if (!action) {\n        return NextResponse.json(\n          { error: 'Action is required' },\n          { status: 400 }\n        );\n      }\n\n      switch (action) {\n        case 'sign-in': {\n          if (!email || !password) {\n            return NextResponse.json(\n              { error: 'Email and password are required' },\n              { status: 400 }\n            );\n          }\n\n          const result = await insforge.auth.signInWithPassword({\n            email,\n            password,\n          });\n\n          if (result.error) {\n            return NextResponse.json(\n              { error: result.error.message },\n              { status: 401 }\n            );\n          }\n\n        if (!result.data || !result.data.user) {\n          return NextResponse.json(\n            { error: 'Authentication failed' },\n            { status: 401 }\n          );\n        }\n\n        const response = NextResponse.json({\n          user: result.data.user,\n          session: {\n            userId: result.data.user.id,\n            expiresAt: '',\n            createdAt: new Date().toISOString(),\n          },\n        });\n\n          setAuthCookie(response, result.data.accessToken || '');\n\n          return response;\n        }\n\n        case 'sign-up': {\n          if (!email || !password) {\n            return NextResponse.json(\n              { error: 'Email and password are required' },\n              { status: 400 }\n            );\n          }\n\n          const result = await insforge.auth.signUp({ email, password });\n\n          if (result.error) {\n            return NextResponse.json(\n              { error: result.error.message },\n              { status: 400 }\n            );\n          }\n\n        if (!result.data || !result.data.user) {\n          return NextResponse.json(\n            { error: 'Sign up failed' },\n            { status: 400 }\n          );\n        }\n\n        const response = NextResponse.json({\n          user: result.data.user,\n          session: {\n            userId: result.data.user.id,\n            expiresAt: '',\n            createdAt: new Date().toISOString(),\n          },\n        });\n\n          setAuthCookie(response, result.data.accessToken || '');\n\n          return response;\n        }\n\n        case 'sync-token': {\n          // Syncs a token from localStorage to HTTP-only cookie\n          const { token } = body;\n\n          if (!token) {\n            return NextResponse.json(\n              { error: 'Token is required' },\n              { status: 400 }\n            );\n          }\n\n          // Verify the token is valid by checking with backend\n          try {\n            const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\n              headers: {\n                Authorization: `Bearer ${token}`,\n                'Content-Type': 'application/json',\n              },\n            });\n\n            if (!response.ok) {\n              const errorText = await response.text();\n              console.error('[Auth API] Token validation failed:', errorText);\n              return NextResponse.json(\n                { error: 'Invalid token', details: errorText },\n                { status: 401 }\n              );\n            }\n\n            const session = await response.json();\n\n            const nextResponse = NextResponse.json({\n              user: session.user,\n              session: {\n                userId: session.user.id,\n                expiresAt: '',\n                createdAt: new Date().toISOString(),\n              },\n            });\n\n            setAuthCookie(nextResponse, token);\n\n            return nextResponse;\n          } catch (error) {\n            console.error('[Auth API] Token validation error:', error);\n            return NextResponse.json(\n              { error: 'Token validation failed', details: String(error) },\n              { status: 401 }\n            );\n          }\n        }\n\n        default:\n          return NextResponse.json(\n            { error: 'Invalid action' },\n            { status: 400 }\n          );\n      }\n    } catch (error) {\n      console.error('[Auth API Error]:', error);\n      return NextResponse.json(\n        { error: 'Internal server error' },\n        { status: 500 }\n      );\n    }\n  }\n\n  /**\n   * GET handler to check current session\n   */\n  async function GET(request: NextRequest) {\n    try {\n      const token = request.cookies.get(cookieName)?.value;\n\n      if (!token) {\n        return NextResponse.json({ user: null, session: null });\n      }\n\n      // Verify token with backend\n      const response = await fetch(`${baseUrl}/api/auth/sessions/current`, {\n        headers: {\n          Authorization: `Bearer ${token}`,\n          'Content-Type': 'application/json',\n        },\n      });\n\n      if (!response.ok) {\n        const nextResponse = NextResponse.json({ user: null, session: null });\n        clearAuthCookie(nextResponse);\n        return nextResponse;\n      }\n\n      const session = await response.json();\n\n      return NextResponse.json({\n        user: session.user,\n        session: {\n          userId: session.user.id,\n          token,\n          expiresAt: '',\n          createdAt: new Date().toISOString(),\n        },\n      });\n    } catch (error) {\n      console.error('[Auth API Error]:', error);\n      return NextResponse.json({ user: null, session: null });\n    }\n  }\n\n  /**\n   * DELETE handler for sign out\n   */\n  async function DELETE(request: NextRequest) {\n    try {\n      const token = request.cookies.get(cookieName)?.value;\n\n      if (token) {\n        // Call backend sign out\n        try {\n          await fetch(`${baseUrl}/auth/sessions/current`, {\n            