@lenne.tech/nuxt-extensions 1.5.3 → 1.6.0

package/dist/module.d.mts

@@ -2,12 +2,14 @@ import * as _nuxt_schema from '@nuxt/schema';
 import { LtExtensionsModuleOptions } from '../dist/runtime/types/index.js';
 export { LtAuthClientConfig, LtAuthMode, LtAuthResponse, LtAuthState, LtPasskeyAuthResult, LtPasskeyRegisterResult, LtUser, UseLtAuthReturn } from '../dist/runtime/types/auth.js';
 export { LtFileInfo, LtUploadItem, LtUploadOptions, LtUploadProgress, LtUploadStatus, UseLtFileReturn, UseLtTusUploadReturn } from '../dist/runtime/types/upload.js';
-export { LtAuthModuleOptions, LtErrorTranslationModuleOptions, LtExtensionsModuleOptions, LtExtensionsPublicRuntimeConfig, LtI18nModuleOptions, LtSystemSetupModuleOptions, LtTusModuleOptions } from '../dist/runtime/types/module.js';
+export { LtAuthCookieNamesOptions, LtAuthModuleOptions, LtErrorTranslationModuleOptions, LtExtensionsModuleOptions, LtExtensionsPublicRuntimeConfig, LtI18nModuleOptions, LtSystemSetupModuleOptions, LtTusModuleOptions } from '../dist/runtime/types/module.js';
 export { LtErrorTranslationResponse, LtParsedError, UseLtErrorTranslationReturn } from '../dist/runtime/types/error.js';
 
 declare const name = "@lenne.tech/nuxt-extensions";
 declare const version = "1.5.2";
 declare const configKey = "ltExtensions";
+declare const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
+declare const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";
 declare const _default: _nuxt_schema.NuxtModule<LtExtensionsModuleOptions, LtExtensionsModuleOptions, false>;
 
-export { configKey, _default as default, name, version };
+export { DEFAULT_LT_AUTH_STATE_COOKIE, DEFAULT_LT_JWT_TOKEN_COOKIE, configKey, _default as default, name, version };

package/dist/module.mjs

@@ -3,10 +3,16 @@ import { defineNuxtModule, createResolver, addImports, addComponent, addPlugin,
 const name = "@lenne.tech/nuxt-extensions";
 const version = "1.5.2";
 const configKey = "ltExtensions";
+const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
+const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";
 const defaultOptions = {
   auth: {
     basePath: "/iam",
     baseURL: "",
+    cookieNames: {
+      state: DEFAULT_LT_AUTH_STATE_COOKIE,
+      token: DEFAULT_LT_JWT_TOKEN_COOKIE
+    },
     enabled: true,
     enableAdmin: true,
     enablePasskey: true,
@@ -48,6 +54,7 @@ const module$1 = defineNuxtModule({
       auth: {
         ...defaultOptions.auth,
         ...options.auth,
+        cookieNames: { ...defaultOptions.auth.cookieNames, ...options.auth?.cookieNames },
         systemSetup: { ...defaultOptions.auth.systemSetup, ...options.auth?.systemSetup }
       },
       errorTranslation: { ...defaultOptions.errorTranslation, ...options.errorTranslation },
@@ -65,6 +72,10 @@ const module$1 = defineNuxtModule({
       auth: {
         basePath: resolvedOptions.auth?.basePath || "/iam",
         baseURL: resolvedOptions.auth?.baseURL || "",
+        cookieNames: {
+          state: resolvedOptions.auth?.cookieNames?.state || DEFAULT_LT_AUTH_STATE_COOKIE,
+          token: resolvedOptions.auth?.cookieNames?.token || DEFAULT_LT_JWT_TOKEN_COOKIE
+        },
         enabled: resolvedOptions.auth?.enabled ?? true,
         enableAdmin: resolvedOptions.auth?.enableAdmin ?? true,
         enablePasskey: resolvedOptions.auth?.enablePasskey ?? true,
@@ -118,6 +129,7 @@ const module$1 = defineNuxtModule({
       { name: "getLtJwtToken", from: resolve("./runtime/lib/auth-state") },
       { name: "setLtJwtToken", from: resolve("./runtime/lib/auth-state") },
       { name: "getLtApiBase", from: resolve("./runtime/lib/auth-state") },
+      { name: "getLtAuthCookieNames", from: resolve("./runtime/lib/auth-state") },
       { name: "buildLtApiUrl", from: resolve("./runtime/lib/auth-state") },
       { name: "isLocalDevApiProxy", from: resolve("./runtime/lib/auth-state") },
       { name: "attemptLtJwtSwitch", from: resolve("./runtime/lib/auth-state") },
@@ -125,13 +137,7 @@ const module$1 = defineNuxtModule({
       { name: "createLtAuthFetch", from: resolve("./runtime/lib/auth-state") },
       { name: "ltAuthFetch", from: resolve("./runtime/lib/auth-state") }
     ]);
-    const transitionComponents = [
-      "LtTransitionFade",
-      "LtTransitionSlide",
-      "LtTransitionSlideBottom",
-      "LtTransitionSlideRevert",
-      "LtTransitionFadeScale"
-    ];
+    const transitionComponents = ["LtTransitionFade", "LtTransitionSlide", "LtTransitionSlideBottom", "LtTransitionSlideRevert", "LtTransitionFadeScale"];
     for (const componentName of transitionComponents) {
       addComponent({
         name: componentName,
@@ -152,18 +158,15 @@ const module$1 = defineNuxtModule({
       addPlugin(resolve("./runtime/plugins/error-translation.client"));
     }
     if (resolvedOptions.i18n?.autoMerge) {
-      nuxt.hook(
-        "i18n:registerModule",
-        (register) => {
-          register({
-            langDir: resolve("./runtime/locales"),
-            locales: [
-              { code: "en", file: "en.json" },
-              { code: "de", file: "de.json" }
-            ]
-          });
-        }
-      );
+      nuxt.hook("i18n:registerModule", (register) => {
+        register({
+          langDir: resolve("./runtime/locales"),
+          locales: [
+            { code: "en", file: "en.json" },
+            { code: "de", file: "de.json" }
+          ]
+        });
+      });
     }
     nuxt.options.build.transpile.push(resolve("./runtime"));
     nuxt.options.build.transpile.push("tus-js-client");
@@ -175,4 +178,4 @@ const module$1 = defineNuxtModule({
   }
 });
 
