@payez/next-mvp 3.9.1 → 4.0.1

package/dist/api-handlers/account/change-password.js

@@ -1,112 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POST = POST;
-const server_1 = require("next/server");
-const jwt_1 = require("next-auth/jwt");
-const session_store_1 = require("../../lib/session-store");
-const app_slug_1 = require("../../lib/app-slug");
-const nanoid_1 = require("nanoid");
-// ...
-async function POST(req) {
-    const requestId = (0, nanoid_1.nanoid)();
-    try {
-        // Get session token from NextAuth JWT
-        // Support both field names: sessionToken (auth.ts JWT) and redisSessionId (legacy)
-        const token = await (0, jwt_1.getToken)({ req, secret: process.env.NEXTAUTH_SECRET, cookieName: (0, app_slug_1.getJwtCookieName)() });
-        const sessionToken = (token?.sessionToken || token?.redisSessionId);
-        if (!token || typeof sessionToken !== 'string') {
-            return server_1.NextResponse.json({ success: false, message: 'Unauthorized' }, { status: 401 });
-        }
-        const sessionData = await (0, session_store_1.getSession)(sessionToken);
-        // NOTE: Field is idpAccessToken (not accessToken) per normalized naming convention
-        if (!sessionData?.idpAccessToken) {
-            return server_1.NextResponse.json({
-                success: false,
-                message: 'Authentication required - no access token available',
-                error_code: 'UNAUTHORIZED',
-                request_id: requestId,
-            }, { status: 401 });
-        }
-        const body = await req.json();
-        const { current_password, new_password, confirm_password } = body;
-        // Validate input
-        if (!current_password || !new_password || !confirm_password) {
-            return server_1.NextResponse.json({
-                success: false,
-                message: 'Current password, new password, and confirmation are required',
-                error_code: 'VALIDATION_ERROR',
-                request_id: requestId,
-            }, { status: 400 });
-        }
-        if (new_password !== confirm_password) {
-            return server_1.NextResponse.json({
-                success: false,
-                message: 'New password and confirmation do not match',
-                error_code: 'VALIDATION_ERROR',
-                request_id: requestId,
-            }, { status: 400 });
-        }
-        // Get IDP base URL from environment
-        const idpBaseUrl = process.env.IDP_URL;
-        if (!idpBaseUrl) {
-            console.error('[CHANGE_PASSWORD] IDP_URL not configured');
-            return server_1.NextResponse.json({
-                success: false,
-                message: 'Service configuration error',
-                error_code: 'CONFIGURATION_ERROR',
-                request_id: requestId,
-            }, { status: 500 });
-        }
-        // Proxy request to IDP
-        const idpUrl = `${idpBaseUrl}/api/Account/change-password`;
-        const idpResponse = await fetch(idpUrl, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                'Authorization': `Bearer ${sessionData.idpAccessToken}`,
-                'x-request-id': requestId,
-            },
-            body: JSON.stringify({
-                current_password,
-                new_password,
-                confirm_password,
-            }),
-        });
-        const responseData = await idpResponse.json().catch(() => ({}));
-        if (!idpResponse.ok) {
-            // Extract error message from IDP response
-            let errorMessage = 'Failed to change password';
-            if (responseData.message) {
-                errorMessage = responseData.message;
-            }
-            else if (responseData.details?.value && Array.isArray(responseData.details.value) && responseData.details.value.length > 0) {
-                errorMessage = responseData.details.value[0].message || errorMessage;
-            }
-            else if (responseData.details?.message) {
-                errorMessage = responseData.details.message;
-            }
-            return server_1.NextResponse.json({
-                success: false,
-                message: errorMessage,
-                error_code: responseData.error_code || 'CHANGE_PASSWORD_FAILED',
-                request_id: requestId,
-                details: responseData.details,
-            }, { status: idpResponse.status });
-        }
-        return server_1.NextResponse.json({
-            success: true,
-            message: responseData.message || 'Password changed successfully',
-            request_id: requestId,
-        });
-    }
-    catch (error) {
-        console.error('[CHANGE_PASSWORD] Error:', error);
-        const requestId = req.headers.get('x-request-id') ?? crypto.randomUUID();
-        return server_1.NextResponse.json({
-            success: false,
-            message: error instanceof Error ? error.message : 'Failed to change password',
-            error_code: 'INTERNAL_ERROR',
-            request_id: requestId,
-        }, { status: 500 });
-    }
-}

