@payez/next-mvp 4.8.1 → 4.8.3

package/src/api-handlers/passkeys/manage.ts

@@ -1,55 +1,55 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { idpFetchJSON } from '../../lib/idp-fetch';
-import { ENV_CONFIG } from '../../config/env';
-import { projectIdpError } from '../../lib/safe-error-response';
-
-/**
- * Manage ONE passkey (PATCH rename / DELETE revoke, /api/Passkeys/{id},
- * user JWT). The id arrives from the Next dynamic segment via the routes
- * wrapper — it is never read from the body.
- */
-
-function upstreamError(result: { status: number; json: unknown; attemptedRefresh: boolean }) {
-  return NextResponse.json(
-    {
-      success: false,
-      message: 'Upstream error',
-      error: { code: 'UPSTREAM_SERVICE_ERROR', status: result.status, details: projectIdpError(result.json) },
-      meta: { attemptedRefresh: result.attemptedRefresh },
-    },
-    { status: result.status },
-  );
-}
-
-function passthrough(json: unknown) {
-  const bodyJson: any = json;
-  if (bodyJson && typeof bodyJson === 'object' && 'success' in bodyJson && 'data' in bodyJson) {
-    if (bodyJson.success === true) return NextResponse.json(bodyJson.data ?? { success: true }, { status: 200 });
-    return NextResponse.json(bodyJson, { status: 200 });
-  }
-  return NextResponse.json(bodyJson ?? { success: true }, { status: 200 });
-}
-
-export async function PATCH(req: NextRequest, id: string) {
-  let body = '{}';
-  try {
-    const raw = await req.text();
-    if (raw && raw.trim().length > 0) body = raw;
-  } catch {}
-
-  const result = await idpFetchJSON(req, `${ENV_CONFIG.IDP_URL}/api/Passkeys/${encodeURIComponent(id)}`, {
-    method: 'PATCH',
-    headers: { 'Content-Type': 'application/json' },
-    body,
-  });
-  if (!result.ok) return upstreamError(result);
-  return passthrough(result.json);
-}
-
-export async function DELETE(req: NextRequest, id: string) {
-  const result = await idpFetchJSON(req, `${ENV_CONFIG.IDP_URL}/api/Passkeys/${encodeURIComponent(id)}`, {
-    method: 'DELETE',
-  });
-  if (!result.ok) return upstreamError(result);
-  return passthrough(result.json);
-}
+import { NextRequest, NextResponse } from 'next/server';
+import { idpFetchJSON } from '../../lib/idp-fetch';
+import { ENV_CONFIG } from '../../config/env';
+import { projectIdpError } from '../../lib/safe-error-response';
+
+/**
+ * Manage ONE passkey (PATCH rename / DELETE revoke, /api/Passkeys/{id},
+ * user JWT). The id arrives from the Next dynamic segment via the routes
+ * wrapper — it is never read from the body.
+ */
+
+function upstreamError(result: { status: number; json: unknown; attemptedRefresh: boolean }) {
+  return NextResponse.json(
+    {
+      success: false,
+      message: 'Upstream error',
+      error: { code: 'UPSTREAM_SERVICE_ERROR', status: result.status, details: projectIdpError(result.json) },
+      meta: { attemptedRefresh: result.attemptedRefresh },
+    },
+    { status: result.status },
+  );
+}
+
+function passthrough(json: unknown) {
+  const bodyJson: any = json;
+  if (bodyJson && typeof bodyJson === 'object' && 'success' in bodyJson && 'data' in bodyJson) {
+    if (bodyJson.success === true) return NextResponse.json(bodyJson.data ?? { success: true }, { status: 200 });
+    return NextResponse.json(bodyJson, { status: 200 });
+  }
+  return NextResponse.json(bodyJson ?? { success: true }, { status: 200 });
+}
+
+export async function PATCH(req: NextRequest, id: string) {
+  let body = '{}';
+  try {
+    const raw = await req.text();
+    if (raw && raw.trim().length > 0) body = raw;
+  } catch {}
+
+  const result = await idpFetchJSON(req, `${ENV_CONFIG.IDP_URL}/api/Passkeys/${encodeURIComponent(id)}`, {
+    method: 'PATCH',
+    headers: { 'Content-Type': 'application/json' },
+    body,
+  });
+  if (!result.ok) return upstreamError(result);
+  return passthrough(result.json);
+}
+
+export async function DELETE(req: NextRequest, id: string) {
+  const result = await idpFetchJSON(req, `${ENV_CONFIG.IDP_URL}/api/Passkeys/${encodeURIComponent(id)}`, {
+    method: 'DELETE',
+  });
+  if (!result.ok) return upstreamError(result);
+  return passthrough(result.json);
+}

package/src/api-handlers/passkeys/register-options.ts

@@ -1,43 +1,43 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { idpFetchJSON } from '../../lib/idp-fetch';
-import { ENV_CONFIG } from '../../config/env';
-import { projectIdpError } from '../../lib/safe-error-response';
-
-/**
- * Begin the passkey REGISTRATION ceremony (POST /api/Passkeys/register/options,
- * user JWT — a credential change; the IDP may demand step-up, surfaced as-is).