method: 'DELETE',\n            headers: {\n              Authorization: `Bearer ${token}`,\n              'Content-Type': 'application/json',\n            },\n          });\n        } catch (error) {\n          // Ignore backend errors during sign out\n          console.error('[Auth API] Sign out error:', error);\n        }\n      }\n\n      const response = NextResponse.json({ success: true });\n      clearAuthCookie(response);\n\n      return response;\n    } catch (error) {\n      console.error('[Auth API Error]:', error);\n      return NextResponse.json(\n        { error: 'Internal server error' },\n        { status: 500 }\n      );\n    }\n  }\n\n  return {\n    POST,\n    GET,\n    DELETE,\n  };\n}\n"],"mappings":";;;AAAA,SAAsB,oBAAoB;AAC1C,SAAS,oBAAoB;AA6CtB,SAAS,wBAAwB,QAAyB;AAC/D,QAAM;AAAA,IACJ;AAAA,IACA,aAAa;AAAA,IACb,eAAe,IAAI,KAAK,KAAK;AAAA;AAAA,EAC/B,IAAI;AAEJ,QAAM,WAAW,aAAa,EAAE,QAAQ,CAAC;AAKzC,WAAS,cAAc,UAAwB,OAAe;AAG5D,UAAM,eAAe,QAAQ,IAAI,aAAa;AAC9C,UAAM,SAAS,OAAO,UAAU;AAEhC,aAAS,QAAQ,IAAI;AAAA,MACnB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA;AAAA,MACV;AAAA;AAAA,MACA,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,IACR,CAAC;AAED,WAAO;AAAA,EACT;AAKA,WAAS,gBAAgB,UAAwB;AAC/C,aAAS,QAAQ,IAAI;AAAA,MACnB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA,MACV,QAAQ,OAAO,UAAW,QAAQ,IAAI,aAAa;AAAA,MACnD,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,MAAM;AAAA,IACR,CAAC;AAED,WAAO;AAAA,EACT;AAMA,iBAAe,KAAK,SAAsB;AACxC,QAAI;AACF,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,EAAE,QAAQ,OAAO,SAAS,IAAI;AAEpC,UAAI,CAAC,QAAQ;AACX,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,qBAAqB;AAAA,UAC9B,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,cAAQ,QAAQ;AAAA,QACd,KAAK,WAAW;AACd,cAAI,CAAC,SAAS,CAAC,UAAU;AACvB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,kCAAkC;AAAA,cAC3C,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,KAAK,mBAAmB;AAAA,YACpD;AAAA,YACA;AAAA,UACF,CAAC;AAED,cAAI,OAAO,OAAO;AAChB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,OAAO,MAAM,QAAQ;AAAA,cAC9B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEF,cAAI,CAAC,OAAO,QAAQ,CAAC,OAAO,KAAK,MAAM;AACrC,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,wBAAwB;AAAA,cACjC,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,WAAW,aAAa,KAAK;AAAA,YACjC,MAAM,OAAO,KAAK;AAAA,YAClB,SAAS;AAAA,cACP,QAAQ,OAAO,KAAK,KAAK;AAAA,cACzB,WAAW;AAAA,cACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YACpC;AAAA,UACF,CAAC;AAEC,wBAAc,UAAU,OAAO,KAAK,eAAe,EAAE;AAErD,iBAAO;AAAA,QACT;AAAA,QAEA,KAAK,WAAW;AACd,cAAI,CAAC,SAAS,CAAC,UAAU;AACvB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,kCAAkC;AAAA,cAC3C,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,KAAK,OAAO,EAAE,OAAO,SAAS,CAAC;AAE7D,cAAI,OAAO,OAAO;AAChB,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,OAAO,MAAM,QAAQ;AAAA,cAC9B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEF,cAAI,CAAC,OAAO,QAAQ,CAAC,OAAO,KAAK,MAAM;AACrC,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,iBAAiB;AAAA,cAC1B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAEA,gBAAM,WAAW,aAAa,KAAK;AAAA,YACjC,MAAM,OAAO,KAAK;AAAA,YAClB,SAAS;AAAA,cACP,QAAQ,OAAO,KAAK,KAAK;AAAA,cACzB,WAAW;AAAA,cACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YACpC;AAAA,UACF,CAAC;AAEC,wBAAc,UAAU,OAAO,KAAK,eAAe,EAAE;AAErD,iBAAO;AAAA,QACT;AAAA,QAEA,KAAK,cAAc;AAEjB,gBAAM,EAAE,MAAM,IAAI;AAElB,cAAI,CAAC,OAAO;AACV,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,oBAAoB;AAAA,cAC7B,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAGA,cAAI;AACF,kBAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,cACnE,SAAS;AAAA,gBACP,eAAe,UAAU,KAAK;AAAA,gBAC9B,gBAAgB;AAAA,cAClB;AAAA,YACF,CAAC;AAED,gBAAI,CAAC,SAAS,IAAI;AAChB,oBAAM,YAAY,MAAM,SAAS,KAAK;AACtC,sBAAQ,MAAM,uCAAuC,SAAS;AAC9D,qBAAO,aAAa;AAAA,gBAClB,EAAE,OAAO,iBAAiB,SAAS,UAAU;AAAA,gBAC7C,EAAE,QAAQ,IAAI;AAAA,cAChB;AAAA,YACF;AAEA,kBAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,kBAAM,eAAe,aAAa,KAAK;AAAA,cACrC,MAAM,QAAQ;AAAA,cACd,SAAS;AAAA,gBACP,QAAQ,QAAQ,KAAK;AAAA,gBACrB,WAAW;AAAA,gBACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,cACpC;AAAA,YACF,CAAC;AAED,0BAAc,cAAc,KAAK;AAEjC,mBAAO;AAAA,UACT,SAAS,OAAO;AACd,oBAAQ,MAAM,sCAAsC,KAAK;AACzD,mBAAO,aAAa;AAAA,cAClB,EAAE,OAAO,2BAA2B,SAAS,OAAO,KAAK,EAAE;AAAA,cAC3D,EAAE,QAAQ,IAAI;AAAA,YAChB;AAAA,UACF;AAAA,QACF;AAAA,QAEA;AACE,iBAAO,aAAa;AAAA,YAClB,EAAE,OAAO,iBAAiB;AAAA,YAC1B,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,MACJ;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAKA,iBAAe,IAAI,SAAsB;AACvC,QAAI;AACF,YAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,UAAI,CAAC,OAAO;AACV,eAAO,aAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,MACxD;AAGA,YAAM,WAAW,MAAM,MAAM,GAAG,OAAO,8BAA8B;AAAA,QACnE,SAAS;AAAA,UACP,eAAe,UAAU,KAAK;AAAA,UAC9B,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,eAAe,aAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AACpE,wBAAgB,YAAY;AAC5B,eAAO;AAAA,MACT;AAEA,YAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,aAAO,aAAa,KAAK;AAAA,QACvB,MAAM,QAAQ;AAAA,QACd,SAAS;AAAA,UACP,QAAQ,QAAQ,KAAK;AAAA,UACrB;AAAA,UACA,WAAW;AAAA,UACX,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,aAAa,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,IACxD;AAAA,EACF;AAKA,iBAAe,OAAO,SAAsB;AAC1C,QAAI;AACF,YAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,UAAI,OAAO;AAET,YAAI;AACF,gBAAM,MAAM,GAAG,OAAO,0BAA0B;AAAA,YAC9C,QAAQ;AAAA,YACR,SAAS;AAAA,cACP,eAAe,UAAU,KAAK;AAAA,cAC9B,gBAAgB;AAAA,YAClB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,OAAO;AAEd,kBAAQ,MAAM,8BAA8B,KAAK;AAAA,QACnD;AAAA,MACF;AAEA,YAAM,WAAW,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AACpD,sBAAgB,QAAQ;AAExB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/index.d.mts

@@ -1,20 +0,0 @@
-export * from '@insforge/react/types';
