@smg-automotive/auth 9.1.1 → 9.1.3

package/dist/{Auth-CJU-jY1w.d.ts → Auth-lfX7CuuS.d.ts}

@@ -1,5 +1,5 @@
 import { FC, PropsWithChildren } from 'react';
-import { A as Auth0Config, E as EnrichedSessionUser } from './sessionUser-qBgR12pF.js';
+import { A as Auth0Config, E as EnrichedSessionUser } from './sessionUser-sPuqul_E.js';
 
 type AuthProviderProps = {
     auth0Config: Auth0Config;

package/dist/cjs/config/auth0.js

@@ -32,6 +32,8 @@ const auth0Config = {
     tokenEndpoint: '/api/auth/access-token',
     // Endpoint to fetch and refresh token
     callbackEndpoint: '/api/auth/callback',
+    // Endpoint to refresh once after signup callback when Auth0 token claims are not synced yet
+    postLoginRefreshEndpoint: '/api/auth/post-login-refresh',
     // Endpoint to fetch user profile
     userProfileEndpoint: '/api/auth/profile',
     // Endpoint to switch selected tenant (cookie-only, no re-login)
@@ -98,6 +100,7 @@ const getAuth0Config = () => {
         tokenEndpoint: `${runtimeConfig.proxyPathSegment}${runtimeConfig.tokenEndpoint}`,
         userProfileEndpoint: `${runtimeConfig.proxyPathSegment}${runtimeConfig.userProfileEndpoint}`,
         callbackEndpoint: `${runtimeConfig.proxyPathSegment}${runtimeConfig.callbackEndpoint}`,
+        postLoginRefreshEndpoint: `${runtimeConfig.proxyPathSegment}${runtimeConfig.postLoginRefreshEndpoint}`,
         switchTenantEndpoint: `${runtimeConfig.proxyPathSegment}${runtimeConfig.switchTenantEndpoint}`,
     };
 };

package/dist/cjs/config/auth0.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth0.js","sources":["../../../../src/config/auth0.ts"],"sourcesContent":[null],"names":["ensureString","ensureSlash"],"mappings":";;;;AAKA,MAAM,wBAAwB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,aAAa;AACzE,MAAM,gBAAgB,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;AAE7E,MAAM,qBAAqB,GAAGA,kBAAY,CACxC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAClD;AACD,MAAM,sBAAsB,GAAGA,kBAAY,CACzC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CACnD;AAED,MAAM,aAAa,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAa;AAC1E,MAAM,gBAAgB,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB;KAChE,KAAK,CAAC,GAAG;KACT,MAAM,CAAC,OAAO,CAAe;AAEhC,MAAM,iBAAiB,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AACtE,MAAM,QAAQ,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAEzD,MAAM,eAAe,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B;KAC5E,KAAK,CAAC,GAAG;KACT,MAAM,CAAC,OAAO,CAAC;AAElB,MAAM,sBAAsB,GAC1B,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,MAAM;AAExD,IAAI,CAAC,aAAa,EAAE;AAClB,IAAA,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC;AAC7D;AAEA,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE;AACjC,IAAA,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC;AAChE;AAEA,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE1C,MAAM,WAAW,GAAgB;;AAE/B,IAAA,aAAa,EAAE,iBAAiB;;AAEhC,IAAA,cAAc,EAAE,kBAAkB;;AAElC,IAAA,aAAa,EAAE,wBAAwB;;AAEvC,IAAA,gBAAgB,EAAE,oBAAoB;;AAEtC,IAAA,mBAAmB,EAAE,mBAAmB;;AAExC,IAAA,oBAAoB,EAAE,yBAAyB;;AAE/C,IAAA,gBAAgB,EAAE,EAAE;;AAEpB,IAAA,qBAAqB,EAAE,EAAE;;AAEzB,IAAA,sBAAsB,EAAE,EAAE;;AAE1B,IAAA,sBAAsB,EAAE,KAAK;;AAE7B,IAAA,cAAc,EAAE;AACd,QAAA,OAAO,EAAE,aAAa;AACtB,QAAA,SAAS,EAAE,gBAAgB;AAC5B,KAAA;;IAED,eAAe;;;AAGf,IAAA,sBAAsB,EAAE;AACtB,QAAA,IAAI,EAAE,kBAAkB;AACxB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,eAAe;AACvB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;;;AAGD,IAAA,0BAA0B,EAAE;AAC1B,QAAA,IAAI,EAAE,sBAAsB;AAC5B,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;AACnB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;;AAED,IAAA,MAAM,EAAE,mDAAmD;;AAE3D,IAAA,mBAAmB,EAAE,cAAc;;IAEnC,eAAe;;IAEf,iBAAiB;;IAEjB,QAAQ;CACT;AAEM,MAAM,cAAc,GAAG,MAAkB;AAC9C,IAAA,MAAM,aAAa,GAAG,EAAE,GAAG,WAAW,EAAE;IACxC,aAAa,CAAC,gBAAgB,GAAG;AAC/B,UAAEC,iBAAW,CAAC,gBAAgB;UAC5B,EAAE;AACN,IAAA,aAAa,CAAC,qBAAqB,GAAG,qBAAqB;AAC3D,IAAA,aAAa,CAAC,sBAAsB,GAAG,sBAAsB;AAC7D,IAAA,aAAa,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,wBAAwB;AACvE,IAAA,aAAa,CAAC,sBAAsB,GAAG,sBAAsB;IAE7D,OAAO;AACL,QAAA,GAAG,aAAa;QAChB,aAAa,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,aAAa,CAAA,CAAE;QAChF,cAAc,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,cAAc,CAAA,CAAE;QAClF,aAAa,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,aAAa,CAAA,CAAE;QAChF,mBAAmB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,mBAAmB,CAAA,CAAE;QAC5F,gBAAgB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,gBAAgB,CAAA,CAAE;QACtF,oBAAoB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,oBAAoB,CAAA,CAAE;KAC/F;AACH;;;;"}
+{"version":3,"file":"auth0.js","sources":["../../../../src/config/auth0.ts"],"sourcesContent":[null],"names":["ensureString","ensureSlash"],"mappings":";;;;AAKA,MAAM,wBAAwB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,aAAa;AACzE,MAAM,gBAAgB,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;AAE7E,MAAM,qBAAqB,GAAGA,kBAAY,CACxC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAClD;AACD,MAAM,sBAAsB,GAAGA,kBAAY,CACzC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CACnD;AAED,MAAM,aAAa,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAa;AAC1E,MAAM,gBAAgB,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB;KAChE,KAAK,CAAC,GAAG;KACT,MAAM,CAAC,OAAO,CAAe;AAEhC,MAAM,iBAAiB,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AACtE,MAAM,QAAQ,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAEzD,MAAM,eAAe,GAAGA,kBAAY,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B;KAC5E,KAAK,CAAC,GAAG;KACT,MAAM,CAAC,OAAO,CAAC;AAElB,MAAM,sBAAsB,GAC1B,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,MAAM;AAExD,IAAI,CAAC,aAAa,EAAE;AAClB,IAAA,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC;AAC7D;AAEA,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE;AACjC,IAAA,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC;AAChE;AAEA,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE1C,MAAM,WAAW,GAAgB;;AAE/B,IAAA,aAAa,EAAE,iBAAiB;;AAEhC,IAAA,cAAc,EAAE,kBAAkB;;AAElC,IAAA,aAAa,EAAE,wBAAwB;;AAEvC,IAAA,gBAAgB,EAAE,oBAAoB;;AAEtC,IAAA,wBAAwB,EAAE,8BAA8B;;AAExD,IAAA,mBAAmB,EAAE,mBAAmB;;AAExC,IAAA,oBAAoB,EAAE,yBAAyB;;AAE/C,IAAA,gBAAgB,EAAE,EAAE;;AAEpB,IAAA,qBAAqB,EAAE,EAAE;;AAEzB,IAAA,sBAAsB,EAAE,EAAE;;AAE1B,IAAA,sBAAsB,EAAE,KAAK;;AAE7B,IAAA,cAAc,EAAE;AACd,QAAA,OAAO,EAAE,aAAa;AACtB,QAAA,SAAS,EAAE,gBAAgB;AAC5B,KAAA;;IAED,eAAe;;;AAGf,IAAA,sBAAsB,EAAE;AACtB,QAAA,IAAI,EAAE,kBAAkB;AACxB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,eAAe;AACvB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;;;AAGD,IAAA,0BAA0B,EAAE;AAC1B,QAAA,IAAI,EAAE,sBAAsB;AAC5B,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;AACnB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;;AAED,IAAA,MAAM,EAAE,mDAAmD;;AAE3D,IAAA,mBAAmB,EAAE,cAAc;;IAEnC,eAAe;;IAEf,iBAAiB;;IAEjB,QAAQ;CACT;AAEM,MAAM,cAAc,GAAG,MAAkB;AAC9C,IAAA,MAAM,aAAa,GAAG,EAAE,GAAG,WAAW,EAAE;IACxC,aAAa,CAAC,gBAAgB,GAAG;AAC/B,UAAEC,iBAAW,CAAC,gBAAgB;UAC5B,EAAE;AACN,IAAA,aAAa,CAAC,qBAAqB,GAAG,qBAAqB;AAC3D,IAAA,aAAa,CAAC,sBAAsB,GAAG,sBAAsB;AAC7D,IAAA,aAAa,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,wBAAwB;AACvE,IAAA,aAAa,CAAC,sBAAsB,GAAG,sBAAsB;IAE7D,OAAO;AACL,QAAA,GAAG,aAAa;QAChB,aAAa,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,aAAa,CAAA,CAAE;QAChF,cAAc,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,cAAc,CAAA,CAAE;QAClF,aAAa,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,aAAa,CAAA,CAAE;QAChF,mBAAmB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,mBAAmB,CAAA,CAAE;QAC5F,gBAAgB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,gBAAgB,CAAA,CAAE;QACtF,wBAAwB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,wBAAwB,CAAA,CAAE;QACtG,oBAAoB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,oBAAoB,CAAA,CAAE;KAC/F;AACH;;;;"}

package/dist/cjs/fixtures/authConfig.js

@@ -6,6 +6,7 @@ const authConfig = (args = {}) => ({
     logoutEndpoint: '/api/auth/logout',
     tokenEndpoint: '/api/auth/token',
     callbackEndpoint: '/api/auth/callback',
+    postLoginRefreshEndpoint: '/api/auth/post-login-refresh',
     userProfileEndpoint: '/api/auth/me',
     switchTenantEndpoint: '/api/auth/switch-tenant',
     sessionDuration,