-export { configKey, module$1 as default, name, version };
+export { DEFAULT_LT_AUTH_STATE_COOKIE, DEFAULT_LT_JWT_TOKEN_COOKIE, configKey, module$1 as default, name, version };

package/dist/runtime/components/transition/LtTransitionFade.vue

@@ -6,9 +6,7 @@ const props = defineProps({
 </script>
 
 <template>
-  <div
-    :style="`--start-duration: ${props.startDuration}ms; --leave-duration: ${props.leaveDuration}ms;`"
-  >
+  <div :style="`--start-duration: ${props.startDuration}ms; --leave-duration: ${props.leaveDuration}ms;`">
     <Transition
       enter-active-class="transition ease-out duration-[--start-duration]"
       enter-from-class="transform opacity-0"

package/dist/runtime/components/transition/LtTransitionFadeScale.vue

@@ -6,9 +6,7 @@ const props = defineProps({
 </script>
 
 <template>
-  <div
-    :style="`--start-duration: ${props.startDuration}ms; --leave-duration: ${props.leaveDuration}ms;`"
-  >
+  <div :style="`--start-duration: ${props.startDuration}ms; --leave-duration: ${props.leaveDuration}ms;`">
     <Transition
       enter-active-class="transition ease-out duration-[--start-duration]"
       enter-from-class="transform opacity-0 scale-95"

package/dist/runtime/composables/auth/use-lt-auth.d.ts

@@ -9,7 +9,7 @@
  * - If session cookie works -> use cookies
  * - If cookies fail (401) -> switch to JWT mode
  */
-import type { UseLtAuthReturn } from "../../types/index.js";
+import type { UseLtAuthReturn } from '../../types/index.js';
 /**
  * Better Auth composable with Cookie/JWT dual-mode authentication
  *

package/dist/runtime/composables/auth/use-lt-auth.js

@@ -1,6 +1,6 @@
 import { useNuxtApp, useCookie, useState, ref, computed, watch } from "#imports";
 import { ltArrayBufferToBase64Url, ltBase64UrlToUint8Array } from "../../utils/crypto.js";
-import { getLtApiBase } from "../../lib/auth-state.js";
+import { clearLtAuthCookies, getLtApiBase, getLtAuthCookieNames } from "../../lib/auth-state.js";
 import { useLtAuthClient } from "../use-lt-auth-client.js";
 function useTranslation() {
   const nuxtApp = useNuxtApp();
@@ -15,14 +15,15 @@ function useTranslation() {
 export function useLtAuth() {
   const authClient = useLtAuthClient();
   const t = useTranslation();
-  const authState = useCookie("lt-auth-state", {
+  const { state: stateCookieName, token: tokenCookieName } = getLtAuthCookieNames();
+  const authState = useCookie(stateCookieName, {
     maxAge: 60 * 60 * 24 * 7,
     // 7 days
     sameSite: "lax"
   });
   if (import.meta.client) {
     try {
-      const cookieStr = document.cookie.split("; ").find((row) => row.startsWith("lt-auth-state="));
+      const cookieStr = document.cookie.split("; ").find((row) => row.startsWith(`${stateCookieName}=`));
       if (cookieStr) {
         const parts = cookieStr.split("=");
         const value = parts.length > 1 ? decodeURIComponent(parts.slice(1).join("=")) : "";
@@ -39,7 +40,7 @@ export function useLtAuth() {
   if (import.meta.server && (authState.value === null || authState.value === void 0)) {
     authState.value = { user: null, authMode: "cookie" };
   }
-  const jwtToken = useCookie("lt-jwt-token", {
+  const jwtToken = useCookie(tokenCookieName, {
     maxAge: 60 * 60 * 24 * 7,
     // 7 days
     sameSite: "lax"
@@ -51,10 +52,7 @@ export function useLtAuth() {
   const isAuthenticated = computed(() => !!user.value);
   const isAdmin = computed(() => user.value?.role === "admin");
   const is2FAEnabled = computed(() => user.value?.twoFactorEnabled ?? false);
-  const features = useState(
-    "lt-auth-features",
-    () => ({})
-  );
+  const features = useState("lt-auth-features", () => ({}));
   const featuresFetched = useState("lt-auth-features-fetched", () => false);
   function setUser(userData, mode = "cookie") {
     const newState = { user: userData, authMode: mode };
@@ -62,7 +60,7 @@ export function useLtAuth() {
     if (import.meta.client) {
       const maxAge = 60 * 60 * 24 * 7;
       const secure = globalThis.location?.protocol === "https:" ? "; secure" : "";
-      document.cookie = `lt-auth-state=${encodeURIComponent(JSON.stringify(newState))}; path=/; max-age=${maxAge}; samesite=lax${secure}`;
+      document.cookie = `${stateCookieName}=${encodeURIComponent(JSON.stringify(newState))}; path=/; max-age=${maxAge}; samesite=lax${secure}`;
     }
   }
   function clearUser() {
@@ -70,23 +68,7 @@ export function useLtAuth() {
     authState.value = clearedState;
     jwtToken.value = null;
     if (import.meta.client) {
-      const maxAge = 60 * 60 * 24 * 7;
-      const secure = globalThis.location?.protocol === "https:" ? "; secure" : "";
-      document.cookie = `lt-auth-state=${encodeURIComponent(JSON.stringify(clearedState))}; path=/; max-age=${maxAge}; samesite=lax${secure}`;
-      document.cookie = `lt-jwt-token=; path=/; max-age=0`;
-      const sessionCookieNames = [
-        "better-auth.session_token",
-        "better-auth.session",
-        "__Secure-better-auth.session_token",
-        "session_token",
-        "session"
-      ];
-      for (const name of sessionCookieNames) {
-        document.cookie = `${name}=; path=/; max-age=0`;
-        document.cookie = `${name}=; path=/api; max-age=0`;
-        document.cookie = `${name}=; path=/api/iam; max-age=0`;
-        document.cookie = `${name}=; path=/iam; max-age=0`;
-      }
+      clearLtAuthCookies();
     }
   }
   async function switchToJwtMode() {
@@ -180,9 +162,7 @@ export function useLtAuth() {
   async function fetchFeatures() {
     try {
       const apiBase = getLtApiBase();
-      const result = await $fetch(
-        `${apiBase}/features`
-      );
+      const result = await $fetch(`${apiBase}/features`);
       if (result) {
         features.value = result;
         featuresFetched.value = true;
@@ -258,12 +238,9 @@ export function useLtAuth() {
     isLoading.value = true;
     try {
       const apiBase = getLtApiBase();
-      const optionsResponse = await fetchWithAuth(
-        `${apiBase}/passkey/generate-authenticate-options`,
-        {
-          method: "GET"
-        }
-      );
+      const optionsResponse = await fetchWithAuth(`${apiBase}/passkey/generate-authenticate-options`, {
+        method: "GET"
+      });
       if (!optionsResponse.ok) {
         return {
           success: false,