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ReactNode } from 'react';
-import { InsforgeUser, useInsforge as useInsforge$1 } from '@insforge/react';
-import { ClassValue } from 'clsx';
-export * from '@insforge/react/hooks';
-export * from '@insforge/react/components';
-
-interface InsforgeProviderProps {
-    children: ReactNode;
-    baseUrl: string;
-    afterSignInUrl?: string;
-    onAuthChange?: (user: InsforgeUser | null) => void;
-}
-declare function InsforgeProvider({ children, baseUrl, afterSignInUrl, onAuthChange, }: InsforgeProviderProps): react_jsx_runtime.JSX.Element;
-declare const useInsforge: typeof useInsforge$1;
-
-declare function cn(...inputs: ClassValue[]): string;
-
-export { InsforgeProvider, cn, useInsforge };

package/dist/index.js

@@ -1,94 +0,0 @@
-"use client";
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/index.ts
-var src_exports = {};
-__export(src_exports, {
-  InsforgeProvider: () => InsforgeProvider,
-  cn: () => cn,
-  useInsforge: () => useInsforge
-});
-module.exports = __toCommonJS(src_exports);
-__reExport(src_exports, require("@insforge/react/types"), module.exports);
-
-// src/provider/InsforgeProvider.tsx
-var import_react = require("@insforge/react");
-var import_jsx_runtime = require("react/jsx-runtime");
-async function handleSignIn(token) {
-  try {
-    await fetch("/api/auth", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify({
-        action: "sync-token",
-        token
-      })
-    });
-  } catch (error) {
-    console.error("[InsforgeProvider] Failed to sync token to cookie:", error);
-  }
-}
-async function handleSignOut() {
-  try {
-    await fetch("/api/auth", { method: "DELETE" });
-  } catch (error) {
-  }
-}
-function InsforgeProvider({
-  children,
-  baseUrl,
-  afterSignInUrl = "/",
-  onAuthChange
-}) {
-  const providerProps = {
-    children,
-    baseUrl,
-    afterSignInUrl,
-    onAuthChange,
-    onSignIn: handleSignIn,
-    onSignOut: handleSignOut
-  };
-  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_react.InsforgeProvider, { ...providerProps });
-}
-var useInsforge = import_react.useInsforge;
-
-// src/lib/utils.ts
-var import_clsx = require("clsx");
-var import_tailwind_merge = require("tailwind-merge");
-function cn(...inputs) {
-  return (0, import_tailwind_merge.twMerge)((0, import_clsx.clsx)(inputs));
-}
-
-// src/index.ts
-__reExport(src_exports, require("@insforge/react/hooks"), module.exports);
-__reExport(src_exports, require("@insforge/react/components"), module.exports);
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  InsforgeProvider,
-  cn,
-  useInsforge,
-  ...require("@insforge/react/types"),
-  ...require("@insforge/react/hooks"),
-  ...require("@insforge/react/components")
-});
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts","../src/provider/InsforgeProvider.tsx","../src/lib/utils.ts"],"sourcesContent":["export * from '@insforge/react/types';\n\n// Provider\nexport { InsforgeProvider, useInsforge } from './provider/InsforgeProvider';\nexport { cn } from './lib/utils';\n\n// Hooks\nexport * from '@insforge/react/hooks';\n\n// Components\nexport * from '@insforge/react/components';\n","'use client';\n\nimport type { ReactNode } from 'react';\nimport { \n  InsforgeProvider as ReactInsforgeProvider, \n  useInsforge as useReactInsforge,\n  type InsforgeUser\n} from '@insforge/react';\n\nexport interface InsforgeProviderProps {\n  children: ReactNode;\n  baseUrl: string;\n  /**\n   * URL to redirect to after successful sign in (when token is detected in URL)\n   * Note: Middleware handles token storage, but Provider handles the redirect\n   * @default '/'\n   */\n  afterSignInUrl?: string;\n  onAuthChange?: (user: InsforgeUser | null) => void;\n}\n\n// Extended interface for React provider that includes internal handlers\ninterface ExtendedProviderProps extends InsforgeProviderProps {\n  afterSignInUrl?: string;\n  onSignIn?: (authToken: string) => Promise<void>;\n  onSignOut?: () => Promise<void>;\n}\n\n// Sync token to server-side cookie on sign in\nasync function handleSignIn(token: string): Promise<void> {\n  try {\n    await fetch('/api/auth', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        action: 'sync-token',\n        token,\n      }),\n    });\n  } catch (error) {\n    console.error('[InsforgeProvider] Failed to sync token to cookie:', error);\n  }\n}\n\n// Clear HTTP-only cookie on sign out\nasync function handleSignOut(): Promise<void> {\n  try {\n    await fetch('/api/auth', { method: 'DELETE' });\n  } catch (error) {\n    // API route doesn't exist - ignore\n  }\n}\n\n/**\n * Insforge Provider for Next.js - wraps @insforge/react provider with Next.js-specific cookie sync\n * \n * Manages user authentication state and provides all necessary context to child components.\n * Automatically syncs authentication tokens to HTTP-only cookies for server-side middleware support.\n * \n * @example\n * ```tsx\n * import { InsforgeProvider } from '@insforge/nextjs';\n * \n * export default function RootLayout({ children }) {\n *   return (\n *     <InsforgeProvider \n *       baseUrl={process.env.NEXT_PUBLIC_INSFORGE_BASE_URL!}\n *       afterSignInUrl=\"/dashboard\"\n *     >\n *       {children}\n *     </InsforgeProvider>\n *   );\n * }\n * ```\n */\nexport function InsforgeProvider({ \n  children, \n  baseUrl,\n  afterSignInUrl = '/',\n  onAuthChange,\n}: InsforgeProviderProps) {\n  const providerProps: ExtendedProviderProps = {\n    children,\n    baseUrl,\n    afterSignInUrl,\n    onAuthChange,\n    onSignIn: handleSignIn,\n    onSignOut: handleSignOut,\n  };\n\n  return <ReactInsforgeProvider {...providerProps} />;\n}\n\n/**\n * Hook to access Insforge context\n * \n * Re-exports the hook from @insforge/react for convenience.