@logto/next 4.1.0 → 4.2.0

package/lib/edge/index.js

@@ -79,7 +79,8 @@ class LogtoClient extends LogtoNextBaseClient {
         const headers = new Headers();
         const responseCookies = new ResponseCookies(headers);
         this.storage = new CookieStorage({
-            encryptionKey: this.config.cookieSecret,
+            encryptionKey: this.config.cookieSecret ?? '',
+            sessionWrapper: this.config.sessionWrapper,
             cookieKey: `logto_${this.config.appId}`,
             isSecure: this.config.cookieSecure,
             getCookie: (name) => {

package/lib/server-actions/client.js

@@ -61,7 +61,8 @@ class LogtoClient extends LogtoNextBaseClient {
     async createNodeClient({ ignoreCookieChange } = {}) {
         const { cookies } = await import('next/headers');
         this.storage = new CookieStorage({
-            encryptionKey: this.config.cookieSecret,
+            encryptionKey: this.config.cookieSecret ?? '',
+            sessionWrapper: this.config.sessionWrapper,
             cookieKey: `logto_${this.config.appId}`,
             isSecure: this.config.cookieSecure,
             getCookie: async (...args) => {

package/lib/server-actions/index.js

@@ -11,6 +11,8 @@ async function signIn(config, options, interactionMode) {
 }
 /**
  * Handle sign in callback from search params or full redirect URL, save tokens to session
+ * @param config The Logto configuration object
+ * @param searchParamsOrUrl Either URLSearchParams from the callback URL or the complete URL object
  */
 async function handleSignIn(config, searchParamsOrUrl) {
     const client = new LogtoClient(config);

package/lib/src/index.d.ts

@@ -7,7 +7,7 @@ import LogtoNextBaseClient from './client.js';
 import type { ErrorHandler, LogtoNextConfig } from './types.js';
 export type { LogtoNextConfig } from './types.js';
 export { LogtoError, LogtoRequestError, LogtoClientError, OidcError, Prompt, ReservedScope, ReservedResource, UserScope, organizationUrnPrefix, buildOrganizationUrn, getOrganizationIdFromUrn, PersistKey, } from '@logto/node';
-export type { AccessTokenClaims, IdTokenClaims, LogtoContext, InteractionMode, LogtoErrorCode, UserInfoResponse, } from '@logto/node';
+export type { AccessTokenClaims, IdTokenClaims, LogtoContext, InteractionMode, LogtoErrorCode, UserInfoResponse, SessionWrapper, SessionData, } from '@logto/node';
 export default class LogtoClient extends LogtoNextBaseClient {
     constructor(config: LogtoNextConfig);
     handleSignIn: (options?: (SignInOptions & {

package/lib/src/index.js

@@ -84,10 +84,15 @@ class LogtoClient extends LogtoNextBaseClient {
                 response.redirect(this.navigateUrl);
             }
         }, options.onError);
+        if (!config.sessionWrapper && !config.cookieSecret) {
+            throw new Error('cookieSecret is required when using default session wrapper');
+        }
     }
     async createNodeClientFromNextApi(request, response) {
         this.storage = new CookieStorage({
-            encryptionKey: this.config.cookieSecret,
+            // The type checking is done in the constructor, encryptionKey is required when using default session wrapper
+            encryptionKey: this.config.cookieSecret ?? '',
+            sessionWrapper: this.config.sessionWrapper,
             cookieKey: `logto_${this.config.appId}`,
             isSecure: this.config.cookieSecure,
             getCookie: (name) => {

package/lib/src/types.d.ts

@@ -1,10 +1,17 @@
-import type { LogtoConfig } from '@logto/node';
+import type { LogtoConfig, SessionWrapper } from '@logto/node';
 import type NodeClient from '@logto/node';
 import { type NextApiRequest, type NextApiResponse } from 'next';
 export type LogtoNextConfig = LogtoConfig & {
-    cookieSecret: string;
     cookieSecure: boolean;
     baseUrl: string;
+    /**
+     * Can be provided to use custom session wrapper,
+     * for example, to use external storage solutions,
+     * you can save the session data in external storage and return a key in the sessionWrapper.wrap method,
+     * then use the key to get the session data from external storage in the sessionWrapper.unwrap method.
+     */
+    sessionWrapper?: SessionWrapper;
+    cookieSecret?: string;
 };
 export type Adapters = {
     NodeClient: typeof NodeClient;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/next",
-  "version": "4.1.0",
+  "version": "4.2.0",
   "type": "module",
   "module": "./lib/src/index.js",
   "types": "./lib/src/index.d.ts",
@@ -43,23 +43,23 @@
   "dependencies": {
     "@edge-runtime/cookies": "^5.0.0",
     "cookie": "^1.0.0",
-    "@logto/node": "^3.1.0"
+    "@logto/node": "^3.1.1"
   },
   "devDependencies": {
     "@silverhand/eslint-config": "^6.0.1",
     "@silverhand/ts-config": "^6.0.0",
     "@silverhand/ts-config-react": "^6.0.0",
     "@types/cookie": "^0.6.0",
-    "@vitest/coverage-v8": "^1.6.0",
+    "@vitest/coverage-v8": "^2.1.9",
     "eslint": "^8.57.0",
     "lint-staged": "^15.0.0",
-    "next": "^15.0.4",
+    "next": "^15.1.2",
     "next-test-api-route-handler": "^4.0.14",
     "prettier": "^3.0.0",
     "react": "19.0.0",
     "react-dom": "19.0.0",
     "typescript": "^5.3.3",
-    "vitest": "^1.6.0"
+    "vitest": "^2.1.9"
   },
   "peerDependencies": {
     "next": ">=12"