package/dist/cjs/fixtures/authConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"authConfig.js","sources":["../../../../src/fixtures/authConfig.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAEA,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAEnC,MAAM,UAAU,GAAG,CAAC,OAA6B,EAAE,MAAmB;AAC3E,IAAA,aAAa,EAAE,iBAAiB;AAChC,IAAA,cAAc,EAAE,kBAAkB;AAClC,IAAA,aAAa,EAAE,iBAAiB;AAChC,IAAA,gBAAgB,EAAE,oBAAoB;AACtC,IAAA,mBAAmB,EAAE,cAAc;AACnC,IAAA,oBAAoB,EAAE,yBAAyB;IAC/C,eAAe;AACf,IAAA,sBAAsB,EAAE;AACtB,QAAA,IAAI,EAAE,kBAAkB;AACxB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,eAAe;AACvB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;AACD,IAAA,0BAA0B,EAAE;AAC1B,QAAA,IAAI,EAAE,sBAAsB;AAC5B,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;AACnB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;AACD,IAAA,gBAAgB,EAAE,gBAAgB;AAClC,IAAA,qBAAqB,EAAE,cAAc;AACrC,IAAA,sBAAsB,EAAE,cAAc;AACtC,IAAA,sBAAsB,EAAE,KAAK;AAC7B,IAAA,cAAc,EAAE;AACd,QAAA,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;AACpC,KAAA;AACD,IAAA,MAAM,EAAE,mDAAmD;AAC3D,IAAA,mBAAmB,EAAE,cAAc;AACnC,IAAA,eAAe,EAAE,EAAE;AACnB,IAAA,iBAAiB,EAAE,SAAS;AAC5B,IAAA,QAAQ,EAAE,iDAAiD;AAC3D,IAAA,GAAG,IAAI;AACR,CAAA;;;;"}
+{"version":3,"file":"authConfig.js","sources":["../../../../src/fixtures/authConfig.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAEA,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAEnC,MAAM,UAAU,GAAG,CAAC,OAA6B,EAAE,MAAmB;AAC3E,IAAA,aAAa,EAAE,iBAAiB;AAChC,IAAA,cAAc,EAAE,kBAAkB;AAClC,IAAA,aAAa,EAAE,iBAAiB;AAChC,IAAA,gBAAgB,EAAE,oBAAoB;AACtC,IAAA,wBAAwB,EAAE,8BAA8B;AACxD,IAAA,mBAAmB,EAAE,cAAc;AACnC,IAAA,oBAAoB,EAAE,yBAAyB;IAC/C,eAAe;AACf,IAAA,sBAAsB,EAAE;AACtB,QAAA,IAAI,EAAE,kBAAkB;AACxB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,eAAe;AACvB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;AACD,IAAA,0BAA0B,EAAE;AAC1B,QAAA,IAAI,EAAE,sBAAsB;AAC5B,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;AACnB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;AACD,IAAA,gBAAgB,EAAE,gBAAgB;AAClC,IAAA,qBAAqB,EAAE,cAAc;AACrC,IAAA,sBAAsB,EAAE,cAAc;AACtC,IAAA,sBAAsB,EAAE,KAAK;AAC7B,IAAA,cAAc,EAAE;AACd,QAAA,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;AACpC,KAAA;AACD,IAAA,MAAM,EAAE,mDAAmD;AAC3D,IAAA,mBAAmB,EAAE,cAAc;AACnC,IAAA,eAAe,EAAE,EAAE;AACnB,IAAA,iBAAiB,EAAE,SAAS;AAC5B,IAAA,QAAQ,EAAE,iDAAiD;AAC3D,IAAA,GAAG,IAAI;AACR,CAAA;;;;"}

package/dist/cjs/server/helpers/authRedirects.js

@@ -0,0 +1,40 @@
+'use strict';
+
+var server = require('next/server');
+
+const incompleteTokenErrorCode = 'ERR_INCOMPLETE_TOKEN';
+const getLocaleFromReturnTo = ({ returnTo, auth0Config, appBaseUrl, }) => {
+    if (!returnTo) {
+        return auth0Config.languageConfig.default;
+    }
+    try {
+        const url = new URL(returnTo, appBaseUrl);
+        const locale = url.searchParams.get('locale') || url.pathname.split('/')[1];
+        if (auth0Config.languageConfig.supported.includes(locale)) {
+            return locale;
+        }
+    }
+    catch {
+        // Ignore invalid returnTo values and fall back to the configured default locale.
+    }
+    return auth0Config.languageConfig.default;
+};
+const createGlobalAuthErrorRedirect = ({ auth0Config, appBaseUrl, returnTo, code, }) => {
+    const locale = getLocaleFromReturnTo({ returnTo, auth0Config, appBaseUrl });
+    const errorUrl = new URL(`/${locale}${auth0Config.globalAuthErrorPath}`, appBaseUrl);
+    if (code) {
+        errorUrl.searchParams.set('code', code);
+    }
+    return server.NextResponse.redirect(errorUrl);
+};
+const createIncompleteTokenLogoutRedirect = ({ auth0Config, appBaseUrl, }) => {
+    // eslint-disable-next-line no-console
+    console.info(`[Auth-package] logging out user CAUSE: ${incompleteTokenErrorCode}`);
+    return server.NextResponse.redirect(new URL(auth0Config.logoutEndpoint, appBaseUrl));
+};
+
+exports.createGlobalAuthErrorRedirect = createGlobalAuthErrorRedirect;
+exports.createIncompleteTokenLogoutRedirect = createIncompleteTokenLogoutRedirect;
+exports.getLocaleFromReturnTo = getLocaleFromReturnTo;
+exports.incompleteTokenErrorCode = incompleteTokenErrorCode;
+//# sourceMappingURL=authRedirects.js.map

package/dist/cjs/server/helpers/authRedirects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authRedirects.js","sources":["../../../../../src/server/helpers/authRedirects.ts"],"sourcesContent":[null],"names":["NextResponse"],"mappings":";;;;AAMO,MAAM,wBAAwB,GAAG;AAEjC,MAAM,qBAAqB,GAAG,CAAC,EACpC,QAAQ,EACR,WAAW,EACX,UAAU,GAKX,KAAc;IACb,IAAI,CAAC,QAAQ,EAAE;AACb,QAAA,OAAO,WAAW,CAAC,cAAc,CAAC,OAAO;IAC3C;AAEA,IAAA,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC;QACzC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAE3E,IAAI,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAkB,CAAC,EAAE;AACrE,YAAA,OAAO,MAAkB;QAC3B;IACF;AAAE,IAAA,MAAM;;IAER;AAEA,IAAA,OAAO,WAAW,CAAC,cAAc,CAAC,OAAO;AAC3C;AAEO,MAAM,6BAA6B,GAAG,CAAC,EAC5C,WAAW,EACX,UAAU,EACV,QAAQ,EACR,IAAI,GAML,KAAkB;AACjB,IAAA,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AAC3E,IAAA,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAA,CAAA,EAAI,MAAM,CAAA,EAAG,WAAW,CAAC,mBAAmB,CAAA,CAAE,EAC9C,UAAU,CACX;IAED,IAAI,IAAI,EAAE;QACR,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;IACzC;AAEA,IAAA,OAAOA,mBAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACxC;AAEO,MAAM,mCAAmC,GAAG,CAAC,EAClD,WAAW,EACX,UAAU,GAIX,KAAkB;;AAEjB,IAAA,OAAO,CAAC,IAAI,CACV,0CAA0C,wBAAwB,CAAA,CAAE,CACrE;AAED,IAAA,OAAOA,mBAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;AAC/E;;;;;;;"}

package/dist/cjs/server/helpers/sellerCookies.js

@@ -0,0 +1,33 @@
+'use strict';
+
+var getSelectedSellerId = require('../../lib/getSelectedSellerId.js');
+
+const setSellerIdCookiesOnResponse = ({ decodedToken, response, auth0Config, selectedFromCookie, }) => {
+    const sellerIdsFromToken = decodedToken.sellerIds
+        .map((sellerId) => Number(sellerId))
+        .filter((sellerId) => Number.isFinite(sellerId));
+    const impersonatedSellerIdFromToken = decodedToken.isImpersonated
+        ? sellerIdsFromToken[0]
+        : null;
+    const parsedSelectedSellerId = selectedFromCookie
+        ? Number(selectedFromCookie)
+        : undefined;
+    const selectedSellerId = getSelectedSellerId.getSelectedSellerId({
+        selectedFromCookie: parsedSelectedSellerId,
+        impersonatedFromCookie: impersonatedSellerIdFromToken ?? undefined,
+        sellerIdsFromToken: sellerIdsFromToken,
+    });
+    response.cookies.set(auth0Config.selectedSellerIdCookie.name, String(selectedSellerId), auth0Config.selectedSellerIdCookie);
+    if (impersonatedSellerIdFromToken) {
+        response.cookies.set(auth0Config.impersonatedSellerIdCookie.name, String(impersonatedSellerIdFromToken), auth0Config.impersonatedSellerIdCookie);
+    }
+    else {
+        response.cookies.set(auth0Config.impersonatedSellerIdCookie.name, '', {
+            ...auth0Config.impersonatedSellerIdCookie,
+            maxAge: 0,
+        });
+    }
+};
+
+exports.setSellerIdCookiesOnResponse = setSellerIdCookiesOnResponse;
+//# sourceMappingURL=sellerCookies.js.map

package/dist/cjs/server/helpers/sellerCookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sellerCookies.js","sources":["../../../../../src/server/helpers/sellerCookies.ts"],"sourcesContent":[null],"names":["getSelectedSellerId"],"mappings":";;;;AAMO,MAAM,4BAA4B,GAAG,CAAC,EAC3C,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,kBAAkB,GAMnB,KAAU;AACT,IAAA,MAAM,kBAAkB,GAAG,YAAY,CAAC;SACrC,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;AAClC,SAAA,MAAM,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAElD,IAAA,MAAM,6BAA6B,GAAG,YAAY,CAAC;AACjD,UAAE,kBAAkB,CAAC,CAAC;UACpB,IAAI;IAER,MAAM,sBAAsB,GAAG;AAC7B,UAAE,MAAM,CAAC,kBAAkB;UACzB,SAAS;IAEb,MAAM,gBAAgB,GAAGA,uCAAmB,CAAC;AAC3C,QAAA,kBAAkB,EAAE,sBAAsB;QAC1C,sBAAsB,EAAE,6BAA6B,IAAI,SAAS;AAClE,QAAA,kBAAkB,EAAE,kBAA2C;AAChE,KAAA,CAAC;IAEF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,WAAW,CAAC,sBAAsB,CAAC,IAAI,EACvC,MAAM,CAAC,gBAAgB,CAAC,EACxB,WAAW,CAAC,sBAAsB,CACnC;IAED,IAAI,6BAA6B,EAAE;QACjC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,WAAW,CAAC,0BAA0B,CAAC,IAAI,EAC3C,MAAM,CAAC,6BAA6B,CAAC,EACrC,WAAW,CAAC,0BAA0B,CACvC;IACH;SAAO;AACL,QAAA,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,0BAA0B,CAAC,IAAI,EAAE,EAAE,EAAE;YACpE,GAAG,WAAW,CAAC,0BAA0B;AACzC,YAAA,MAAM,EAAE,CAAC;AACV,SAAA,CAAC;IACJ;AACF;;;;"}

package/dist/cjs/server/hooks/onCallbackFactory.js

@@ -3,35 +3,28 @@
 var server = require('next/server');
 var headers = require('next/headers');
 var jose = require('jose');
-var errors = require('@auth0/nextjs-auth0/errors');
-var getSelectedSellerId = require('../../lib/getSelectedSellerId.js');
+var sellerCookies = require('../helpers/sellerCookies.js');
+var authRedirects = require('../helpers/authRedirects.js');
 