\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, isSignedIn, signOut } = useInsforge();\n *   \n *   if (!isSignedIn) return <SignIn />;\n *   \n *   return (\n *     <div>\n *       <p>Welcome {user.email}</p>\n *       <button onClick={signOut}>Sign Out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport const useInsforge = useReactInsforge;\n","import { type ClassValue, clsx } from 'clsx';\r\nimport { twMerge } from 'tailwind-merge';\r\n\r\n/**\r\n * Utility function to merge Tailwind CSS classes with clsx\r\n * Allows users to inject custom className overrides\r\n * \r\n * @example\r\n * ```tsx\r\n * cn(\"text-base\", isDark && \"text-white\", customClassName)\r\n * ```\r\n */\r\nexport function cn(...inputs: ClassValue[]) {\r\n  return twMerge(clsx(inputs));\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAAc,kCAAd;;;ACGA,mBAIO;AAqFE;AA/DT,eAAe,aAAa,OAA8B;AACxD,MAAI;AACF,UAAM,MAAM,aAAa;AAAA,MACvB,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,sDAAsD,KAAK;AAAA,EAC3E;AACF;AAGA,eAAe,gBAA+B;AAC5C,MAAI;AACF,UAAM,MAAM,aAAa,EAAE,QAAQ,SAAS,CAAC;AAAA,EAC/C,SAAS,OAAO;AAAA,EAEhB;AACF;AAwBO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA,iBAAiB;AAAA,EACjB;AACF,GAA0B;AACxB,QAAM,gBAAuC;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AAEA,SAAO,4CAAC,aAAAA,kBAAA,EAAuB,GAAG,eAAe;AACnD;AAuBO,IAAM,cAAc,aAAAC;;;ACpH3B,kBAAsC;AACtC,4BAAwB;AAWjB,SAAS,MAAM,QAAsB;AAC1C,aAAO,mCAAQ,kBAAK,MAAM,CAAC;AAC7B;;;AFPA,wBAAc,kCAPd;AAUA,wBAAc,uCAVd;","names":["ReactInsforgeProvider","useReactInsforge"]}

package/dist/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts","../src/provider/InsforgeProvider.tsx","../src/lib/utils.ts"],"sourcesContent":["export * from '@insforge/react/types';\n\n// Provider\nexport { InsforgeProvider, useInsforge } from './provider/InsforgeProvider';\nexport { cn } from './lib/utils';\n\n// Hooks\nexport * from '@insforge/react/hooks';\n\n// Components\nexport * from '@insforge/react/components';\n","'use client';\n\nimport type { ReactNode } from 'react';\nimport { \n  InsforgeProvider as ReactInsforgeProvider, \n  useInsforge as useReactInsforge,\n  type InsforgeUser\n} from '@insforge/react';\n\nexport interface InsforgeProviderProps {\n  children: ReactNode;\n  baseUrl: string;\n  /**\n   * URL to redirect to after successful sign in (when token is detected in URL)\n   * Note: Middleware handles token storage, but Provider handles the redirect\n   * @default '/'\n   */\n  afterSignInUrl?: string;\n  onAuthChange?: (user: InsforgeUser | null) => void;\n}\n\n// Extended interface for React provider that includes internal handlers\ninterface ExtendedProviderProps extends InsforgeProviderProps {\n  afterSignInUrl?: string;\n  onSignIn?: (authToken: string) => Promise<void>;\n  onSignOut?: () => Promise<void>;\n}\n\n// Sync token to server-side cookie on sign in\nasync function handleSignIn(token: string): Promise<void> {\n  try {\n    await fetch('/api/auth', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        action: 'sync-token',\n        token,\n      }),\n    });\n  } catch (error) {\n    console.error('[InsforgeProvider] Failed to sync token to cookie:', error);\n  }\n}\n\n// Clear HTTP-only cookie on sign out\nasync function handleSignOut(): Promise<void> {\n  try {\n    await fetch('/api/auth', { method: 'DELETE' });\n  } catch (error) {\n    // API route doesn't exist - ignore\n  }\n}\n\n/**\n * Insforge Provider for Next.js - wraps @insforge/react provider with Next.js-specific cookie sync\n * \n * Manages user authentication state and provides all necessary context to child components.\n * Automatically syncs authentication tokens to HTTP-only cookies for server-side middleware support.\n * \n * @example\n * ```tsx\n * import { InsforgeProvider } from '@insforge/nextjs';\n * \n * export default function RootLayout({ children }) {\n *   return (\n *     <InsforgeProvider \n *       baseUrl={process.env.NEXT_PUBLIC_INSFORGE_BASE_URL!}\n *       afterSignInUrl=\"/dashboard\"\n *     >\n *       {children}\n *     </InsforgeProvider>\n *   );\n * }\n * ```\n */\nexport function InsforgeProvider({ \n  children, \n  baseUrl,\n  afterSignInUrl = '/',\n  onAuthChange,\n}: InsforgeProviderProps) {\n  const providerProps: ExtendedProviderProps = {\n    children,\n    baseUrl,\n    afterSignInUrl,\n    onAuthChange,\n    onSignIn: handleSignIn,\n    onSignOut: handleSignOut,\n  };\n\n  return <ReactInsforgeProvider {...providerProps} />;\n}\n\n/**\n * Hook to access Insforge context\n * \n * Re-exports the hook from @insforge/react for convenience.\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, isSignedIn, signOut } = useInsforge();\n *   \n *   if (!isSignedIn) return <SignIn />;\n *   \n *   return (\n *     <div>\n *       <p>Welcome {user.email}</p>\n *       <button onClick={signOut}>Sign Out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport const useInsforge = useReactInsforge;\n","import { type ClassValue, clsx } from 'clsx';\r\nimport { twMerge } from 'tailwind-merge';\r\n\r\n/**\r\n * Utility function to merge Tailwind CSS classes with clsx\r\n * Allows users to inject custom className overrides\r\n * \r\n * @example\r\n * ```tsx\r\n * cn(\"text-base\", isDark && \"text-white\", customClassName)\r\n * ```\r\n */\r\nexport function cn(...inputs: ClassValue[]) {\r\n  return twMerge(clsx(inputs));\r\n}\r\n\r\n"],"mappings":";;;AAAA,cAAc;;;ACGd;AAAA,EACE,oBAAoB;AAAA,EACpB,eAAe;AAAA,OAEV;AAqFE;AA/DT,eAAe,aAAa,OAA8B;AACxD,MAAI;AACF,UAAM,MAAM,aAAa;AAAA,MACvB,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,sDAAsD,KAAK;AAAA,EAC3E;AACF;AAGA,eAAe,gBAA+B;AAC5C,MAAI;AACF,UAAM,MAAM,aAAa,EAAE,QAAQ,SAAS,CAAC;AAAA,EAC/C,SAAS,OAAO;AAAA,EAEhB;AACF;AAwBO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA,iBAAiB;AAAA,EACjB;AACF,GAA0B;AACxB,QAAM,gBAAuC;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AAEA,SAAO,oBAAC,yBAAuB,GAAG,eAAe;AACnD;AAuBO,IAAM,cAAc;;;ACpH3B,SAA0B,YAAY;AACtC,SAAS,eAAe;AAWjB,SAAS,MAAM,QAAsB;AAC1C,SAAO,QAAQ,KAAK,MAAM,CAAC;AAC7B;;;AFPA,cAAc;AAGd,cAAc;","names":[]}