package/dist/runtime/composables/auth/use-system-setup.d.ts

@@ -8,7 +8,7 @@
  *
  * URL handling is delegated to {@link buildLtApiUrl} (SSR / proxy / direct).
  */
-import type { ComputedRef } from "vue";
+import type { ComputedRef } from 'vue';
 export interface UseSystemSetupReturn {
     /** Whether the system needs initial setup (null = not checked yet) */
     needsSetup: ComputedRef<boolean | null>;

package/dist/runtime/composables/index.d.ts

@@ -1,7 +1,7 @@
-export { useLtAuth } from "./auth/use-lt-auth.js";
-export { useSystemSetup } from "./auth/use-system-setup.js";
-export { useLtAuthClient, ltAuthClient } from "./use-lt-auth-client.js";
-export { useLtTusUpload } from "./use-lt-tus-upload.js";
-export { useLtFile } from "./use-lt-file.js";
-export { useLtShare, type UseLtShareReturn } from "./use-lt-share.js";
-export { useLtErrorTranslation } from "./use-lt-error-translation.js";
+export { useLtAuth } from './auth/use-lt-auth.js';
+export { useSystemSetup } from './auth/use-system-setup.js';
+export { useLtAuthClient, ltAuthClient } from './use-lt-auth-client.js';
+export { useLtTusUpload } from './use-lt-tus-upload.js';
+export { useLtFile } from './use-lt-file.js';
+export { useLtShare, type UseLtShareReturn } from './use-lt-share.js';
+export { useLtErrorTranslation } from './use-lt-error-translation.js';

