@insforge/nextjs 0.9.6 → 0.10.0

package/dist/client-boundary/components.d.ts

@@ -1,2 +1 @@
 export { AuthBranding, AuthContainer, AuthContainerProps, AuthDivider, AuthDividerProps, AuthEmailVerificationStep, AuthErrorBanner, AuthErrorBannerProps, AuthFormField, AuthFormFieldProps, AuthHeader, AuthHeaderProps, AuthLink, AuthLinkProps, AuthOAuthButton, AuthOAuthButtonProps, AuthOAuthProviders, AuthOAuthProvidersProps, AuthPasswordField, AuthPasswordFieldProps, AuthPasswordStrengthIndicator, AuthPasswordStrengthIndicatorProps, AuthResetPasswordVerificationStep, AuthSubmitButton, AuthSubmitButtonProps, AuthVerificationCodeInput, AuthVerificationCodeInputProps, ConditionalProps, ForgotPassword, ForgotPasswordForm, ForgotPasswordFormProps, ForgotPasswordProps, Protect, ProtectProps, ResetPassword, ResetPasswordForm, ResetPasswordFormProps, ResetPasswordProps, SignIn, SignInForm, SignInFormProps, SignInProps, SignUp, SignUpForm, SignUpFormProps, SignUpProps, SignedIn, SignedOut, UserButton, UserButtonProps, VerifyEmail, VerifyEmailProps, VerifyEmailStatus, VerifyEmailStatusProps } from '@insforge/react/components';
-import '@insforge/react/hooks';

package/dist/client-boundary/hooks.d.ts

@@ -1 +1,67 @@
-export { useAuth, usePublicAuthConfig, useUser } from '@insforge/react/hooks';
+import * as _insforge_react from '@insforge/react';
+
+declare function useAuth(): {
+    signIn: (email: string, password: string) => Promise<{
+        user: {
+            id: string;
+            createdAt: string;
+            email: string;
+            name: string;
+            emailVerified: boolean;
+            updatedAt: string;
+            identities?: {
+                provider: string;
+            }[] | undefined;
+            providerType?: string | undefined;
+        };
+        accessToken: string;
+        redirectTo?: string | undefined;
+    } | {
+        error: string;
+        statusCode?: number;
+        errorCode?: string;
+    }>;
+    signUp: (email: string, password: string) => Promise<{
+        accessToken: string | null;
+        user?: {
+            id: string;
+            createdAt: string;
+            email: string;
+            name: string;
+            emailVerified: boolean;
+            updatedAt: string;
+            identities?: {
+                provider: string;
+            }[] | undefined;
+            providerType?: string | undefined;
+        } | undefined;
+        requireEmailVerification?: boolean | undefined;
+        redirectTo?: string | undefined;
+    } | {
+        error: string;
+        statusCode?: number;
+        errorCode?: string;
+    }>;
+    signOut: () => Promise<void>;
+    isLoaded: boolean;
+    isSignedIn: boolean;
+};
+declare function useUser(): {
+    user: _insforge_react.InsforgeUser | null;
+    isLoaded: boolean;
+};
+declare function usePublicAuthConfig(): {
+    getPublicAuthConfig: () => Promise<{
+        requireEmailVerification: boolean;
+        passwordMinLength: number;
+        requireNumber: boolean;
+        requireLowercase: boolean;
+        requireUppercase: boolean;
+        requireSpecialChar: boolean;
+        verifyEmailMethod: "code" | "link";
+        resetPasswordMethod: "code" | "link";
+        oAuthProviders: ("google" | "github" | "discord" | "linkedin" | "facebook" | "instagram" | "tiktok" | "apple" | "x" | "spotify" | "microsoft")[];
+    } | null>;
+};
+
+export { useAuth, usePublicAuthConfig, useUser };

package/dist/client-boundary/provider.d.ts

@@ -1,8 +1,7 @@
-export { InsforgeProvider, useInsforge } from '../provider/InsforgeProvider.js';
-export { NextNavigationAdapter as NavigationAdapter } from '../navigation/NextNavigationAdapter.js';
-import '@insforge/react/types';
-import '@insforge/react/components';
-import '@insforge/react/hooks';
-import 'react/jsx-runtime';
-import '@insforge/react';
-import '@insforge/react/navigation';
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import { InsforgeProviderProps, useInsforge as useInsforge$1 } from '@insforge/react';
+
+declare function InsforgeProvider({ children, baseUrl, afterSignInUrl, onAuthChange, }: InsforgeProviderProps): react_jsx_runtime.JSX.Element;
+declare const useInsforge: typeof useInsforge$1;
+
+export { InsforgeProvider, useInsforge };

package/dist/esm/client-boundary/hooks.js

@@ -1,5 +1,17 @@
 "use client";
-import { useAuth, useUser, usePublicAuthConfig } from "@insforge/react/hooks";
+import { useInsforge } from "./provider";
+function useAuth() {
+  const { signIn, signUp, signOut, isLoaded, isSignedIn } = useInsforge();
+  return { signIn, signUp, signOut, isLoaded, isSignedIn };
+}
+function useUser() {
+  const { user, isLoaded } = useInsforge();
+  return { user, isLoaded };
+}
+function usePublicAuthConfig() {
+  const { getPublicAuthConfig } = useInsforge();
+  return { getPublicAuthConfig };
+}
 export {
   useAuth,
   usePublicAuthConfig,

package/dist/esm/client-boundary/hooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/client-boundary/hooks.ts"],"sourcesContent":["'use client';\r\n\r\n/**\r\n * Client-side hooks boundary for Next.js App Router\r\n * All hooks from @insforge/react are re-exported here with 'use client' directive\r\n */\r\n\r\nexport { useAuth, useUser, usePublicAuthConfig } from '@insforge/react/hooks';\r\n\r\n"],"mappings":";AAOA,SAAS,SAAS,SAAS,2BAA2B;","names":[]}
+{"version":3,"sources":["../../../src/client-boundary/hooks.ts"],"sourcesContent":["'use client';\r\n\r\nimport { useInsforge } from './provider';\r\n\r\n/**\r\n * Next.js specific hooks - implemented locally to avoid Context duplication\r\n */\r\n\r\nexport function useAuth() {\r\n  const { signIn, signUp, signOut, isLoaded, isSignedIn } = useInsforge();\r\n  return { signIn, signUp, signOut, isLoaded, isSignedIn };\r\n}\r\n\r\nexport function useUser() {\r\n  const { user, isLoaded } = useInsforge();\r\n  return { user, isLoaded };\r\n}\r\n\r\nexport function usePublicAuthConfig() {\r\n  const { getPublicAuthConfig } = useInsforge();\r\n  return { getPublicAuthConfig };\r\n}\r\n"],"mappings":";AAEA,SAAS,mBAAmB;AAMrB,SAAS,UAAU;AACxB,QAAM,EAAE,QAAQ,QAAQ,SAAS,UAAU,WAAW,IAAI,YAAY;AACtE,SAAO,EAAE,QAAQ,QAAQ,SAAS,UAAU,WAAW;AACzD;AAEO,SAAS,UAAU;AACxB,QAAM,EAAE,MAAM,SAAS,IAAI,YAAY;AACvC,SAAO,EAAE,MAAM,SAAS;AAC1B;AAEO,SAAS,sBAAsB;AACpC,QAAM,EAAE,oBAAoB,IAAI,YAAY;AAC5C,SAAO,EAAE,oBAAoB;AAC/B;","names":[]}

