@next-nest-auth/nextauth 0.2.0 → 0.2.2

package/package.json

@@ -1,52 +1,52 @@
 {
-    "name": "@next-nest-auth/nextauth",
-    "version": "0.2.0",
-    "main": "dist/index.js",
-    "types": "dist/index.d.ts",
-    "scripts": {
-        "dev": "tsc -w",
-        "build": "tsc"
-    },
-    "keywords": [
-        "nextjs",
-        "authentication",
-        "nextauth",
-        "auth",
-        "jwt",
-        "token authentication",
-        "refresh tokens",
-        "secure authentication",
-        "session management",
-        "nestjs integration",
-        "nextjs authentication",
-        "nextjs auth",
-        "cookie authentication",
-        "login",
-        "multi-provider authentication",
-        "nextjs login",
-        "user authentication"
-    ],
-    "author": "Md Shafkat Hussain Tanvir <tanvir0604@gmail.com>",
-    "repository": "https://github.com/tanvir0604/nextauth",
-    "bugs": "https://github.com/tanvir0604/nextauth/issues",
-    "license": "MIT",
-    "type": "commonjs",
-    "description": "NextAuth is a frontend authentication package designed for Next.js applications, providing easy integration with NestJS-based backends. It supports login, session management, and token handling (including JWT and refresh tokens) to ensure secure user authentication. With customizable authentication flows and compatibility with multiple providers, NextAuth enables seamless integration between NestJS and Next.js apps.",
-    "dependencies": {
-        "axios": "^1.13.2",
-        "js-cookie": "^3.0.5",
-        "jsonwebtoken": "^9.0.3",
-        "jwt-decode": "^4.0.0",
-        "next": "^16.1.1"
-    },
-    "devDependencies": {
-        "@types/js-cookie": "^3.0.6",
-        "@types/node": "^25.0.3",
-        "@types/react": "^19.2.7",
-        "typescript": "^5.9.3"
-    },
-    "files": [
-        "dist/",
-        "src/"
-    ]
+  "name": "@next-nest-auth/nextauth",
+  "version": "0.2.2",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "dev": "tsc -w",
+    "build": "tsc"
+  },
+  "keywords": [
+    "nextjs",
+    "authentication",
+    "nextauth",
+    "auth",
+    "jwt",
+    "token authentication",
+    "refresh tokens",
+    "secure authentication",
+    "session management",
+    "nestjs integration",
+    "nextjs authentication",
+    "nextjs auth",
+    "cookie authentication",
+    "login",
+    "multi-provider authentication",
+    "nextjs login",
+    "user authentication"
+  ],
+  "author": "Md Shafkat Hussain Tanvir <tanvir0604@gmail.com>",
+  "repository": "https://github.com/tanvir0604/nextauth",
+  "bugs": "https://github.com/tanvir0604/nextauth/issues",
+  "license": "MIT",
+  "type": "commonjs",
+  "description": "NextAuth is a frontend authentication package designed for Next.js applications, providing easy integration with NestJS-based backends. It supports login, session management, and token handling (including JWT and refresh tokens) to ensure secure user authentication. With customizable authentication flows and compatibility with multiple providers, NextAuth enables seamless integration between NestJS and Next.js apps.",
+  "dependencies": {
+    "axios": "^1.13.2",
+    "js-cookie": "^3.0.5",
+    "jsonwebtoken": "^9.0.3",
+    "jwt-decode": "^4.0.0",
+    "next": "^16.1.1"
+  },
+  "devDependencies": {
+    "@types/js-cookie": "^3.0.6",
+    "@types/node": "^25.0.3",
+    "@types/react": "^19.2.7",
+    "typescript": "^5.9.3"
+  },
+  "files": [
+    "dist/",
+    "src/"
+  ]
 }

package/src/auth.ts

@@ -6,229 +6,227 @@ import { NextRequest, NextResponse } from "next/server";
 const API_URL = process.env.API_BASE_URL || process.env.NEXT_PUBLIC_API_URL;
 
 interface TokenResponse {
-    accessToken: string;
-    refreshToken: string;
-    accessTokenExpiresIn: string;
-    refreshTokenExpiresIn: string;
+  accessToken: string;
+  refreshToken: string;
+  accessTokenExpiresIn: string;
+  refreshTokenExpiresIn: string;
 }
 
 interface User {
-    sub: string;
-    name: string;
-    email: string;
-    mobile: string;
-    role: string;
-    pic: string;
-    macId: string;
-    [key: string]: any;
+  sub: string;
+  name: string;
+  email: string;
+  mobile: string;
+  role: string;
+  pic: string;
+  macId: string;
+  [key: string]: any;
 }
 