- * Returns the WebAuthn PublicKeyCredentialCreationOptions (ride the envelope
- * `data`, per the archived hand-roll contract).
- */
-export async function POST(req: NextRequest) {
-  let body = '{}';
-  try {
-    const raw = await req.text();
-    if (raw && raw.trim().length > 0) body = raw;
-  } catch {}
-
-  const result = await idpFetchJSON(req, `${ENV_CONFIG.IDP_URL}/api/Passkeys/register/options`, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
-    body,
-  });
-
-  if (!result.ok) {
-    return NextResponse.json(
-      {
-        success: false,
-        message: 'Upstream error',
-        error: { code: 'UPSTREAM_SERVICE_ERROR', status: result.status, details: projectIdpError(result.json) },
-        meta: { attemptedRefresh: result.attemptedRefresh },
-      },
-      { status: result.status },
-    );
-  }
-
-  const bodyJson: any = result.json;
-  if (bodyJson && typeof bodyJson === 'object' && 'success' in bodyJson && 'data' in bodyJson) {
-    if (bodyJson.success === true) return NextResponse.json(bodyJson.data, { status: 200 });
-    return NextResponse.json(bodyJson, { status: 200 });
-  }
-  return NextResponse.json(bodyJson ?? {}, { status: 200 });
-}
+import { NextRequest, NextResponse } from 'next/server';
+import { idpFetchJSON } from '../../lib/idp-fetch';
+import { ENV_CONFIG } from '../../config/env';
+import { projectIdpError } from '../../lib/safe-error-response';
+
+/**
+ * Begin the passkey REGISTRATION ceremony (POST /api/Passkeys/register/options,
+ * user JWT — a credential change; the IDP may demand step-up, surfaced as-is).
+ * Returns the WebAuthn PublicKeyCredentialCreationOptions (ride the envelope
+ * `data`, per the archived hand-roll contract).
+ */
+export async function POST(req: NextRequest) {
+  let body = '{}';
+  try {
+    const raw = await req.text();
+    if (raw && raw.trim().length > 0) body = raw;
+  } catch {}
+
+  const result = await idpFetchJSON(req, `${ENV_CONFIG.IDP_URL}/api/Passkeys/register/options`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body,
+  });
+
+  if (!result.ok) {
+    return NextResponse.json(
+      {
+        success: false,
+        message: 'Upstream error',
+        error: { code: 'UPSTREAM_SERVICE_ERROR', status: result.status, details: projectIdpError(result.json) },
+        meta: { attemptedRefresh: result.attemptedRefresh },
+      },
+      { status: result.status },
+    );
+  }
+
+  const bodyJson: any = result.json;
+  if (bodyJson && typeof bodyJson === 'object' && 'success' in bodyJson && 'data' in bodyJson) {
+    if (bodyJson.success === true) return NextResponse.json(bodyJson.data, { status: 200 });
+    return NextResponse.json(bodyJson, { status: 200 });
+  }
+  return NextResponse.json(bodyJson ?? {}, { status: 200 });
+}

package/src/api-handlers/passkeys/register-verify.ts

@@ -1,42 +1,42 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { idpFetchJSON } from '../../lib/idp-fetch';
-import { ENV_CONFIG } from '../../config/env';
-import { projectIdpError } from '../../lib/safe-error-response';
-
-/**
- * Finish the passkey REGISTRATION ceremony (POST /api/Passkeys/register/verify,
- * user JWT). Body forwarded VERBATIM — it carries the enrolment handle plus the
- * authenticator attestation produced by navigator.credentials.create().
