@schemavaults/auth-server-sdk 0.17.15 → 0.19.2

package/dist/route_guards/withAuthenticatedRouteGuard.js

@@ -1,27 +1,63 @@
 import "server-only";
-import { SCHEMAVAULTS_AUTH_APP_DEFINITION, getAppEnvironment, } from "@schemavaults/app-definitions";
+import { SCHEMAVAULTS_AUTH_APP_DEFINITION, getAppEnvironment, getHardcodedClientWebAppDomain, } from "@schemavaults/app-definitions";
 import { cookies as loadCookies } from "next/headers";
 import { redirectWithNextAppDirError } from "../redirect-with-error";
-import RouteGuardFactory from "../route_guards/route-guard-factory";
+import RouteGuardFactory from "./route-guard-factory";
 import { NextResponse } from "next/server";
 import getStringByteSize from "../getStringByteSize";
 import MaximumBrowserCookieSize from "../MaximumBrowserCookieSize";
-import RefreshTokenCookieName from "../RefreshTokenCookieNames";
+import { AccessTokenCookieName } from "../AccessTokenCookieNames";
+import { RefreshTokenCookieName } from "../RefreshTokenCookieNames";
 import getSchemavaultsApiServerId from "../get-schemavaults-api-server-id";
+import { RemoteJwtKeyManager } from "../JwtKeyManager";
 import redirectToLogin from "../redirect-to-login";
 import { redirect } from "next/navigation";
-export async function withAuthenticatedServerComponentRouteGuard(input, dbh, jwt_keys_manager, getApiServerId = getSchemavaultsApiServerId) {
+import assertValidRouteGuardType from "./assertValidRouteGuardType";
+// default key manager is RemoteJwtKeyManager-- makes it easier for external apps, we can overwrite this once for the auth server
+export function initDefaultJwtKeyManagerForAuthenticatedRouteGuard(debug = process.env.NODE_ENV === "development") {
+    return new RemoteJwtKeyManager({
+        auth_server_uri: getHardcodedClientWebAppDomain(SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id, getAppEnvironment()),
+        debug,
+    });
+}
+export async function withAuthenticatedServerComponentRouteGuard(server_component, additional_custom_server_component_props, route_guard_type = "authenticated", custom_is_authorized_check = undefined, jwt_keys_manager = initDefaultJwtKeyManagerForAuthenticatedRouteGuard(), getApiServerId = getSchemavaultsApiServerId) {
+    assertValidRouteGuardType(route_guard_type);
     const environment = getAppEnvironment();
     const api_server_id = getApiServerId();
     const cookies = await loadCookies();
     const token_sources = [];
-    const refresh_token_cookie = cookies.get("refresh_token");
-    if (typeof refresh_token_cookie?.value === "string") {
-        token_sources.push({
-            sourceHint: "Auth Server Refresh Token",
-            type: "refresh",
-            token: refresh_token_cookie.value,
-        });
+    if (api_server_id === SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id) {
+        const refresh_token_cookie = cookies.get(RefreshTokenCookieName(SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id));
+        if (typeof refresh_token_cookie?.value === "string") {
+            token_sources.push({
+                sourceHint: "Auth Server Refresh Token",
+                type: "refresh",
+                token: refresh_token_cookie.value,
+            });
+        }
+    }
+    const access_token_cookie_name = AccessTokenCookieName(api_server_id);
+    const access_token_cookie = cookies.get(access_token_cookie_name);
+    if (typeof access_token_cookie?.value === "string" &&
+        access_token_cookie.value.length > 64) {
+        let jwt_string = null;
+        try {
+            const parsed = JSON.parse(access_token_cookie.value);
+            if (parsed && typeof parsed.token === "string") {
+                jwt_string = parsed.token;
+            }
+        }
+        catch {
+            // Raw JWT string fallback
+            jwt_string = access_token_cookie.value;
+        }
+        if (jwt_string) {
+            token_sources.push({
+                sourceHint: `Access Token from cookie '${access_token_cookie_name}'`,
+                type: "access",
+                token: jwt_string,
+            });
+        }
     }
     if (token_sources.length === 0) {