package/dist/esm/client-boundary/provider.js

@@ -1,9 +1,52 @@
 "use client";
-import { InsforgeProvider, useInsforge } from "../provider/InsforgeProvider";
+import { jsx } from "react/jsx-runtime";
+import {
+  InsforgeProviderCore,
+  useInsforge as useReactInsforge,
+  NavigationProvider
+} from "@insforge/react";
 import { NavigationAdapter } from "../navigation";
+async function handleSignIn(token) {
+  try {
+    await fetch("/api/auth", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        action: "sync-token",
+        token
+      })
+    });
+  } catch (error) {
+    console.error("[InsforgeProvider] Failed to sync token to cookie:", error);
+  }
+}
+async function handleSignOut() {
+  try {
+    await fetch("/api/auth", { method: "DELETE" });
+  } catch (error) {
+  }
+}
+function InsforgeProvider({
+  children,
+  baseUrl,
+  afterSignInUrl = "/",
+  onAuthChange
+}) {
+  const providerProps = {
+    children,
+    baseUrl,
+    afterSignInUrl,
+    onAuthChange,
+    onSignIn: handleSignIn,
+    onSignOut: handleSignOut
+  };
+  return /* @__PURE__ */ jsx(NavigationProvider, { adapter: NavigationAdapter, children: /* @__PURE__ */ jsx(InsforgeProviderCore, { ...providerProps, children }) });
+}
+const useInsforge = useReactInsforge;
 export {
   InsforgeProvider,
-  NavigationAdapter,
   useInsforge
 };
 //# sourceMappingURL=provider.js.map

package/dist/esm/client-boundary/provider.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/client-boundary/provider.ts"],"sourcesContent":["'use client';\r\n\r\n/**\r\n * Client-side provider boundary for Next.js App Router\r\n * Re-exports InsforgeProvider and useInsforge with 'use client' directive\r\n * Re-exports NavigationAdapter with 'use client' directive\r\n */\r\n\r\nexport { InsforgeProvider, useInsforge } from '../provider/InsforgeProvider';\r\nexport { NavigationAdapter } from '../navigation';\r\n"],"mappings":";AAQA,SAAS,kBAAkB,mBAAmB;AAC9C,SAAS,yBAAyB;","names":[]}
+{"version":3,"sources":["../../../src/client-boundary/provider.tsx"],"sourcesContent":["\"use client\";\r\n\r\nimport {\r\n  InsforgeProviderCore,\r\n  type InsforgeProviderProps,\r\n  useInsforge as useReactInsforge,\r\n  NavigationProvider,\r\n} from \"@insforge/react\";\r\nimport { NavigationAdapter } from \"../navigation\";\r\n\r\n// Extended interface for React provider that includes internal handlers\r\ninterface ExtendedProviderProps extends InsforgeProviderProps {\r\n  afterSignInUrl?: string;\r\n  onSignIn?: (authToken: string) => Promise<void>;\r\n  onSignOut?: () => Promise<void>;\r\n}\r\n\r\n// Sync token to server-side cookie on sign in\r\nasync function handleSignIn(token: string): Promise<void> {\r\n  try {\r\n    await fetch(\"/api/auth\", {\r\n      method: \"POST\",\r\n      headers: {\r\n        \"Content-Type\": \"application/json\",\r\n      },\r\n      body: JSON.stringify({\r\n        action: \"sync-token\",\r\n        token,\r\n      }),\r\n    });\r\n  } catch (error) {\r\n    console.error(\"[InsforgeProvider] Failed to sync token to cookie:\", error);\r\n  }\r\n}\r\n\r\n// Clear HTTP-only cookie on sign out\r\nasync function handleSignOut(): Promise<void> {\r\n  try {\r\n    await fetch(\"/api/auth\", { method: \"DELETE\" });\r\n  } catch (error) {\r\n    // API route doesn't exist - ignore\r\n  }\r\n}\r\n\r\n/**\r\n * Insforge Provider for Next.js - wraps @insforge/react provider with Next.js-specific cookie sync\r\n *\r\n * Manages user authentication state and provides all necessary context to child components.\r\n * Automatically syncs authentication tokens to HTTP-only cookies for server-side middleware support.\r\n *\r\n * @example\r\n * ```tsx\r\n * import { InsforgeProvider } from '@insforge/nextjs';\r\n *\r\n * export default function RootLayout({ children }) {\r\n *   return (\r\n *     <InsforgeProvider\r\n *       baseUrl={process.env.NEXT_PUBLIC_INSFORGE_BASE_URL!}\r\n *       afterSignInUrl=\"/dashboard\"\r\n *     >\r\n *       {children}\r\n *     </InsforgeProvider>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport function InsforgeProvider({\r\n  children,\r\n  baseUrl,\r\n  afterSignInUrl = \"/\",\r\n  onAuthChange,\r\n}: InsforgeProviderProps) {\r\n  const providerProps: ExtendedProviderProps = {\r\n    children,\r\n    baseUrl,\r\n    afterSignInUrl,\r\n    onAuthChange,\r\n    onSignIn: handleSignIn,\r\n    onSignOut: handleSignOut,\r\n  };\r\n\r\n  return (\r\n    <NavigationProvider adapter={NavigationAdapter}>\r\n      <InsforgeProviderCore {...providerProps}>{children}</InsforgeProviderCore>\r\n    </NavigationProvider>\r\n  );\r\n}\r\n\r\n/**\r\n * Hook to access Insforge context\r\n *\r\n * Re-exports the hook from @insforge/react for convenience.\r\n *\r\n * @example\r\n * ```tsx\r\n * function MyComponent() {\r\n *   const { user, isSignedIn, signOut } = useInsforge();\r\n *\r\n *   if (!isSignedIn) return <SignIn />;\r\n *\r\n *   return (\r\n *     <div>\r\n *       <p>Welcome {user.email}</p>\r\n *       <button onClick={signOut}>Sign Out</button>\r\n *     </div>\r\n *   );\r\n * }\r\n * ```\r\n */\r\nexport const useInsforge = useReactInsforge;\r\n"],"mappings":";AAmFM;AAjFN;AAAA,EACE;AAAA,EAEA,eAAe;AAAA,EACf;AAAA,OACK;AACP,SAAS,yBAAyB;AAUlC,eAAe,aAAa,OAA8B;AACxD,MAAI;AACF,UAAM,MAAM,aAAa;AAAA,MACvB,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,sDAAsD,KAAK;AAAA,EAC3E;AACF;AAGA,eAAe,gBAA+B;AAC5C,MAAI;AACF,UAAM,MAAM,aAAa,EAAE,QAAQ,SAAS,CAAC;AAAA,EAC/C,SAAS,OAAO;AAAA,EAEhB;AACF;AAwBO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA,iBAAiB;AAAA,EACjB;AACF,GAA0B;AACxB,QAAM,gBAAuC;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AAEA,SACE,oBAAC,sBAAmB,SAAS,mBAC3B,8BAAC,wBAAsB,GAAG,eAAgB,UAAS,GACrD;AAEJ;AAuBO,MAAM,cAAc;","names":[]}

