@payez/next-mvp 4.0.45 → 4.0.46

package/dist/lib/test-aware-get-token.js

@@ -81,5 +81,54 @@ async function getTokenTestAware(req) {
             ...session.user,
         };
     }
+    // Fallback for legacy NextAuth-based sites: try next-auth/jwt with the
+    // app-slug-prefixed cookie name. Uses runtime require so consumers without
+    // next-auth installed are unaffected.
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-implied-eval, no-eval
+        const dynamicRequire = eval('require');
+        let nextAuthJwt = null;
+        try {
+            nextAuthJwt = dynamicRequire('next-auth/jwt');
+        }
+        catch {
+            return null; // next-auth not installed → BA-only consumer
+        }
+        if (!nextAuthJwt?.getToken)
+            return null;
+        const { resolveNextAuthSecret } = await Promise.resolve().then(() => __importStar(require('./nextauth-secret')));
+        const secret = await resolveNextAuthSecret();
+        if (!secret)
+            return null;
+        const cookieName = (0, app_slug_1.getSessionCookieName)();
+        let nextAuthToken = await nextAuthJwt.getToken({
+            req,
+            secret,
+            cookieName,
+            secureCookie: false,
+        });
+        if (nextAuthToken) {
+            logger_1.logger.debug('[GET_TOKEN] Resolved via NextAuth JWT (cookieName=' + cookieName + ')');
+            return nextAuthToken;
+        }
+        // Try secure cookie variant for production
+        const { getSecureSessionCookieName } = await Promise.resolve().then(() => __importStar(require('./app-slug')));
+        const secureCookieName = getSecureSessionCookieName();
+        nextAuthToken = await nextAuthJwt.getToken({
+            req,
+            secret,
+            cookieName: secureCookieName,
+            secureCookie: true,
+        });
+        if (nextAuthToken) {
+            logger_1.logger.debug('[GET_TOKEN] Resolved via NextAuth JWT (secure cookie)');
+            return nextAuthToken;
+        }
+    }
+    catch (error) {
+        logger_1.logger.debug('[GET_TOKEN] NextAuth fallback error', {
+            error: error instanceof Error ? error.message : String(error),
+        });
+    }
     return null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payez/next-mvp",
-  "version": "4.0.45",
+  "version": "4.0.46",
   "sideEffects": false,
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/lib/test-aware-get-token.ts

@@ -37,5 +37,54 @@ export async function getTokenTestAware(req: NextRequest): Promise<any> {
     };
   }
 
+  // Fallback for legacy NextAuth-based sites: try next-auth/jwt with the
+  // app-slug-prefixed cookie name. Uses runtime require so consumers without
+  // next-auth installed are unaffected.
+  try {
+    // eslint-disable-next-line @typescript-eslint/no-implied-eval, no-eval
+    const dynamicRequire = eval('require') as NodeRequire;
+    let nextAuthJwt: any = null;
+    try {
+      nextAuthJwt = dynamicRequire('next-auth/jwt');
+    } catch {
+      return null; // next-auth not installed → BA-only consumer
+    }
+    if (!nextAuthJwt?.getToken) return null;
+
+    const { resolveNextAuthSecret } = await import('./nextauth-secret');
+    const secret = await resolveNextAuthSecret();
+    if (!secret) return null;
+
+    const cookieName = getSessionCookieName();
+    let nextAuthToken = await nextAuthJwt.getToken({
+      req,
+      secret,
+      cookieName,
+      secureCookie: false,
+    });
+    if (nextAuthToken) {
+      logger.debug('[GET_TOKEN] Resolved via NextAuth JWT (cookieName=' + cookieName + ')');
+      return nextAuthToken;
+    }
+
+    // Try secure cookie variant for production
+    const { getSecureSessionCookieName } = await import('./app-slug');
+    const secureCookieName = getSecureSessionCookieName();
+    nextAuthToken = await nextAuthJwt.getToken({
+      req,
+      secret,
+      cookieName: secureCookieName,
+      secureCookie: true,
+    });
+    if (nextAuthToken) {
+      logger.debug('[GET_TOKEN] Resolved via NextAuth JWT (secure cookie)');
+      return nextAuthToken;
+    }
+  } catch (error) {
+    logger.debug('[GET_TOKEN] NextAuth fallback error', {
+      error: error instanceof Error ? error.message : String(error),
+    });
+  }
+
   return null;
 }