         redirectToLogin(redirect);
@@ -31,7 +67,7 @@ export async function withAuthenticatedServerComponentRouteGuard(input, dbh, jwt
         is_auth_server: api_server_id === SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id,
         jwt_keys_manager,
     });
-    const route_guard = await route_guard_factory.createGuardFromTokenSources("authenticated", token_sources, api_server_id);
+    const route_guard = await route_guard_factory.createGuardFromTokenSources(route_guard_type, token_sources, api_server_id);
     if (!route_guard.user) {
         redirectToLogin(redirect);
     }
@@ -39,53 +75,96 @@ export async function withAuthenticatedServerComponentRouteGuard(input, dbh, jwt
     if (!route_guard.isAccessAllowed()) {
         redirectWithNextAppDirError(403, "forbidden");
     }
-    const ProtectedAuthenticatedPageServerComponent = typeof input === "function"
-        ? input
-        : input.ProtectedAuthenticatedPageServerComponent;
-    if (typeof ProtectedAuthenticatedPageServerComponent !== "function") {
-        throw new TypeError("Expected ProtectedAuthenticatedPageServerComponent to be a function");
+    if (typeof server_component !== "function") {
+        throw new TypeError("Expected 'server_component' passed to withAuthenticatedServerComponentRouteGuard to be a function");
     }
-    return (await ProtectedAuthenticatedPageServerComponent({
+    const ProtectedAuthenticatedPageServerComponent = server_component;
+    const base_server_component_props = {
         user,
-        dbh,
         environment,
         user_organizations: route_guard.user_organizations,
-    }));
+    };
+    const server_component_props = {
+        ...base_server_component_props,
+        ...additional_custom_server_component_props,
+    };
+    if (typeof custom_is_authorized_check === "function") {
+        let is_authorized = false;
+        try {
+            is_authorized = await custom_is_authorized_check(server_component_props);
+        }
+        catch (e) {
+            console.error("Error in 'custom_is_authorized_check' handler: ", e);
+            redirectWithNextAppDirError(500, "internal_server_error");
+        }
+        if (!is_authorized) {
+            redirectWithNextAppDirError(403, "forbidden");
+        }
+    }
+    return (await ProtectedAuthenticatedPageServerComponent(server_component_props));
 }
-export function withAuthenticatedApiRouteGuard(input, dbh, jwt_keys_manager, getApiServerId = getSchemavaultsApiServerId) {
-    const AuthenticatedApiRoute = input;
+export function withAuthenticatedApiRouteGuard(api_route_handler, additional_custom_api_route_inputs, route_guard_type = "authenticated", custom_is_authorized_check = undefined, jwt_keys_manager = initDefaultJwtKeyManagerForAuthenticatedRouteGuard(), getApiServerId = getSchemavaultsApiServerId) {
+    assertValidRouteGuardType(route_guard_type);
+    const AuthenticatedApiRoute = api_route_handler;
     return async function ProtectedAuthenticatedApiRoute(req) {
         const environment = getAppEnvironment();
         const api_server_id = getApiServerId();
         const token_sources = [];
-        const refresh_token_cookie = req.cookies.get(RefreshTokenCookieName);
-        if (typeof refresh_token_cookie?.value === "string" &&
-            refresh_token_cookie.value.length > 64 &&
-            getStringByteSize(refresh_token_cookie.value) <= MaximumBrowserCookieSize) {
-            token_sources.push({
-                sourceHint: "Auth Server Refresh Token",
-                type: "refresh",
-                token: refresh_token_cookie.value,
-            });
+        if (api_server_id === SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id) {
+            const refresh_token_cookie = req.cookies.get(RefreshTokenCookieName(SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id));
+            if (typeof refresh_token_cookie?.value === "string" &&
+                refresh_token_cookie.value.length > 64 &&
+                getStringByteSize(refresh_token_cookie.value) <=
+                    MaximumBrowserCookieSize) {
+                token_sources.push({