package/dist/middleware.d.ts

@@ -1,15 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-
-interface InsforgeMiddlewareConfig {
-    baseUrl: string;
-    publicRoutes?: string[];
-    signInUrl?: string;
-    signUpUrl?: string;
-    forgotPasswordUrl?: string;
-    afterSignInUrl?: string;
-    cookieName?: string;
-    useBuiltInAuth?: boolean;
-}
-declare function InsforgeMiddleware(config: InsforgeMiddlewareConfig): (request: NextRequest) => Promise<NextResponse<unknown>>;
-
-export { InsforgeMiddleware, type InsforgeMiddlewareConfig };

package/dist/middleware.js

@@ -1,98 +0,0 @@
-"use client";
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/middleware/index.ts
-var middleware_exports = {};
-__export(middleware_exports, {
-  InsforgeMiddleware: () => InsforgeMiddleware
-});
-module.exports = __toCommonJS(middleware_exports);
-
-// src/middleware/InsforgeMiddleware.ts
-var import_server = require("next/server");
-function InsforgeMiddleware(config) {
-  const {
-    baseUrl,
-    publicRoutes = ["/"],
-    signInUrl = "/sign-in",
-    signUpUrl = "/sign-up",
-    forgotPasswordUrl = "/forgot-password",
-    afterSignInUrl = "/",
-    cookieName = "insforge_token",
-    useBuiltInAuth = true
-  } = config;
-  return async function middleware(request) {
-    const { pathname, searchParams } = request.nextUrl;
-    const accessToken = searchParams.get("access_token");
-    if (accessToken) {
-      const response = import_server.NextResponse.redirect(new URL(pathname, request.url));
-      response.cookies.set(cookieName, accessToken, {
-        httpOnly: true,
-        secure: process.env.NODE_ENV === "production",
-        sameSite: "lax",
-        path: "/",
-        maxAge: 60 * 60 * 24 * 7
-        // 7 days
-      });
-      return response;
-    }
-    if (useBuiltInAuth) {
-      const authRouteMapping = {
-        [signInUrl]: "/auth/sign-in",
-        [signUpUrl]: "/auth/sign-up",
-        [forgotPasswordUrl]: "/auth/forgot-password"
-      };
-      const backendAuthPath = authRouteMapping[pathname];
-      if (backendAuthPath) {
-        const redirectUrl = new URL(afterSignInUrl, request.url).toString();
-        const backendAuthUrl = new URL(backendAuthPath, baseUrl);
-        backendAuthUrl.searchParams.set("redirect", redirectUrl);
-        return import_server.NextResponse.redirect(backendAuthUrl.toString());
-      }
-    }
-    const isPublicRoute = publicRoutes.some((route) => {
-      if (route.endsWith("*")) {
-        return pathname.startsWith(route.slice(0, -1));
-      }
-      return pathname === route || pathname.startsWith(route + "/");
-    });
-    if (isPublicRoute) {
-      return import_server.NextResponse.next();
-    }
-    const token = request.cookies.get(cookieName)?.value;
-    if (!token) {
-      if (useBuiltInAuth) {
-        const backendSignInUrl = new URL("/auth/sign-in", baseUrl);
-        backendSignInUrl.searchParams.set("redirect", request.url);
-        return import_server.NextResponse.redirect(backendSignInUrl);
-      } else {
-        const localSignInUrl = new URL(signInUrl, request.url);
-        localSignInUrl.searchParams.set("redirect", pathname);
-        return import_server.NextResponse.redirect(localSignInUrl);
-      }
-    }
-    return import_server.NextResponse.next();
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  InsforgeMiddleware
-});
-//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/middleware/index.ts","../src/middleware/InsforgeMiddleware.ts"],"sourcesContent":["// Middleware exports - NO 'use client' directive here!\r\n// Middleware runs in Edge Runtime, not in client browser\r\n\r\nexport {\r\n  InsforgeMiddleware,\r\n} from './InsforgeMiddleware';\r\n\r\nexport type { InsforgeMiddlewareConfig } from './InsforgeMiddleware';\r\n\r\n","import { NextRequest, NextResponse } from 'next/server';\r\n\r\nexport interface InsforgeMiddlewareConfig {\r\n  /**\r\n   * Base URL of your Insforge backend\r\n   * @example 'https://your-backend.com' or 'http://localhost:3001'\r\n   */\r\n  baseUrl: string;\r\n\r\n  /**\r\n   * Routes that are public and don't require authentication\r\n   * @default ['/']\r\n   * @example ['/sign-in', '/sign-up', '/', '/about']\r\n   */\r\n  publicRoutes?: string[];\r\n\r\n  /**\r\n   * Local route path for sign-in (can be customized to any path like '/login')\r\n   * When using built-in auth, this will redirect to backend's `/auth/sign-in`\r\n   * @default '/sign-in'\r\n   */\r\n  signInUrl?: string;\r\n\r\n  /**\r\n   * Local route path for sign-up (can be customized to any path like '/register')\r\n   * When using built-in auth, this will redirect to backend's `/auth/sign-up`\r\n   * @default '/sign-up'\r\n   */\r\n  signUpUrl?: string;\r\n\r\n  /**\r\n   * Local route path for forgot password\r\n   * When using built-in auth, this will redirect to backend's `/auth/forgot-password`\r\n   * @default '/forgot-password'\r\n   */\r\n  forgotPasswordUrl?: string;\r\n\r\n  /**\r\n   * URL to redirect to after successful authentication\r\n   * When user completes sign-in/sign-up, they will be redirected to this URL with token in URL\r\n   * @default '/'\r\n   */\r\n  afterSignInUrl?: string;\r\n\r\n  /**\r\n   * Cookie name for the auth token\r\n   * @default 'insforge_token'\r\n   */\r\n  cookieName?: string;\r\n\r\n  /**\r\n   * Whether to use built-in authentication pages hosted on the backend\r\n   * - When true: redirects to backend's `/auth/sign-in` and `/auth/sign-up` pages\r\n   * - When