package/dist/runtime/composables/use-lt-auth-client.d.ts

@@ -16,7 +16,7 @@
  * await authClient.passkey.listUserPasskeys();
  * ```
  */
-import { type LtAuthClient } from "../lib/auth-client.js";
+import { type LtAuthClient } from '../lib/auth-client.js';
 /**
  * Reset the auth client singleton (useful for testing or config changes)
  */

package/dist/runtime/composables/use-lt-auth-client.js

@@ -1,8 +1,5 @@
 import { useRuntimeConfig } from "#imports";
-import {
-  getOrCreateLtAuthClient,
-  resetLtAuthClientSingleton
-} from "../lib/auth-client.js";
+import { getOrCreateLtAuthClient, resetLtAuthClientSingleton } from "../lib/auth-client.js";
 import { isLocalDevApiProxy } from "../lib/auth-state.js";
 export function resetLtAuthClient() {
   resetLtAuthClientSingleton();

package/dist/runtime/composables/use-lt-error-translation.d.ts

@@ -9,7 +9,7 @@
  *
  * URL handling is delegated to {@link buildLtApiUrl} (SSR / proxy / direct).
  */
-import type { UseLtErrorTranslationReturn } from "../types/error.js";
+import type { UseLtErrorTranslationReturn } from '../types/error.js';
 /**
  * Error Translation composable
  *

package/dist/runtime/composables/use-lt-error-translation.js

@@ -4,10 +4,7 @@ const ERROR_CODE_REGEX = /^#([A-Z_]+_\d+):\s*(.+)$/;
 export function useLtErrorTranslation() {
   const nuxtApp = useNuxtApp();
   const runtimeConfig = useRuntimeConfig();
-  const translations = useState(
-    "lt-error-translations",
-    () => ({})
-  );
+  const translations = useState("lt-error-translations", () => ({}));
   const isLoading = ref(false);
   const config = runtimeConfig.public?.ltExtensions?.errorTranslation;
   function t(key, germanFallback) {

package/dist/runtime/composables/use-lt-file.d.ts

@@ -6,7 +6,7 @@
  * - URL generation for file access
  * - File size and duration formatting
  */
-import type { UseLtFileReturn } from "../types/index.js";
+import type { UseLtFileReturn } from '../types/index.js';
 /**
  * File utilities composable
  *

package/dist/runtime/composables/use-lt-share.js

@@ -32,10 +32,7 @@ export function useLtShare() {
             const toast = useToast();
             toast.add({
               color: "success",
-              description: t(
-                "lt.share.copiedDescription",
-                "Der Link wurde in die Zwischenablage kopiert."
-              ),
+              description: t("lt.share.copiedDescription", "Der Link wurde in die Zwischenablage kopiert."),
               title: t("lt.share.copied", "Link kopiert")
             });
           } catch {

package/dist/runtime/composables/use-lt-tus-upload.d.ts

@@ -6,7 +6,7 @@
  *
  * @see https://tus.io/
  */
-import type { LtUploadOptions, UseLtTusUploadReturn } from "../types/index.js";
+import type { LtUploadOptions, UseLtTusUploadReturn } from '../types/index.js';
 /**
  * TUS Upload composable with pause/resume support
  *

package/dist/runtime/composables/use-lt-tus-upload.js

@@ -5,9 +5,7 @@ async function getTusModule() {
     try {
       tusModule = await import("tus-js-client");
     } catch {
-      throw new Error(
-        "[useLtTusUpload] tus-js-client is not installed. Please install it: npm install tus-js-client"
-      );
+      throw new Error("[useLtTusUpload] tus-js-client is not installed. Please install it: npm install tus-js-client");
     }
   }
   return tusModule;

package/dist/runtime/lib/auth-client.d.ts

@@ -7,7 +7,7 @@
  * SECURITY: Passwords are hashed with SHA256 client-side to prevent
  * plain text password transmission over the network.
  */
-import type { LtAuthClientConfig } from "../types/index.js";
+import type { LtAuthClientConfig } from '../types/index.js';
 /**
  * Register additional Better Auth plugins before auth client initialization.
  *
@@ -226,8 +226,8 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
                 onResponse: ((context: import("better-auth/client").ResponseContext) => Promise<Response | void | import("better-auth/client").ResponseContext> | Response | import("better-auth/client").ResponseContext | void) | undefined;
             };
         })[];
-        cache?: RequestCache | undefined;
         priority?: RequestPriority | undefined;
+        cache?: RequestCache | undefined;
         credentials?: RequestCredentials;
         headers?: (HeadersInit & (HeadersInit | {
             accept: "application/json" | "text/plain" | "application/octet-stream";

package/dist/runtime/lib/auth-client.js

@@ -95,14 +95,8 @@ export function createLtAuthClient(config = {}) {
      */
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     changePassword: async (params, options) => {
-      const [hashedCurrent, hashedNew] = await Promise.all([
-        ltSha256(params.currentPassword),
-        ltSha256(params.newPassword)
-      ]);
-      return baseClient.changePassword?.(
-        { currentPassword: hashedCurrent, newPassword: hashedNew },
-        options
-      );
+      const [hashedCurrent, hashedNew] = await Promise.all([ltSha256(params.currentPassword), ltSha256(params.newPassword)]);
+      return baseClient.changePassword?.({ currentPassword: hashedCurrent, newPassword: hashedNew }, options);
     },
     /**
      * Reset password with token (new password is hashed before sending)
@@ -110,10 +104,7 @@ export function createLtAuthClient(config = {}) {
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     resetPassword: async (params, options) => {
       const hashedPassword = await ltSha256(params.newPassword);
-      return baseClient.resetPassword?.(
-        { newPassword: hashedPassword, token: params.token },
-        options
-      );
+      return baseClient.resetPassword?.({ newPassword: hashedPassword, token: params.token }, options);
     },
     // Override signIn to hash password (keep passkey method from plugin)
     signIn: {
@@ -173,10 +164,7 @@ export function createLtAuthClient(config = {}) {
       // eslint-disable-next-line @typescript-eslint/no-explicit-any
       generateBackupCodes: async (params, options) => {
         const hashedPassword = await ltSha256(params.password);
-        return baseClient.twoFactor.generateBackupCodes(
-          { password: hashedPassword },
-          options
-        );
+        return baseClient.twoFactor.generateBackupCodes({ password: hashedPassword }, options);