 const createCallbackResponse = (context, appBaseUrl) => server.NextResponse.redirect(new URL(context.returnTo || '/', appBaseUrl));
-const getLocaleFromContext = ({ returnTo }, appBaseUrl) => {
-    if (!returnTo) {
-        return '';
-    }
-    try {
-        const url = new URL(returnTo, appBaseUrl);
-        return (url.searchParams.get('locale') || url.pathname.split('/')[1]) ?? '';
-    }
-    catch (parsingError) {
-        // eslint-disable-next-line no-console
-        console.warn('[Auth-package] Failed to parse locale from returnTo', parsingError);
-    }
-    return '';
+const createPostLoginRefreshResponse = (context, auth0Config, appBaseUrl) => {
+    const refreshUrl = new URL(auth0Config.postLoginRefreshEndpoint, appBaseUrl);
+    refreshUrl.searchParams.set('returnTo', context.returnTo || '/');
+    return server.NextResponse.redirect(refreshUrl);
+};
+const setLoginSessionData = (session) => {
+    const decodedIdToken = session.tokenSet.idToken
+        ? jose.decodeJwt(session.tokenSet.idToken)
+        : null;
+    session.loggedInDate = Date.now();
+    session.amr = decodedIdToken ? decodedIdToken.amr : null;
 };
-const incompleteTokenErrorCode = 'ERR_INCOMPLETE_TOKEN';
 const errorCodeRegex = /\b([A-Z][A-Z0-9_]*[A-Z0-9])\b/g;
-const handleAuth0Error = ({ error, auth0Config, appBaseUrl, localeFromUrl, onError, }) => {
-    const authorizedLocales = auth0Config.languageConfig.supported;
-    const locale = authorizedLocales.includes(localeFromUrl)
-        ? localeFromUrl
-        : auth0Config.languageConfig.default;
+const handleAuth0Error = ({ error, auth0Config, appBaseUrl, returnTo, onError, }) => {
     const expectedErrors = [
         'UNVERIFIED_EMAIL',
         'INITIAL_UNVERIFIED_EMAIL',
-        incompleteTokenErrorCode,
+        authRedirects.incompleteTokenErrorCode,
     ];
     let extractedErrorCode = '';
     if (error.cause) {
@@ -39,29 +32,28 @@ const handleAuth0Error = ({ error, auth0Config, appBaseUrl, localeFromUrl, onErr
         const matchedErrorCode = cause.message.match(errorCodeRegex);
         extractedErrorCode = matchedErrorCode ? matchedErrorCode[0] : '';
     }
-    if (extractedErrorCode === incompleteTokenErrorCode) {
-        // eslint-disable-next-line no-console
-        console.info('[Auth-package] logging out user CAUSE: ERR_INCOMPLETE_TOKEN');
-        return server.NextResponse.redirect(new URL(auth0Config.logoutEndpoint, appBaseUrl));
+    if (extractedErrorCode === authRedirects.incompleteTokenErrorCode) {
+        return authRedirects.createIncompleteTokenLogoutRedirect({ auth0Config, appBaseUrl });
     }
     if (!expectedErrors.includes(extractedErrorCode)) {
         onError?.(error);
         // eslint-disable-next-line no-console
         console.error('[Auth-package] error', error);
     }
-    const errorCodeQuery = extractedErrorCode
-        ? `?code=${extractedErrorCode}`
-        : '';
-    return server.NextResponse.redirect(new URL(`/${locale}${auth0Config.globalAuthErrorPath}${errorCodeQuery}`, appBaseUrl));
+    return authRedirects.createGlobalAuthErrorRedirect({
+        auth0Config,
+        appBaseUrl,
+        returnTo,
+        code: extractedErrorCode,
+    });
 };
 const onCallbackFactory = ({ auth0Config, appBaseUrl, onError, }) => async (error, context, session) => {
-    const localeFromUrl = getLocaleFromContext(context, appBaseUrl);
     if (error) {
         return handleAuth0Error({
             error,
             auth0Config,
             appBaseUrl,
-            localeFromUrl,
+            returnTo: context.returnTo,
             onError,
         });
     }
@@ -70,49 +62,20 @@ const onCallbackFactory = ({ auth0Config, appBaseUrl, onError, }) => async (erro
     }
     const cookieStore = await headers.cookies();
     const decodedToken = jose.decodeJwt(session.tokenSet.accessToken);
+    setLoginSessionData(session);
     if (!decodedToken.complete) {
-        return handleAuth0Error({
-            error: new errors.AccessTokenError(incompleteTokenErrorCode, incompleteTokenErrorCode, new errors.OAuth2Error({
-                code: incompleteTokenErrorCode,
-                message: incompleteTokenErrorCode,
-            })),
-            auth0Config,
-            appBaseUrl,
-            localeFromUrl,
-            onError,
-        });
+        // eslint-disable-next-line no-console
+        console.info('[Auth-package] incomplete token detected after callback, redirecting to post-login refresh');
+        return createPostLoginRefreshResponse(context, auth0Config, appBaseUrl);
     }
-    const sellerIdsFromToken = decodedToken.sellerIds
-        .map((sellerId) => Number(sellerId))
-        .filter((sellerId) => Number.isFinite(sellerId));
-    const impersonatedSellerIdFromToken = decodedToken.isImpersonated
-        ? sellerIdsFromToken[0]
-        : null;
     const selectedFromCookie = cookieStore.get(auth0Config.selectedSellerIdCookie.name)?.value;
-    const parsedSelectedSellerId = selectedFromCookie
-        ? Number(selectedFromCookie)
-        : undefined;
-    const selectedSellerId = getSelectedSellerId.getSelectedSellerId({
-        selectedFromCookie: parsedSelectedSellerId,
-        impersonatedFromCookie: impersonatedSellerIdFromToken ?? undefined,
-        sellerIdsFromToken: sellerIdsFromToken,
-    });
     const response = createCallbackResponse(context, appBaseUrl);
-    response.cookies.set(auth0Config.selectedSellerIdCookie.name, String(selectedSellerId), auth0Config.selectedSellerIdCookie);
-    if (impersonatedSellerIdFromToken) {
-        response.cookies.set(auth0Config.impersonatedSellerIdCookie.name, String(impersonatedSellerIdFromToken), auth0Config.impersonatedSellerIdCookie);
-    }
-    else {
-        response.cookies.set(auth0Config.impersonatedSellerIdCookie.name, '', {
-            ...auth0Config.impersonatedSellerIdCookie,
-            maxAge: 0,
-        });
-    }
-    const decodedIdToken = session.tokenSet.idToken
-        ? jose.decodeJwt(session.tokenSet.idToken)
-        : null;
-    session.loggedInDate = Date.now();
-    session.amr = decodedIdToken ? decodedIdToken.amr : null;
+    sellerCookies.setSellerIdCookiesOnResponse({
+        decodedToken,
+        response,
+        auth0Config,
+        selectedFromCookie: selectedFromCookie ?? undefined,
+    });
     return response;
 };
 

package/dist/cjs/server/hooks/onCallbackFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"onCallbackFactory.js","sources":["../../../../../src/server/hooks/onCallbackFactory.ts"],"sourcesContent":[null],"names":["NextResponse","cookies","decodeJwt","AccessTokenError","OAuth2Error","getSelectedSellerId"],"mappings":";;;;;;;;AAeA,MAAM,sBAAsB,GAAG,CAC7B,OAA0B,EAC1B,UAAkB,KACfA,mBAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC;AAExE,MAAM,oBAAoB,GAAG,CAC3B,EAAE,QAAQ,EAAqB,EAC/B,UAAkB,KAChB;IACF,IAAI,CAAC,QAAQ,EAAE;AACb,QAAA,OAAO,EAAE;IACX;AAEA,IAAA,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;IAC7E;IAAE,OAAO,YAAY,EAAE;;AAErB,QAAA,OAAO,CAAC,IAAI,CACV,qDAAqD,EACrD,YAAY,CACb;IACH;AAEA,IAAA,OAAO,EAAE;AACX,CAAC;AAED,MAAM,wBAAwB,GAAG,sBAA+B;AAChE,MAAM,cAAc,GAAG,gCAAgC;AAEvD,MAAM,gBAAgB,GAAG,CAAC,EACxB,KAAK,EACL,WAAW,EACX,UAAU,EACV,aAAa,EACb,OAAO,GAOR,KAAkB;AACjB,IAAA,MAAM,iBAAiB,GAAG,WAAW,CAAC,cAAc,CAAC,SAAS;AAC9D,IAAA,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,aAAyB;AACjE,UAAG;AACH,UAAE,WAAW,CAAC,cAAc,CAAC,OAAO;AAEtC,IAAA,MAAM,cAAc,GAAG;QACrB,kBAAkB;QAClB,0BAA0B;QAC1B,wBAAwB;KACzB;IACD,IAAI,kBAAkB,GAAG,EAAE;AAE3B,IAAA,IAAI,KAAK,CAAC,KAAK,EAAE;AACf,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,KAAoB;QACxC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;AAC5D,QAAA,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE;IAClE;AAEA,IAAA,IAAI,kBAAkB,KAAK,wBAAwB,EAAE;;AAEnD,QAAA,OAAO,CAAC,IAAI,CAAC,6DAA6D,CAAC;AAE3E,QAAA,OAAOA,mBAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAChD;IACH;IAEA,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;AAChD,QAAA,OAAO,GAAG,KAAK,CAAC;;AAEhB,QAAA,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC;IAC9C;IAEA,MAAM,cAAc,GAAG;UACnB,CAAA,MAAA,EAAS,kBAAkB,CAAA;UAC3B,EAAE;IAEN,OAAOA,mBAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CACL,IAAI,MAAM,CAAA,EAAG,WAAW,CAAC,mBAAmB,GAAG,cAAc,CAAA,CAAE,EAC/D,UAAU,CACX,CACF;AACH,CAAC;MAEY,iBAAiB,GAC5B,CAAC,EACC,WAAW,EACX,UAAU,EACV,OAAO,GAKR,KACD,OACE,KAAsB,EACtB,OAA0B,EAC1B,OAA2B,KACF;IACzB,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC;IAC/D,IAAI,KAAK,EAAE;AACT,QAAA,OAAO,gBAAgB,CAAC;YACtB,KAAK;YACL,WAAW;YACX,UAAU;YACV,aAAa;YACb,OAAO;AACR,SAAA,CAAC;IACJ;AAEA,IAAA,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;AACnC,QAAA,OAAO,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC;IACpD;AAEA,IAAA,MAAM,WAAW,GAAG,MAAMC,eAAO,EAAE;IACnC,MAAM,YAAY,GAAGC,cAAS,CAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAC7B;AACD,IAAA,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE;AAC1B,QAAA,OAAO,gBAAgB,CAAC;YACtB,KAAK,EAAE,IAAIC,uBAAgB,CACzB,wBAAwB,EACxB,wBAAwB,EACxB,IAAIC,kBAAW,CAAC;AACd,gBAAA,IAAI,EAAE,wBAAwB;AAC9B,gBAAA,OAAO,EAAE,wBAAwB;AAClC,aAAA,CAAC,CACH;YACD,WAAW;YACX,UAAU;YACV,aAAa;YACb,OAAO;AACR,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,kBAAkB,GAAG,YAAY,CAAC;SACrC,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;AAClC,SAAA,MAAM,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAClD,IAAA,MAAM,6BAA6B,GAAG,YAAY,CAAC;AACjD,UAAE,kBAAkB,CAAC,CAAC;UACpB,IAAI;AACR,IAAA,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CACxC,WAAW,CAAC,sBAAsB,CAAC,IAAI,CACxC,EAAE,KAAK;IACR,MAAM,sBAAsB,GAAG;AAC7B,UAAE,MAAM,CAAC,kBAAkB;UACzB,SAAS;IACb,MAAM,gBAAgB,GAAGC,uCAAmB,CAAC;AAC3C,QAAA,kBAAkB,EAAE,sBAAsB;QAC1C,sBAAsB,EAAE,6BAA6B,IAAI,SAAS;AAClE,QAAA,kBAAkB,EAAE,kBAA2C;AAChE,KAAA,CAAC;IAEF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC;IAC5D,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,WAAW,CAAC,sBAAsB,CAAC,IAAI,EACvC,MAAM,CAAC,gBAAgB,CAAC,EACxB,WAAW,CAAC,sBAAsB,CACnC;IAED,IAAI,6BAA6B,EAAE;QACjC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,WAAW,CAAC,0BAA0B,CAAC,IAAI,EAC3C,MAAM,CAAC,6BAA6B,CAAC,EACrC,WAAW,CAAC,0BAA0B,CACvC;IACH;SAAO;AACL,QAAA,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,0BAA0B,CAAC,IAAI,EAAE,EAAE,EAAE;YACpE,GAAG,WAAW,CAAC,0BAA0B;AACzC,YAAA,MAAM,EAAE,CAAC;AACV,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC;UACpCH,cAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO;UAClC,IAAI;AAER,IAAA,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE;AACjC,IAAA,OAAO,CAAC,GAAG,GAAG,cAAc,GAAG,cAAc,CAAC,GAAG,GAAG,IAAI;AAExD,IAAA,OAAO,QAAQ;AACjB;;;;"}
+{"version":3,"file":"onCallbackFactory.js","sources":["../../../../../src/server/hooks/onCallbackFactory.ts"],"sourcesContent":[null],"names":["NextResponse","decodeJwt","incompleteTokenErrorCode","createIncompleteTokenLogoutRedirect","createGlobalAuthErrorRedirect","cookies","setSellerIdCookiesOnResponse"],"mappings":";;;;;;;;AAcA,MAAM,sBAAsB,GAAG,CAC7B,OAA0B,EAC1B,UAAkB,KACfA,mBAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC;AAExE,MAAM,8BAA8B,GAAG,CACrC,OAA0B,EAC1B,WAAwB,EACxB,UAAkB,KAChB;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,wBAAwB,EAAE,UAAU,CAAC;AAC5E,IAAA,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC;AAEhE,IAAA,OAAOA,mBAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;AAC1C,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,OAAoB,KAAI;AACnD,IAAA,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC;UACpCC,cAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO;UAClC,IAAI;AAER,IAAA,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE;AACjC,IAAA,OAAO,CAAC,GAAG,GAAG,cAAc,GAAG,cAAc,CAAC,GAAG,GAAG,IAAI;AAC1D,CAAC;AAED,MAAM,cAAc,GAAG,gCAAgC;AAEvD,MAAM,gBAAgB,GAAG,CAAC,EACxB,KAAK,EACL,WAAW,EACX,UAAU,EACV,QAAQ,EACR,OAAO,GAOR,KAAkB;AACjB,IAAA,MAAM,cAAc,GAAG;QACrB,kBAAkB;QAClB,0BAA0B;QAC1BC,sCAAwB;KACzB;IACD,IAAI,kBAAkB,GAAG,EAAE;AAE3B,IAAA,IAAI,KAAK,CAAC,KAAK,EAAE;AACf,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,KAAoB;QACxC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;AAC5D,QAAA,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE;IAClE;AAEA,IAAA,IAAI,kBAAkB,KAAKA,sCAAwB,EAAE;QACnD,OAAOC,iDAAmC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IACzE;IAEA,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;AAChD,QAAA,OAAO,GAAG,KAAK,CAAC;;AAEhB,QAAA,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC;IAC9C;AAEA,IAAA,OAAOC,2CAA6B,CAAC;QACnC,WAAW;QACX,UAAU;QACV,QAAQ;AACR,QAAA,IAAI,EAAE,kBAAkB;AACzB,KAAA,CAAC;AACJ,CAAC;MAEY,iBAAiB,GAC5B,CAAC,EACC,WAAW,EACX,UAAU,EACV,OAAO,GAKR,KACD,OACE,KAAsB,EACtB,OAA0B,EAC1B,OAA2B,KACF;IACzB,IAAI,KAAK,EAAE;AACT,QAAA,OAAO,gBAAgB,CAAC;YACtB,KAAK;YACL,WAAW;YACX,UAAU;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO;AACR,SAAA,CAAC;IACJ;AAEA,IAAA,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;AACnC,QAAA,OAAO,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC;IACpD;AAEA,IAAA,MAAM,WAAW,GAAG,MAAMC,eAAO,EAAE;IACnC,MAAM,YAAY,GAAGJ,cAAS,CAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAC7B;IACD,mBAAmB,CAAC,OAAO,CAAC;AAE5B,IAAA,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE;;AAE1B,QAAA,OAAO,CAAC,IAAI,CACV,4FAA4F,CAC7F;QAED,OAAO,8BAA8B,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC;IACzE;AAEA,IAAA,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CACxC,WAAW,CAAC,sBAAsB,CAAC,IAAI,CACxC,EAAE,KAAK;IAER,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC;AAC5D,IAAAK,0CAA4B,CAAC;QAC3B,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,kBAAkB,EAAE,kBAAkB,IAAI,SAAS;AACpD,KAAA,CAAC;AAEF,IAAA,OAAO,QAAQ;AACjB;;;;"}