false: redirects to local sign-in/sign-up pages (you provide your own components)\r\n   * @default true\r\n   */\r\n  useBuiltInAuth?: boolean;\r\n}\r\n\r\n/**\r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * This middleware provides lightweight route protection by:\r\n * - Detecting and storing auth tokens from URL parameters (after backend redirect)\r\n * - Checking for auth token presence in cookies\r\n * - Redirecting unauthenticated users to sign-in page\r\n * - Allowing public routes to be accessed without authentication\r\n * - Mapping local auth routes to backend's fixed paths when using built-in auth\r\n * \r\n * **How Authentication Flow Works:**\r\n * 1. User visits protected route → Middleware checks for token\r\n * 2. No token → Redirects to sign-in (backend or local)\r\n * 3. User accesses auth page (e.g., /sign-in) → Redirects to backend with afterSignInUrl as redirect target\r\n * 4. After sign-in → Backend redirects to `yourapp.com/afterSignInUrl?access_token=xxx&user_id=xxx...`\r\n * 5. Middleware detects `access_token` in URL → Stores in HTTP-only cookie → Cleans URL → Allows access\r\n * 6. SDK also detects token from URL → Stores in localStorage → Updates auth state\r\n * \r\n * **Important Notes:**\r\n * - This middleware only checks if a token exists, it doesn't validate it\r\n * - Tokens from URL are automatically extracted and stored in cookies\r\n * - When `useBuiltInAuth: true`, local routes map to backend's fixed auth paths\r\n * - You can customize local route paths (e.g., `/login`) while backend paths remain fixed\r\n * - After successful auth, users are redirected to `afterSignInUrl` (default: `/`), not back to the auth page\r\n * \r\n * @param config - Middleware configuration\r\n * @returns Next.js middleware function\r\n *\r\n * @example\r\n * ```ts\r\n * // middleware.ts - Using built-in auth\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   publicRoutes: ['/', '/about'],\r\n *   afterSignInUrl: '/', // Redirect here after successful auth\r\n *   useBuiltInAuth: true,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Custom local auth pages with custom paths\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   publicRoutes: ['/login', '/register', '/', '/about'],\r\n *   signInUrl: '/login',\r\n *   signUpUrl: '/register',\r\n *   afterSignInUrl: '/dashboard',\r\n *   useBuiltInAuth: false,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Built-in auth with custom auth route paths\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: 'https://your-backend.com',\r\n *   signInUrl: '/login',\r\n *   signUpUrl: '/register',\r\n *   forgotPasswordUrl: '/forgot',\r\n *   afterSignInUrl: '/dashboard',\r\n *   useBuiltInAuth: true,\r\n * });\r\n * ```\r\n */\r\nexport function InsforgeMiddleware(config: InsforgeMiddlewareConfig) {\r\n  const {\r\n    baseUrl,\r\n    publicRoutes = [\"/\"],\r\n    signInUrl = '/sign-in',\r\n    signUpUrl = '/sign-up',\r\n    forgotPasswordUrl = '/forgot-password',\r\n    afterSignInUrl = '/',\r\n    cookieName = 'insforge_token',\r\n    useBuiltInAuth = true,\r\n  } = config;\r\n\r\n  return async function middleware(request: NextRequest) {\r\n    const { pathname, searchParams } = request.nextUrl;\r\n\r\n    // STEP 1: Check if URL contains access_token (from backend redirect after auth)\r\n    const accessToken = searchParams.get('access_token');\r\n    \r\n    if (accessToken) {\r\n      // Token detected in URL - store it in HTTP-only cookie and clean URL\r\n      const response = NextResponse.redirect(new URL(pathname, request.url));\r\n      \r\n      // Set HTTP-only cookie with secure settings\r\n      response.cookies.set(cookieName, accessToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'lax',\r\n        path: '/',\r\n        maxAge: 60 * 60 * 24 * 7, // 7 days\r\n      });\r\n      \r\n      return response;\r\n    }\r\n\r\n    // STEP 2: Handle built-in auth redirects for authentication pages\r\n    // Map local auth routes to backend's fixed auth pages\r\n    if (useBuiltInAuth) {\r\n      const authRouteMapping: Record<string, string> = {\r\n        [signInUrl]: '/auth/sign-in',\r\n        [signUpUrl]: '/auth/sign-up',\r\n        [forgotPasswordUrl]: '/auth/forgot-password',\r\n      };\r\n\r\n      const backendAuthPath = authRouteMapping[pathname];\r\n      if (backendAuthPath) {\r\n        // Redirect to afterSignInUrl after successful authentication\r\n        const redirectUrl = new URL(afterSignInUrl, request.url).toString();\r\n        const backendAuthUrl = new URL(backendAuthPath, baseUrl);\r\n        backendAuthUrl.searchParams.set('redirect', redirectUrl);\r\n        return NextResponse.redirect(backendAuthUrl.toString());\r\n      }\r\n    }\r\n\r\n    // STEP 3: Check if route is public\r\n    const isPublicRoute = publicRoutes.some((route) => {\r\n      if (route.endsWith('*')) {\r\n        // Wildcard route: /admin/* matches /admin/anything\r\n        return pathname.startsWith(route.slice(0, -1));\r\n      }\r\n      // Exact match or starts with route path\r\n      return pathname === route || pathname.startsWith(route + '/');\r\n    });\r\n\r\n    if (isPublicRoute) {\r\n      return NextResponse.next();\r\n    }\r\n\r\n    // STEP 4: Check for authentication token in cookies\r\n    const token = request.cookies.get(cookieName)?.value;\r\n\r\n    if (!token) {\r\n      // No token found, redirect to sign-in\r\n      if (useBuiltInAuth) {\r\n        // Built-in auth: redirect to backend's /auth/sign-in page\r\n        // Backend will redirect back to current URL with token\r\n        const backendSignInUrl = new URL('/auth/sign-in', baseUrl);\r\n        backendSignInUrl.searchParams.set('redirect', request.url);\r\n        return