       },
       /**
        * Verify TOTP code (pass through to base client)

package/dist/runtime/lib/auth-state.d.ts

@@ -11,7 +11,21 @@
  *
  * The state is persisted in cookies for SSR compatibility.
  */
-import type { LtAuthMode } from "../types/index.js";
+import type { LtAuthMode } from '../types/index.js';
+/** Default name of the auth-state cookie. Used when the module config has not been resolved yet. */
+export declare const LT_AUTH_STATE_COOKIE_DEFAULT = "lt-auth-state";
+/** Default name of the JWT-token cookie. Used when the module config has not been resolved yet. */
+export declare const LT_JWT_TOKEN_COOKIE_DEFAULT = "lt-jwt-token";
+/**
+ * Resolve the configured auth cookie names from runtime config.
+ *
+ * Falls back to the defaults (`lt-auth-state`, `lt-jwt-token`) so callers
+ * keep working even outside a Nuxt context (tests, edge SSR boots).
+ */
+export declare function getLtAuthCookieNames(): {
+    state: string;
+    token: string;
+};
 /**
  * Determines if HTTP requests should use the Nuxt Vite dev proxy.
  *
@@ -95,7 +109,24 @@ export declare function getLtJwtToken(): string | null;
  */
 export declare function setLtJwtToken(token: string | null): void;
 /**
- * Update auth mode in the lt-auth-state cookie
+ * Hard-delete all auth cookies on logout.
+ *
+ * This is the single source of truth for "remove every auth cookie this
+ * module owns". It expires:
+ * - the configured auth-state cookie (default `lt-auth-state`)
+ * - the configured JWT token cookie (default `lt-jwt-token`)
+ * - the Better-Auth session fallbacks the client may have set
+ *
+ * Browsers only delete a cookie when the path / sameSite / secure
+ * attributes match the ones used when it was written, so we mirror the
+ * attributes from `setUser()` / `setLtJwtToken()`. The Better-Auth
+ * session cookies are httpOnly when set by the API and cannot be touched
+ * from JS — clearing them here is best-effort for any non-httpOnly
+ * variant the framework might have written client-side.
+ */
+export declare function clearLtAuthCookies(): void;
+/**
+ * Update auth mode in the auth-state cookie
  */
 export declare function setLtAuthMode(mode: LtAuthMode): void;
 /**
@@ -117,7 +148,7 @@ export declare function getLtApiBase(basePath?: string): string;
  */
 export declare function attemptLtJwtSwitch(basePath?: string): Promise<boolean>;
 /**
- * Check if user is authenticated (has lt-auth-state with user)
+ * Check if user is authenticated (has auth-state with user)
  */
 export declare function isLtAuthenticated(): boolean;
 /**

package/dist/runtime/lib/auth-state.js

@@ -1,4 +1,18 @@
 import { useRuntimeConfig } from "#imports";
+export const LT_AUTH_STATE_COOKIE_DEFAULT = "lt-auth-state";
+export const LT_JWT_TOKEN_COOKIE_DEFAULT = "lt-jwt-token";
+export function getLtAuthCookieNames() {
+  try {
+    const runtimeConfig = useRuntimeConfig();
+    const configured = runtimeConfig.public?.ltExtensions?.auth?.cookieNames;
+    return {
+      state: configured?.state || LT_AUTH_STATE_COOKIE_DEFAULT,
+      token: configured?.token || LT_JWT_TOKEN_COOKIE_DEFAULT
+    };
+  } catch {
+    return { state: LT_AUTH_STATE_COOKIE_DEFAULT, token: LT_JWT_TOKEN_COOKIE_DEFAULT };
+  }
+}
 let _proxyFallbackWarned = false;
 export function isLocalDevApiProxy() {
   if (import.meta.server) {
@@ -33,9 +47,7 @@ export function buildLtApiUrl(path) {
     if (import.meta.server) {
       const apiUrl2 = runtimeConfig.apiUrl || publicUrl || authBaseURL;
       if (!apiUrl2) {
-        console.warn(
-          "[LtExtensions] No API URL configured. Set NUXT_API_URL or NUXT_PUBLIC_API_URL."
-        );
+        console.warn("[LtExtensions] No API URL configured. Set NUXT_API_URL or NUXT_PUBLIC_API_URL.");
       }
       return `${(apiUrl2 || "").replace(/\/+$/, "")}${path}`;
     }
@@ -54,7 +66,8 @@ export function buildLtApiUrl(path) {
 export function getLtAuthMode() {
   if (import.meta.server) return "cookie";
   try {
-    const cookie = document.cookie.split("; ").find((row) => row.startsWith("lt-auth-state="));
+    const { state: stateCookieName } = getLtAuthCookieNames();
+    const cookie = document.cookie.split("; ").find((row) => row.startsWith(`${stateCookieName}=`));
     if (cookie) {
       const parts = cookie.split("=");
       const value = parts.length > 1 ? decodeURIComponent(parts.slice(1).join("=")) : "";
@@ -68,7 +81,8 @@ export function getLtAuthMode() {
 export function getLtJwtToken() {
   if (import.meta.server) return null;
   try {
-    const cookie = document.cookie.split("; ").find((row) => row.startsWith("lt-jwt-token="));
+    const { token: tokenCookieName } = getLtAuthCookieNames();
+    const cookie = document.cookie.split("; ").find((row) => row.startsWith(`${tokenCookieName}=`));
     if (cookie) {
       const parts = cookie.split("=");
       const value = parts.length > 1 ? decodeURIComponent(parts.slice(1).join("=")) : "";
@@ -83,18 +97,34 @@ export function getLtJwtToken() {
 }
 export function setLtJwtToken(token) {
   if (import.meta.server) return;
+  const { token: tokenCookieName } = getLtAuthCookieNames();
   const maxAge = 60 * 60 * 24 * 7;
   const secure = globalThis.location?.protocol === "https:" ? "; secure" : "";
   if (token) {
-    document.cookie = `lt-jwt-token=${encodeURIComponent(JSON.stringify(token))}; path=/; max-age=${maxAge}; samesite=lax${secure}`;
+    document.cookie = `${tokenCookieName}=${encodeURIComponent(JSON.stringify(token))}; path=/; max-age=${maxAge}; samesite=lax${secure}`;
   } else {
-    document.cookie = `lt-jwt-token=; path=/; max-age=0`;
+    document.cookie = `${tokenCookieName}=; path=/; max-age=0; samesite=lax${secure}`;
+  }
+}
+export function clearLtAuthCookies() {
+  if (import.meta.server) return;
+  const { state: stateCookieName, token: tokenCookieName } = getLtAuthCookieNames();
+  const secure = globalThis.location?.protocol === "https:" ? "; secure" : "";
+  document.cookie = `${stateCookieName}=; path=/; max-age=0; samesite=lax${secure}`;
+  document.cookie = `${tokenCookieName}=; path=/; max-age=0; samesite=lax${secure}`;
+  const sessionCookieNames = ["better-auth.session_token", "better-auth.session", "__Secure-better-auth.session_token", "session_token", "session"];