package/dist/cjs/server/middleware/index.js

@@ -10,6 +10,7 @@ var switchTenant = require('./switchTenant.js');
 var requestId = require('./requestId.js');
 var protectRoute = require('./protectRoute.js');
 var profile = require('./profile.js');
+var postLoginRefresh = require('./postLoginRefresh.js');
 var logout = require('./logout.js');
 var login = require('./login.js');
 var crossApplicationStateSynchronization = require('./crossApplicationStateSynchronization.js');
@@ -17,11 +18,12 @@ var combineHeaders = require('./combineHeaders.js');
 
 const log = debug.debug('@smg-automotive/auth:middleware');
 const isAuthRoute = (pathname, auth0Config) => {
-    const { loginEndpoint, logoutEndpoint, callbackEndpoint, userProfileEndpoint, tokenEndpoint, } = auth0Config;
+    const { loginEndpoint, logoutEndpoint, callbackEndpoint, postLoginRefreshEndpoint, userProfileEndpoint, tokenEndpoint, } = auth0Config;
     return [
         loginEndpoint,
         logoutEndpoint,
         callbackEndpoint,
+        postLoginRefreshEndpoint,
         userProfileEndpoint,
         tokenEndpoint,
     ].includes(pathname);
@@ -92,6 +94,17 @@ const authMiddleware = async ({ request, isProtectedRoute, language, host, proto
         log('User profile request handled', { requestId: requestId$1 });
         return handleUserProfileResult;
     }
+    // Post-login refresh handling - /api/auth/post-login-refresh
+    const postLoginRefreshResult = await postLoginRefresh.handlePostLoginRefreshRequest({
+        request,
+        auth0Instance,
+        auth0Config,
+        onError,
+    });
+    if (postLoginRefreshResult) {
+        log('Post-login refresh request handled', { requestId: requestId$1 });
+        return postLoginRefreshResult;
+    }
     // Auth routes handling - /api/auth/*
     let authResponse;
     try {