package/dist/api-handlers/account/masked-info.d.ts

@@ -1,2 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-export declare function POST(req: NextRequest): Promise<NextResponse<any>>;

package/dist/api-handlers/account/masked-info.js

@@ -1,41 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POST = POST;
-const server_1 = require("next/server");
-const idp_fetch_1 = require("../../lib/idp-fetch");
-const env_1 = require("../../config/env");
-// IDP masked-info is POST and uses capital 'A' in /api/Account
-async function POST(req) {
-    const url = `${env_1.ENV_CONFIG.IDP_URL}/api/Account/masked-info`;
-    // Forward request body if present; IDP often accepts empty object
-    let body = '{}';
-    try {
-        const raw = await req.text();
-        if (raw && raw.trim().length > 0)
-            body = raw;
-    }
-    catch { }
-    const result = await (0, idp_fetch_1.idpFetchJSON)(req, url, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body
-    });
-    if (!result.ok) {
-        return server_1.NextResponse.json({
-            success: false,
-            message: 'Upstream error',
-            error: { code: 'UPSTREAM_SERVICE_ERROR', status: result.status, details: result.json },
-            meta: { attemptedRefresh: result.attemptedRefresh },
-        }, { status: result.status });
-    }
-    const bodyJson = result.json;
-    // Unwrap if IDP returns envelope { success, data }
-    if (bodyJson && typeof bodyJson === 'object' && 'success' in bodyJson && 'data' in bodyJson) {
-        if (bodyJson.success === true) {
-            return server_1.NextResponse.json(bodyJson.data, { status: 200 });
-        }
-        return server_1.NextResponse.json(bodyJson, { status: 200 });
-    }
-    // Passthrough otherwise
-    return server_1.NextResponse.json(bodyJson ?? {}, { status: 200 });
-}

package/dist/api-handlers/account/profile.d.ts

@@ -1,3 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-export declare function GET(req: NextRequest): Promise<NextResponse<any>>;
-export declare function PUT(req: NextRequest): Promise<NextResponse<any>>;

package/dist/api-handlers/account/profile.js

@@ -1,63 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GET = GET;
-exports.PUT = PUT;
-const server_1 = require("next/server");
-/**
- * Account Profile API Handler
- * Simple proxy to IDP profile endpoint
- *
- * GET /api/account/profile - Get user profile
- * PUT /api/account/profile - Update user profile
- */
-function getIdpUrl() {
-    const url = process.env.IDP_URL;
-    if (!url) {
-        throw new Error('[IDP_URL] FATAL: IDP_URL environment variable is REQUIRED.');
-    }
-    return url;
-}
-async function GET(req) {
-    const IDP_URL = getIdpUrl();
-    const authHeader = req.headers.get('authorization');
-    if (!authHeader) {
-        return server_1.NextResponse.json({ success: false, error: { code: 'UNAUTHORIZED', message: 'Authentication required' } }, { status: 401 });
-    }
-    try {
-        const upstream = await fetch(`${IDP_URL}/api/Account/profile`, {
-            method: 'GET',
-            headers: {
-                'Content-Type': 'application/json',
-                'Authorization': authHeader,
-            },
-        });
-        const data = await upstream.json().catch(() => ({}));
-        return server_1.NextResponse.json(data, { status: upstream.status });
-    }
-    catch (error) {
-        return server_1.NextResponse.json({ success: false, error: { code: 'UPSTREAM_ERROR', message: 'Failed to fetch profile' } }, { status: 500 });
-    }
-}
-async function PUT(req) {
-    const IDP_URL = getIdpUrl();
-    const authHeader = req.headers.get('authorization');
-    if (!authHeader) {
-        return server_1.NextResponse.json({ success: false, error: { code: 'UNAUTHORIZED', message: 'Authentication required' } }, { status: 401 });
-    }
-    try {
-        const body = await req.text();
-        const upstream = await fetch(`${IDP_URL}/api/Account/profile`, {
-            method: 'PUT',
-            headers: {
-                'Content-Type': 'application/json',
-                'Authorization': authHeader,
-            },
-            body,
-        });
-        const data = await upstream.json().catch(() => ({}));
-        return server_1.NextResponse.json(data, { status: upstream.status });
-    }
-    catch (error) {
-        return server_1.NextResponse.json({ success: false, error: { code: 'UPSTREAM_ERROR', message: 'Failed to update profile' } }, { status: 500 });
-    }
-}

