@payez/next-mvp 4.0.32 → 4.0.34

package/dist/lib/idp-fetch.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.idpFetchJSON = idpFetchJSON;
 const test_aware_get_token_1 = require("./test-aware-get-token");
@@ -34,6 +67,17 @@ async function ensureFreshAccessToken(req) {
         return {};
     }
     let session = await (0, session_store_1.getSession)(sessionToken);
+    // Fall back to Better Auth: decode session from cookies to get IDP tokens
+    if (!session?.idpAccessToken) {
+        try {
+            const { decodeSession } = await Promise.resolve().then(() => __importStar(require('../server/decode-session')));
+            const decoded = await decodeSession(req.cookies);
+            if (decoded?.sessionData?.idpAccessToken) {
+                session = decoded.sessionData;
+            }
+        }
+        catch { /* decodeSession unavailable in edge */ }
+    }
     console.log('[IDP_FETCH] Redis session lookup:', {
         hasSession: !!session,
         hasAccessToken: !!session?.idpAccessToken,

package/dist/lib/session-store.js

@@ -408,7 +408,7 @@ async function acquireRefreshLock(sessionToken, requestId, maxWaitMs = 5000) {
         // Try to acquire the lock atomically
         const result = await redis_1.default.set(lockKey, JSON.stringify(lockInfo), 'PX', REFRESH_LOCK_TTL * 1000, 'NX');
         if (result === 'OK') {
-            console.log('[SESSION-STORE] Refresh lock acquired', {
+            console.debug('[SESSION-STORE] Refresh lock acquired', {
                 sessionToken: sessionToken.substring(0, 8) + '...',
                 requestId,
                 lockVersion
@@ -418,7 +418,7 @@ async function acquireRefreshLock(sessionToken, requestId, maxWaitMs = 5000) {
         else {
             // Lock already exists, check if we should wait
             if (maxWaitMs > 0) {
-                console.log('[SESSION-STORE] Refresh lock already exists, waiting for release', {
+                console.debug('[SESSION-STORE] Refresh lock already exists, waiting for release', {
                     sessionToken: sessionToken.substring(0, 8) + '...',
                     requestId,
                     maxWaitMs
@@ -506,7 +506,7 @@ async function releaseRefreshLock(sessionToken, requestId, lockVersion) {
     `;
         const result = await redis_1.default.eval(luaScript, 1, lockKey, requestId, lockVersion ? lockVersion.toString() : '');
         if (result === 1) {
-            console.log('[SESSION-STORE] Refresh lock released successfully', {
+            console.debug('[SESSION-STORE] Refresh lock released successfully', {
                 sessionToken: sessionToken.substring(0, 8) + '...',
                 requestId,
                 lockVersion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payez/next-mvp",
-  "version": "4.0.32",
+  "version": "4.0.34",
   "sideEffects": false,
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/lib/idp-fetch.ts

@@ -44,6 +44,16 @@ async function ensureFreshAccessToken(req: NextRequest): Promise<{ sessionToken?
     return {};
   }
   let session = await getSession(sessionToken);
+  // Fall back to Better Auth: decode session from cookies to get IDP tokens
+  if (!session?.idpAccessToken) {
+    try {
+      const { decodeSession } = await import('../server/decode-session');
+      const decoded = await decodeSession(req.cookies);
+      if (decoded?.sessionData?.idpAccessToken) {
+        session = decoded.sessionData;
+      }
+    } catch { /* decodeSession unavailable in edge */ }
+  }
   console.log('[IDP_FETCH] Redis session lookup:', {
     hasSession: !!session,
     hasAccessToken: !!session?.idpAccessToken,

package/src/lib/session-store.ts

@@ -480,7 +480,7 @@ export async function acquireRefreshLock(
     const result = await redis.set(lockKey, JSON.stringify(lockInfo), 'PX', REFRESH_LOCK_TTL * 1000, 'NX');
 
     if (result === 'OK') {
-      console.log('[SESSION-STORE] Refresh lock acquired', {
+      console.debug('[SESSION-STORE] Refresh lock acquired', {
         sessionToken: sessionToken.substring(0, 8) + '...',
         requestId,
         lockVersion
@@ -490,7 +490,7 @@ export async function acquireRefreshLock(
     } else {
       // Lock already exists, check if we should wait
       if (maxWaitMs > 0) {
-        console.log('[SESSION-STORE] Refresh lock already exists, waiting for release', {
+        console.debug('[SESSION-STORE] Refresh lock already exists, waiting for release', {
           sessionToken: sessionToken.substring(0, 8) + '...',
           requestId,
           maxWaitMs
@@ -604,7 +604,7 @@ export async function releaseRefreshLock(
     ) as number;
 
     if (result === 1) {
-      console.log('[SESSION-STORE] Refresh lock released successfully', {
+      console.debug('[SESSION-STORE] Refresh lock released successfully', {
         sessionToken: sessionToken.substring(0, 8) + '...',
         requestId,
         lockVersion