package/dist/cjs/server/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../../../src/server/middleware/index.ts"],"sourcesContent":[null],"names":["debug","requestId","getOrCreateRequestId","getAuth0Instance","getAuth0Config","handleCrossDomainLogout","requestIdHeader","addLoginParams","handleSwitchTenantRequest","handleAccessTokenRequest","NextResponse","handleUserProfile","getLoginLink","deleteRelatedSessionCookies","crossApplicationStateSynchronization","protectRoute","combineHeaders"],"mappings":";;;;;;;;;;;;;;;;;AAqBA,MAAM,GAAG,GAAGA,WAAK,CAAC,iCAAiC,CAAC;AAEpD,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,WAAwB,KAAI;AACjE,IAAA,MAAM,EACJ,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,GACd,GAAG,WAAW;IAEf,OAAO;QACL,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,mBAAmB;QACnB,aAAa;AACd,KAAA,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACtB,CAAC;MAEY,cAAc,GAAG,OAAO,EACnC,OAAO,EACP,gBAAgB,EAChB,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,KAAK,GASN,KAA2B;AAC1B,IAAA,MAAMC,WAAS,GAAGC,8BAAoB,CAAC,OAAO,CAAC;IAE/C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO;IACpD,GAAG,CAAC,oBAAoB,EAAE;mBACxBD,WAAS;QACT,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,MAAM;AACvB,KAAA,CAAC;IAEF,MAAM,aAAa,GAAGE,iCAAgB,CAAC;QACrC,IAAI;QACJ,QAAQ;AACT,KAAA,CAAC;AAEF,IAAA,MAAM,WAAW,GAAGC,oBAAc,EAAE;IAEpC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,CAAC;IAC3E,GAAG,CAAC,kBAAkB,EAAE,aAAEH,WAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAElE,MAAM,uBAAuB,GAAGI,8BAAuB,CAAC;QACtD,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,WAAW;AACZ,KAAA,CAAC;IACF,IAAI,uBAAuB,EAAE;QAC3B,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAACC,yBAAe,EAAEL,WAAS,CAAC;AAC/D,QAAA,GAAG,CAAC,2CAA2C,EAAE,aAAEA,WAAS,EAAE,CAAC;AAC/D,QAAA,OAAO,uBAAuB;IAChC;;AAGA,IAAAM,oBAAc,CAAC;QACb,OAAO;QACP,WAAW;AACZ,KAAA,CAAC;AAEF,IAAA,MAAM,kBAAkB,GAAG,MAAMC,sCAAyB,CAAC;QACzD,OAAO;QACP,WAAW;QACX,aAAa;AACd,KAAA,CAAC;IACF,IAAI,kBAAkB,EAAE;AACtB,QAAA,GAAG,CAAC,+BAA+B,EAAE,aAAEP,WAAS,EAAE,CAAC;AACnD,QAAA,OAAO,kBAAkB;IAC3B;;AAGA,IAAA,MAAM,wBAAwB,GAAG,MAAMQ,8BAAwB,CAAC;QAC9D,OAAO;AACP,QAAA,QAAQ,EAAEC,mBAAY,CAAC,IAAI,EAAE;QAC7B,aAAa;QACb,WAAW;QACX,OAAO;AACR,KAAA,CAAC;IACF,IAAI,wBAAwB,EAAE;AAC5B,QAAA,GAAG,CAAC,8BAA8B,EAAE,aAAET,WAAS,EAAE,CAAC;AAClD,QAAA,OAAO,wBAAwB;IACjC;;AAGA,IAAA,MAAM,uBAAuB,GAAG,MAAMU,yBAAiB,CAAC;QACtD,OAAO;AACP,QAAA,QAAQ,EAAED,mBAAY,CAAC,IAAI,EAAE;QAC7B,aAAa;QACb,WAAW;QACX,KAAK;AACN,KAAA,CAAC;IACF,IAAI,uBAAuB,EAAE;AAC3B,QAAA,GAAG,CAAC,8BAA8B,EAAE,aAAET,WAAS,EAAE,CAAC;AAClD,QAAA,OAAO,uBAAuB;IAChC;;AAGA,IAAA,IAAI,YAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,CAAC,0BAA0B,EAAE,aAAEA,WAAS,EAAE,CAAC;QAC9C,YAAY,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;QACtD,YAAY,CAAC,OAAO,CAAC,GAAG,CAACK,yBAAe,EAAEL,WAAS,CAAC;QACpD,GAAG,CAAC,4BAA4B,EAAE;uBAChCA,WAAS;YACT,MAAM,EAAE,YAAY,CAAC,MAAM;AAC5B,SAAA,CAAC;IACJ;IAAE,OAAO,KAAK,EAAE;;QAEd,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,aAAEA,WAAS,EAAE,KAAK,EAAE,CAAC;AAEtE,QAAA,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE;YAC9B,GAAG,CAAC,wDAAwD,EAAE;2BAC5DA,WAAS;AACV,aAAA,CAAC;YACF,OAAOS,mBAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CACLE,sBAAY,CAAC;AACX,gBAAA,QAAQ,EAAE,CAAA,EAAG,QAAQ,CAAA,EAAG,MAAM,CAAA,CAAE;gBAChC,QAAQ;gBACR,WAAW;AACZ,aAAA,CAAC,EACF,MAAM,CACP,CACF;QACH;AAEA,QAAA,GAAG,CAAC,4CAA4C,EAAE,aAAEX,WAAS,EAAE,CAAC;AAChE,QAAA,MAAM,QAAQ,GAAGS,mBAAY,CAAC,IAAI,EAAE;AACpC,QAAA,MAAM,cAAc,GAAG;AACrB,YAAA,WAAW,CAAC,iBAAiB;YAC7B,CAAA,EAAG,WAAW,CAAC,iBAAiB,CAAA,GAAA,CAAK;YACrC,CAAA,EAAG,WAAW,CAAC,iBAAiB,CAAA,GAAA,CAAK;SACtC;AACD,QAAA,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,KAAI;YACpC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE;AACnC,gBAAA,MAAM,EAAE,CAAC;AACT,gBAAA,IAAI,EAAE,GAAG;AACV,aAAA,CAAC;AACJ,QAAA,CAAC,CAAC;AACF,QAAA,OAAO,QAAQ;IACjB;;AAGA,IAAAG,kCAA2B,CAAC;QAC1B,IAAI;QACJ,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,WAAW;AACZ,KAAA,CAAC;IAEF,IAAI,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,gBAAgB,EAAE;AAC1D,QAAA,GAAG,CAAC,gCAAgC,EAAE,aAAEZ,WAAS,EAAE,CAAC;AACpD,QAAA,OAAO,YAAY;IACrB;;AAGA,IAAA,MAAM,YAAY,GAAG,MAAMa,yEAAoC,CAAC;QAC9D,OAAO;QACP,QAAQ;QACR,aAAa;QACb,WAAW;AACX,QAAA,QAAQ,EAAE,YAAY;AACvB,KAAA,CAAC;IACF,IAAI,YAAY,EAAE;AAChB,QAAA,OAAO,YAAY;IACrB;;IAGA,MAAM,WAAW,GAAG,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,QAAQ,CAAC;IACnE,GAAG,CAAC,wBAAwB,EAAE,aAAEb,WAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnE,IAAA,MAAM,kBAAkB,GAAG,MAAMc,yBAAY,CAAC;QAC5C,WAAW;QACX,aAAa;QACb,WAAW;QACX,QAAQ;QACR,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,OAAO;AACR,KAAA,CAAC;IACF,IAAI,kBAAkB,EAAE;QACtB,GAAG,CAAC,0BAA0B,EAAE;uBAC9Bd,WAAS;AACT,YAAA,UAAU,EAAE,kBAAkB,CAAC,MAAM,KAAK,GAAG;AAC9C,SAAA,CAAC;AACF,QAAA,OAAO,kBAAkB;IAC3B;AAEA,IAAA,GAAG,CAAC,sCAAsC,EAAE,aAAEA,WAAS,EAAE,CAAC;IAC1D,MAAM,aAAa,GAAGe,6BAAc,CAAC;AACnC,QAAA,kBAAkB,EAAEN,mBAAY,CAAC,IAAI,CAAC;AACpC,YAAA,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;AACzB,aAAA;SACF,CAAC;QACF,YAAY;AACb,KAAA,CAAC;IACF,aAAa,CAAC,OAAO,CAAC,GAAG,CAACJ,yBAAe,EAAEL,WAAS,CAAC;;IAGrD,IAAI,QAAQ,GAAG,WAAW;AAC1B,IAAA,IAAI;QACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;QACvD,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,WAAW;IACnD;AAAE,IAAA,MAAM;;QAEN,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,aAAEA,WAAS,EAAE,CAAC;IACpE;IACA,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC;AAErD,IAAA,OAAO,aAAa;AACtB;;;;"}
+{"version":3,"file":"index.js","sources":["../../../../../src/server/middleware/index.ts"],"sourcesContent":[null],"names":["debug","requestId","getOrCreateRequestId","getAuth0Instance","getAuth0Config","handleCrossDomainLogout","requestIdHeader","addLoginParams","handleSwitchTenantRequest","handleAccessTokenRequest","NextResponse","handleUserProfile","handlePostLoginRefreshRequest","getLoginLink","deleteRelatedSessionCookies","crossApplicationStateSynchronization","protectRoute","combineHeaders"],"mappings":";;;;;;;;;;;;;;;;;;AAsBA,MAAM,GAAG,GAAGA,WAAK,CAAC,iCAAiC,CAAC;AAEpD,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,WAAwB,KAAI;AACjE,IAAA,MAAM,EACJ,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,aAAa,GACd,GAAG,WAAW;IAEf,OAAO;QACL,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,wBAAwB;QACxB,mBAAmB;QACnB,aAAa;AACd,KAAA,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACtB,CAAC;MAEY,cAAc,GAAG,OAAO,EACnC,OAAO,EACP,gBAAgB,EAChB,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,KAAK,GASN,KAA2B;AAC1B,IAAA,MAAMC,WAAS,GAAGC,8BAAoB,CAAC,OAAO,CAAC;IAE/C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO;IACpD,GAAG,CAAC,oBAAoB,EAAE;mBACxBD,WAAS;QACT,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,MAAM;AACvB,KAAA,CAAC;IAEF,MAAM,aAAa,GAAGE,iCAAgB,CAAC;QACrC,IAAI;QACJ,QAAQ;AACT,KAAA,CAAC;AAEF,IAAA,MAAM,WAAW,GAAGC,oBAAc,EAAE;IAEpC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,CAAC;IAC3E,GAAG,CAAC,kBAAkB,EAAE,aAAEH,WAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAElE,MAAM,uBAAuB,GAAGI,8BAAuB,CAAC;QACtD,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,WAAW;AACZ,KAAA,CAAC;IACF,IAAI,uBAAuB,EAAE;QAC3B,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAACC,yBAAe,EAAEL,WAAS,CAAC;AAC/D,QAAA,GAAG,CAAC,2CAA2C,EAAE,aAAEA,WAAS,EAAE,CAAC;AAC/D,QAAA,OAAO,uBAAuB;IAChC;;AAGA,IAAAM,oBAAc,CAAC;QACb,OAAO;QACP,WAAW;AACZ,KAAA,CAAC;AAEF,IAAA,MAAM,kBAAkB,GAAG,MAAMC,sCAAyB,CAAC;QACzD,OAAO;QACP,WAAW;QACX,aAAa;AACd,KAAA,CAAC;IACF,IAAI,kBAAkB,EAAE;AACtB,QAAA,GAAG,CAAC,+BAA+B,EAAE,aAAEP,WAAS,EAAE,CAAC;AACnD,QAAA,OAAO,kBAAkB;IAC3B;;AAGA,IAAA,MAAM,wBAAwB,GAAG,MAAMQ,8BAAwB,CAAC;QAC9D,OAAO;AACP,QAAA,QAAQ,EAAEC,mBAAY,CAAC,IAAI,EAAE;QAC7B,aAAa;QACb,WAAW;QACX,OAAO;AACR,KAAA,CAAC;IACF,IAAI,wBAAwB,EAAE;AAC5B,QAAA,GAAG,CAAC,8BAA8B,EAAE,aAAET,WAAS,EAAE,CAAC;AAClD,QAAA,OAAO,wBAAwB;IACjC;;AAGA,IAAA,MAAM,uBAAuB,GAAG,MAAMU,yBAAiB,CAAC;QACtD,OAAO;AACP,QAAA,QAAQ,EAAED,mBAAY,CAAC,IAAI,EAAE;QAC7B,aAAa;QACb,WAAW;QACX,KAAK;AACN,KAAA,CAAC;IACF,IAAI,uBAAuB,EAAE;AAC3B,QAAA,GAAG,CAAC,8BAA8B,EAAE,aAAET,WAAS,EAAE,CAAC;AAClD,QAAA,OAAO,uBAAuB;IAChC;;AAGA,IAAA,MAAM,sBAAsB,GAAG,MAAMW,8CAA6B,CAAC;QACjE,OAAO;QACP,aAAa;QACb,WAAW;QACX,OAAO;AACR,KAAA,CAAC;IACF,IAAI,sBAAsB,EAAE;AAC1B,QAAA,GAAG,CAAC,oCAAoC,EAAE,aAAEX,WAAS,EAAE,CAAC;AACxD,QAAA,OAAO,sBAAsB;IAC/B;;AAGA,IAAA,IAAI,YAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,CAAC,0BAA0B,EAAE,aAAEA,WAAS,EAAE,CAAC;QAC9C,YAAY,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;QACtD,YAAY,CAAC,OAAO,CAAC,GAAG,CAACK,yBAAe,EAAEL,WAAS,CAAC;QACpD,GAAG,CAAC,4BAA4B,EAAE;uBAChCA,WAAS;YACT,MAAM,EAAE,YAAY,CAAC,MAAM;AAC5B,SAAA,CAAC;IACJ;IAAE,OAAO,KAAK,EAAE;;QAEd,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,aAAEA,WAAS,EAAE,KAAK,EAAE,CAAC;AAEtE,QAAA,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE;YAC9B,GAAG,CAAC,wDAAwD,EAAE;2BAC5DA,WAAS;AACV,aAAA,CAAC;YACF,OAAOS,mBAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CACLG,sBAAY,CAAC;AACX,gBAAA,QAAQ,EAAE,CAAA,EAAG,QAAQ,CAAA,EAAG,MAAM,CAAA,CAAE;gBAChC,QAAQ;gBACR,WAAW;AACZ,aAAA,CAAC,EACF,MAAM,CACP,CACF;QACH;AAEA,QAAA,GAAG,CAAC,4CAA4C,EAAE,aAAEZ,WAAS,EAAE,CAAC;AAChE,QAAA,MAAM,QAAQ,GAAGS,mBAAY,CAAC,IAAI,EAAE;AACpC,QAAA,MAAM,cAAc,GAAG;AACrB,YAAA,WAAW,CAAC,iBAAiB;YAC7B,CAAA,EAAG,WAAW,CAAC,iBAAiB,CAAA,GAAA,CAAK;YACrC,CAAA,EAAG,WAAW,CAAC,iBAAiB,CAAA,GAAA,CAAK;SACtC;AACD,QAAA,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,KAAI;YACpC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE;AACnC,gBAAA,MAAM,EAAE,CAAC;AACT,gBAAA,IAAI,EAAE,GAAG;AACV,aAAA,CAAC;AACJ,QAAA,CAAC,CAAC;AACF,QAAA,OAAO,QAAQ;IACjB;;AAGA,IAAAI,kCAA2B,CAAC;QAC1B,IAAI;QACJ,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,WAAW;AACZ,KAAA,CAAC;IAEF,IAAI,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,gBAAgB,EAAE;AAC1D,QAAA,GAAG,CAAC,gCAAgC,EAAE,aAAEb,WAAS,EAAE,CAAC;AACpD,QAAA,OAAO,YAAY;IACrB;;AAGA,IAAA,MAAM,YAAY,GAAG,MAAMc,yEAAoC,CAAC;QAC9D,OAAO;QACP,QAAQ;QACR,aAAa;QACb,WAAW;AACX,QAAA,QAAQ,EAAE,YAAY;AACvB,KAAA,CAAC;IACF,IAAI,YAAY,EAAE;AAChB,QAAA,OAAO,YAAY;IACrB;;IAGA,MAAM,WAAW,GAAG,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,QAAQ,CAAC;IACnE,GAAG,CAAC,wBAAwB,EAAE,aAAEd,WAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnE,IAAA,MAAM,kBAAkB,GAAG,MAAMe,yBAAY,CAAC;QAC5C,WAAW;QACX,aAAa;QACb,WAAW;QACX,QAAQ;QACR,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,OAAO;AACR,KAAA,CAAC;IACF,IAAI,kBAAkB,EAAE;QACtB,GAAG,CAAC,0BAA0B,EAAE;uBAC9Bf,WAAS;AACT,YAAA,UAAU,EAAE,kBAAkB,CAAC,MAAM,KAAK,GAAG;AAC9C,SAAA,CAAC;AACF,QAAA,OAAO,kBAAkB;IAC3B;AAEA,IAAA,GAAG,CAAC,sCAAsC,EAAE,aAAEA,WAAS,EAAE,CAAC;IAC1D,MAAM,aAAa,GAAGgB,6BAAc,CAAC;AACnC,QAAA,kBAAkB,EAAEP,mBAAY,CAAC,IAAI,CAAC;AACpC,YAAA,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;AACzB,aAAA;SACF,CAAC;QACF,YAAY;AACb,KAAA,CAAC;IACF,aAAa,CAAC,OAAO,CAAC,GAAG,CAACJ,yBAAe,EAAEL,WAAS,CAAC;;IAGrD,IAAI,QAAQ,GAAG,WAAW;AAC1B,IAAA,IAAI;QACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;QACvD,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,WAAW;IACnD;AAAE,IAAA,MAAM;;QAEN,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,aAAEA,WAAS,EAAE,CAAC;IACpE;IACA,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC;AAErD,IAAA,OAAO,aAAa;AACtB;;;;"}