package/dist/api-handlers/account/recovery/initiate.d.ts

@@ -1,2 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-export declare function POST(req: NextRequest): Promise<NextResponse<any>>;

package/dist/api-handlers/account/recovery/initiate.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POST = POST;
-const server_1 = require("next/server");
-function getIdpUrl() {
-    const url = process.env.IDP_URL;
-    if (!url)
-        throw new Error('[IDP_URL] FATAL: IDP_URL environment variable is REQUIRED.');
-    return url;
-}
-async function POST(req) {
-    const IDP_URL = getIdpUrl();
-    try {
-        const { email } = await req.json();
-        const upstream = await fetch(`${IDP_URL}/api/Account/recovery/initiate`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ email }),
-        });
-        const data = await upstream.json().catch(() => ({}));
-        return server_1.NextResponse.json(data, { status: upstream.status });
-    }
-    catch (e) {
-        return server_1.NextResponse.json({ success: false, error: 'initiate_failed' }, { status: 500 });
-    }
-}

package/dist/api-handlers/account/recovery/send-code.d.ts

@@ -1,2 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-export declare function POST(req: NextRequest): Promise<NextResponse<any>>;

package/dist/api-handlers/account/recovery/send-code.js

@@ -1,28 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POST = POST;
-const server_1 = require("next/server");
-function getIdpUrl() {
-    const url = process.env.IDP_URL;
-    if (!url)
-        throw new Error('[IDP_URL] FATAL: IDP_URL environment variable is REQUIRED.');
-    return url;
-}
-async function POST(req) {
-    const IDP_URL = getIdpUrl();
-    try {
-        const auth = req.headers.get('authorization') || '';
-        const token = auth.startsWith('Bearer ') ? auth.slice(7) : '';
-        const { method } = await req.json();
-        const upstream = await fetch(`${IDP_URL}/api/Account/recovery/send-code`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${token}` },
-            body: JSON.stringify({ method }),
-        });
-        const data = await upstream.json().catch(() => ({}));
-        return server_1.NextResponse.json(data, { status: upstream.status });
-    }
-    catch {
-        return server_1.NextResponse.json({ success: false, error: 'send_code_failed' }, { status: 500 });
-    }
-}

package/dist/api-handlers/account/recovery/verify-code.d.ts

@@ -1,2 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-export declare function POST(req: NextRequest): Promise<NextResponse<any>>;

package/dist/api-handlers/account/recovery/verify-code.js

@@ -1,28 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POST = POST;
-const server_1 = require("next/server");
-function getIdpUrl() {
-    const url = process.env.IDP_URL;
-    if (!url)
-        throw new Error('[IDP_URL] FATAL: IDP_URL environment variable is REQUIRED.');
-    return url;
-}
-async function POST(req) {
-    const IDP_URL = getIdpUrl();
-    try {
-        const auth = req.headers.get('authorization') || '';
-        const token = auth.startsWith('Bearer ') ? auth.slice(7) : '';
-        const { code, method } = await req.json();
-        const upstream = await fetch(`${IDP_URL}/api/Account/recovery/verify-code`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${token}` },
-            body: JSON.stringify({ code, method }),
-        });
-        const data = await upstream.json().catch(() => ({}));
-        return server_1.NextResponse.json(data, { status: upstream.status });
-    }
-    catch {
-        return server_1.NextResponse.json({ success: false, error: 'verify_code_failed' }, { status: 500 });
-    }
-}

