@payez/next-mvp 4.0.7 → 4.0.8

package/dist/auth/better-auth.d.ts

@@ -33,11 +33,15 @@ export declare function createBetterAuthInstance(idpConfig: IDPClientConfig): im
     secret: string;
     socialProviders: Record<string, BetterAuthSocialProvider>;
     trustedOrigins: string[];
+    secondaryStorage: {
+        get: (key: string) => Promise<string | null>;
+        set: (key: string, value: string, ttl?: number) => Promise<void>;
+        delete: (key: string) => Promise<void>;
+    };
     session: {
         cookieCache: {
             enabled: true;
             maxAge: number;
-            refreshCache: true;
         };
     };
     advanced: {

package/dist/auth/better-auth.js

@@ -22,6 +22,7 @@ const next_js_1 = require("better-auth/next-js");
 const next_js_2 = require("better-auth/next-js");
 const idp_client_config_1 = require("../lib/idp-client-config");
 const app_slug_1 = require("../lib/app-slug");
+const redis_1 = require("../lib/redis");
 /**
  * Build Better Auth social providers from IDP config.
  */
@@ -63,13 +64,39 @@ function createBetterAuthInstance(idpConfig) {
             'http://localhost:3400',
             'http://localhost:3600',
         ],
-        // No database — stateless mode. Better Auth defaults to JWE cookie cache.
-        // Session cookie cache with refreshCache for DB-less setup.
+        // Redis-backed session storage via secondaryStorage
+        secondaryStorage: {
+            get: async (key) => {
+                try {
+                    return await (0, redis_1.getRedis)().get(`ba:${appSlug}:${key}`);
+                }
+                catch {
+                    return null;
+                }
+            },
+            set: async (key, value, ttl) => {
+                try {
+                    const redis = (0, redis_1.getRedis)();
+                    if (ttl) {
+                        await redis.setex(`ba:${appSlug}:${key}`, ttl, value);
+                    }
+                    else {
+                        await redis.setex(`ba:${appSlug}:${key}`, 7 * 24 * 60 * 60, value);
+                    }
+                }
+                catch { /* Redis unavailable — cookie cache still works */ }
+            },
+            delete: async (key) => {
+                try {
+                    await (0, redis_1.getRedis)().del(`ba:${appSlug}:${key}`);
+                }
+                catch { /* ignore */ }
+            },
+        },
         session: {
             cookieCache: {
                 enabled: true,
                 maxAge: 300,
-                refreshCache: true,
             },
         },
         // Cookie prefix must match slim-middleware expectations ({slug}.session-token)

package/dist/server/auth.d.ts

@@ -16,11 +16,15 @@ export declare function getAuthInstance(): Promise<import("better-auth/types").A
     secret: string;
     socialProviders: Record<string, import("../auth/better-auth").BetterAuthSocialProvider>;
     trustedOrigins: string[];
+    secondaryStorage: {
+        get: (key: string) => Promise<string | null>;
+        set: (key: string, value: string, ttl?: number) => Promise<void>;
+        delete: (key: string) => Promise<void>;
+    };
     session: {
         cookieCache: {
             enabled: true;
             maxAge: number;
-            refreshCache: true;
         };
     };
     advanced: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payez/next-mvp",
-  "version": "4.0.7",
+  "version": "4.0.8",
   "sideEffects": false,
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/auth/better-auth.ts

@@ -16,6 +16,7 @@ import { toNextJsHandler } from 'better-auth/next-js';
 import type { IDPClientConfig } from '../lib/idp-client-config';
 import { getIDPClientConfig } from '../lib/idp-client-config';
 import { getAppSlug } from '../lib/app-slug';
+import { getRedis } from '../lib/redis';
 
 /**
  * Better Auth social provider config shape.
@@ -76,13 +77,34 @@ export function createBetterAuthInstance(idpConfig: IDPClientConfig) {
       'http://localhost:3600',
     ],
 
-    // No database — stateless mode. Better Auth defaults to JWE cookie cache.
-    // Session cookie cache with refreshCache for DB-less setup.
+    // Redis-backed session storage via secondaryStorage
+    secondaryStorage: {
+      get: async (key: string) => {
+        try {
+          return await getRedis().get(`ba:${appSlug}:${key}`);
+        } catch { return null; }
+      },
+      set: async (key: string, value: string, ttl?: number) => {
+        try {
+          const redis = getRedis();
+          if (ttl) {
+            await redis.setex(`ba:${appSlug}:${key}`, ttl, value);
+          } else {
+            await redis.setex(`ba:${appSlug}:${key}`, 7 * 24 * 60 * 60, value);
+          }
+        } catch { /* Redis unavailable — cookie cache still works */ }
+      },
+      delete: async (key: string) => {
+        try {
+          await getRedis().del(`ba:${appSlug}:${key}`);
+        } catch { /* ignore */ }
+      },
+    },
+
     session: {
       cookieCache: {
         enabled: true,
         maxAge: 300,
-        refreshCache: true,
       },
     },