 const convertToSeconds = (expiresIn: string) => {
-    const match = expiresIn.match(/(\d+)([mhd])/);
-    if (!match) return 0;
-
-    const value = parseInt(match[1], 10);
-    const unit = match[2];
-
-    switch (unit) {
-        case "m":
-            return value * 60;
-        case "h":
-            return value * 60 * 60;
-        case "d":
-            return value * 60 * 60 * 24;
-        default:
-            return 0;
-    }
+  const match = expiresIn.match(/(\d+)([mhd])/);
+  if (!match) return 0;
+
+  const value = parseInt(match[1], 10);
+  const unit = match[2];
+
+  switch (unit) {
+    case "m":
+      return value * 60;
+    case "h":
+      return value * 60 * 60;
+    case "d":
+      return value * 60 * 60 * 24;
+    default:
+      return 0;
+  }
 };
 
 export async function refreshToken(req: NextRequest) {
-    try {
-        const refreshToken = req.cookies.get("refresh_token")?.value;
-        if (!refreshToken) {
-            throw new Error("Token refresh failed, no refresh token");
-        }
-        const response: TokenResponse = await post(
-            `${API_URL}/nestauth/refresh-token`,
-            {
-                refresh_token: refreshToken,
-            },
-            {},
-            false,
-        );
-
-        if (!response || !response.accessToken || !response.refreshToken) {
-            throw new Error("Token refresh failed, no response from api");
-        }
-
-        const res = NextResponse.next();
-        res.cookies.set("access_token", response.accessToken, {
-            httpOnly: true,
-            secure: process.env.NODE_ENV === "production",
-            sameSite: "strict",
-            path: "/",
-            maxAge: convertToSeconds(response.accessTokenExpiresIn ?? ""),
-        });
-
-        if (!process.env.AUTOEXPIRE_REFRESH_TOKEN) {
-            if (process.env.NODE_ENV === "development") {
-                console.log(
-                    "refresh token is not expired and updating expires in",
-                );
-            }
-            res.cookies.set("refresh_token", response.refreshToken, {
-                httpOnly: true,
-                secure: process.env.NODE_ENV === "production",
-                sameSite: "strict",
-                path: "/",
-                maxAge: convertToSeconds(response.refreshTokenExpiresIn ?? ""),
-            });
-        }
-
-        return res;
-    } catch (error) {
-        throw new Error(error);
+  try {
+    const refreshToken = req.cookies.get("refresh_token")?.value;
+    if (!refreshToken) {
+      throw new Error("Token refresh failed, no refresh token");
+    }
+    const response: TokenResponse = await post(
+      `${API_URL}/nestauth/refresh-token`,
+      {
+        refresh_token: refreshToken,
+      },
+      {},
+      false,
+    );
+
+    if (!response || !response.accessToken || !response.refreshToken) {
+      throw new Error("Token refresh failed, no response from api");
     }
+
+    const res = NextResponse.next();
+    res.cookies.set("access_token", response.accessToken, {
+      httpOnly: true,
+      secure: true,
+      sameSite: "lax" as const,
+      path: "/",
+      maxAge: convertToSeconds(response.accessTokenExpiresIn ?? ""),
+    });
+
+    if (!process.env.AUTOEXPIRE_REFRESH_TOKEN) {
+      if (process.env.NODE_ENV === "development") {
+        console.log("refresh token is not expired and updating expires in");
+      }
+      res.cookies.set("refresh_token", response.refreshToken, {
+        httpOnly: true,
+        secure: true,
+        sameSite: "lax" as const,
+        path: "/",
+        maxAge: convertToSeconds(response.refreshTokenExpiresIn ?? ""),
+      });
+    }
+
+    return res;
+  } catch (error: any) {
+    throw new Error(error?.message ?? "Token refresh failed");
+  }
 }
 
 export async function authenticate(params: any) {
-    try {
-        const response: TokenResponse = await post(
-            `${API_URL}/nestauth/login`,
-            params,
-            {},
-            false,
-        );
-        if (
-            !response ||
-            !response.accessToken ||
-            !response.refreshToken ||
-            !response.accessTokenExpiresIn ||
-            !response.refreshTokenExpiresIn
-        ) {
-            throw new Error(
-                "Login failed" +
-                    " API URL: " +
-                    API_URL +
-                    " params: " +
-                    JSON.stringify(params) +
-                    " response: " +
-                    JSON.stringify(response),
-            );
-        }
-        const cookieStore = await cookies();
-        cookieStore.set("access_token", response.accessToken, {
-            httpOnly: true,
-            secure: process.env.NODE_ENV === "production",
-            sameSite: "strict",
-            path: "/",
-            maxAge: convertToSeconds(response.accessTokenExpiresIn ?? ""),
-        });
-
-        cookieStore.set("refresh_token", response.refreshToken, {
-            httpOnly: true,
-            secure: process.env.NODE_ENV === "production",
-            sameSite: "strict",
-            path: "/",
-            maxAge: convertToSeconds(response.refreshTokenExpiresIn ?? ""),
-        });
-
-        return response;
-    } catch (error) {
-        // console.log(error);
-        throw new Error(error);
+  try {
+    const response: TokenResponse = await post(
+      `${API_URL}/nestauth/login`,
+      params,
+      {},
+      false,
+    );
+    if (
+      !response ||
+      !response.accessToken ||
+      !response.refreshToken ||
+      !response.accessTokenExpiresIn ||
+      !response.refreshTokenExpiresIn
+    ) {
+      throw new Error(
+        "Login failed" +
+          " API URL: " +
+          API_URL +
+          " params: " +
+          JSON.stringify(params) +
+          " response: " +
+          JSON.stringify(response),
+      );
     }
+    const cookieStore = await cookies();
+    cookieStore.set("access_token", response.accessToken, {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "lax",
+      path: "/",
+      maxAge: convertToSeconds(response.accessTokenExpiresIn ?? ""),
+    });
+
+    cookieStore.set("refresh_token", response.refreshToken, {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "lax",
+      path: "/",
+      maxAge: convertToSeconds(response.refreshTokenExpiresIn ?? ""),
+    });
+
+    return response;
+  } catch (error: any) {
+    // console.log(error);
+    throw new Error(error?.message ?? "Login failed");
+  }
 }
 