+                    sourceHint: "Auth Server Refresh Token",
+                    type: "refresh",
+                    token: refresh_token_cookie.value,
+                });
+            }
+        }
+        const access_token_cookie_name = AccessTokenCookieName(api_server_id);
+        const access_token_cookie = req.cookies.get(access_token_cookie_name);
+        if (typeof access_token_cookie?.value === "string" &&
+            access_token_cookie.value.length > 64 &&
+            getStringByteSize(access_token_cookie.value) <= MaximumBrowserCookieSize) {
+            let jwt_string = null;
+            try {
+                const parsed = JSON.parse(access_token_cookie.value);
+                if (parsed && typeof parsed.token === "string") {
+                    jwt_string = parsed.token;
+                }
+            }
+            catch {
+                // Raw JWT string fallback
+                jwt_string = access_token_cookie.value;
+            }
+            if (jwt_string) {
+                token_sources.push({
+                    sourceHint: `Access Token from cookie '${access_token_cookie_name}'`,
+                    type: "access",
+                    token: jwt_string,
+                });
+            }
         }
-        if (req.headers.has(RefreshTokenCookieName)) {
-            const auth_header = req.headers.get("Authorization");
+        if (req.headers.has("Authorization") || req.headers.has("authorization")) {
+            const auth_header = req.headers.get("Authorization") ?? req.headers.get("authorization");
             if (!auth_header || typeof auth_header !== "string") {
                 throw new Error("Expected 'Authorization' to be non-empty string if set.");
             }
             if (!auth_header.startsWith("Bearer ")) {
                 throw new Error("Expected header 'Authorization' to start with 'Bearer '");
             }
-            const refresh_token_from_header = typeof auth_header === "string" && auth_header.startsWith("Bearer ")
+            const access_token_from_header = typeof auth_header === "string" && auth_header.startsWith("Bearer ")
                 ? auth_header.slice("Bearer ".length)
                 : "";
-            if (!refresh_token_from_header) {
-                throw new Error(`Refresh token cookie from header 'Authorization' appears to be empty!`);
+            if (!access_token_from_header) {
+                throw new Error(`Header 'Authorization' appears to be empty!`);
             }
             token_sources.push({
-                sourceHint: "Auth Server Access Token",
+                sourceHint: "Access Token from Authorization Bearer header",
                 type: "access",
-                token: refresh_token_from_header,
+                token: access_token_from_header,
             });
         }
         const route_guard_factory = new RouteGuardFactory({
@@ -93,7 +172,7 @@ export function withAuthenticatedApiRouteGuard(input, dbh, jwt_keys_manager, get
             is_auth_server: api_server_id === SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id,
             jwt_keys_manager,
         });
-        const route_guard = await route_guard_factory.createGuardFromTokenSources("authenticated", token_sources, SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id);
+        const route_guard = await route_guard_factory.createGuardFromTokenSources(route_guard_type, token_sources, SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id);
         if (!route_guard.user) {
             return NextResponse.json({
                 success: false,
@@ -117,13 +196,38 @@ export function withAuthenticatedApiRouteGuard(input, dbh, jwt_keys_manager, get
             }, { status: 403 });
         }
         const user_organizations = route_guard.user_organizations;
-        return (await AuthenticatedApiRoute({
+        const base_api_route_inputs = {
             req,
             user,
-            dbh,
             environment,
             user_organizations,
-        }));
+        };
+        const api_route_inputs = {
+            ...base_api_route_inputs,
+            ...additional_custom_api_route_inputs,