package/dist/esm/index.js

@@ -1,5 +1,5 @@
 "use client";
-import { InsforgeProvider, useInsforge, NavigationAdapter } from "./client-boundary/provider";
+import { InsforgeProvider, useInsforge } from "./client-boundary/provider";
 import {
   SignIn,
   SignUp,
@@ -55,7 +55,6 @@ export {
   ForgotPassword,
   ForgotPasswordForm,
   InsforgeProvider,
-  NavigationAdapter,
   Protect,
   ResetPassword,
   ResetPasswordForm,

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/index.ts"],"sourcesContent":["\"use client\";\r\n\r\n// Types (no 'use client' needed for types)\r\nexport type {\r\n  OAuthProvider,\r\n  AuthConfig,\r\n  EmailVerificationMethod,\r\n  InsforgeUser,\r\n  OAuthProviderConfig,\r\n} from '@insforge/react/types';\r\n\r\n// Provider (from client-boundary)\r\nexport { InsforgeProvider, useInsforge, NavigationAdapter } from './client-boundary/provider';\r\n\r\n/**\r\n * These need to be explicitly listed. Do not use an * here.\r\n * If you do, app router will break.\r\n * \r\n * Pattern learned from @clerk/nextjs\r\n */\r\n\r\n// Main UI Components\r\nexport {\r\n  SignIn,\r\n  SignUp,\r\n  ForgotPassword,\r\n  ResetPassword,\r\n  VerifyEmail,\r\n  UserButton,\r\n  Protect,\r\n  SignedIn,\r\n  SignedOut,\r\n} from './client-boundary/components';\r\n\r\n// Form Components\r\nexport {\r\n  SignInForm,\r\n  SignUpForm,\r\n  ForgotPasswordForm,\r\n  ResetPasswordForm,\r\n  VerifyEmailStatus,\r\n} from './client-boundary/components';\r\n\r\n// Atom Components\r\nexport {\r\n  AuthBranding,\r\n  AuthContainer,\r\n  AuthHeader,\r\n  AuthErrorBanner,\r\n  AuthFormField,\r\n  AuthPasswordField,\r\n  AuthPasswordStrengthIndicator,\r\n  AuthSubmitButton,\r\n  AuthLink,\r\n  AuthDivider,\r\n  AuthOAuthButton,\r\n  AuthOAuthProviders,\r\n  AuthVerificationCodeInput,\r\n  AuthEmailVerificationStep,\r\n  AuthResetPasswordVerificationStep,\r\n} from './client-boundary/components';\r\n\r\n// Component Types\r\nexport type {\r\n  SignInProps,\r\n  SignUpProps,\r\n  ForgotPasswordProps,\r\n  ResetPasswordProps,\r\n  VerifyEmailProps,\r\n  UserButtonProps,\r\n  ProtectProps,\r\n  ConditionalProps,\r\n  SignInFormProps,\r\n  SignUpFormProps,\r\n  ForgotPasswordFormProps,\r\n  ResetPasswordFormProps,\r\n  VerifyEmailStatusProps,\r\n  AuthContainerProps,\r\n  AuthHeaderProps,\r\n  AuthErrorBannerProps,\r\n  AuthFormFieldProps,\r\n  AuthPasswordFieldProps,\r\n  AuthPasswordStrengthIndicatorProps,\r\n  AuthSubmitButtonProps,\r\n  AuthLinkProps,\r\n  AuthDividerProps,\r\n  AuthOAuthButtonProps,\r\n  AuthOAuthProvidersProps,\r\n  AuthVerificationCodeInputProps,\r\n} from './client-boundary/components';\r\n\r\n// Hooks\r\nexport { useAuth, useUser, usePublicAuthConfig } from './client-boundary/hooks';\r\n"],"mappings":";AAYA,SAAS,kBAAkB,aAAa,yBAAyB;AAUjE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAgCP,SAAS,SAAS,SAAS,2BAA2B;","names":[]}
+{"version":3,"sources":["../../src/index.ts"],"sourcesContent":["\"use client\";\r\n\r\n// Types (no 'use client' needed for types)\r\nexport type {\r\n  OAuthProvider,\r\n  AuthConfig,\r\n  EmailVerificationMethod,\r\n  InsforgeUser,\r\n  OAuthProviderConfig,\r\n} from '@insforge/react/types';\r\n\r\n// Provider (from client-boundary)\r\nexport { InsforgeProvider, useInsforge } from './client-boundary/provider';\r\n\r\n/**\r\n * These need to be explicitly listed. Do not use an * here.\r\n * If you do, app router will break.\r\n * \r\n * Pattern learned from @clerk/nextjs\r\n */\r\n\r\n// Main UI Components\r\nexport {\r\n  SignIn,\r\n  SignUp,\r\n  ForgotPassword,\r\n  ResetPassword,\r\n  VerifyEmail,\r\n  UserButton,\r\n  Protect,\r\n  SignedIn,\r\n  SignedOut,\r\n} from './client-boundary/components';\r\n\r\n// Form Components\r\nexport {\r\n  SignInForm,\r\n  SignUpForm,\r\n  ForgotPasswordForm,\r\n  ResetPasswordForm,\r\n  VerifyEmailStatus,\r\n} from './client-boundary/components';\r\n\r\n// Atom Components\r\nexport {\r\n  AuthBranding,\r\n  AuthContainer,\r\n  AuthHeader,\r\n  AuthErrorBanner,\r\n  AuthFormField,\r\n  AuthPasswordField,\r\n  AuthPasswordStrengthIndicator,\r\n  AuthSubmitButton,\r\n  AuthLink,\r\n  AuthDivider,\r\n  AuthOAuthButton,\r\n  AuthOAuthProviders,\r\n  AuthVerificationCodeInput,\r\n  AuthEmailVerificationStep,\r\n  AuthResetPasswordVerificationStep,\r\n} from './client-boundary/components';\r\n\r\n// Component Types\r\nexport type {\r\n  SignInProps,\r\n  SignUpProps,\r\n  ForgotPasswordProps,\r\n  ResetPasswordProps,\r\n  VerifyEmailProps,\r\n  UserButtonProps,\r\n  ProtectProps,\r\n  ConditionalProps,\r\n  SignInFormProps,\r\n  SignUpFormProps,\r\n  ForgotPasswordFormProps,\r\n  ResetPasswordFormProps,\r\n  VerifyEmailStatusProps,\r\n  AuthContainerProps,\r\n  AuthHeaderProps,\r\n  AuthErrorBannerProps,\r\n  AuthFormFieldProps,\r\n  AuthPasswordFieldProps,\r\n  AuthPasswordStrengthIndicatorProps,\r\n  AuthSubmitButtonProps,\r\n  AuthLinkProps,\r\n  AuthDividerProps,\r\n  AuthOAuthButtonProps,\r\n  AuthOAuthProvidersProps,\r\n  AuthVerificationCodeInputProps,\r\n} from './client-boundary/components';\r\n\r\n// Hooks\r\nexport { useAuth, useUser, usePublicAuthConfig } from './client-boundary/hooks';\r\n"],"mappings":";AAYA,SAAS,kBAAkB,mBAAmB;AAU9C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAgCP,SAAS,SAAS,SAAS,2BAA2B;","names":[]}