NextResponse.redirect(backendSignInUrl);\r\n      } else {\r\n        // Custom auth: redirect to local sign-in page\r\n        const localSignInUrl = new URL(signInUrl, request.url);\r\n        localSignInUrl.searchParams.set('redirect', pathname);\r\n        return NextResponse.redirect(localSignInUrl);\r\n      }\r\n    }\r\n\r\n    // Token exists in cookie, allow request to continue\r\n    return NextResponse.next();\r\n  };\r\n}"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAA0C;AA0InC,SAAS,mBAAmB,QAAkC;AACnE,QAAM;AAAA,IACJ;AAAA,IACA,eAAe,CAAC,GAAG;AAAA,IACnB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB,IAAI;AAEJ,SAAO,eAAe,WAAW,SAAsB;AACrD,UAAM,EAAE,UAAU,aAAa,IAAI,QAAQ;AAG3C,UAAM,cAAc,aAAa,IAAI,cAAc;AAEnD,QAAI,aAAa;AAEf,YAAM,WAAW,2BAAa,SAAS,IAAI,IAAI,UAAU,QAAQ,GAAG,CAAC;AAGrE,eAAS,QAAQ,IAAI,YAAY,aAAa;AAAA,QAC5C,UAAU;AAAA,QACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,QACjC,UAAU;AAAA,QACV,MAAM;AAAA,QACN,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,MACzB,CAAC;AAED,aAAO;AAAA,IACT;AAIA,QAAI,gBAAgB;AAClB,YAAM,mBAA2C;AAAA,QAC/C,CAAC,SAAS,GAAG;AAAA,QACb,CAAC,SAAS,GAAG;AAAA,QACb,CAAC,iBAAiB,GAAG;AAAA,MACvB;AAEA,YAAM,kBAAkB,iBAAiB,QAAQ;AACjD,UAAI,iBAAiB;AAEnB,cAAM,cAAc,IAAI,IAAI,gBAAgB,QAAQ,GAAG,EAAE,SAAS;AAClE,cAAM,iBAAiB,IAAI,IAAI,iBAAiB,OAAO;AACvD,uBAAe,aAAa,IAAI,YAAY,WAAW;AACvD,eAAO,2BAAa,SAAS,eAAe,SAAS,CAAC;AAAA,MACxD;AAAA,IACF;AAGA,UAAM,gBAAgB,aAAa,KAAK,CAAC,UAAU;AACjD,UAAI,MAAM,SAAS,GAAG,GAAG;AAEvB,eAAO,SAAS,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/C;AAEA,aAAO,aAAa,SAAS,SAAS,WAAW,QAAQ,GAAG;AAAA,IAC9D,CAAC;AAED,QAAI,eAAe;AACjB,aAAO,2BAAa,KAAK;AAAA,IAC3B;AAGA,UAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,QAAI,CAAC,OAAO;AAEV,UAAI,gBAAgB;AAGlB,cAAM,mBAAmB,IAAI,IAAI,iBAAiB,OAAO;AACzD,yBAAiB,aAAa,IAAI,YAAY,QAAQ,GAAG;AACzD,eAAO,2BAAa,SAAS,gBAAgB;AAAA,MAC/C,OAAO;AAEL,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,eAAO,2BAAa,SAAS,cAAc;AAAA,MAC7C;AAAA,IACF;AAGA,WAAO,2BAAa,KAAK;AAAA,EAC3B;AACF;","names":[]}

package/dist/middleware.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/middleware/InsforgeMiddleware.ts"],"sourcesContent":["import { NextRequest, NextResponse } from 'next/server';\r\n\r\nexport interface InsforgeMiddlewareConfig {\r\n  /**\r\n   * Base URL of your Insforge backend\r\n   * @example 'https://your-backend.com' or 'http://localhost:3001'\r\n   */\r\n  baseUrl: string;\r\n\r\n  /**\r\n   * Routes that are public and don't require authentication\r\n   * @default ['/']\r\n   * @example ['/sign-in', '/sign-up', '/', '/about']\r\n   */\r\n  publicRoutes?: string[];\r\n\r\n  /**\r\n   * Local route path for sign-in (can be customized to any path like '/login')\r\n   * When using built-in auth, this will redirect to backend's `/auth/sign-in`\r\n   * @default '/sign-in'\r\n   */\r\n  signInUrl?: string;\r\n\r\n  /**\r\n   * Local route path for sign-up (can be customized to any path like '/register')\r\n   * When using built-in auth, this will redirect to backend's `/auth/sign-up`\r\n   * @default '/sign-up'\r\n   */\r\n  signUpUrl?: string;\r\n\r\n  /**\r\n   * Local route path for forgot password\r\n   * When using built-in auth, this will redirect to backend's `/auth/forgot-password`\r\n   * @default '/forgot-password'\r\n   */\r\n  forgotPasswordUrl?: string;\r\n\r\n  /**\r\n   * URL to redirect to after successful authentication\r\n   * When user completes sign-in/sign-up, they will be redirected to this URL with token in URL\r\n   * @default '/'\r\n   */\r\n  afterSignInUrl?: string;\r\n\r\n  /**\r\n   * Cookie name for the auth token\r\n   * @default 'insforge_token'\r\n   */\r\n  cookieName?: string;\r\n\r\n  /**\r\n   * Whether to use built-in authentication pages hosted on the backend\r\n   * - When true: redirects to backend's `/auth/sign-in` and `/auth/sign-up` pages\r\n   * - When false: redirects to local sign-in/sign-up pages (you provide your own components)\r\n   * @default true\r\n   */\r\n  useBuiltInAuth?: boolean;\r\n}\r\n\r\n/**\r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * This middleware provides lightweight route protection by:\r\n * - Detecting and storing auth tokens from URL parameters (after backend redirect)\r\n * - Checking for auth token presence in cookies\r\n * - Redirecting unauthenticated users to sign-in page\r\n * - Allowing public routes to be accessed without authentication\r\n * - Mapping local auth routes to backend's fixed paths when using built-in auth\r\n * \r\n * **How Authentication Flow Works:**\r\n * 1. User visits protected route → Middleware checks for token\r\n * 2. No token → Redirects to sign-in (backend or local)\r\n * 3. User accesses auth page (e.g., /sign-in) → Redirects to backend with afterSignInUrl as redirect target\r\n * 4. After sign-in → Backend redirects to `yourapp.com/afterSignInUrl?access_token=xxx&user_id=xxx...`\r\n * 5. Middleware detects `access_token` in URL → Stores in HTTP-only cookie → Cleans URL → Allows access\r\n * 6. SDK also detects token from URL → Stores in localStorage → Updates auth state\r\n * \r\n * **Important Notes:**\r\n * - This middleware only checks if a token exists, it doesn't validate it\r\n * - Tokens from URL are automatically extracted and stored in cookies\r\n * - When `useBuiltInAuth: true`, local routes map to backend's fixed auth paths\r\n * - You can customize local route paths (e.g., `/login`) while backend paths remain fixed\r\n * - After successful auth, users are redirected to `afterSignInUrl` (default: `/`), not back to the auth page\r\n * \r\n * @param config - Middleware configuration\r\n * @returns Next.js middleware function\r\n *\r\n * @example\r\n * ```ts\r\n * // middleware.ts - Using built-in auth\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   publicRoutes: ['/', '/about'],\r\n *   