+        };
+        if (typeof custom_is_authorized_check === "function") {
+            let is_authorized = false;
+            try {
+                is_authorized = await custom_is_authorized_check(api_route_inputs);
+            }
+            catch (e) {
+                console.error("Error in 'custom_is_authorized_check' handler: ", e);
+                return NextResponse.json({
+                    success: false,
+                    error: true,
+                    message: "Error while checking if access is allowed",
+                }, { status: 500 });
+            }
+            if (!is_authorized) {
+                return NextResponse.json({
+                    success: false,
+                    error: true,
+                    message: "Access is not allowed",
+                }, { status: 403 });
+            }
+        }
+        return (await AuthenticatedApiRoute(api_route_inputs));
     };
 }
 //# sourceMappingURL=withAuthenticatedRouteGuard.js.map

package/dist/route_guards/withAuthenticatedRouteGuard.js.map

@@ -1 +1 @@
-{"version":3,"file":"withAuthenticatedRouteGuard.js","sourceRoot":"","sources":["../../src/route_guards/withAuthenticatedRouteGuard.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAErB,OAAO,EAEL,gCAAgC,EAEhC,iBAAiB,GAClB,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,iBAAiB,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAoB,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,wBAAwB,MAAM,4BAA4B,CAAC;AAClE,OAAO,sBAAsB,MAAM,2BAA2B,CAAC;AAE/D,OAAO,0BAA0B,MAAM,kCAAkC,CAAC;AAE1E,OAAO,eAAe,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAgC3C,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAG9D,KAEkD,EAClD,GAAY,EACZ,gBAAgC,EAChC,iBAAoC,0BAA0B;IAE9D,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;IACpE,MAAM,aAAa,GAAgB,cAAc,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IAEpC,MAAM,aAAa,GAAkC,EAAE,CAAC;IAExD,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,OAAO,oBAAoB,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpD,aAAa,CAAC,IAAI,CAAC;YACjB,UAAU,EAAE,2BAA2B;YACvC,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,oBAAoB,CAAC,KAAK;SAClC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,iBAAiB,CAAC;QAChD,WAAW;QACX,cAAc,EAAE,aAAa,KAAK,gCAAgC,CAAC,MAAM;QACzE,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,2BAA2B,CACnD,eAAe,EACf,aAAa,EACb,aAAa,CACd,CAAC;IAEJ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACtB,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAa,WAAW,CAAC,IAAI,CAAC;IAExC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,EAAE,CAAC;QACnC,2BAA2B,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,yCAAyC,GAC7C,OAAO,KAAK,KAAK,UAAU;QACzB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK,CAAC,yCAAyC,CAAC;IACtD,IAAI,OAAO,yCAAyC,KAAK,UAAU,EAAE,CAAC;QACpE,MAAM,IAAI,SAAS,CACjB,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,yCAAyC,CAAC;QACtD,IAAI;QACJ,GAAG;QACH,WAAW;QACX,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;KACnD,CAAC,CAAwB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAA0C,EAC1C,GAAY,EACZ,gBAAgC,EAChC,iBAAoC,0BAA0B;IAE9D,MAAM,qBAAqB,GAAwC,KAAK,CAAC;IACzE,OAAO,KAAK,UAAU,8BAA8B,CAClD,GAAgB;QAEhB,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;QACpE,MAAM,aAAa,GAAgB,cAAc,EAAE,CAAC;QAEpD,MAAM,aAAa,GAAkC,EAAE,CAAC;QAExD,MAAM,oBAAoB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACrE,IACE,OAAO,oBAAoB,EAAE,KAAK,KAAK,QAAQ;YAC/C,oBAAoB,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;YACtC,iBAAiB,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,wBAAwB,EACzE,CAAC;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,UAAU,EAAE,2BAA2B;gBACvC,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,oBAAoB,CAAC,KAAsB;aACnD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAkB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACpE,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,MAAM,yBAAyB,GAC7B,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;gBAClE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,UAAU,EAAE,0BAA0B;gBACtC,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,yBAA0C;aAClD