package/dist/api-handlers/account/reset-password.d.ts

@@ -1,2 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-export declare function POST(req: NextRequest): Promise<NextResponse<any>>;

package/dist/api-handlers/account/reset-password.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POST = POST;
-const server_1 = require("next/server");
-function getIdpUrl() {
-    const url = process.env.IDP_URL;
-    if (!url)
-        throw new Error('[IDP_URL] FATAL: IDP_URL environment variable is REQUIRED.');
-    return url;
-}
-async function POST(req) {
-    const IDP_URL = getIdpUrl();
-    try {
-        const payload = await req.json();
-        const upstream = await fetch(`${IDP_URL}/api/Account/reset-password`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify(payload),
-        });
-        const data = await upstream.json().catch(() => ({}));
-        return server_1.NextResponse.json(data, { status: upstream.status });
-    }
-    catch {
-        return server_1.NextResponse.json({ success: false, error: 'reset_password_failed' }, { status: 500 });
-    }
-}

package/dist/api-handlers/account/send-code.d.ts

@@ -1,24 +0,0 @@
-/**
- * Send 2FA Verification Code Handler
- *
- * Sends a verification code via email or SMS to the authenticated user.
- * Requires a provisional Bearer token (ACR=1) from initial login.
- *
- * @package @payez/next-mvp
- */
-import { NextRequest, NextResponse } from 'next/server';
-export declare function POST(req: NextRequest): Promise<NextResponse<{
-    success: boolean;
-    error: string;
-    code: string;
-}> | NextResponse<{
-    success: boolean;
-    error: any;
-    code: any;
-    meta: {
-        attemptedRefresh: boolean;
-    };
-}> | NextResponse<{
-    success: boolean;
-    message: string;
-}>>;

package/dist/api-handlers/account/send-code.js

@@ -1,60 +0,0 @@
-"use strict";
-/**
- * Send 2FA Verification Code Handler
- *
- * Sends a verification code via email or SMS to the authenticated user.
- * Requires a provisional Bearer token (ACR=1) from initial login.
- *
- * @package @payez/next-mvp
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POST = POST;
-const server_1 = require("next/server");
-const idp_fetch_1 = require("../../lib/idp-fetch");
-const env_1 = require("../../config/env");
-async function POST(req) {
-    try {
-        // Parse request body
-        const body = await req.json();
-        const method = String(body.method || '').toLowerCase();
-        if (method !== 'sms' && method !== 'email') {
-            return server_1.NextResponse.json({
-                success: false,
-                error: 'Method must be either "sms" or "email"',
-                code: 'INVALID_METHOD',
-            }, { status: 400 });
-        }
-        // Build IDP endpoint URL
-        const idpEndpoint = method === 'sms'
-            ? '/api/ExternalAuth/twofa/sms/send'
-            : '/api/ExternalAuth/twofa/email/send';
-        // Send client_id in body (lower_snake_case per PayEz standards)
-        const idpBody = JSON.stringify({ client_id: env_1.ENV_CONFIG.CLIENT_ID });
-        // Call IDP using idpFetchJSON which auto-injects Bearer token from Redis session
-        const result = await (0, idp_fetch_1.idpFetchJSON)(req, `${env_1.ENV_CONFIG.IDP_URL}${idpEndpoint}`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: idpBody,
-        });
-        if (!result.ok) {
-            return server_1.NextResponse.json({
-                success: false,
-                error: result.json?.message || `Failed to send ${method} code`,
-                code: result.json?.code || 'IDP_ERROR',
-                meta: { attemptedRefresh: result.attemptedRefresh },
-            }, { status: result.status });
-        }
-        return server_1.NextResponse.json({
-            success: true,
-            message: `Verification code sent via ${method}`,
-        }, { status: 200 });
-    }
-    catch (error) {
-        console.error('[SEND_CODE] Error:', error);
-        return server_1.NextResponse.json({
-            success: false,
-            error: 'Failed to send verification code',
-            code: 'INTERNAL_ERROR',
-        }, { status: 500 });
-    }
-}