package/dist/esm/middleware/InsforgeMiddleware.js

@@ -14,7 +14,7 @@ function InsforgeMiddleware(config) {
     const { pathname, searchParams } = request.nextUrl;
     const accessToken = searchParams.get("access_token");
     if (accessToken) {
-      const response = NextResponse.redirect(new URL(pathname, request.url));
+      const response = NextResponse.next();
       response.cookies.set(cookieName, accessToken, {
         httpOnly: true,
         secure: process.env.NODE_ENV === "production",
@@ -49,6 +49,8 @@ function InsforgeMiddleware(config) {
       return NextResponse.next();
     }
     const token = request.cookies.get(cookieName)?.value;
+    console.log("request.cookies", request.cookies);
+    console.log("token", token);
     if (!token) {
       if (useBuiltInAuth) {
         const backendSignInUrl = new URL("/auth/sign-in", baseUrl);

package/dist/esm/middleware/InsforgeMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/middleware/InsforgeMiddleware.ts"],"sourcesContent":["import { NextRequest, NextResponse } from 'next/server';\r\n\r\nexport interface InsforgeMiddlewareConfig {\r\n  /**\r\n   * Base URL of your Insforge backend\r\n   * @example 'https://your-backend.com' or 'http://localhost:3001'\r\n   */\r\n  baseUrl: string;\r\n\r\n  /**\r\n   * Routes that are public and don't require authentication\r\n   * @default ['/']\r\n   * @example ['/sign-in', '/sign-up', '/', '/about']\r\n   */\r\n  publicRoutes?: string[];\r\n\r\n  /**\r\n   * Local route path for sign-in (can be customized to any path like '/login')\r\n   * When using built-in auth, this will redirect to backend's `/auth/sign-in`\r\n   * @default '/sign-in'\r\n   */\r\n  signInUrl?: string;\r\n\r\n  /**\r\n   * Local route path for sign-up (can be customized to any path like '/register')\r\n   * When using built-in auth, this will redirect to backend's `/auth/sign-up`\r\n   * @default '/sign-up'\r\n   */\r\n  signUpUrl?: string;\r\n\r\n  /**\r\n   * Local route path for forgot password\r\n   * When using built-in auth, this will redirect to backend's `/auth/forgot-password`\r\n   * @default '/forgot-password'\r\n   */\r\n  forgotPasswordUrl?: string;\r\n\r\n  /**\r\n   * URL to redirect to after successful authentication\r\n   * When user completes sign-in/sign-up, they will be redirected to this URL with token in URL\r\n   * @default '/'\r\n   */\r\n  afterSignInUrl?: string;\r\n\r\n  /**\r\n   * Cookie name for the auth token\r\n   * @default 'insforge_token'\r\n   */\r\n  cookieName?: string;\r\n\r\n  /**\r\n   * Whether to use built-in authentication pages hosted on the backend\r\n   * - When true: redirects to backend's `/auth/sign-in` and `/auth/sign-up` pages\r\n   * - When false: redirects to local sign-in/sign-up pages (you provide your own components)\r\n   * @default true\r\n   */\r\n  useBuiltInAuth?: boolean;\r\n}\r\n\r\n/**\r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * This middleware provides lightweight route protection by:\r\n * - Detecting and storing auth tokens from URL parameters (after backend redirect)\r\n * - Checking for auth token presence in cookies\r\n * - Redirecting unauthenticated users to sign-in page\r\n * - Allowing public routes to be accessed without authentication\r\n * - Mapping local auth routes to backend's fixed paths when using built-in auth\r\n * \r\n * **How Authentication Flow Works:**\r\n * 1. User visits protected route → Middleware checks for token\r\n * 2. No token → Redirects to sign-in (backend or local)\r\n * 3. User accesses auth page (e.g., /sign-in) → Redirects to backend with afterSignInUrl as redirect target\r\n * 4. After sign-in → Backend redirects to `yourapp.com/afterSignInUrl?access_token=xxx&user_id=xxx...`\r\n * 5. Middleware detects `access_token` in URL → Stores in HTTP-only cookie → Cleans URL → Allows access\r\n * 6. SDK also detects token from URL → Stores in localStorage → Updates auth state\r\n * \r\n * **Important Notes:**\r\n * - This middleware only checks if a token exists, it doesn't validate it\r\n * - Tokens from URL are automatically extracted and stored in cookies\r\n * - When `useBuiltInAuth: true`, local routes map to backend's fixed auth paths\r\n * - You can customize local route paths (e.g., `/login`) while backend paths remain fixed\r\n * - After successful auth, users are redirected to `afterSignInUrl` (default: `/`), not back to the auth page\r\n * \r\n * @param config - Middleware configuration\r\n * @returns Next.js middleware function\r\n *\r\n * @example\r\n * ```ts\r\n * // middleware.ts - Using built-in auth\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   publicRoutes: ['/', '/about'],\r\n *   afterSignInUrl: '/', // Redirect here after successful auth\r\n *   useBuiltInAuth: true,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Custom local auth pages with custom paths\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   publicRoutes: ['/login', '/register', '/', '/about'],\r\n *   signInUrl: '/login',\r\n *   signUpUrl: '/register',\r\n *   afterSignInUrl: '/dashboard',\r\n *   useBuiltInAuth: false,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Built-in auth with custom auth route paths\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: 'https://your-backend.com',\r\n *   signInUrl: '/login',\r\n *   signUpUrl: '/register',\r\n *   forgotPasswordUrl: '/forgot',\r\n *   afterSignInUrl: '/dashboard',\r\n *   useBuiltInAuth: true,\r\n * });\r\n * ```\r\n */\r\nexport function InsforgeMiddleware(config: InsforgeMiddlewareConfig) {\r\n  const {\r\n    baseUrl,\r\n    publicRoutes = [\"/\"],\r\n    signInUrl = '/sign-in',\r\n    signUpUrl = '/sign-up',\r\n    forgotPasswordUrl = '/forgot-password',\r\n    afterSignInUrl = '/',\r\n    cookieName = 'insforge_token',\r\n    useBuiltInAuth = true,\r\n  } = config;\r\n\r\n  return async function middleware(request: NextRequest) {\r\n    const { pathname, searchParams } = request.nextUrl;\r\n\r\n    // STEP 1: Check if URL contains access_token (from backend redirect after auth)\r\n    const accessToken = searchParams.get('access_token');\r\n    \r\n    if (accessToken) {\r\n      // Token detected in URL - store it in HTTP-only cookie and clean URL\r\n      const response = NextResponse.redirect(new URL(pathname, request.url));\r\n      \r\n      // Set HTTP-only cookie with secure settings\r\n      response.cookies.set(cookieName, accessToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'lax',\r\n        path: '/',\r\n        maxAge: 60 * 60 * 24 * 7, // 7 days\r\n      });\r\n      \r\n      return response;\r\n    }\r\n\r\n    // STEP 2: Handle built-in auth redirects for authentication pages\r\n    // Map local auth routes to backend's fixed auth pages\r\n    if (useBuiltInAuth) {\r\n      const authRouteMapping: Record<string, string> = {\r\n        [signInUrl]: '/auth/sign-in',\r\n        [signUpUrl]: '/auth/sign-up',\r\n        [forgotPasswordUrl]: '/auth/forgot-password',\r\n      };\r\n\r\n      const backendAuthPath = authRouteMapping[pathname];\r\n      if (backendAuthPath) {\r\n        // Redirect to afterSignInUrl after successful authentication\r\n        const redirectUrl = new URL(afterSignInUrl, request.url).toString();\r\n        const backendAuthUrl = new URL(backendAuthPath, baseUrl);\r\n        backendAuthUrl.searchParams.set('redirect', redirectUrl);\r\n        return NextResponse.redirect(backendAuthUrl.toString());\r\n      }\r\n    }\r\n\r\n    // STEP 3: Check if route is public\r\n    const isPublicRoute = publicRoutes.some((route) => {\r\n      if (route.endsWith('*')) {\r\n        // Wildcard route: /admin/* matches /admin/anything\r\n        return pathname.startsWith(route.slice(0, -1));\r\n      }\r\n      // Exact match or starts with route path\r\n      return pathname === route || pathname.startsWith(route + '/');\r\n    });\r\n\r\n    if (isPublicRoute) {\r\n      return NextResponse.next();\r\n    }\r\n\r\n    // STEP 4: Check for authentication token in cookies\r\n    const token = request.cookies.get(cookieName)?.value;\r\n\r\n    if (!token) {\r\n      // No token found, redirect to sign-in\r\n      if (useBuiltInAuth) {\r\n        // Built-in auth: redirect to backend's /auth/sign-in page\r\n        // Backend will redirect back to current URL with token\r\n        const backendSignInUrl = new URL('/auth/sign-in', baseUrl);\r\n        backendSignInUrl.searchParams.set('redirect', request.url);\r\n        return NextResponse.redirect(backendSignInUrl);\r\n      } else {\r\n        // Custom auth: redirect to local sign-in page\r\n        const localSignInUrl = new URL(signInUrl, request.url);\r\n        localSignInUrl.searchParams.set('redirect', pathname);\r\n        return NextResponse.redirect(localSignInUrl);\r\n      }\r\n    }\r\n\r\n    // Token exists in cookie, allow request to continue\r\n    return NextResponse.next();\r\n  };\r\n}"],"mappings":"AAAA,SAAsB,oBAAoB;AA0InC,SAAS,mBAAmB,QAAkC;AACnE,QAAM;AAAA,IACJ;AAAA,IACA,eAAe,CAAC,GAAG;AAAA,IACnB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB,IAAI;AAEJ,SAAO,eAAe,WAAW,SAAsB;AACrD,UAAM,EAAE,UAAU,aAAa,IAAI,QAAQ;AAG3C,UAAM,cAAc,aAAa,IAAI,cAAc;AAEnD,QAAI,aAAa;AAEf,YAAM,WAAW,aAAa,SAAS,IAAI,IAAI,UAAU,QAAQ,GAAG,CAAC;AAGrE,eAAS,QAAQ,IAAI,YAAY,aAAa;AAAA,QAC5C,UAAU;AAAA,QACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,QACjC,UAAU;AAAA,QACV,MAAM;AAAA,QACN,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,MACzB,CAAC;AAED,aAAO;AAAA,IACT;AAIA,QAAI,gBAAgB;AAClB,YAAM,mBAA2C;AAAA,QAC/C,CAAC,SAAS,GAAG;AAAA,QACb,CAAC,SAAS,GAAG;AAAA,QACb,CAAC,iBAAiB,GAAG;AAAA,MACvB;AAEA,YAAM,kBAAkB,iBAAiB,QAAQ;AACjD,UAAI,iBAAiB;AAEnB,cAAM,cAAc,IAAI,IAAI,gBAAgB,QAAQ,GAAG,EAAE,SAAS;AAClE,cAAM,iBAAiB,IAAI,IAAI,iBAAiB,OAAO;AACvD,uBAAe,aAAa,IAAI,YAAY,WAAW;AACvD,eAAO,aAAa,SAAS,eAAe,SAAS,CAAC;AAAA,MACxD;AAAA,IACF;AAGA,UAAM,gBAAgB,aAAa,KAAK,CAAC,UAAU;AACjD,UAAI,MAAM,SAAS,GAAG,GAAG;AAEvB,eAAO,SAAS,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/C;AAEA,aAAO,aAAa,SAAS,SAAS,WAAW,QAAQ,GAAG;AAAA,IAC9D,CAAC;AAED,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK;AAAA,IAC3B;AAGA,UAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAE/C,QAAI,CAAC,OAAO;AAEV,UAAI,gBAAgB;AAGlB,cAAM,mBAAmB,IAAI,IAAI,iBAAiB,OAAO;AACzD,yBAAiB,aAAa,IAAI,YAAY,QAAQ,GAAG;AACzD,eAAO,aAAa,SAAS,gBAAgB;AAAA,MAC/C,OAAO;AAEL,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,eAAO,aAAa,SAAS,cAAc;AAAA,MAC7C;AAAA,IACF;AAGA,WAAO,aAAa,KAAK;AAAA,EAC3B;AACF;","names":[]}
+{"version":3,"sources":["../../../src/middleware/InsforgeMiddleware.ts"],"sourcesContent":["import { NextRequest, NextResponse } from 'next/server';\r\n\r\nexport interface InsforgeMiddlewareConfig {\r\n  /**\r\n   * Base URL of your Insforge backend\r\n   * @example 'https://your-backend.com' or 'http://localhost:3001'\r\n   */\r\n  baseUrl: string;\r\n\r\n  /**\r\n   * Routes that are public and don't require authentication\r\n   * @default ['/']\r\n   * @example ['/sign-in', '/sign-up', '/', '/about']\r\n   */\r\n  publicRoutes?: string[];\r\n\r\n  /**\r\n   * Local route path for sign-in (can be customized to any path like '/login')\r\n   * When using built-in auth, this will redirect to backend's `/auth/sign-in`\r\n   * @default '/sign-in'\r\n   */\r\n  signInUrl?: string;\r\n\r\n  /**\r\n   * Local route path for sign-up (can be customized to any path like '/register')\r\n   * When using built-in auth, this will redirect to backend's `/auth/sign-up`\r\n   * @default '/sign-up'\r\n   */\r\n  signUpUrl?: string;\r\n\r\n  /**\r\n   * Local route path for forgot password\r\n   * When using built-in auth, this will redirect to backend's `/auth/forgot-password`\r\n   * @default '/forgot-password'\r\n   */\r\n  forgotPasswordUrl?: string;\r\n\r\n  /**\r\n   * URL to redirect to after successful authentication\r\n   * When user completes sign-in/sign-up, they will be redirected to this URL with token in URL\r\n   * @default '/'\r\n   */\r\n  afterSignInUrl?: string;\r\n\r\n  /**\r\n   * Cookie name for the auth token\r\n   * @default 'insforge_token'\r\n   */\r\n  cookieName?: string;\r\n\r\n  /**\r\n   * Whether to use built-in authentication pages hosted on the backend\r\n   * - When true: redirects to backend's `/auth/sign-in` and `/auth/sign-up` pages\r\n   * - When false: redirects to local sign-in/sign-up pages (you provide your own components)\r\n   * @default true\r\n   */\r\n  useBuiltInAuth?: boolean;\r\n}\r\n\r\n/**\r\n * Creates Next.js middleware for protecting routes with Insforge authentication.\r\n * \r\n * This middleware provides lightweight route protection by:\r\n * - Detecting and storing auth tokens from URL parameters (after backend redirect)\r\n * - Checking for auth token presence in cookies\r\n * - Redirecting unauthenticated users to sign-in page\r\n * - Allowing public routes to be accessed without authentication\r\n * - Mapping local auth routes to backend's fixed paths when using built-in auth\r\n * \r\n * **How Authentication Flow Works:**\r\n * 1. User visits protected route → Middleware checks for token\r\n * 2. No token → Redirects to sign-in (backend or local)\r\n * 3. User accesses auth page (e.g., /sign-in) → Redirects to backend with afterSignInUrl as redirect target\r\n * 4. After sign-in → Backend redirects to `yourapp.com/afterSignInUrl?access_token=xxx&user_id=xxx...