package/dist/cjs/server/middleware/postLoginRefresh.js

@@ -0,0 +1,95 @@
+'use strict';
+
+var server = require('next/server');
+var jose = require('jose');
+var sellerCookies = require('../helpers/sellerCookies.js');
+var authRedirects = require('../helpers/authRedirects.js');
+var debug = require('../../lib/debug.js');
+var requestId = require('./requestId.js');
+
+const log = debug.debug('@smg-automotive/auth:postLoginRefresh');
+const missingSessionErrorCode = 'MISSING_SESSION';
+const unknownAuthErrorCode = 'UNKNOWN_AUTH_ERROR';
+const postLoginRefreshDelayMs = 1000;
+const sleep = (delayMs) => new Promise((resolve) => {
+    setTimeout(resolve, delayMs);
+});
+const getSafeReturnTo = ({ request, auth0Config, }) => {
+    const fallbackReturnTo = '/';
+    const rawReturnTo = request.nextUrl.searchParams.get('returnTo');
+    if (!rawReturnTo) {
+        return fallbackReturnTo;
+    }
+    try {
+        const returnToUrl = new URL(rawReturnTo, request.nextUrl.origin);
+        if (returnToUrl.origin !== request.nextUrl.origin) {
+            return fallbackReturnTo;
+        }
+        if (returnToUrl.pathname === auth0Config.postLoginRefreshEndpoint ||
+            returnToUrl.pathname === request.nextUrl.pathname) {
+            return fallbackReturnTo;
+        }
+        return `${returnToUrl.pathname}${returnToUrl.search}${returnToUrl.hash}`;
+    }
+    catch (error) {
+        log('Failed to parse returnTo for post-login refresh', { error });
+        return fallbackReturnTo;
+    }
+};
+const handlePostLoginRefreshRequest = async ({ request, auth0Instance, auth0Config, onError, }) => {
+    if (request.nextUrl.pathname !== auth0Config.postLoginRefreshEndpoint)
+        return;
+    const requestId$1 = requestId.getOrCreateRequestId(request);
+    const returnTo = getSafeReturnTo({ request, auth0Config });
+    log('Handling post-login refresh request', { requestId: requestId$1, returnTo });
+    const session = await auth0Instance.getSession(request);
+    if (!session) {
+        log('Post-login refresh request failed: no session', { requestId: requestId$1 });
+        return authRedirects.createGlobalAuthErrorRedirect({
+            auth0Config,
+            appBaseUrl: request.nextUrl.origin,
+            code: missingSessionErrorCode,
+            returnTo,
+        });
+    }
+    const selectedFromCookie = request.cookies.get(auth0Config.selectedSellerIdCookie.name)?.value;
+    await sleep(postLoginRefreshDelayMs);
+    const response = server.NextResponse.redirect(new URL(returnTo, request.nextUrl.origin));
+    try {
+        const { token, expiresAt } = await auth0Instance.getAccessToken(request, response, { refresh: true });
+        log('Post-login token refresh completed', { requestId: requestId$1, expiresAt });
+        const decodedToken = jose.decodeJwt(token);
+        if (decodedToken.complete === true) {
+            sellerCookies.setSellerIdCookiesOnResponse({
+                decodedToken,
+                response,
+                auth0Config,
+                selectedFromCookie,
+            });
+            return response;
+        }
+        log('Post-login token is still incomplete after refresh', { requestId: requestId$1 });
+        return authRedirects.createIncompleteTokenLogoutRedirect({
+            auth0Config,
+            appBaseUrl: request.nextUrl.origin,
+        });
+    }
+    catch (error) {
+        const authError = error;
+        log('Post-login token refresh failed', {
+            requestId: requestId$1,
+            message: authError.message,
+            code: authError.code,
+        });
+        onError?.(authError);
+        return authRedirects.createGlobalAuthErrorRedirect({
+            auth0Config,
+            appBaseUrl: request.nextUrl.origin,
+            code: authError.code || unknownAuthErrorCode,
+            returnTo,
+        });
+    }
+};
+
+exports.handlePostLoginRefreshRequest = handlePostLoginRefreshRequest;
+//# sourceMappingURL=postLoginRefresh.js.map

package/dist/cjs/server/middleware/postLoginRefresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postLoginRefresh.js","sources":["../../../../../src/server/middleware/postLoginRefresh.ts"],"sourcesContent":[null],"names":["debug","requestId","getOrCreateRequestId","createGlobalAuthErrorRedirect","NextResponse","decodeJwt","setSellerIdCookiesOnResponse","createIncompleteTokenLogoutRedirect"],"mappings":";;;;;;;;;AAeA,MAAM,GAAG,GAAGA,WAAK,CAAC,uCAAuC,CAAC;AAC1D,MAAM,uBAAuB,GAAG,iBAAiB;AACjD,MAAM,oBAAoB,GAAG,oBAAoB;AACjD,MAAM,uBAAuB,GAAG,IAAI;AAEpC,MAAM,KAAK,GAAG,CAAC,OAAe,KAC5B,IAAI,OAAO,CAAO,CAAC,OAAO,KAAI;AAC5B,IAAA,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC;AAC9B,CAAC,CAAC;AAEJ,MAAM,eAAe,GAAG,CAAC,EACvB,OAAO,EACP,WAAW,GAIZ,KAAI;IACH,MAAM,gBAAgB,GAAG,GAAG;AAC5B,IAAA,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;IAEhE,IAAI,CAAC,WAAW,EAAE;AAChB,QAAA,OAAO,gBAAgB;IACzB;AAEA,IAAA,IAAI;AACF,QAAA,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAChE,IAAI,WAAW,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;AACjD,YAAA,OAAO,gBAAgB;QACzB;AAEA,QAAA,IACE,WAAW,CAAC,QAAQ,KAAK,WAAW,CAAC,wBAAwB;YAC7D,WAAW,CAAC,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,EACjD;AACA,YAAA,OAAO,gBAAgB;QACzB;AAEA,QAAA,OAAO,CAAA,EAAG,WAAW,CAAC,QAAQ,CAAA,EAAG,WAAW,CAAC,MAAM,CAAA,EAAG,WAAW,CAAC,IAAI,EAAE;IAC1E;IAAE,OAAO,KAAK,EAAE;AACd,QAAA,GAAG,CAAC,iDAAiD,EAAE,EAAE,KAAK,EAAE,CAAC;AACjE,QAAA,OAAO,gBAAgB;IACzB;AACF,CAAC;AAEM,MAAM,6BAA6B,GAAG,OAAO,EAClD,OAAO,EACP,aAAa,EACb,WAAW,EACX,OAAO,GAMR,KAAkC;IACjC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,wBAAwB;QAAE;AAEvE,IAAA,MAAMC,WAAS,GAAGC,8BAAoB,CAAC,OAAO,CAAC;IAC/C,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC1D,GAAG,CAAC,qCAAqC,EAAE,aAAED,WAAS,EAAE,QAAQ,EAAE,CAAC;IAEnE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;IACvD,IAAI,CAAC,OAAO,EAAE;AACZ,QAAA,GAAG,CAAC,+CAA+C,EAAE,aAAEA,WAAS,EAAE,CAAC;AACnE,QAAA,OAAOE,2CAA6B,CAAC;YACnC,WAAW;AACX,YAAA,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;AAClC,YAAA,IAAI,EAAE,uBAAuB;YAC7B,QAAQ;AACT,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAC5C,WAAW,CAAC,sBAAsB,CAAC,IAAI,CACxC,EAAE,KAAK;AAER,IAAA,MAAM,KAAK,CAAC,uBAAuB,CAAC;AAEpC,IAAA,MAAM,QAAQ,GAAGC,mBAAY,CAAC,QAAQ,CACpC,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAC1C;AAED,IAAA,IAAI;QACF,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,aAAa,CAAC,cAAc,CAC7D,OAAO,EACP,QAAQ,EACR,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB;QACD,GAAG,CAAC,oCAAoC,EAAE,aAAEH,WAAS,EAAE,SAAS,EAAE,CAAC;AAEnE,QAAA,MAAM,YAAY,GAAGI,cAAS,CAAkB,KAAK,CAAC;AACtD,QAAA,IAAI,YAAY,CAAC,QAAQ,KAAK,IAAI,EAAE;AAClC,YAAAC,0CAA4B,CAAC;gBAC3B,YAAY;gBACZ,QAAQ;gBACR,WAAW;gBACX,kBAAkB;AACnB,aAAA,CAAC;AACF,YAAA,OAAO,QAAQ;QACjB;AAEA,QAAA,GAAG,CAAC,oDAAoD,EAAE,aAAEL,WAAS,EAAE,CAAC;AAExE,QAAA,OAAOM,iDAAmC,CAAC;YACzC,WAAW;AACX,YAAA,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;AACnC,SAAA,CAAC;IACJ;IAAE,OAAO,KAAK,EAAE;QACd,MAAM,SAAS,GAAG,KAAiB;QACnC,GAAG,CAAC,iCAAiC,EAAE;uBACrCN,WAAS;YACT,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,SAAS,CAAC,IAAI;AACrB,SAAA,CAAC;AAEF,QAAA,OAAO,GAAG,SAAS,CAAC;AAEpB,QAAA,OAAOE,2CAA6B,CAAC;YACnC,WAAW;AACX,YAAA,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;AAClC,YAAA,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,oBAAoB;YAC5C,QAAQ;AACT,SAAA,CAAC;IACJ;AACF;;;;"}

package/dist/esm/config/auth0.js

@@ -30,6 +30,8 @@ const auth0Config = {
     tokenEndpoint: '/api/auth/access-token',
     // Endpoint to fetch and refresh token
     callbackEndpoint: '/api/auth/callback',
+    // Endpoint to refresh once after signup callback when Auth0 token claims are not synced yet
+    postLoginRefreshEndpoint: '/api/auth/post-login-refresh',
     // Endpoint to fetch user profile
     userProfileEndpoint: '/api/auth/profile',
     // Endpoint to switch selected tenant (cookie-only, no re-login)
@@ -96,6 +98,7 @@ const getAuth0Config = () => {
         tokenEndpoint: `${runtimeConfig.proxyPathSegment}${runtimeConfig.tokenEndpoint}`,
         userProfileEndpoint: `${runtimeConfig.proxyPathSegment}${runtimeConfig.userProfileEndpoint}`,
         callbackEndpoint: `${runtimeConfig.proxyPathSegment}${runtimeConfig.callbackEndpoint}`,
+        postLoginRefreshEndpoint: `${runtimeConfig.proxyPathSegment}${runtimeConfig.postLoginRefreshEndpoint}`,
         switchTenantEndpoint: `${runtimeConfig.proxyPathSegment}${runtimeConfig.switchTenantEndpoint}`,
     };
 };