+  for (const name of sessionCookieNames) {
+    document.cookie = `${name}=; path=/; max-age=0`;
+    document.cookie = `${name}=; path=/api; max-age=0`;
+    document.cookie = `${name}=; path=/api/iam; max-age=0`;
+    document.cookie = `${name}=; path=/iam; max-age=0`;
   }
 }
 export function setLtAuthMode(mode) {
   if (import.meta.server) return;
   try {
-    const cookie = document.cookie.split("; ").find((row) => row.startsWith("lt-auth-state="));
+    const { state: stateCookieName } = getLtAuthCookieNames();
+    const cookie = document.cookie.split("; ").find((row) => row.startsWith(`${stateCookieName}=`));
     let state = { user: null, authMode: mode };
     if (cookie) {
       const parts = cookie.split("=");
@@ -103,7 +133,7 @@ export function setLtAuthMode(mode) {
     }
     const maxAge = 60 * 60 * 24 * 7;
     const secure = globalThis.location?.protocol === "https:" ? "; secure" : "";
-    document.cookie = `lt-auth-state=${encodeURIComponent(JSON.stringify(state))}; path=/; max-age=${maxAge}; samesite=lax${secure}`;
+    document.cookie = `${stateCookieName}=${encodeURIComponent(JSON.stringify(state))}; path=/; max-age=${maxAge}; samesite=lax${secure}`;
   } catch {
   }
 }
@@ -141,7 +171,8 @@ export async function attemptLtJwtSwitch(basePath = "/iam") {
 export function isLtAuthenticated() {
   if (import.meta.server) return false;
   try {
-    const cookie = document.cookie.split("; ").find((row) => row.startsWith("lt-auth-state="));
+    const { state: stateCookieName } = getLtAuthCookieNames();
+    const cookie = document.cookie.split("; ").find((row) => row.startsWith(`${stateCookieName}=`));
     if (cookie) {
       const parts = cookie.split("=");
       const value = parts.length > 1 ? decodeURIComponent(parts.slice(1).join("=")) : "";

package/dist/runtime/lib/index.d.ts

@@ -1,2 +1,2 @@
-export { attemptLtJwtSwitch, createLtAuthFetch, getLtApiBase, getLtAuthMode, getLtJwtToken, isLtAuthenticated, ltAuthFetch, setLtAuthMode, setLtJwtToken, } from "./auth-state.js";
-export { clearLtAuthPluginRegistry, createLtAuthClient, getOrCreateLtAuthClient, getLtAuthPluginRegistry, registerLtAuthPlugins, resetLtAuthClientSingleton, type LtAuthClient, } from "./auth-client.js";
+export { attemptLtJwtSwitch, clearLtAuthCookies, createLtAuthFetch, getLtApiBase, getLtAuthCookieNames, getLtAuthMode, getLtJwtToken, isLtAuthenticated, LT_AUTH_STATE_COOKIE_DEFAULT, LT_JWT_TOKEN_COOKIE_DEFAULT, ltAuthFetch, setLtAuthMode, setLtJwtToken, } from './auth-state.js';
+export { clearLtAuthPluginRegistry, createLtAuthClient, getOrCreateLtAuthClient, getLtAuthPluginRegistry, registerLtAuthPlugins, resetLtAuthClientSingleton, type LtAuthClient, } from './auth-client.js';

package/dist/runtime/lib/index.js

@@ -1,10 +1,14 @@
 export {
   attemptLtJwtSwitch,
+  clearLtAuthCookies,
   createLtAuthFetch,
   getLtApiBase,
+  getLtAuthCookieNames,
   getLtAuthMode,
   getLtJwtToken,
   isLtAuthenticated,
+  LT_AUTH_STATE_COOKIE_DEFAULT,
+  LT_JWT_TOKEN_COOKIE_DEFAULT,
   ltAuthFetch,
   setLtAuthMode,
   setLtJwtToken

package/dist/runtime/middleware/setup.d.ts

@@ -8,6 +8,6 @@
  * - needsSetup === true AND route != setupPath -> redirect to setupPath
  * - needsSetup === false AND route === setupPath -> redirect to loginPath
  */
-import type { RouteMiddleware } from "#app";
+import type { RouteMiddleware } from '#app';
 declare const _default: RouteMiddleware;
 export default _default;

package/dist/runtime/plugins/auth-interceptor.client.d.ts

@@ -9,6 +9,6 @@
  * Note: This is a client-only plugin (.client.ts) since auth state
  * management only makes sense in the browser context.
  */
-import type { NuxtApp } from "#app";
+import type { NuxtApp } from '#app';
 declare const _default: (nuxtApp: NuxtApp) => void;
 export default _default;

package/dist/runtime/plugins/auth-interceptor.client.js

@@ -12,14 +12,7 @@ export default (nuxtApp) => {
   const loginPath = runtimeConfig.loginPath || "/auth/login";
   const configuredPublicPaths = runtimeConfig.interceptor?.publicPaths || [];
   let isHandling401 = false;
-  const defaultPublicPaths = [
-    "/auth/login",
-    "/auth/register",
-    "/auth/forgot-password",
-    "/auth/reset-password",
-    "/auth/2fa",
-    "/auth/setup"
-  ];
+  const defaultPublicPaths = ["/auth/login", "/auth/register", "/auth/forgot-password", "/auth/reset-password", "/auth/2fa", "/auth/setup"];
   const publicAuthPaths = [.../* @__PURE__ */ new Set([...defaultPublicPaths, ...configuredPublicPaths])];
   function isPublicAuthRoute() {
     const router = nuxtApp.$router;

package/dist/runtime/plugins/error-translation.client.d.ts

@@ -4,6 +4,6 @@
  * Automatically loads error translations on app start.
  * Provides global helper methods: $ltTranslateError, $ltShowErrorToast
  */
-import type { ObjectPlugin, Plugin } from "#app";
+import type { ObjectPlugin, Plugin } from '#app';
 declare const _default: Plugin & ObjectPlugin;
 export default _default;

package/dist/runtime/testing/index.d.ts

@@ -18,4 +18,4 @@
  *
  * @packageDocumentation
  */
-export { waitForHydration, gotoAndWaitForHydration, waitForURLAndHydration, DEFAULT_HYDRATION_TIMEOUT, fillInput, fillInputs, generateTestUser, generateRandomString, generateTOTP, extractTOTPSecret, parseTOTPUrl, waitForElement, waitForNetworkIdle, hasText, getAllText, type TestUser, } from "./playwright-helpers.js";
+export { waitForHydration, gotoAndWaitForHydration, waitForURLAndHydration, DEFAULT_HYDRATION_TIMEOUT, fillInput, fillInputs, generateTestUser, generateRandomString, generateTOTP, extractTOTPSecret, parseTOTPUrl, waitForElement, waitForNetworkIdle, hasText, getAllText, type TestUser, } from './playwright-helpers.js';

package/dist/runtime/testing/playwright-helpers.d.ts

@@ -20,7 +20,7 @@
  * });
  * ```
  */
-import type { Page } from "@playwright/test";
+import type { Page } from '@playwright/test';
 /**
  * Default timeout for hydration waiting (in milliseconds)
  */
@@ -191,7 +191,7 @@ export declare function generateRandomString(length?: number, charset?: string):
 export declare function generateTOTP(secret: string, options?: {
     digits?: number;
     period?: number;
-    algorithm?: "sha1" | "sha256" | "sha512";
+    algorithm?: 'sha1' | 'sha256' | 'sha512';
 }): string;
 /**
  * Extract TOTP secret from otpauth:// URL