 export async function getAccessToken() {
-    const cookieStore = await cookies();
-    const access_token = cookieStore.get("access_token")?.value;
-    return access_token ?? null;
+  const cookieStore = await cookies();
+  const access_token = cookieStore.get("access_token")?.value;
+  return access_token ?? null;
 }
 
 export async function getRefreshToken() {
-    const cookieStore = await cookies();
-    const refresh_token = cookieStore.get("refresh_token")?.value;
-    return refresh_token ?? null;
+  const cookieStore = await cookies();
+  const refresh_token = cookieStore.get("refresh_token")?.value;
+  return refresh_token ?? null;
 }
 
 export async function checkAuth() {
-    const accessToken = await getAccessToken();
-    return !!accessToken;
+  const accessToken = await getAccessToken();
+  return !!accessToken;
 }
 
 export async function getUserInfo() {
-    const accessToken = await getAccessToken();
-    if (!accessToken) {
-        return null;
-    }
-    try {
-        const decoded = jwtDecode(accessToken) as User;
-        return decoded;
-    } catch (error) {
-        return null;
-    }
+  const accessToken = await getAccessToken();
+  if (!accessToken) {
+    return null;
+  }
+  try {
+    const decoded = jwtDecode(accessToken) as User;
+    return decoded;
+  } catch (error) {
+    return null;
+  }
 }
 
 export async function logout() {
-    (await cookies()).delete("access_token");
-    (await cookies()).delete("refresh_token");
+  (await cookies()).delete("access_token");
+  (await cookies()).delete("refresh_token");
 }
 
 export async function get(
-    url: string,
-    params: any = {},
-    headers: any = {},
-    secured = true,
+  url: string,
+  params: any = {},
+  headers: any = {},
+  secured = true,
 ) {
-    const headerData: Record<string, string> = {
-        Authorization: "",
-        ...headers,
-    };
-    if (secured) {
-        const accessToken = await getAccessToken();
-        headerData.Authorization = "Bearer " + accessToken;
-    }
-
-    try {
-        const response = await axios.get(url, {
-            headers: headerData,
-            params: params,
-            withCredentials: true,
-        });
-        if (response.status === 200 || response.status === 201) {
-            return response.data;
-        }
-        return null;
-    } catch (error) {
-        return error;
+  const headerData: Record<string, string> = {
+    Authorization: "",
+    ...headers,
+  };
+  if (secured) {
+    const accessToken = await getAccessToken();
+    headerData.Authorization = "Bearer " + accessToken;
+  }
+
+  try {
+    const response = await axios.get(url, {
+      headers: headerData,
+      params: params,
+      withCredentials: true,
+    });
+    if (response.status === 200 || response.status === 201) {
+      return response.data;
     }
+    return null;
+  } catch (error) {
+    return error;
+  }
 }
 
 export async function post(
-    url: string,
-    data: any = {},
-    headers: any = {},
-    secured = true,
+  url: string,
+  data: any = {},
+  headers: any = {},
+  secured = true,
 ) {
-    const headerData: Record<string, string> = {
-        Authorization: "",
-        ...headers,
-    };
-    if (secured) {
-        const accessToken = await getAccessToken();
-        headerData.Authorization = "Bearer " + accessToken;
-    }
-    try {
-        const response = await axios.post(url, data, {
-            headers: headerData,
-            withCredentials: true,
-        });
-        if (response.status === 200 || response.status === 201) {
-            return response.data;
-        }
-        return null;
-    } catch (error) {
-        return error;
+  const headerData: Record<string, string> = {
+    Authorization: "",
+    ...headers,
+  };
+  if (secured) {
+    const accessToken = await getAccessToken();
+    headerData.Authorization = "Bearer " + accessToken;
+  }
+  try {
+    const response = await axios.post(url, data, {
+      headers: headerData,
+      withCredentials: true,
+    });
+    if (response.status === 200 || response.status === 201) {
+      return response.data;
     }
+    return null;
+  } catch (error) {
+    return error;
+  }
 }