@payez/next-mvp 4.0.16 → 4.0.18

package/dist/auth/better-auth.js

@@ -123,7 +123,7 @@ function createBetterAuthInstance(idpConfig) {
                                 return;
                             }
                             // Call IDP oauth-callback to get IDP tokens
-                            const idpUrl = process.env.INTERNAL_IDP_URL || process.env.IDP_URL || '';
+                            const idpUrl = process.env.IDP_URL || '';
                             if (!idpUrl) {
                                 console.warn('[BETTER_AUTH] No IDP URL configured, skipping token exchange');
                                 return;

package/dist/pages/test-env/JwtInspectPage.js

@@ -70,7 +70,7 @@ function JwtInspectPage() {
     (0, react_1.useEffect)(() => {
         if (!session)
             return;
-        fetch('/api/test-env/session-data')
+        fetch('/api/internal/session-data')
             .then(r => r.ok ? r.json() : null)
             .then(d => {
             if (d)

package/dist/server/auth.js

@@ -8,6 +8,39 @@
  *
  * All server-side auth flows go through the Better Auth instance.
  */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getAuthInstance = getAuthInstance;
 exports.getSession = getSession;
@@ -43,6 +76,27 @@ async function getSession(request) {
         return null;
     try {
         const session = await auth.api.getSession({ headers: request.headers });
+        if (!session?.session?.token || !session?.user)
+            return session;
+        // Enrich with IDP tokens from Redis (stored by post-login hook)
+        try {
+            const { getRedis } = await Promise.resolve().then(() => __importStar(require('../lib/redis')));
+            const { getAppSlug } = await Promise.resolve().then(() => __importStar(require('../lib/app-slug')));
+            const baKey = `ba:${getAppSlug()}:${session.session.token}`;
+            const baRaw = await getRedis().get(baKey);
+            if (baRaw) {
+                const baData = JSON.parse(baRaw);
+                if (baData.idpTokens) {
+                    const u = session.user;
+                    u.roles = baData.idpTokens.roles || [];
+                    u.userId = baData.idpTokens.userId;
+                    u.idpAccessToken = baData.idpTokens.idpAccessToken;
+                    u.idpRefreshToken = baData.idpTokens.idpRefreshToken;
+                    u.idpAccessTokenExpires = baData.idpTokens.idpAccessTokenExpires;
+                }
+            }
+        }
+        catch { /* Redis unavailable */ }
         return session;
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payez/next-mvp",
-  "version": "4.0.16",
+  "version": "4.0.18",
   "sideEffects": false,
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/auth/better-auth.ts

@@ -134,7 +134,7 @@ export function createBetterAuthInstance(idpConfig: IDPClientConfig) {
               }
 
               // Call IDP oauth-callback to get IDP tokens
-              const idpUrl = process.env.INTERNAL_IDP_URL || process.env.IDP_URL || '';
+              const idpUrl = process.env.IDP_URL || '';
               if (!idpUrl) {
                 console.warn('[BETTER_AUTH] No IDP URL configured, skipping token exchange');
                 return;

package/src/pages/test-env/JwtInspectPage.tsx

@@ -67,7 +67,7 @@ export function JwtInspectPage() {
   // Fetch enriched session from server (has IDP tokens, roles, userId)
   useEffect(() => {
     if (!session) return;
-    fetch('/api/test-env/session-data')
+    fetch('/api/internal/session-data')
       .then(r => r.ok ? r.json() : null)
       .then(d => {
         if (d) setServerSession(d);

package/src/server/auth.ts

@@ -41,6 +41,27 @@ export async function getSession(request?: Request): Promise<any> {
 
   try {
     const session = await auth.api.getSession({ headers: request.headers });
+    if (!session?.session?.token || !session?.user) return session;
+
+    // Enrich with IDP tokens from Redis (stored by post-login hook)
+    try {
+      const { getRedis } = await import('../lib/redis');
+      const { getAppSlug } = await import('../lib/app-slug');
+      const baKey = `ba:${getAppSlug()}:${session.session.token}`;
+      const baRaw = await getRedis().get(baKey);
+      if (baRaw) {
+        const baData = JSON.parse(baRaw);
+        if (baData.idpTokens) {
+          const u = session.user as any;
+          u.roles = baData.idpTokens.roles || [];
+          u.userId = baData.idpTokens.userId;
+          u.idpAccessToken = baData.idpTokens.idpAccessToken;
+          u.idpRefreshToken = baData.idpTokens.idpRefreshToken;
+          u.idpAccessTokenExpires = baData.idpTokens.idpAccessTokenExpires;
+        }
+      }
+    } catch { /* Redis unavailable */ }
+
     return session;
   } catch {
     return null;