afterSignInUrl: '/', // Redirect here after successful auth\r\n *   useBuiltInAuth: true,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Custom local auth pages with custom paths\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   publicRoutes: ['/login', '/register', '/', '/about'],\r\n *   signInUrl: '/login',\r\n *   signUpUrl: '/register',\r\n *   afterSignInUrl: '/dashboard',\r\n *   useBuiltInAuth: false,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Built-in auth with custom auth route paths\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: 'https://your-backend.com',\r\n *   signInUrl: '/login',\r\n *   signUpUrl: '/register',\r\n *   forgotPasswordUrl: '/forgot',\r\n *   afterSignInUrl: '/dashboard',\r\n *   useBuiltInAuth: true,\r\n * });\r\n * ```\r\n */\r\nexport function InsforgeMiddleware(config: InsforgeMiddlewareConfig) {\r\n  const {\r\n    baseUrl,\r\n    publicRoutes = [\"/\"],\r\n    signInUrl = '/sign-in',\r\n    signUpUrl = '/sign-up',\r\n    forgotPasswordUrl = '/forgot-password',\r\n    afterSignInUrl = '/',\r\n    cookieName = 'insforge_token',\r\n    useBuiltInAuth = true,\r\n  } = config;\r\n\r\n  return async function middleware(request: NextRequest) {\r\n    const { pathname, searchParams } = request.nextUrl;\r\n\r\n    // STEP 1: Check if URL contains access_token (from backend redirect after auth)\r\n    const accessToken = searchParams.get('access_token');\r\n    \r\n    if (accessToken) {\r\n      // Token detected in URL - store it in HTTP-only cookie and clean URL\r\n      const response = NextResponse.redirect(new URL(pathname, request.url));\r\n      \r\n      // Set HTTP-only cookie with secure settings\r\n      response.cookies.set(cookieName, accessToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'lax',\r\n        path: '/',\r\n        maxAge: 60 * 60 * 24 * 7, // 7 days\r\n      });\r\n      \r\n      return response;\r\n    }\r\n\r\n    // STEP 2: Handle built-in auth redirects for authentication pages\r\n    // Map local auth routes to backend's fixed auth pages\r\n    if (useBuiltInAuth) {\r\n      const authRouteMapping: Record<string, string> = {\r\n        [signInUrl]: '/auth/sign-in',\r\n        [signUpUrl]: '/auth/sign-up',\r\n        [forgotPasswordUrl]: '/auth/forgot-password',\r\n      };\r\n\r\n      const backendAuthPath = authRouteMapping[pathname];\r\n      if (backendAuthPath) {\r\n        // Redirect to afterSignInUrl after successful authentication\r\n        const redirectUrl = new URL(afterSignInUrl, request.url).toString();\r\n        const backendAuthUrl = new URL(backendAuthPath, baseUrl);\r\n        backendAuthUrl.searchParams.set('redirect', redirectUrl);\r\n        return NextResponse.redirect(backendAuthUrl.toString());\r\n      }\r\n    }\r\n\r\n    // STEP 3: Check if route is public\r\n    const isPublicRoute = publicRoutes.some((route) => {\r\n      if (route.endsWith('*')) {\r\n        // Wildcard route: /admin/* matches /admin/anything\r\n        return pathname.startsWith(route.slice(0, -1));\r\n      }\r\n      // Exact match or starts with route path\r\n      return pathname === route || pathname.startsWith(route + '/');\r\n    });\r\n\r\n    if (isPublicRoute) {\r\n      return NextResponse.next();\r\n    }\r\n\r\n    // STEP 4: Check for authentication token in cookies\r\n    const token = request.cookies.get(cookieName)?.value;\r\n\r\n    if (!token) {\r\n      // No token found, redirect to sign-in\r\n      if (useBuiltInAuth) {\r\n        // Built-in auth: redirect to backend's /auth/sign-in page\r\n        // Backend will redirect back to current URL with token\r\n        const backendSignInUrl = new URL('/auth/sign-in', baseUrl);\r\n        backendSignInUrl.searchParams.set('redirect', request.url);\r\n        return NextResponse.redirect(backendSignInUrl);\r\n      } else {\r\n        // Custom auth: redirect to local sign-in page\r\n        const localSignInUrl = new URL(signInUrl, request.url);\r\n        localSignInUrl.searchParams.set('redirect', pathname);\r\n        return NextResponse.redirect(localSignInUrl);\r\n      }\r\n    }\r\n\r\n    // Token exists in cookie, allow request to continue\r\n    return NextResponse.next();\r\n  };\r\n}"],"mappings":";;;AAAA,SAAsB,oBAAoB;AA0InC,SAAS,mBAAmB,QAAkC;AACnE,QAAM;AAAA,IACJ;AAAA,IACA,eAAe,CAAC,GAAG;AAAA,IACnB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB,IAAI;AAEJ,SAAO,eAAe,WAAW,SAAsB;AACrD,UAAM,EAAE,UAAU,aAAa,IAAI,QAAQ;AAG3C,UAAM,cAAc,aAAa,IAAI,cAAc;AAEnD,QAAI,aAAa;AAEf,YAAM,WAAW,aAAa,SAAS,IAAI,IAAI,UAAU,QAAQ,GAAG,CAAC;AAGrE,eAAS,QAAQ,IAAI,YAAY,aAAa;AAAA,QAC5C,UAAU;AAAA,QACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,QACjC,UAAU;AAAA,QACV,MAAM;AAAA,QACN,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,MACzB,CAAC;AAED,aAAO;AAAA,IACT;AAIA,QAAI,gBAAgB;AAClB,YAAM,mBAA2C;AAAA,QAC/C,CAAC,SAAS,GAAG;AAAA,QACb,CAAC,SAAS,GAAG;AAAA,QACb,CAAC,iBAAiB,GAAG;AAAA,MACvB;AAEA,YAAM,kBAAkB,iBAAiB,QAAQ;AACjD,UAAI,iBAAiB;AAEnB,cAAM,cAAc,IAAI,IAAI,gBAAgB,QAAQ,GAAG,EAAE,SAAS;AAClE,cAAM,iBAAiB,IAAI,IAAI,iBAAiB,OAAO;AACvD,uBAAe,aAAa,IAAI,YAAY,WAAW;AACvD,eAAO,aAAa,SAAS,eAAe,SAAS,CAAC;AAAA,MACxD;AAAA,IACF;AAGA,UAAM,gBAAgB,aAAa,KAAK,CAAC,UAAU;AACjD,UAAI,MAAM,SAAS,GAAG,GAAG;AAEvB,eAAO,SAAS,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/C;AAEA,aAAO,aAAa,SAAS,SAAS,WAAW,QAAQ,GAAG;AAAA,IAC9D,CAAC;AAED,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK;AAAA,IAC3B;AAGA,UAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,QAAI,CAAC,OAAO;AAEV,UAAI,gBAAgB;AAGlB,cAAM,mBAAmB,IAAI,IAAI,iBAAiB,OAAO;AACzD,yBAAiB,aAAa,IAAI,YAAY,QAAQ,GAAG;AACzD,eAAO,aAAa,SAAS,gBAAgB;AAAA,MAC/C,OAAO;AAEL,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,eAAO,aAAa,SAAS,cAAc;AAAA,MAC7C;AAAA,IACF;AAGA,WAAO,aAAa,KAAK;AAAA,EAC3B;AACF;","names":[]}