package/dist/api-handlers/account/update-phone.d.ts

@@ -1,27 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-/**
- * Update Phone Number API Handler
- *
- * PATCH /api/account/update-phone - Update user's phone number
- * Used for 2FA setup - users need to add a phone to enable SMS verification.
- */
-export declare function POST(req: NextRequest): Promise<NextResponse<{
-    success: boolean;
-    error: {
-        code: string;
-        message: string;
-    };
-}> | NextResponse<{
-    success: boolean;
-    error: {
-        code: any;
-        message: any;
-    };
-    meta: {
-        attemptedRefresh: boolean;
-    };
-}> | NextResponse<{
-    success: boolean;
-    message: string;
-    data: any;
-}>>;

package/dist/api-handlers/account/update-phone.js

@@ -1,64 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POST = POST;
-const server_1 = require("next/server");
-const idp_fetch_1 = require("../../lib/idp-fetch");
-const env_1 = require("../../config/env");
-/**
- * Update Phone Number API Handler
- *
- * PATCH /api/account/update-phone - Update user's phone number
- * Used for 2FA setup - users need to add a phone to enable SMS verification.
- */
-async function POST(req) {
-    try {
-        // Parse request body
-        let body;
-        try {
-            body = await req.json();
-        }
-        catch {
-            return server_1.NextResponse.json({ success: false, error: { code: 'INVALID_JSON', message: 'Invalid request body' } }, { status: 400 });
-        }
-        const { phoneNumber } = body;
-        if (!phoneNumber) {
-            return server_1.NextResponse.json({ success: false, error: { code: 'INVALID_INPUT', message: 'Phone number is required' } }, { status: 400 });
-        }
-        // PATCH profile with phone_number only
-        const url = `${env_1.ENV_CONFIG.IDP_URL}/api/Account/profile`;
-        const result = await (0, idp_fetch_1.idpFetchJSON)(req, url, {
-            method: 'PATCH',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ phone_number: phoneNumber }),
-        });
-        if (!result.ok) {
-            console.error('[UPDATE_PHONE] IDP error:', result.status, result.json);
-            return server_1.NextResponse.json({
-                success: false,
-                error: {
-                    code: result.json?.error?.code || 'UPDATE_FAILED',
-                    message: result.json?.error?.message || 'Failed to update phone number',
-                },
-                meta: { attemptedRefresh: result.attemptedRefresh },
-            }, { status: result.status });
-        }
-        const responseData = result.json;
-        // Unwrap if IDP returns envelope { success, data }
-        if (responseData && typeof responseData === 'object' && 'success' in responseData && 'data' in responseData) {
-            return server_1.NextResponse.json({
-                success: true,
-                message: 'Phone number updated successfully',
-                data: responseData.data,
-            });
-        }
-        return server_1.NextResponse.json({
-            success: true,
-            message: 'Phone number updated successfully',
-            data: responseData,
-        });
-    }
-    catch (error) {
-        console.error('[UPDATE_PHONE] Error:', error);
-        return server_1.NextResponse.json({ success: false, error: { code: 'INTERNAL_ERROR', message: 'Failed to update phone number' } }, { status: 500 });
-    }
-}