package/dist/runtime/types/auth.d.ts

@@ -1,4 +1,4 @@
-import type { ComputedRef, Ref } from "vue";
+import type { ComputedRef, Ref } from 'vue';
 /**
  * User type for Better Auth session
  * Compatible with @lenne.tech/nest-server IAM module
@@ -20,7 +20,7 @@ export interface LtUser {
  * - 'cookie': Primary mode using HttpOnly session cookies (more secure)
  * - 'jwt': Fallback mode using JWT tokens in Authorization header
  */
-export type LtAuthMode = "cookie" | "jwt";
+export type LtAuthMode = 'cookie' | 'jwt';
 /**
  * Stored auth state (persisted in cookie for SSR compatibility)
  */

package/dist/runtime/types/error.d.ts

@@ -1,4 +1,4 @@
-import type { ComputedRef, Ref } from "vue";
+import type { ComputedRef, Ref } from 'vue';
 /**
  * Backend error translation response format
  * Matches the response from GET /api/i18n/errors/:locale

package/dist/runtime/types/index.d.ts

@@ -1,4 +1,4 @@
-export type { LtAuthClientConfig, LtAuthMode, LtAuthResponse, LtAuthState, LtPasskeyAuthResult, LtPasskeyRegisterResult, LtUser, UseLtAuthReturn, } from "./auth.js";
-export type { LtFileInfo, LtUploadItem, LtUploadOptions, LtUploadProgress, LtUploadStatus, UseLtFileReturn, UseLtTusUploadReturn, } from "./upload.js";
-export type { LtAuthModuleOptions, LtErrorTranslationModuleOptions, LtExtensionsModuleOptions, LtExtensionsPublicRuntimeConfig, LtI18nModuleOptions, LtSystemSetupModuleOptions, LtTusModuleOptions, } from "./module.js";
-export type { LtErrorTranslationResponse, LtParsedError, UseLtErrorTranslationReturn, } from "./error.js";
+export type { LtAuthClientConfig, LtAuthMode, LtAuthResponse, LtAuthState, LtPasskeyAuthResult, LtPasskeyRegisterResult, LtUser, UseLtAuthReturn } from './auth.js';
+export type { LtFileInfo, LtUploadItem, LtUploadOptions, LtUploadProgress, LtUploadStatus, UseLtFileReturn, UseLtTusUploadReturn } from './upload.js';
+export type { LtAuthCookieNamesOptions, LtAuthModuleOptions, LtErrorTranslationModuleOptions, LtExtensionsModuleOptions, LtExtensionsPublicRuntimeConfig, LtI18nModuleOptions, LtSystemSetupModuleOptions, LtTusModuleOptions, } from './module.js';
+export type { LtErrorTranslationResponse, LtParsedError, UseLtErrorTranslationReturn } from './error.js';

package/dist/runtime/types/module.d.ts

@@ -24,11 +24,42 @@ export interface LtSystemSetupModuleOptions {
     /** Path to the setup page (default: '/auth/setup') */
     setupPath?: string;
 }
+/**
+ * Configurable cookie names used by the auth module.
+ *
+ * The two cookies are written and read across `useLtAuth()` and the
+ * `auth-state.ts` helpers. Override them per project to avoid clashes
+ * when multiple lenne.tech apps share a domain. Each key is independent;
+ * unspecified keys keep their default value.
+ *
+ * @example
+ * ```typescript
+ * // nuxt.config.ts
+ * export default defineNuxtConfig({
+ *   ltExtensions: {
+ *     auth: {
+ *       cookieNames: {
+ *         state: 'my-app-auth-state',
+ *         token: 'my-app-jwt',
+ *       },
+ *     },
+ *   },
+ * });
+ * ```
+ */
+export interface LtAuthCookieNamesOptions {
+    /** Name of the auth-state cookie (default: 'lt-auth-state') */
+    state?: string;
+    /** Name of the JWT-token cookie (default: 'lt-jwt-token') */
+    token?: string;
+}
 export interface LtAuthModuleOptions {
     /** Auth API base path (default: '/iam' - must match nest-server betterAuth.basePath) */
     basePath?: string;
     /** API base URL (default: from env or http://localhost:3000) */
     baseURL?: string;
+    /** Override the cookie names used for auth state and JWT storage */
+    cookieNames?: LtAuthCookieNamesOptions;
     /** Enable the auth module (default: true) */
     enabled?: boolean;
     /** Enable admin plugin (default: true) */
@@ -97,6 +128,10 @@ export interface LtExtensionsPublicRuntimeConfig {
         auth: {
             basePath: string;
             baseURL: string;
+            cookieNames: {
+                state: string;
+                token: string;
+            };
             enabled: boolean;
             enableAdmin: boolean;
             enablePasskey: boolean;
@@ -122,11 +157,11 @@ export interface LtExtensionsPublicRuntimeConfig {
         };
     };
 }
-declare module "nuxt/schema" {
+declare module 'nuxt/schema' {
     interface PublicRuntimeConfig extends LtExtensionsPublicRuntimeConfig {
     }
 }
-declare module "@nuxt/schema" {
+declare module '@nuxt/schema' {
     interface PublicRuntimeConfig extends LtExtensionsPublicRuntimeConfig {
     }
 }

package/dist/runtime/types/upload.d.ts

@@ -1,8 +1,8 @@
-import type { ComputedRef } from "vue";
+import type { ComputedRef } from 'vue';
 /**
  * Status of an upload item
  */
-export type LtUploadStatus = "completed" | "error" | "idle" | "paused" | "uploading";
+export type LtUploadStatus = 'completed' | 'error' | 'idle' | 'paused' | 'uploading';
 /**
  * Progress information for an upload
  */

package/dist/runtime/utils/index.d.ts

@@ -1,2 +1,2 @@
-export { ltArrayBufferToBase64Url, ltBase64UrlToUint8Array, ltSha256 } from "./crypto.js";
-export { tw } from "./tw.js";
+export { ltArrayBufferToBase64Url, ltBase64UrlToUint8Array, ltSha256 } from './crypto.js';
+export { tw } from './tw.js';

package/dist/types.d.mts

@@ -8,8 +8,8 @@ export { type LtAuthClientConfig, type LtAuthMode, type LtAuthResponse, type LtA
 
 export { type LtFileInfo, type LtUploadItem, type LtUploadOptions, type LtUploadProgress, type LtUploadStatus, type UseLtFileReturn, type UseLtTusUploadReturn } from '../dist/runtime/types/upload.js'
 