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,iBAAiB,CAAC;YAChD,WAAW;YACX,cAAc,EAAE,aAAa,KAAK,gCAAgC,CAAC,MAAM;YACzE,gBAAgB;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,2BAA2B,CACnD,eAAe,EACf,aAAa,EACb,gCAAgC,CAAC,MAAM,CACxC,CAAC;QAEJ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,qCAAqC;aAC/C,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAa,WAAW,CAAC,IAAI,CAAC;QAExC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnD,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EACL,qEAAqE;aACxE,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACxD,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,uBAAuB;aACjC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,MAAM,kBAAkB,GACtB,WAAW,CAAC,kBAAkB,CAAC;QAEjC,OAAO,CAAC,MAAM,qBAAqB,CAAC;YAClC,GAAG;YACH,IAAI;YACJ,GAAG;YACH,WAAW;YACX,kBAAkB;SACnB,CAAC,CAAwB,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"withAuthenticatedRouteGuard.js","sourceRoot":"","sources":["../../src/route_guards/withAuthenticatedRouteGuard.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAErB,OAAO,EAEL,gCAAgC,EAEhC,iBAAiB,EACjB,8BAA8B,GAC/B,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,iBAAiB,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAoB,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,wBAAwB,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,0BAA0B,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAuB,MAAM,iBAAiB,CAAC;AAC3E,OAAO,eAAe,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,yBAAyB,MAAM,6BAA6B,CAAC;AA2BpE,iIAAiI;AACjI,MAAM,UAAU,kDAAkD,CAChE,QAAiB,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa;IAEvD,OAAO,IAAI,mBAAmB,CAAC;QAC7B,eAAe,EAAE,8BAA8B,CAC7C,gCAAgC,CAAC,MAAM,EACvC,iBAAiB,EAAE,CACpB;QACD,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAG9D,gBAAoF,EACpF,wCAAgE,EAChE,mBAA8C,eAAe,EAC7D,6BAKgB,SAAS,EACzB,mBAAmC,kDAAkD,EAAE,EACvF,iBAAoC,0BAA0B;IAE9D,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;IAE5C,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;IACpE,MAAM,aAAa,GAAgB,cAAc,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IAEpC,MAAM,aAAa,GAAkC,EAAE,CAAC;IAExD,IAAI,aAAa,KAAK,gCAAgC,CAAC,MAAM,EAAE,CAAC;QAC9D,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CACtC,sBAAsB,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAChE,CAAC;QACF,IAAI,OAAO,oBAAoB,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpD,aAAa,CAAC,IAAI,CAAC;gBACjB,UAAU,EAAE,2BAA2B;gBACvC,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,oBAAoB,CAAC,KAAK;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,wBAAwB,GAAW,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC9E,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAClE,IACE,OAAO,mBAAmB,EAAE,KAAK,KAAK,QAAQ;QAC9C,mBAAmB,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EACrC,CAAC;QACD,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC/C,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;YAC1B,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC;QACzC,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC;gBACjB,UAAU,EAAE,6BAA6B,wBAAwB,GAAG;gBACpE,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,UAAU;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,iBAAiB,CAAC;QAChD,WAAW;QACX,cAAc,EAAE,aAAa,KAAK,gCAAgC,CAAC,MAAM;QACzE,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,2BAA2B,CACnD,gBAAgB,EAChB,aAAa,EACb,aAAa,CACd,CAAC;IAEJ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACtB,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAa,WAAW,CAAC,IAAI,CAAC;IAExC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,EAAE,CAAC;QACnC,2BAA2B,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,gBAAgB,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CACjB,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,yCAAyC,GAAG,gBAAgB,CAAC;IAEnE,MAAM,2BAA2B,GAC/B;QACE,IAAI;QACJ,WAAW;QACX,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;KACnD,CAAC;IAEJ,MAAM,sBAAsB,GACD;QACzB,GAAG,2BAA2B;QAC9B,GAAG,wCAAwC;KAC5C,CAAC;IAEF,IAAI,OAAO,0BAA0B,KAAK,UAAU,EAAE,CAAC;QACrD,IAAI,aAAa,GAAY,KAAK,CAAC;QACnC,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;YACpE,2BAA2B,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,2BAA2B,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,yCAAyC,CACrD,sBAAsB,CACvB,CAAwB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAG5C,iBAAgF,EAChF,kCAAgE,EAChE,mBAA8C,eAAe,EAC7D,6BAKgB,SAAS,EACzB,mBAAmC,kDAAkD,EAAE,EACvF,iBAAoC,0BAA0B;IAE9D,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;IAE5C,MAAM,qBAAqB,GACzB,iBAAiB,CAAC;IACpB,OAAO,KAAK,UAAU,8BAA8B,CAClD,GAAgB;QAEhB,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;QACpE,MAAM,aAAa,GAAgB,cAAc,EAAE,CAAC;QAEpD,MAAM,aAAa,GAAkC,EAAE,CAAC;QAExD,IAAI,aAAa,KAAK,gCAAgC,CAAC,MAAM,EAAE,CAAC;YAC9D,MAAM,oBAAoB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAC1C,sBAAsB,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAChE,CAAC;YACF,IACE,OAAO,oBAAoB,EAAE,KAAK,KAAK,QAAQ;gBAC/C,oBAAoB,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;gBACtC,iBAAiB,CAAC,oBAAoB,CAAC,KAAK,CAAC;oBAC3C,wBAAwB,EAC1B,CAAC;gBACD,aAAa,CAAC,IAAI,CAAC;oBACjB,UAAU,EAAE,2BAA2B;oBACvC,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,oBAAoB,CAAC,KAAsB;iBACnD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,wBAAwB,GAC5B,qBAAqB,CAAC,aAAa,CAAC,CAAC;QACvC,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtE,IACE,OAAO,mBAAmB,EAAE,KAAK,KAAK,QAAQ;YAC9C,mBAAmB,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;YACrC,iBAAiB,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,wBAAwB,EACxE,CAAC;YACD,IAAI,UAAU,GAAkB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;gBACrD,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC/C,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC5B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;gBAC1B,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC;YACzC,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,aAAa,CAAC,IAAI,CAAC;oBACjB,UAAU,EAAE,6BAA6B,wBAAwB,GAAG;oBACpE,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YACzE,MAAM,WAAW,GACf,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACvE,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,MAAM,wBAAwB,GAC5B,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;gBAClE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,UAAU,EAAE,+CAA+C;gBAC3D,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,wBAAyC;aACjD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,iBAAiB,CAAC;YAChD,WAAW;YACX,cAAc,EAAE,aAAa,KAAK,gCAAgC,CAAC,MAAM;YACzE,gBAAgB;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,2BAA2B,CACnD,gBAAgB,EAChB,aAAa,EACb,gCAAgC,CAAC,MAAM,CACxC,CAAC;QAEJ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,qCAAqC;aAC/C,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAa,WAAW,CAAC,IAAI,CAAC;QAExC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnD,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EACL,qEAAqE;aACxE,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACxD,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,uBAAuB;aACjC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,MAAM,kBAAkB,GACtB,WAAW,CAAC,kBAAkB,CAAC;QAEjC,MAAM,qBAAqB,GAA8C;YACvE,GAAG;YACH,IAAI;YACJ,WAAW;YACX,kBAAkB;SACnB,CAAC;QAEF,MAAM,gBAAgB,GACW;YAC/B,GAAG,qBAAqB;YACxB,GAAG,kCAAkC;SACtC,CAAC;QAEF,IAAI,OAAO,0BAA0B,KAAK,UAAU,EAAE,CAAC;YACrD,IAAI,aAAa,GAAY,KAAK,CAAC;YACnC,IAAI,CAAC;gBACH,aAAa,GAAG,MAAM,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;YACrE,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;gBACpE,OAAO,YAAY,CAAC,IAAI,CACtB;oBACE,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,2CAA2C;iBACrD,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,YAAY,CAAC,IAAI,CACtB;oBACE,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,uBAAuB;iBACjC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,CAAC,MAAM,qBAAqB,CACjC,gBAAgB,CACjB,CAAwB,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@schemavaults/auth-server-sdk",
   "description": "TypeScript SDK for building authenticated endpoints/middlewares for the Auth Server and Resource Servers",
-  "version": "0.17.15",
+  "version": "0.19.2",
   "license": "UNLICENSED",
   "private": false,
   "repository": {
@@ -15,12 +15,13 @@
   "types": "dist/index.d.ts",
   "dependencies": {
     "zod": "3.23.8",
-    "@schemavaults/jwt": "0.6.21",
-    "@schemavaults/auth-common": "0.8.1",