`\r\n * 5. Middleware detects `access_token` in URL → Stores in HTTP-only cookie → Cleans URL → Allows access\r\n * 6. SDK also detects token from URL → Stores in localStorage → Updates auth state\r\n * \r\n * **Important Notes:**\r\n * - This middleware only checks if a token exists, it doesn't validate it\r\n * - Tokens from URL are automatically extracted and stored in cookies\r\n * - When `useBuiltInAuth: true`, local routes map to backend's fixed auth paths\r\n * - You can customize local route paths (e.g., `/login`) while backend paths remain fixed\r\n * - After successful auth, users are redirected to `afterSignInUrl` (default: `/`), not back to the auth page\r\n * \r\n * @param config - Middleware configuration\r\n * @returns Next.js middleware function\r\n *\r\n * @example\r\n * ```ts\r\n * // middleware.ts - Using built-in auth\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   publicRoutes: ['/', '/about'],\r\n *   afterSignInUrl: '/', // Redirect here after successful auth\r\n *   useBuiltInAuth: true,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Custom local auth pages with custom paths\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: process.env.INSFORGE_BASE_URL!,\r\n *   publicRoutes: ['/login', '/register', '/', '/about'],\r\n *   signInUrl: '/login',\r\n *   signUpUrl: '/register',\r\n *   afterSignInUrl: '/dashboard',\r\n *   useBuiltInAuth: false,\r\n * });\r\n *\r\n * export const config = {\r\n *   matcher: ['/((?!_next|api|.*\\\\..*).*)'],\r\n * };\r\n * ```\r\n * \r\n * @example\r\n * ```ts\r\n * // middleware.ts - Built-in auth with custom auth route paths\r\n * import { InsforgeMiddleware } from '@insforge/nextjs/middleware';\r\n *\r\n * export default InsforgeMiddleware({\r\n *   baseUrl: 'https://your-backend.com',\r\n *   signInUrl: '/login',\r\n *   signUpUrl: '/register',\r\n *   forgotPasswordUrl: '/forgot',\r\n *   afterSignInUrl: '/dashboard',\r\n *   useBuiltInAuth: true,\r\n * });\r\n * ```\r\n */\r\nexport function InsforgeMiddleware(config: InsforgeMiddlewareConfig) {\r\n  const {\r\n    baseUrl,\r\n    publicRoutes = [\"/\"],\r\n    signInUrl = '/sign-in',\r\n    signUpUrl = '/sign-up',\r\n    forgotPasswordUrl = '/forgot-password',\r\n    afterSignInUrl = '/',\r\n    cookieName = 'insforge_token',\r\n    useBuiltInAuth = true,\r\n  } = config;\r\n\r\n  return async function middleware(request: NextRequest) {\r\n    const { pathname, searchParams } = request.nextUrl;\r\n\r\n    // STEP 1: Check if URL contains access_token (from backend redirect after auth)\r\n    const accessToken = searchParams.get('access_token');\r\n\r\n    if (accessToken) {\r\n      // Token detected in URL - store it in HTTP-only cookie\r\n      const response = NextResponse.next();\r\n\r\n      // Set HTTP-only cookie with secure settings\r\n      response.cookies.set(cookieName, accessToken, {\r\n        httpOnly: true,\r\n        secure: process.env.NODE_ENV === 'production',\r\n        sameSite: 'lax',\r\n        path: '/',\r\n        maxAge: 60 * 60 * 24 * 7, // 7 days\r\n      });\r\n\r\n      return response;\r\n    }\r\n\r\n    // STEP 2: Handle built-in auth redirects for authentication pages\r\n    // Map local auth routes to backend's fixed auth pages\r\n    if (useBuiltInAuth) {\r\n      const authRouteMapping: Record<string, string> = {\r\n        [signInUrl]: '/auth/sign-in',\r\n        [signUpUrl]: '/auth/sign-up',\r\n        [forgotPasswordUrl]: '/auth/forgot-password',\r\n      };\r\n\r\n      const backendAuthPath = authRouteMapping[pathname];\r\n      if (backendAuthPath) {\r\n        // Redirect to afterSignInUrl after successful authentication\r\n        const redirectUrl = new URL(afterSignInUrl, request.url).toString();\r\n        const backendAuthUrl = new URL(backendAuthPath, baseUrl);\r\n        backendAuthUrl.searchParams.set('redirect', redirectUrl);\r\n        return NextResponse.redirect(backendAuthUrl.toString());\r\n      }\r\n    }\r\n\r\n    // STEP 3: Check if route is public\r\n    const isPublicRoute = publicRoutes.some((route) => {\r\n      if (route.endsWith('*')) {\r\n        // Wildcard route: /admin/* matches /admin/anything\r\n        return pathname.startsWith(route.slice(0, -1));\r\n      }\r\n      // Exact match or starts with route path\r\n      return pathname === route || pathname.startsWith(route + '/');\r\n    });\r\n\r\n    if (isPublicRoute) {\r\n      return NextResponse.next();\r\n    }\r\n\r\n    // STEP 4: Check for authentication token in cookies\r\n    const token = request.cookies.get(cookieName)?.value;\r\n    console.log('request.cookies', request.cookies);\r\n    console.log('token', token);\r\n\r\n    if (!token) {\r\n      // No token found, redirect to sign-in\r\n      if (useBuiltInAuth) {\r\n        // Built-in auth: redirect to backend's /auth/sign-in page\r\n        // Backend will redirect back to current URL with token\r\n        const backendSignInUrl = new URL('/auth/sign-in', baseUrl);\r\n        backendSignInUrl.searchParams.set('redirect', request.url);\r\n        return NextResponse.redirect(backendSignInUrl);\r\n      } else {\r\n        // Custom auth: redirect to local sign-in page\r\n        const localSignInUrl = new URL(signInUrl, request.url);\r\n        localSignInUrl.searchParams.set('redirect', pathname);\r\n        return NextResponse.redirect(localSignInUrl);\r\n      }\r\n    }\r\n\r\n    // Token exists in cookie, allow request to continue\r\n    return NextResponse.next();\r\n  };\r\n}"],"mappings":"AAAA,SAAsB,oBAAoB;AA0InC,SAAS,mBAAmB,QAAkC;AACnE,QAAM;AAAA,IACJ;AAAA,IACA,eAAe,CAAC,GAAG;AAAA,IACnB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB,IAAI;AAEJ,SAAO,eAAe,WAAW,SAAsB;AACrD,UAAM,EAAE,UAAU,aAAa,IAAI,QAAQ;AAG3C,UAAM,cAAc,aAAa,IAAI,cAAc;AAEnD,QAAI,aAAa;AAEf,YAAM,WAAW,aAAa,KAAK;AAGnC,eAAS,QAAQ,IAAI,YAAY,aAAa;AAAA,QAC5C,UAAU;AAAA,QACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,QACjC,UAAU;AAAA,QACV,MAAM;AAAA,QACN,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,MACzB,CAAC;AAED,aAAO;AAAA,IACT;AAIA,QAAI,gBAAgB;AAClB,YAAM,mBAA2C;AAAA,QAC/C,CAAC,SAAS,GAAG;AAAA,QACb,CAAC,SAAS,GAAG;AAAA,QACb,CAAC,iBAAiB,GAAG;AAAA,MACvB;AAEA,YAAM,kBAAkB,iBAAiB,QAAQ;AACjD,UAAI,iBAAiB;AAEnB,cAAM,cAAc,IAAI,IAAI,gBAAgB,QAAQ,GAAG,EAAE,SAAS;AAClE,cAAM,iBAAiB,IAAI,IAAI,iBAAiB,OAAO;AACvD,uBAAe,aAAa,IAAI,YAAY,WAAW;AACvD,eAAO,aAAa,SAAS,eAAe,SAAS,CAAC;AAAA,MACxD;AAAA,IACF;AAGA,UAAM,gBAAgB,aAAa,KAAK,CAAC,UAAU;AACjD,UAAI,MAAM,SAAS,GAAG,GAAG;AAEvB,eAAO,SAAS,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/C;AAEA,aAAO,aAAa,SAAS,SAAS,WAAW,QAAQ,GAAG;AAAA,IAC9D,CAAC;AAED,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK;AAAA,IAC3B;AAGA,UAAM,QAAQ,QAAQ,QAAQ,IAAI,UAAU,GAAG;AAC/C,YAAQ,IAAI,mBAAmB,QAAQ,OAAO;AAC9C,YAAQ,IAAI,SAAS,KAAK;AAE1B,QAAI,CAAC,OAAO;AAEV,UAAI,gBAAgB;AAGlB,cAAM,mBAAmB,IAAI,IAAI,iBAAiB,OAAO;AACzD,yBAAiB,aAAa,IAAI,YAAY,QAAQ,GAAG;AACzD,eAAO,aAAa,SAAS,gBAAgB;AAAA,MAC/C,OAAO;AAEL,cAAM,iBAAiB,IAAI,IAAI,WAAW,QAAQ,GAAG;AACrD,uBAAe,aAAa,IAAI,YAAY,QAAQ;AACpD,eAAO,aAAa,SAAS,cAAc;AAAA,MAC7C;AAAA,IACF;AAGA,WAAO,aAAa,KAAK;AAAA,EAC3B;AACF;","names":[]}