-export { type LtAuthModuleOptions, type LtErrorTranslationModuleOptions, type LtExtensionsModuleOptions, type LtExtensionsPublicRuntimeConfig, type LtI18nModuleOptions, type LtSystemSetupModuleOptions, type LtTusModuleOptions } from '../dist/runtime/types/module.js'
+export { type LtAuthCookieNamesOptions, type LtAuthModuleOptions, type LtErrorTranslationModuleOptions, type LtExtensionsModuleOptions, type LtExtensionsPublicRuntimeConfig, type LtI18nModuleOptions, type LtSystemSetupModuleOptions, type LtTusModuleOptions } from '../dist/runtime/types/module.js'
 
 export { type LtErrorTranslationResponse, type LtParsedError, type UseLtErrorTranslationReturn } from '../dist/runtime/types/error.js'
 
-export { type configKey, default, type name, type version } from './module.mjs'
+export { type DEFAULT_LT_AUTH_STATE_COOKIE, type DEFAULT_LT_JWT_TOKEN_COOKIE, type configKey, default, type name, type version } from './module.mjs'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.5.3",
+  "version": "1.6.0",
   "description": "Reusable Nuxt 4 composables, components, and Better-Auth integration for lenne.tech projects",
   "repository": {
     "type": "git",
@@ -50,7 +50,7 @@
     "prepare": "git config core.hooksPath .githooks",
     "prepack": "node scripts/sync-module-version.mjs && nuxt-module-build build",
     "c": "pnpm run check",
-    "check": "pnpm audit && pnpm run format:check && pnpm run lint && pnpm test:types && pnpm test && pnpm run build",
+    "check": "pnpm audit && pnpm run format:check && pnpm run lint && pnpm run dev:prepare && pnpm test:types && pnpm test && pnpm run build",
     "check:fix": "pnpm install && pnpm audit --fix && pnpm run format && pnpm run lint:fix && pnpm test:types && pnpm test && pnpm run build",
     "check:naf": "pnpm install && pnpm run format && pnpm run lint:fix && pnpm test:types && pnpm test && pnpm run build",
     "cf": "pnpm run check:fix",
@@ -70,7 +70,7 @@
     "release": "pnpm format:check && pnpm lint && pnpm test:types && pnpm test && pnpm prepack"
   },
   "dependencies": {
-    "@nuxt/kit": "4.4.2"
+    "@nuxt/kit": "4.4.4"
   },
   "peerDependencies": {
     "@better-auth/passkey": ">=1.0.0",
@@ -94,47 +94,28 @@
     }
   },
   "devDependencies": {
-    "@better-auth/passkey": "1.5.6",
+    "@better-auth/passkey": "1.6.10",
     "@nuxt/devtools": "3.2.4",
     "@nuxt/module-builder": "1.0.2",
-    "@nuxt/schema": "4.4.2",
+    "@nuxt/schema": "4.4.4",
     "@playwright/test": "1.59.1",
-    "@types/node": "25.5.2",
-    "@vitest/coverage-v8": "4.1.2",
-    "better-auth": "1.5.6",
-    "happy-dom": "20.8.9",
-    "nuxt": "4.4.2",
-    "oxfmt": "0.43.0",
-    "oxlint": "1.58.0",
+    "@types/node": "25.6.2",
+    "@vitest/coverage-v8": "4.1.5",
+    "better-auth": "1.6.10",
+    "happy-dom": "20.9.0",
+    "nuxt": "4.4.4",
+    "oxfmt": "0.48.0",
+    "oxlint": "1.63.0",
     "tus-js-client": "4.3.1",
     "typescript": "5.9.3",
-    "vitest": "4.1.2",
-    "vue-tsc": "3.2.6"
+    "vitest": "4.1.5",
+    "vue-tsc": "3.2.8"
   },
   "pnpm": {
     "onlyBuiltDependencies": [
       "@parcel/watcher",
       "esbuild"
-    ],
-    "overrides": {
-      "brace-expansion@<2.0.3": ">=2.0.3",
-      "brace-expansion@>=4.0.0 <5.0.5": ">=5.0.5",
-      "defu@<=6.1.4": ">=6.1.5",
-      "h3@<1.15.9": ">=1.15.9",
-      "lodash@<=4.17.23": ">=4.18.0",
-      "minimatch@>=5.0.0 <5.1.9": "5.1.9",
-      "minimatch@>=9.0.0 <9.0.9": "9.0.9",
-      "minimatch@>=10.0.0 <10.2.5": "10.2.5",
-      "node-forge@<1.4.0": ">=1.4.0",
-      "picomatch@<2.3.2": ">=2.3.2",
-      "picomatch@>=4.0.0 <4.0.4": ">=4.0.4",
-      "rollup@>=4.0.0 <4.59.0": ">=4.59.0",
-      "serialize-javascript@<7.0.5": ">=7.0.5",
-      "srvx@<0.11.13": ">=0.11.13",
-      "svgo@=4.0.0": ">=4.0.1",
-      "tar@<7.5.11": "7.5.11",
-      "yaml@>=2.0.0 <2.8.3": ">=2.8.3"
-    }
+    ]
   },
   "keywords": [
     "nuxt",