-    "@schemavaults/app-definitions": "0.6.12"
+    "@schemavaults/jwt": "0.6.27",
+    "@schemavaults/auth-common": "0.8.6",
+    "@schemavaults/app-definitions": "0.6.14"
   },
   "scripts": {
-    "build": "tsc --project tsconfig.json && tsc-alias --project tsconfig.json",
+    "build": "tsc --project tsconfig.json && tsc-alias --project tsconfig.json && bun run copy-codegen-templates",
+    "copy-codegen-templates": "/bin/bash ./copy-codegen-templates.sh",
     "test": "NODE_ENV=test bun test",
     "cleanup:compiled-tests-output": "find ./dist -type f \\( -name \"*.test.js\" -o -name \"*.test.js.map\" -o -name \"*.test.d.ts\" \\) -delete",
     "cleanup": "bun run cleanup:compiled-tests-output",
@@ -29,7 +30,6 @@
     "typecheck": "tsc --project tsconfig.json --noEmit"
   },
   "devDependencies": {
-    "@schemavaults/dbh": "0.7.5",
     "typescript": "5.9.3",
     "bun-types": "1.3.6",
     "@types/react": "19.0.0",
@@ -120,6 +120,16 @@
       "types": "./dist/redirect-to-login.d.ts",
       "import": "./dist/redirect-to-login.js",
       "require": "./dist/redirect-to-login.js"
+    },
+    "./NextjsAppDirectoryPlugin": {
+      "types": "./dist/NextjsAppDirectoryPlugin/index.d.ts",
+      "import": "./dist/NextjsAppDirectoryPlugin/index.js",
+      "require": "./dist/NextjsAppDirectoryPlugin/index.js"
+    },
+    "./NextjsAppDirectoryPlugin/*": {
+      "types": "./dist/NextjsAppDirectoryPlugin/*",
+      "import": "./dist/NextjsAppDirectoryPlugin/*",
+      "require": "./dist/NextjsAppDirectoryPlugin/*"
     }
   }
 }

package/dist/env/loadJwksAccessPrivateKey.js

@@ -1,33 +0,0 @@
-import { importPKCS8, PEMFormat, sign_verify_alg } from "@schemavaults/jwt";
-export default async function loadJwksAccessPrivateKey(env = process.env) {
-    if (typeof env === "object" &&
-        "SCHEMAVAULTS_AUTH_JWKS_ACCESS_PRIVATE_KEY" in env &&
-        typeof env["SCHEMAVAULTS_AUTH_JWKS_ACCESS_PRIVATE_KEY"] === "string" &&
-        env["SCHEMAVAULTS_AUTH_JWKS_ACCESS_PRIVATE_KEY"].length > 0) {
-        const environmentVariable = env["SCHEMAVAULTS_AUTH_JWKS_ACCESS_PRIVATE_KEY"];
-        let pem;
-        if (PEMFormat.isPemFormat(environmentVariable, "PRIVATE")) {
-            try {
-                pem = PEMFormat.parsePem(environmentVariable, "PRIVATE");
-            }
-            catch (e) {
-                console.error(e);
-                throw new TypeError("Failed to import environment variable 'SCHEMAVAULTS_AUTH_JWKS_ACCESS_PRIVATE_KEY' from PEM-encoded environment variable!");
-            }
-        }
-        else {
-            try {
-                pem = PEMFormat.fromBase64Url(environmentVariable, "PRIVATE");
-            }
-            catch (e) {
-                console.error(e);
-                throw new TypeError("Failed to import environment variable 'SCHEMAVAULTS_AUTH_JWKS_ACCESS_PRIVATE_KEY' from base64url-encoded environment variable!");
-            }
-        }
-        return await importPKCS8(pem.value, sign_verify_alg);
-    }
-    else {
-        throw new TypeError("Environment variable 'SCHEMAVAULTS_AUTH_JWKS_ACCESS_PRIVATE_KEY' missing!");
-    }
-}
-//# sourceMappingURL=loadJwksAccessPrivateKey.js.map

package/dist/env/loadJwksAccessPrivateKey.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"loadJwksAccessPrivateKey.js","sourceRoot":"","sources":["../../src/env/loadJwksAccessPrivateKey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,wBAAwB,CACpD,MAAc,OAAO,CAAC,GAAG;IAEzB,IACE,OAAO,GAAG,KAAK,QAAQ;QACvB,2CAA2C,IAAI,GAAG;QAClD,OAAO,GAAG,CAAC,2CAA2C,CAAC,KAAK,QAAQ;QACpE,GAAG,CAAC,2CAA2C,CAAC,CAAC,MAAM,GAAG,CAAC,EAC3D,CAAC;QACD,MAAM,mBAAmB,GACvB,GAAG,CAAC,2CAA2C,CAAC,CAAC;QAEnD,IAAI,GAAc,CAAC;QACnB,IAAI,SAAS,CAAC,WAAW,CAAC,mBAAmB,EAAE,SAAS,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC;gBACH,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,SAAS,CACjB,0HAA0H,CAC3H,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,SAAS,CACjB,gIAAgI,CACjI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,MAAM,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CACjB,2EAA2E,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC"}