package/dist/esm/config/auth0.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth0.js","sources":["../../../../src/config/auth0.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAKA,MAAM,wBAAwB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,aAAa;AACzE,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;AAE7E,MAAM,qBAAqB,GAAG,YAAY,CACxC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAClD;AACD,MAAM,sBAAsB,GAAG,YAAY,CACzC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CACnD;AAED,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAa;AAC1E,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB;KAChE,KAAK,CAAC,GAAG;KACT,MAAM,CAAC,OAAO,CAAe;AAEhC,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AACtE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAEzD,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B;KAC5E,KAAK,CAAC,GAAG;KACT,MAAM,CAAC,OAAO,CAAC;AAElB,MAAM,sBAAsB,GAC1B,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,MAAM;AAExD,IAAI,CAAC,aAAa,EAAE;AAClB,IAAA,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC;AAC7D;AAEA,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE;AACjC,IAAA,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC;AAChE;AAEA,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE1C,MAAM,WAAW,GAAgB;;AAE/B,IAAA,aAAa,EAAE,iBAAiB;;AAEhC,IAAA,cAAc,EAAE,kBAAkB;;AAElC,IAAA,aAAa,EAAE,wBAAwB;;AAEvC,IAAA,gBAAgB,EAAE,oBAAoB;;AAEtC,IAAA,mBAAmB,EAAE,mBAAmB;;AAExC,IAAA,oBAAoB,EAAE,yBAAyB;;AAE/C,IAAA,gBAAgB,EAAE,EAAE;;AAEpB,IAAA,qBAAqB,EAAE,EAAE;;AAEzB,IAAA,sBAAsB,EAAE,EAAE;;AAE1B,IAAA,sBAAsB,EAAE,KAAK;;AAE7B,IAAA,cAAc,EAAE;AACd,QAAA,OAAO,EAAE,aAAa;AACtB,QAAA,SAAS,EAAE,gBAAgB;AAC5B,KAAA;;IAED,eAAe;;;AAGf,IAAA,sBAAsB,EAAE;AACtB,QAAA,IAAI,EAAE,kBAAkB;AACxB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,eAAe;AACvB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;;;AAGD,IAAA,0BAA0B,EAAE;AAC1B,QAAA,IAAI,EAAE,sBAAsB;AAC5B,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;AACnB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;;AAED,IAAA,MAAM,EAAE,mDAAmD;;AAE3D,IAAA,mBAAmB,EAAE,cAAc;;IAEnC,eAAe;;IAEf,iBAAiB;;IAEjB,QAAQ;CACT;AAEM,MAAM,cAAc,GAAG,MAAkB;AAC9C,IAAA,MAAM,aAAa,GAAG,EAAE,GAAG,WAAW,EAAE;IACxC,aAAa,CAAC,gBAAgB,GAAG;AAC/B,UAAE,WAAW,CAAC,gBAAgB;UAC5B,EAAE;AACN,IAAA,aAAa,CAAC,qBAAqB,GAAG,qBAAqB;AAC3D,IAAA,aAAa,CAAC,sBAAsB,GAAG,sBAAsB;AAC7D,IAAA,aAAa,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,wBAAwB;AACvE,IAAA,aAAa,CAAC,sBAAsB,GAAG,sBAAsB;IAE7D,OAAO;AACL,QAAA,GAAG,aAAa;QAChB,aAAa,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,aAAa,CAAA,CAAE;QAChF,cAAc,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,cAAc,CAAA,CAAE;QAClF,aAAa,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,aAAa,CAAA,CAAE;QAChF,mBAAmB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,mBAAmB,CAAA,CAAE;QAC5F,gBAAgB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,gBAAgB,CAAA,CAAE;QACtF,oBAAoB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,oBAAoB,CAAA,CAAE;KAC/F;AACH;;;;"}
+{"version":3,"file":"auth0.js","sources":["../../../../src/config/auth0.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAKA,MAAM,wBAAwB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,aAAa;AACzE,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;AAE7E,MAAM,qBAAqB,GAAG,YAAY,CACxC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAClD;AACD,MAAM,sBAAsB,GAAG,YAAY,CACzC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CACnD;AAED,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAa;AAC1E,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB;KAChE,KAAK,CAAC,GAAG;KACT,MAAM,CAAC,OAAO,CAAe;AAEhC,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AACtE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAEzD,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B;KAC5E,KAAK,CAAC,GAAG;KACT,MAAM,CAAC,OAAO,CAAC;AAElB,MAAM,sBAAsB,GAC1B,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,MAAM;AAExD,IAAI,CAAC,aAAa,EAAE;AAClB,IAAA,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC;AAC7D;AAEA,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE;AACjC,IAAA,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC;AAChE;AAEA,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE1C,MAAM,WAAW,GAAgB;;AAE/B,IAAA,aAAa,EAAE,iBAAiB;;AAEhC,IAAA,cAAc,EAAE,kBAAkB;;AAElC,IAAA,aAAa,EAAE,wBAAwB;;AAEvC,IAAA,gBAAgB,EAAE,oBAAoB;;AAEtC,IAAA,wBAAwB,EAAE,8BAA8B;;AAExD,IAAA,mBAAmB,EAAE,mBAAmB;;AAExC,IAAA,oBAAoB,EAAE,yBAAyB;;AAE/C,IAAA,gBAAgB,EAAE,EAAE;;AAEpB,IAAA,qBAAqB,EAAE,EAAE;;AAEzB,IAAA,sBAAsB,EAAE,EAAE;;AAE1B,IAAA,sBAAsB,EAAE,KAAK;;AAE7B,IAAA,cAAc,EAAE;AACd,QAAA,OAAO,EAAE,aAAa;AACtB,QAAA,SAAS,EAAE,gBAAgB;AAC5B,KAAA;;IAED,eAAe;;;AAGf,IAAA,sBAAsB,EAAE;AACtB,QAAA,IAAI,EAAE,kBAAkB;AACxB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,eAAe;AACvB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;;;AAGD,IAAA,0BAA0B,EAAE;AAC1B,QAAA,IAAI,EAAE,sBAAsB;AAC5B,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;AACnB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;;AAED,IAAA,MAAM,EAAE,mDAAmD;;AAE3D,IAAA,mBAAmB,EAAE,cAAc;;IAEnC,eAAe;;IAEf,iBAAiB;;IAEjB,QAAQ;CACT;AAEM,MAAM,cAAc,GAAG,MAAkB;AAC9C,IAAA,MAAM,aAAa,GAAG,EAAE,GAAG,WAAW,EAAE;IACxC,aAAa,CAAC,gBAAgB,GAAG;AAC/B,UAAE,WAAW,CAAC,gBAAgB;UAC5B,EAAE;AACN,IAAA,aAAa,CAAC,qBAAqB,GAAG,qBAAqB;AAC3D,IAAA,aAAa,CAAC,sBAAsB,GAAG,sBAAsB;AAC7D,IAAA,aAAa,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,wBAAwB;AACvE,IAAA,aAAa,CAAC,sBAAsB,GAAG,sBAAsB;IAE7D,OAAO;AACL,QAAA,GAAG,aAAa;QAChB,aAAa,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,aAAa,CAAA,CAAE;QAChF,cAAc,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,cAAc,CAAA,CAAE;QAClF,aAAa,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,aAAa,CAAA,CAAE;QAChF,mBAAmB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,mBAAmB,CAAA,CAAE;QAC5F,gBAAgB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,gBAAgB,CAAA,CAAE;QACtF,wBAAwB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,wBAAwB,CAAA,CAAE;QACtG,oBAAoB,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAA,EAAG,aAAa,CAAC,oBAAoB,CAAA,CAAE;KAC/F;AACH;;;;"}

package/dist/esm/fixtures/authConfig.js

@@ -4,6 +4,7 @@ const authConfig = (args = {}) => ({
     logoutEndpoint: '/api/auth/logout',
     tokenEndpoint: '/api/auth/token',
     callbackEndpoint: '/api/auth/callback',
+    postLoginRefreshEndpoint: '/api/auth/post-login-refresh',
     userProfileEndpoint: '/api/auth/me',
     switchTenantEndpoint: '/api/auth/switch-tenant',
     sessionDuration,

package/dist/esm/fixtures/authConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"authConfig.js","sources":["../../../../src/fixtures/authConfig.ts"],"sourcesContent":[null],"names":[],"mappings":"AAEA,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAEnC,MAAM,UAAU,GAAG,CAAC,OAA6B,EAAE,MAAmB;AAC3E,IAAA,aAAa,EAAE,iBAAiB;AAChC,IAAA,cAAc,EAAE,kBAAkB;AAClC,IAAA,aAAa,EAAE,iBAAiB;AAChC,IAAA,gBAAgB,EAAE,oBAAoB;AACtC,IAAA,mBAAmB,EAAE,cAAc;AACnC,IAAA,oBAAoB,EAAE,yBAAyB;IAC/C,eAAe;AACf,IAAA,sBAAsB,EAAE;AACtB,QAAA,IAAI,EAAE,kBAAkB;AACxB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,eAAe;AACvB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;AACD,IAAA,0BAA0B,EAAE;AAC1B,QAAA,IAAI,EAAE,sBAAsB;AAC5B,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;AACnB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;AACD,IAAA,gBAAgB,EAAE,gBAAgB;AAClC,IAAA,qBAAqB,EAAE,cAAc;AACrC,IAAA,sBAAsB,EAAE,cAAc;AACtC,IAAA,sBAAsB,EAAE,KAAK;AAC7B,IAAA,cAAc,EAAE;AACd,QAAA,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;AACpC,KAAA;AACD,IAAA,MAAM,EAAE,mDAAmD;AAC3D,IAAA,mBAAmB,EAAE,cAAc;AACnC,IAAA,eAAe,EAAE,EAAE;AACnB,IAAA,iBAAiB,EAAE,SAAS;AAC5B,IAAA,QAAQ,EAAE,iDAAiD;AAC3D,IAAA,GAAG,IAAI;AACR,CAAA;;;;"}
+{"version":3,"file":"authConfig.js","sources":["../../../../src/fixtures/authConfig.ts"],"sourcesContent":[null],"names":[],"mappings":"AAEA,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAEnC,MAAM,UAAU,GAAG,CAAC,OAA6B,EAAE,MAAmB;AAC3E,IAAA,aAAa,EAAE,iBAAiB;AAChC,IAAA,cAAc,EAAE,kBAAkB;AAClC,IAAA,aAAa,EAAE,iBAAiB;AAChC,IAAA,gBAAgB,EAAE,oBAAoB;AACtC,IAAA,wBAAwB,EAAE,8BAA8B;AACxD,IAAA,mBAAmB,EAAE,cAAc;AACnC,IAAA,oBAAoB,EAAE,yBAAyB;IAC/C,eAAe;AACf,IAAA,sBAAsB,EAAE;AACtB,QAAA,IAAI,EAAE,kBAAkB;AACxB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,eAAe;AACvB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;AACD,IAAA,0BAA0B,EAAE;AAC1B,QAAA,IAAI,EAAE,sBAAsB;AAC5B,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;AACnB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,IAAI,EAAE,GAAG;AACV,KAAA;AACD,IAAA,gBAAgB,EAAE,gBAAgB;AAClC,IAAA,qBAAqB,EAAE,cAAc;AACrC,IAAA,sBAAsB,EAAE,cAAc;AACtC,IAAA,sBAAsB,EAAE,KAAK;AAC7B,IAAA,cAAc,EAAE;AACd,QAAA,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;AACpC,KAAA;AACD,IAAA,MAAM,EAAE,mDAAmD;AAC3D,IAAA,mBAAmB,EAAE,cAAc;AACnC,IAAA,eAAe,EAAE,EAAE;AACnB,IAAA,iBAAiB,EAAE,SAAS;AAC5B,IAAA,QAAQ,EAAE,iDAAiD;AAC3D,IAAA,GAAG,IAAI;AACR,CAAA;;;;"}

package/dist/esm/server/helpers/authRedirects.js

@@ -0,0 +1,35 @@
+import { NextResponse } from 'next/server';
+
+const incompleteTokenErrorCode = 'ERR_INCOMPLETE_TOKEN';
+const getLocaleFromReturnTo = ({ returnTo, auth0Config, appBaseUrl, }) => {
+    if (!returnTo) {
+        return auth0Config.languageConfig.default;
+    }
+    try {
+        const url = new URL(returnTo, appBaseUrl);
+        const locale = url.searchParams.get('locale') || url.pathname.split('/')[1];
+        if (auth0Config.languageConfig.supported.includes(locale)) {
+            return locale;
+        }
+    }
+    catch {
+        // Ignore invalid returnTo values and fall back to the configured default locale.
+    }
+    return auth0Config.languageConfig.default;
+};
+const createGlobalAuthErrorRedirect = ({ auth0Config, appBaseUrl, returnTo, code, }) => {
+    const locale = getLocaleFromReturnTo({ returnTo, auth0Config, appBaseUrl });
+    const errorUrl = new URL(`/${locale}${auth0Config.globalAuthErrorPath}`, appBaseUrl);
+    if (code) {
+        errorUrl.searchParams.set('code', code);
+    }
+    return NextResponse.redirect(errorUrl);
+};
+const createIncompleteTokenLogoutRedirect = ({ auth0Config, appBaseUrl, }) => {
+    // eslint-disable-next-line no-console
+    console.info(`[Auth-package] logging out user CAUSE: ${incompleteTokenErrorCode}`);
+    return NextResponse.redirect(new URL(auth0Config.logoutEndpoint, appBaseUrl));
+};
+
+export { createGlobalAuthErrorRedirect, createIncompleteTokenLogoutRedirect, getLocaleFromReturnTo, incompleteTokenErrorCode };
+//# sourceMappingURL=authRedirects.js.map

package/dist/esm/server/helpers/authRedirects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authRedirects.js","sources":["../../../../../src/server/helpers/authRedirects.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAMO,MAAM,wBAAwB,GAAG;AAEjC,MAAM,qBAAqB,GAAG,CAAC,EACpC,QAAQ,EACR,WAAW,EACX,UAAU,GAKX,KAAc;IACb,IAAI,CAAC,QAAQ,EAAE;AACb,QAAA,OAAO,WAAW,CAAC,cAAc,CAAC,OAAO;IAC3C;AAEA,IAAA,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC;QACzC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAE3E,IAAI,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAkB,CAAC,EAAE;AACrE,YAAA,OAAO,MAAkB;QAC3B;IACF;AAAE,IAAA,MAAM;;IAER;AAEA,IAAA,OAAO,WAAW,CAAC,cAAc,CAAC,OAAO;AAC3C;AAEO,MAAM,6BAA6B,GAAG,CAAC,EAC5C,WAAW,EACX,UAAU,EACV,QAAQ,EACR,IAAI,GAML,KAAkB;AACjB,IAAA,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AAC3E,IAAA,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAA,CAAA,EAAI,MAAM,CAAA,EAAG,WAAW,CAAC,mBAAmB,CAAA,CAAE,EAC9C,UAAU,CACX;IAED,IAAI,IAAI,EAAE;QACR,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;IACzC;AAEA,IAAA,OAAO,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACxC;AAEO,MAAM,mCAAmC,GAAG,CAAC,EAClD,WAAW,EACX,UAAU,GAIX,KAAkB;;AAEjB,IAAA,OAAO,CAAC,IAAI,CACV,0CAA0C,wBAAwB,CAAA,CAAE,CACrE;AAED,IAAA,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;AAC/E;;;;"}

