@iqauth/sdk 2.1.0 → 2.3.0

package/dist/mobile.mjs

@@ -1,6 +1,7 @@
 import {
   IQAuthClient
-} from "./chunk-MDUHPQMM.mjs";
+} from "./chunk-W3F4JYGP.mjs";
+import "./chunk-UNYDG2L4.mjs";
 import {
   ErrorCodes,
   IQAuthError

package/dist/next.d.mts

@@ -25,6 +25,15 @@ declare function handler(options: IQAuthNextOptions): (req: Request) => Promise<
 /**
  * Edge-compatible Next.js middleware factory. Returns a function suitable
  * for `export const middleware = createMiddleware({ ... })`.
+ *
+ * Behavior: reads a Bearer token from the `Authorization` header or the
+ * access cookie (`iqauth_at` by default), verifies its signature against
+ * the issuer's JWKS using `jose` (Web Crypto, edge-safe), and on failure
+ * returns a 401 JSON response. The middleware does NOT transparently
+ * refresh expired access tokens — refresh happens in the browser SDK
+ * (single-flight) or by calling `POST /api/iqauth/refresh`. Pair this
+ * middleware with the helper routes mounted by `attachHelpers` for the
+ * full session lifecycle.
  */
 declare function createMiddleware(options: IQAuthNextOptions): (req: Request) => Promise<Response | undefined>;
 /**

package/dist/next.d.ts

@@ -25,6 +25,15 @@ declare function handler(options: IQAuthNextOptions): (req: Request) => Promise<
 /**
  * Edge-compatible Next.js middleware factory. Returns a function suitable
  * for `export const middleware = createMiddleware({ ... })`.
+ *
+ * Behavior: reads a Bearer token from the `Authorization` header or the
+ * access cookie (`iqauth_at` by default), verifies its signature against
+ * the issuer's JWKS using `jose` (Web Crypto, edge-safe), and on failure
+ * returns a 401 JSON response. The middleware does NOT transparently
+ * refresh expired access tokens — refresh happens in the browser SDK
+ * (single-flight) or by calling `POST /api/iqauth/refresh`. Pair this
+ * middleware with the helper routes mounted by `attachHelpers` for the
+ * full session lifecycle.
  */
 declare function createMiddleware(options: IQAuthNextOptions): (req: Request) => Promise<Response | undefined>;
 /**