package/dist/index.d.ts

@@ -1,8 +1,6 @@
 export { AuthConfig, EmailVerificationMethod, InsforgeUser, OAuthProvider, OAuthProviderConfig } from '@insforge/react/types';
-export { InsforgeProvider, useInsforge } from './provider/InsforgeProvider.js';
-export { NextNavigationAdapter as NavigationAdapter } from './navigation/NextNavigationAdapter.js';
+export { InsforgeProvider, useInsforge } from './client-boundary/provider.js';
 export { AuthBranding, AuthContainer, AuthContainerProps, AuthDivider, AuthDividerProps, AuthEmailVerificationStep, AuthErrorBanner, AuthErrorBannerProps, AuthFormField, AuthFormFieldProps, AuthHeader, AuthHeaderProps, AuthLink, AuthLinkProps, AuthOAuthButton, AuthOAuthButtonProps, AuthOAuthProviders, AuthOAuthProvidersProps, AuthPasswordField, AuthPasswordFieldProps, AuthPasswordStrengthIndicator, AuthPasswordStrengthIndicatorProps, AuthResetPasswordVerificationStep, AuthSubmitButton, AuthSubmitButtonProps, AuthVerificationCodeInput, AuthVerificationCodeInputProps, ConditionalProps, ForgotPassword, ForgotPasswordForm, ForgotPasswordFormProps, ForgotPasswordProps, Protect, ProtectProps, ResetPassword, ResetPasswordForm, ResetPasswordFormProps, ResetPasswordProps, SignIn, SignInForm, SignInFormProps, SignInProps, SignUp, SignUpForm, SignUpFormProps, SignUpProps, SignedIn, SignedOut, UserButton, UserButtonProps, VerifyEmail, VerifyEmailProps, VerifyEmailStatus, VerifyEmailStatusProps } from '@insforge/react/components';
-export { useAuth, usePublicAuthConfig, useUser } from '@insforge/react/hooks';
+export { useAuth, usePublicAuthConfig, useUser } from './client-boundary/hooks.js';
 import 'react/jsx-runtime';
 import '@insforge/react';
-import '@insforge/react/navigation';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insforge/nextjs",
-  "version": "0.9.6",
+  "version": "0.10.0",
   "description": "Pre-built authentication UI components for Next.js with Insforge backend - zero configuration required",
   "type": "module",
   "types": "./dist/index.d.ts",
@@ -41,7 +41,7 @@
   "author": "Insforge",
   "license": "MIT",
   "dependencies": {
-    "@insforge/react": "^0.5.7",
+    "@insforge/react": "^0.6.0",
     "@insforge/sdk": "^0.0.58",
     "@insforge/shared-schemas": "^1.1.19"
   },