- */
-export async function POST(req: NextRequest) {
-  let body = '{}';
-  try {
-    const raw = await req.text();
-    if (raw && raw.trim().length > 0) body = raw;
-  } catch {}
-
-  const result = await idpFetchJSON(req, `${ENV_CONFIG.IDP_URL}/api/Passkeys/register/verify`, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
-    body,
-  });
-
-  if (!result.ok) {
-    return NextResponse.json(
-      {
-        success: false,
-        message: 'Upstream error',
-        error: { code: 'UPSTREAM_SERVICE_ERROR', status: result.status, details: projectIdpError(result.json) },
-        meta: { attemptedRefresh: result.attemptedRefresh },
-      },
-      { status: result.status },
-    );
-  }
-
-  const bodyJson: any = result.json;
-  if (bodyJson && typeof bodyJson === 'object' && 'success' in bodyJson && 'data' in bodyJson) {
-    if (bodyJson.success === true) return NextResponse.json(bodyJson.data, { status: 200 });
-    return NextResponse.json(bodyJson, { status: 200 });
-  }
-  return NextResponse.json(bodyJson ?? {}, { status: 200 });
-}
+import { NextRequest, NextResponse } from 'next/server';
+import { idpFetchJSON } from '../../lib/idp-fetch';
+import { ENV_CONFIG } from '../../config/env';
+import { projectIdpError } from '../../lib/safe-error-response';
+
+/**
+ * Finish the passkey REGISTRATION ceremony (POST /api/Passkeys/register/verify,
+ * user JWT). Body forwarded VERBATIM — it carries the enrolment handle plus the
+ * authenticator attestation produced by navigator.credentials.create().
+ */
+export async function POST(req: NextRequest) {
+  let body = '{}';
+  try {
+    const raw = await req.text();
+    if (raw && raw.trim().length > 0) body = raw;
+  } catch {}
+
+  const result = await idpFetchJSON(req, `${ENV_CONFIG.IDP_URL}/api/Passkeys/register/verify`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body,
+  });
+
+  if (!result.ok) {
+    return NextResponse.json(
+      {
+        success: false,
+        message: 'Upstream error',
+        error: { code: 'UPSTREAM_SERVICE_ERROR', status: result.status, details: projectIdpError(result.json) },
+        meta: { attemptedRefresh: result.attemptedRefresh },
+      },
+      { status: result.status },
+    );
+  }
+
+  const bodyJson: any = result.json;
+  if (bodyJson && typeof bodyJson === 'object' && 'success' in bodyJson && 'data' in bodyJson) {
+    if (bodyJson.success === true) return NextResponse.json(bodyJson.data, { status: 200 });
+    return NextResponse.json(bodyJson, { status: 200 });
+  }
+  return NextResponse.json(bodyJson ?? {}, { status: 200 });
+}

package/src/api-handlers/session/refresh-viability.ts

@@ -1,56 +1,56 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { getSession, isRefreshInProgress } from '../../lib/session-store';
-import { checkRefreshViability } from '../../lib/refresh-token-validator';
-import { getTokenTestAware } from '../../lib/test-aware-get-token';
-import { logger } from '../../config/logger';
-import { tokenLogId } from '../../lib/token-log-id';
-import { resolveSessionState } from '../../server/auth';
-
-export async function GET(req: NextRequest) {
-  try {
-    const sessionToken = req.nextUrl.searchParams.get('token');
-    let finalSessionToken = sessionToken;
-    if (!finalSessionToken && process.env.TEST_MODE !== 'true') {
-      // PAY-2216: outside TEST_MODE getTokenTestAware is getSession(), which answered null for a store outage AND
-      // for a deleted session, so this route said not_logged_in to both and its own session_not_found arm (below)
-      // was unreachable from a cookie. Ask for the state instead. Same rules as routes/auth/viability.ts:
-      // 'unknown' never reads as logged out or stale; 'missing' requires a verified cookie.