package/dist/api-handlers/account/validate-password.d.ts

@@ -1,17 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-interface ValidatePasswordResponse {
-    is_valid: boolean;
-    score: number;
-    failed_requirements: string[];
-    tip?: string;
-    policy?: {
-        min_length?: number;
-        require_uppercase?: boolean;
-        require_lowercase?: boolean;
-        require_digit?: boolean;
-        require_special?: boolean;
-        min_strength_score?: number;
-    };
-}
-export declare function POST(req: NextRequest): Promise<NextResponse<ValidatePasswordResponse>>;
-export {};

package/dist/api-handlers/account/validate-password.js

@@ -1,81 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POST = POST;
-const server_1 = require("next/server");
-async function POST(req) {
-    try {
-        const body = await req.json();
-        const { password } = body;
-        const requestId = req.headers.get('x-request-id') ?? crypto.randomUUID();
-        // Validate input
-        if (!password || typeof password !== 'string') {
-            return server_1.NextResponse.json({
-                is_valid: false,
-                score: 0,
-                failed_requirements: ['Password is required'],
-            }, {
-                status: 200, // Return 200 even for validation errors to keep UI responsive
-                headers: { 'Cache-Control': 'no-store' },
-            });
-        }
-        // Get IDP base URL and client ID from environment
-        const idpBaseUrl = process.env.IDP_URL;
-        const clientId = process.env.CLIENT_ID || process.env.NEXT_PUBLIC_CLIENT_ID;
-        if (!idpBaseUrl) {
-            console.error('[VALIDATE_PASSWORD] IDP_URL not configured');
-            return server_1.NextResponse.json({
-                is_valid: false,
-                score: 0,
-                failed_requirements: ['Password validation service unavailable'],
-            }, {
-                status: 200,
-                headers: { 'Cache-Control': 'no-store' },
-            });
-        }
-        // Proxy request to IDP
-        const idpUrl = `${idpBaseUrl}/api/Account/validate-password`;
-        const payload = {
-            password,
-            client_id: clientId,
-        };
-        const idpResponse = await fetch(idpUrl, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                'x-request-id': requestId,
-            },
-            body: JSON.stringify(payload),
-        });
-        const responseData = await idpResponse.json().catch(() => ({}));
-        if (!idpResponse.ok) {
-            console.error('[VALIDATE_PASSWORD] IDP error:', {
-                status: idpResponse.status,
-                response: responseData,
-            });
-            return server_1.NextResponse.json({
-                is_valid: false,
-                score: 0,
-                failed_requirements: ['Password validation failed'],
-            }, {
-                status: 200,
-                headers: { 'Cache-Control': 'no-store' },
-            });
-        }
-        // Return the IDP response with proper structure
-        return server_1.NextResponse.json(responseData, {
-            status: 200,
-            headers: { 'Cache-Control': 'no-store' },
-        });
-    }
-    catch (error) {
-        console.error('[VALIDATE_PASSWORD] Error:', error);
-        return server_1.NextResponse.json({
-            is_valid: false,
-            score: 0,
-            failed_requirements: ['Password validation failed'],
-        }, {
-            status: 200,
-            headers: { 'Cache-Control': 'no-store' },
-        });
-    }
-}

package/dist/api-handlers/account/verify-email.d.ts

@@ -1,26 +0,0 @@
-/**
- * Verify Email 2FA Code Handler
- *
- * Verifies the 2FA email verification code and completes the 2FA flow.
- * Updates the session with new tokens upon successful verification.
- *
- * @package @payez/next-mvp
- */
-import { NextRequest, NextResponse } from 'next/server';
-export declare function POST(req: NextRequest): Promise<NextResponse<{
-    success: boolean;
-    error: string;
-    code: string;
-}> | NextResponse<{
-    success: boolean;
-    error: any;
-    code: any;
-    meta: {
-        attemptedRefresh: boolean;
-    };
-}> | NextResponse<{
-    success: boolean;
-    verificationSuccessful: boolean;
-    twoFactorSessionVerified: boolean;
-    message: any;
-}>>;