@logto/node 3.1.8 → 3.1.10

package/README.md

@@ -86,10 +86,16 @@ But the cookie size is limited, so you may need to use external storage like Red
 import { CookieStorage } from '@logto/node';
 
 class RedisSessionWrapper implements SessionWrapper {
+  private currentSessionId?: string;
+
   constructor(private readonly redis: Redis) {}
 
   async wrap(data: unknown, _key: string): Promise<string> {
-    const sessionId = randomUUID();
+    // Reuse existing session ID if available, only generate new one for first-time users.
+    // This is important for environments where cookies cannot be updated (e.g. React Server Components),
+    // as the session ID in the cookie must remain stable while the data in Redis can be updated.
+    const sessionId = this.currentSessionId ?? randomUUID();
+    this.currentSessionId = sessionId;
     await this.redis.set(`logto_session_${sessionId}`, JSON.stringify(data));
     return sessionId;
   }
@@ -99,8 +105,10 @@ class RedisSessionWrapper implements SessionWrapper {
       return {};
     }
 
+    // Store the session ID for potential reuse in wrap()
+    this.currentSessionId = value;
     const data = await this.redis.get(`logto_session_${value}`);
-    return JSON.parse(data);
+    return data ? JSON.parse(data) : {};
   }
 }
 

package/lib/edge/index.js

@@ -1,7 +1,7 @@
 import { createRequester } from '@logto/client';
 export { PersistKey } from '@logto/client';
 import LogtoNodeBaseClient from '../src/client.js';
-import { generateCodeChallenge, generateCodeVerifier, generateState } from './generators.js';
+import { generateState, generateCodeVerifier, generateCodeChallenge } from './generators.js';
 
 // Used for edge runtime, currently only NextJS.
 class LogtoClient extends LogtoNodeBaseClient {

package/lib/src/index.js

@@ -1,6 +1,6 @@
 import { createRequester } from '@logto/client';
 export { LogtoClientError, LogtoError, LogtoRequestError, OidcError, PersistKey, Prompt, ReservedResource, ReservedScope, StandardLogtoClient, UserScope, buildOrganizationUrn, getOrganizationIdFromUrn, organizationUrnPrefix } from '@logto/client';
-import { generateCodeChallenge, generateCodeVerifier, generateState } from '../edge/generators.js';
+import { generateState, generateCodeVerifier, generateCodeChallenge } from '../edge/generators.js';
 import LogtoNodeBaseClient from './client.js';
 export { unwrapSession, wrapSession } from './utils/session.js';
 export { CookieStorage } from './utils/cookie-storage.js';

package/lib/src/utils/cookie-storage.js

@@ -1,5 +1,5 @@
 import { PromiseQueue } from './promise-queue.js';
-import { wrapSession, unwrapSession } from './session.js';
+import { unwrapSession, wrapSession } from './session.js';
 
 /**
  * A storage that persists data in cookies with encryption.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/node",
-  "version": "3.1.8",
+  "version": "3.1.10",
   "type": "module",
   "module": "./lib/src/index.js",
   "types": "./lib/src/index.d.ts",
@@ -28,9 +28,9 @@
     "directory": "packages/node"
   },
   "dependencies": {
-    "@silverhand/essentials": "^2.9.2",
+    "@silverhand/essentials": "^2.9.3",
     "js-base64": "^3.7.4",
-    "@logto/client": "^3.1.6"
+    "@logto/client": "^3.1.8"
   },
   "devDependencies": {
     "@silverhand/eslint-config": "^6.0.1",