-      const sessionState = await resolveSessionState(req);
-      if (sessionState.state === 'unknown') {
-        logger.warn('[REFRESH-VIABILITY] Session store unavailable - session state unknown');
-        return NextResponse.json({ canRefresh: false, reason: 'store_unavailable', error: 'Session store unavailable', code: 'STORE_UNAVAILABLE' }, { status: 500 });
-      }
-      if (sessionState.state === 'missing') {
-        return NextResponse.json({ canRefresh: false, reason: 'session_not_found', sessionTokenId: tokenLogId(sessionState.sessionToken) }, { status: 200 });
-      }
-      if (sessionState.state === 'live') {
-        finalSessionToken = sessionState.session?.session?.token ?? null;
-      }
-    } else if (!finalSessionToken) {
-      const token = await getTokenTestAware(req);
-      // Support both field names: sessionToken (auth.ts JWT) and redisSessionId (legacy)
-      finalSessionToken = (token?.sessionToken || token?.redisSessionId) as string;
-    }
-    if (!finalSessionToken) {
-      return NextResponse.json({ canRefresh: false, reason: 'not_logged_in', sessionTokenId: null }, { status: 200 });
-    }
-    const refreshInProgress = await isRefreshInProgress(finalSessionToken);
-    if (refreshInProgress) {
-      // Still need to get session data for twoFactorComplete even when refresh is in progress
-      const sessionData = await getSession(finalSessionToken);
-      logger.info('[REFRESH-VIABILITY] Refresh already in progress, telling middleware to wait', { sessionToken: tokenLogId(finalSessionToken) });
-      return NextResponse.json({ canRefresh: true, reason: 'refresh_in_progress', refreshInProgress: true, sessionTokenId: tokenLogId(finalSessionToken), twoFactorComplete: sessionData?.mfaVerified ?? false }, { status: 200 });
-    }
-    const sessionData = await getSession(finalSessionToken);
-    if (!sessionData) {
-      return NextResponse.json({ canRefresh: false, reason: 'session_not_found', sessionTokenId: tokenLogId(finalSessionToken) }, { status: 200 });
-    }
-    const viabilityCheck = checkRefreshViability(sessionData);
-    return NextResponse.json({ canRefresh: viabilityCheck.canRefresh, reason: viabilityCheck.reason, timeRemaining: viabilityCheck.timeRemaining, expiresAt: viabilityCheck.expiresAt, accessTokenExpired: viabilityCheck.accessTokenExpired, accessTokenTimeRemaining: viabilityCheck.accessTokenTimeRemaining, sessionTokenId: tokenLogId(finalSessionToken), twoFactorComplete: sessionData.mfaVerified ?? false, userId: sessionData.userId, refreshInProgress: false });
-  } catch (error) {
-    const correlationId = globalThis.crypto.randomUUID();
-    logger.error('[REFRESH-VIABILITY] Error checking refresh viability', { correlationId, error: error instanceof Error ? error.message : String(error) });
-    // PAY-1438: the exception text stays in the log above; the caller gets the id.