package/dist/esm/provider/InsforgeProvider.js

@@ -1,52 +0,0 @@
-"use client";
-import { jsx } from "react/jsx-runtime";
-import {
-  InsforgeProvider as ReactInsforgeProvider,
-  useInsforge as useReactInsforge,
-  NavigationProvider
-} from "@insforge/react";
-import { NavigationAdapter } from "../navigation";
-async function handleSignIn(token) {
-  try {
-    await fetch("/api/auth", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify({
-        action: "sync-token",
-        token
-      })
-    });
-  } catch (error) {
-    console.error("[InsforgeProvider] Failed to sync token to cookie:", error);
-  }
-}
-async function handleSignOut() {
-  try {
-    await fetch("/api/auth", { method: "DELETE" });
-  } catch (error) {
-  }
-}
-function InsforgeProvider({
-  children,
-  baseUrl,
-  afterSignInUrl = "/",
-  onAuthChange
-}) {
-  const providerProps = {
-    children,
-    baseUrl,
-    afterSignInUrl,
-    onAuthChange,
-    onSignIn: handleSignIn,
-    onSignOut: handleSignOut
-  };
-  return /* @__PURE__ */ jsx(NavigationProvider, { adapter: NavigationAdapter, children: /* @__PURE__ */ jsx(ReactInsforgeProvider, { ...providerProps, children }) });
-}
-const useInsforge = useReactInsforge;
-export {
-  InsforgeProvider,
-  useInsforge
-};
-//# sourceMappingURL=InsforgeProvider.js.map

package/dist/esm/provider/InsforgeProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/provider/InsforgeProvider.tsx"],"sourcesContent":["'use client';\n\nimport { \n  InsforgeProvider as ReactInsforgeProvider, \n  type InsforgeProviderProps as ReactInsforgeProviderProps,\n  useInsforge as useReactInsforge,\n  NavigationProvider,\n} from '@insforge/react';\nimport { NavigationAdapter } from '../navigation';\n\n// Extended interface for React provider that includes internal handlers\ninterface ExtendedProviderProps extends ReactInsforgeProviderProps {\n  afterSignInUrl?: string;\n  onSignIn?: (authToken: string) => Promise<void>;\n  onSignOut?: () => Promise<void>;\n}\n\n// Sync token to server-side cookie on sign in\nasync function handleSignIn(token: string): Promise<void> {\n  try {\n    await fetch('/api/auth', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        action: 'sync-token',\n        token,\n      }),\n    });\n  } catch (error) {\n    console.error('[InsforgeProvider] Failed to sync token to cookie:', error);\n  }\n}\n\n// Clear HTTP-only cookie on sign out\nasync function handleSignOut(): Promise<void> {\n  try {\n    await fetch('/api/auth', { method: 'DELETE' });\n  } catch (error) {\n    // API route doesn't exist - ignore\n  }\n}\n\n/**\n * Insforge Provider for Next.js - wraps @insforge/react provider with Next.js-specific cookie sync\n * \n * Manages user authentication state and provides all necessary context to child components.\n * Automatically syncs authentication tokens to HTTP-only cookies for server-side middleware support.\n * \n * @example\n * ```tsx\n * import { InsforgeProvider } from '@insforge/nextjs';\n * \n * export default function RootLayout({ children }) {\n *   return (\n *     <InsforgeProvider \n *       baseUrl={process.env.NEXT_PUBLIC_INSFORGE_BASE_URL!}\n *       afterSignInUrl=\"/dashboard\"\n *     >\n *       {children}\n *     </InsforgeProvider>\n *   );\n * }\n * ```\n */\nexport function InsforgeProvider({ \n  children, \n  baseUrl,\n  afterSignInUrl = '/',\n  onAuthChange,\n}: ReactInsforgeProviderProps) {\n  const providerProps: ExtendedProviderProps = {\n    children,\n    baseUrl,\n    afterSignInUrl,\n    onAuthChange,\n    onSignIn: handleSignIn,\n    onSignOut: handleSignOut,\n  };\n\n  return (\n    <NavigationProvider adapter={NavigationAdapter}>\n      <ReactInsforgeProvider {...providerProps}>\n        {children}\n      </ReactInsforgeProvider>\n    </NavigationProvider>\n  );\n}\n\n/**\n * Hook to access Insforge context\n * \n * Re-exports the hook from @insforge/react for convenience.\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, isSignedIn, signOut } = useInsforge();\n *   \n *   if (!isSignedIn) return <SignIn />;\n *   \n *   return (\n *     <div>\n *       <p>Welcome {user.email}</p>\n *       <button onClick={signOut}>Sign Out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport const useInsforge = useReactInsforge;\n"],"mappings":";AAmFM;AAjFN;AAAA,EACE,oBAAoB;AAAA,EAEpB,eAAe;AAAA,EACf;AAAA,OACK;AACP,SAAS,yBAAyB;AAUlC,eAAe,aAAa,OAA8B;AACxD,MAAI;AACF,UAAM,MAAM,aAAa;AAAA,MACvB,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,sDAAsD,KAAK;AAAA,EAC3E;AACF;AAGA,eAAe,gBAA+B;AAC5C,MAAI;AACF,UAAM,MAAM,aAAa,EAAE,QAAQ,SAAS,CAAC;AAAA,EAC/C,SAAS,OAAO;AAAA,EAEhB;AACF;AAwBO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA,iBAAiB;AAAA,EACjB;AACF,GAA+B;AAC7B,QAAM,gBAAuC;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AAEA,SACE,oBAAC,sBAAmB,SAAS,mBAC3B,8BAAC,yBAAuB,GAAG,eACxB,UACH,GACF;AAEJ;AAuBO,MAAM,cAAc;","names":[]}

package/dist/provider/InsforgeProvider.d.ts

@@ -1,7 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { InsforgeProviderProps, useInsforge as useInsforge$1 } from '@insforge/react';
-
-declare function InsforgeProvider({ children, baseUrl, afterSignInUrl, onAuthChange, }: InsforgeProviderProps): react_jsx_runtime.JSX.Element;
-declare const useInsforge: typeof useInsforge$1;
-
-export { InsforgeProvider, useInsforge };