-    return NextResponse.json({ canRefresh: false, reason: 'check_error', error: 'Failed to check refresh viability', code: 'INTERNAL_ERROR', correlationId }, { status: 500 });
-  }
-}
+import { NextRequest, NextResponse } from 'next/server';
+import { getSession, isRefreshInProgress } from '../../lib/session-store';
+import { checkRefreshViability } from '../../lib/refresh-token-validator';
+import { getTokenTestAware } from '../../lib/test-aware-get-token';
+import { logger } from '../../config/logger';
+import { tokenLogId } from '../../lib/token-log-id';
+import { resolveSessionState } from '../../server/auth';
+
+export async function GET(req: NextRequest) {
+  try {
+    const sessionToken = req.nextUrl.searchParams.get('token');
+    let finalSessionToken = sessionToken;
+    if (!finalSessionToken && process.env.TEST_MODE !== 'true') {
+      // PAY-2216: outside TEST_MODE getTokenTestAware is getSession(), which answered null for a store outage AND
+      // for a deleted session, so this route said not_logged_in to both and its own session_not_found arm (below)
+      // was unreachable from a cookie. Ask for the state instead. Same rules as routes/auth/viability.ts:
+      // 'unknown' never reads as logged out or stale; 'missing' requires a verified cookie.
+      const sessionState = await resolveSessionState(req);
+      if (sessionState.state === 'unknown') {
+        logger.warn('[REFRESH-VIABILITY] Session store unavailable - session state unknown');
+        return NextResponse.json({ canRefresh: false, reason: 'store_unavailable', error: 'Session store unavailable', code: 'STORE_UNAVAILABLE' }, { status: 500 });
+      }
+      if (sessionState.state === 'missing') {
+        return NextResponse.json({ canRefresh: false, reason: 'session_not_found', sessionTokenId: tokenLogId(sessionState.sessionToken) }, { status: 200 });
+      }
+      if (sessionState.state === 'live') {
+        finalSessionToken = sessionState.session?.session?.token ?? null;
+      }
+    } else if (!finalSessionToken) {
+      const token = await getTokenTestAware(req);
+      // Support both field names: sessionToken (auth.ts JWT) and redisSessionId (legacy)
+      finalSessionToken = (token?.sessionToken || token?.redisSessionId) as string;
+    }
+    if (!finalSessionToken) {
+      return NextResponse.json({ canRefresh: false, reason: 'not_logged_in', sessionTokenId: null }, { status: 200 });
+    }
+    const refreshInProgress = await isRefreshInProgress(finalSessionToken);
+    if (refreshInProgress) {
+      // Still need to get session data for twoFactorComplete even when refresh is in progress
+      const sessionData = await getSession(finalSessionToken);
+      logger.info('[REFRESH-VIABILITY] Refresh already in progress, telling middleware to wait', { sessionToken: tokenLogId(finalSessionToken) });
+      return NextResponse.json({ canRefresh: true, reason: 'refresh_in_progress', refreshInProgress: true, sessionTokenId: tokenLogId(finalSessionToken), twoFactorComplete: sessionData?.mfaVerified ?? false }, { status: 200 });
+    }
+    const sessionData = await getSession(finalSessionToken);
+    if (!sessionData) {
+      return NextResponse.json({ canRefresh: false, reason: 'session_not_found', sessionTokenId: tokenLogId(finalSessionToken) }, { status: 200 });
+    }
+    const viabilityCheck = checkRefreshViability(sessionData);
+    return NextResponse.json({ canRefresh: viabilityCheck.canRefresh, reason: viabilityCheck.reason, timeRemaining: viabilityCheck.timeRemaining, expiresAt: viabilityCheck.expiresAt, accessTokenExpired: viabilityCheck.accessTokenExpired, accessTokenTimeRemaining: viabilityCheck.accessTokenTimeRemaining, sessionTokenId: tokenLogId(finalSessionToken), twoFactorComplete: sessionData.mfaVerified ?? false, userId: sessionData.userId, refreshInProgress: false });
+  } catch (error) {
+    const correlationId = globalThis.crypto.randomUUID();
+    logger.error('[REFRESH-VIABILITY] Error checking refresh viability', { correlationId, error: error instanceof Error ? error.message : String(error) });
+    // PAY-1438: the exception text stays in the log above; the caller gets the id.
+    return NextResponse.json({ canRefresh: false, reason: 'check_error', error: 'Failed to check refresh viability', code: 'INTERNAL_ERROR', correlationId }, { status: 500 });
+  }
+}