package/dist/esm/server/helpers/sellerCookies.js

@@ -0,0 +1,31 @@
+import { getSelectedSellerId } from '../../lib/getSelectedSellerId.js';
+
+const setSellerIdCookiesOnResponse = ({ decodedToken, response, auth0Config, selectedFromCookie, }) => {
+    const sellerIdsFromToken = decodedToken.sellerIds
+        .map((sellerId) => Number(sellerId))
+        .filter((sellerId) => Number.isFinite(sellerId));
+    const impersonatedSellerIdFromToken = decodedToken.isImpersonated
+        ? sellerIdsFromToken[0]
+        : null;
+    const parsedSelectedSellerId = selectedFromCookie
+        ? Number(selectedFromCookie)
+        : undefined;
+    const selectedSellerId = getSelectedSellerId({
+        selectedFromCookie: parsedSelectedSellerId,
+        impersonatedFromCookie: impersonatedSellerIdFromToken ?? undefined,
+        sellerIdsFromToken: sellerIdsFromToken,
+    });
+    response.cookies.set(auth0Config.selectedSellerIdCookie.name, String(selectedSellerId), auth0Config.selectedSellerIdCookie);
+    if (impersonatedSellerIdFromToken) {
+        response.cookies.set(auth0Config.impersonatedSellerIdCookie.name, String(impersonatedSellerIdFromToken), auth0Config.impersonatedSellerIdCookie);
+    }
+    else {
+        response.cookies.set(auth0Config.impersonatedSellerIdCookie.name, '', {
+            ...auth0Config.impersonatedSellerIdCookie,
+            maxAge: 0,
+        });
+    }
+};
+
+export { setSellerIdCookiesOnResponse };
+//# sourceMappingURL=sellerCookies.js.map

package/dist/esm/server/helpers/sellerCookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sellerCookies.js","sources":["../../../../../src/server/helpers/sellerCookies.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAMO,MAAM,4BAA4B,GAAG,CAAC,EAC3C,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,kBAAkB,GAMnB,KAAU;AACT,IAAA,MAAM,kBAAkB,GAAG,YAAY,CAAC;SACrC,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;AAClC,SAAA,MAAM,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAElD,IAAA,MAAM,6BAA6B,GAAG,YAAY,CAAC;AACjD,UAAE,kBAAkB,CAAC,CAAC;UACpB,IAAI;IAER,MAAM,sBAAsB,GAAG;AAC7B,UAAE,MAAM,CAAC,kBAAkB;UACzB,SAAS;IAEb,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC3C,QAAA,kBAAkB,EAAE,sBAAsB;QAC1C,sBAAsB,EAAE,6BAA6B,IAAI,SAAS;AAClE,QAAA,kBAAkB,EAAE,kBAA2C;AAChE,KAAA,CAAC;IAEF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,WAAW,CAAC,sBAAsB,CAAC,IAAI,EACvC,MAAM,CAAC,gBAAgB,CAAC,EACxB,WAAW,CAAC,sBAAsB,CACnC;IAED,IAAI,6BAA6B,EAAE;QACjC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,WAAW,CAAC,0BAA0B,CAAC,IAAI,EAC3C,MAAM,CAAC,6BAA6B,CAAC,EACrC,WAAW,CAAC,0BAA0B,CACvC;IACH;SAAO;AACL,QAAA,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,0BAA0B,CAAC,IAAI,EAAE,EAAE,EAAE;YACpE,GAAG,WAAW,CAAC,0BAA0B;AACzC,YAAA,MAAM,EAAE,CAAC;AACV,SAAA,CAAC;IACJ;AACF;;;;"}

package/dist/esm/server/hooks/onCallbackFactory.js

@@ -1,31 +1,24 @@
 import { NextResponse } from 'next/server';
 import { cookies } from 'next/headers';
 import { decodeJwt } from 'jose';
-import { AccessTokenError, OAuth2Error } from '@auth0/nextjs-auth0/errors';
-import { getSelectedSellerId } from '../../lib/getSelectedSellerId.js';
+import { setSellerIdCookiesOnResponse } from '../helpers/sellerCookies.js';
+import { incompleteTokenErrorCode, createIncompleteTokenLogoutRedirect, createGlobalAuthErrorRedirect } from '../helpers/authRedirects.js';
 
 const createCallbackResponse = (context, appBaseUrl) => NextResponse.redirect(new URL(context.returnTo || '/', appBaseUrl));
-const getLocaleFromContext = ({ returnTo }, appBaseUrl) => {
-    if (!returnTo) {
-        return '';
-    }
-    try {
-        const url = new URL(returnTo, appBaseUrl);
-        return (url.searchParams.get('locale') || url.pathname.split('/')[1]) ?? '';
-    }
-    catch (parsingError) {
-        // eslint-disable-next-line no-console
-        console.warn('[Auth-package] Failed to parse locale from returnTo', parsingError);
-    }
-    return '';
+const createPostLoginRefreshResponse = (context, auth0Config, appBaseUrl) => {
+    const refreshUrl = new URL(auth0Config.postLoginRefreshEndpoint, appBaseUrl);
+    refreshUrl.searchParams.set('returnTo', context.returnTo || '/');
+    return NextResponse.redirect(refreshUrl);
+};
+const setLoginSessionData = (session) => {
+    const decodedIdToken = session.tokenSet.idToken
+        ? decodeJwt(session.tokenSet.idToken)
+        : null;
+    session.loggedInDate = Date.now();
+    session.amr = decodedIdToken ? decodedIdToken.amr : null;
 };
-const incompleteTokenErrorCode = 'ERR_INCOMPLETE_TOKEN';
 const errorCodeRegex = /\b([A-Z][A-Z0-9_]*[A-Z0-9])\b/g;
-const handleAuth0Error = ({ error, auth0Config, appBaseUrl, localeFromUrl, onError, }) => {
-    const authorizedLocales = auth0Config.languageConfig.supported;
-    const locale = authorizedLocales.includes(localeFromUrl)
-        ? localeFromUrl
-        : auth0Config.languageConfig.default;
+const handleAuth0Error = ({ error, auth0Config, appBaseUrl, returnTo, onError, }) => {
     const expectedErrors = [
         'UNVERIFIED_EMAIL',
         'INITIAL_UNVERIFIED_EMAIL',
@@ -38,28 +31,27 @@ const handleAuth0Error = ({ error, auth0Config, appBaseUrl, localeFromUrl, onErr
         extractedErrorCode = matchedErrorCode ? matchedErrorCode[0] : '';
     }
     if (extractedErrorCode === incompleteTokenErrorCode) {
-        // eslint-disable-next-line no-console
-        console.info('[Auth-package] logging out user CAUSE: ERR_INCOMPLETE_TOKEN');
-        return NextResponse.redirect(new URL(auth0Config.logoutEndpoint, appBaseUrl));
+        return createIncompleteTokenLogoutRedirect({ auth0Config, appBaseUrl });
     }
     if (!expectedErrors.includes(extractedErrorCode)) {
         onError?.(error);
         // eslint-disable-next-line no-console
         console.error('[Auth-package] error', error);
     }
-    const errorCodeQuery = extractedErrorCode
-        ? `?code=${extractedErrorCode}`
-        : '';
-    return NextResponse.redirect(new URL(`/${locale}${auth0Config.globalAuthErrorPath}${errorCodeQuery}`, appBaseUrl));
+    return createGlobalAuthErrorRedirect({
+        auth0Config,
+        appBaseUrl,
+        returnTo,
+        code: extractedErrorCode,
+    });
 };
 const onCallbackFactory = ({ auth0Config, appBaseUrl, onError, }) => async (error, context, session) => {
-    const localeFromUrl = getLocaleFromContext(context, appBaseUrl);
     if (error) {
         return handleAuth0Error({
             error,
             auth0Config,
             appBaseUrl,
-            localeFromUrl,
+            returnTo: context.returnTo,
             onError,
         });
     }
@@ -68,49 +60,20 @@ const onCallbackFactory = ({ auth0Config, appBaseUrl, onError, }) => async (erro
     }
     const cookieStore = await cookies();
     const decodedToken = decodeJwt(session.tokenSet.accessToken);
+    setLoginSessionData(session);
     if (!decodedToken.complete) {
-        return handleAuth0Error({
-            error: new AccessTokenError(incompleteTokenErrorCode, incompleteTokenErrorCode, new OAuth2Error({
-                code: incompleteTokenErrorCode,
-                message: incompleteTokenErrorCode,
-            })),
-            auth0Config,
-            appBaseUrl,
-            localeFromUrl,
-            onError,
-        });
+        // eslint-disable-next-line no-console
+        console.info('[Auth-package] incomplete token detected after callback, redirecting to post-login refresh');
+        return createPostLoginRefreshResponse(context, auth0Config, appBaseUrl);
     }
-    const sellerIdsFromToken = decodedToken.sellerIds
-        .map((sellerId) => Number(sellerId))
-        .filter((sellerId) => Number.isFinite(sellerId));
-    const impersonatedSellerIdFromToken = decodedToken.isImpersonated
-        ? sellerIdsFromToken[0]
-        : null;
     const selectedFromCookie = cookieStore.get(auth0Config.selectedSellerIdCookie.name)?.value;
-    const parsedSelectedSellerId = selectedFromCookie
-        ? Number(selectedFromCookie)
-        : undefined;
-    const selectedSellerId = getSelectedSellerId({
-        selectedFromCookie: parsedSelectedSellerId,
-        impersonatedFromCookie: impersonatedSellerIdFromToken ?? undefined,
-        sellerIdsFromToken: sellerIdsFromToken,
-    });
     const response = createCallbackResponse(context, appBaseUrl);
-    response.cookies.set(auth0Config.selectedSellerIdCookie.name, String(selectedSellerId), auth0Config.selectedSellerIdCookie);
-    if (impersonatedSellerIdFromToken) {
-        response.cookies.set(auth0Config.impersonatedSellerIdCookie.name, String(impersonatedSellerIdFromToken), auth0Config.impersonatedSellerIdCookie);
-    }
-    else {
-        response.cookies.set(auth0Config.impersonatedSellerIdCookie.name, '', {
-            ...auth0Config.impersonatedSellerIdCookie,
-            maxAge: 0,
-        });
-    }
-    const decodedIdToken = session.tokenSet.idToken
-        ? decodeJwt(session.tokenSet.idToken)
-        : null;
-    session.loggedInDate = Date.now();
-    session.amr = decodedIdToken ? decodedIdToken.amr : null;
+    setSellerIdCookiesOnResponse({
+        decodedToken,
+        response,
+        auth0Config,
+        selectedFromCookie: selectedFromCookie ?? undefined,
+    });
     return response;
 };
 

package/dist/esm/server/hooks/onCallbackFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"onCallbackFactory.js","sources":["../../../../../src/server/hooks/onCallbackFactory.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;AAeA,MAAM,sBAAsB,GAAG,CAC7B,OAA0B,EAC1B,UAAkB,KACf,YAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC;AAExE,MAAM,oBAAoB,GAAG,CAC3B,EAAE,QAAQ,EAAqB,EAC/B,UAAkB,KAChB;IACF,IAAI,CAAC,QAAQ,EAAE;AACb,QAAA,OAAO,EAAE;IACX;AAEA,IAAA,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;IAC7E;IAAE,OAAO,YAAY,EAAE;;AAErB,QAAA,OAAO,CAAC,IAAI,CACV,qDAAqD,EACrD,YAAY,CACb;IACH;AAEA,IAAA,OAAO,EAAE;AACX,CAAC;AAED,MAAM,wBAAwB,GAAG,sBAA+B;AAChE,MAAM,cAAc,GAAG,gCAAgC;AAEvD,MAAM,gBAAgB,GAAG,CAAC,EACxB,KAAK,EACL,WAAW,EACX,UAAU,EACV,aAAa,EACb,OAAO,GAOR,KAAkB;AACjB,IAAA,MAAM,iBAAiB,GAAG,WAAW,CAAC,cAAc,CAAC,SAAS;AAC9D,IAAA,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,aAAyB;AACjE,UAAG;AACH,UAAE,WAAW,CAAC,cAAc,CAAC,OAAO;AAEtC,IAAA,MAAM,cAAc,GAAG;QACrB,kBAAkB;QAClB,0BAA0B;QAC1B,wBAAwB;KACzB;IACD,IAAI,kBAAkB,GAAG,EAAE;AAE3B,IAAA,IAAI,KAAK,CAAC,KAAK,EAAE;AACf,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,KAAoB;QACxC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;AAC5D,QAAA,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE;IAClE;AAEA,IAAA,IAAI,kBAAkB,KAAK,wBAAwB,EAAE;;AAEnD,QAAA,OAAO,CAAC,IAAI,CAAC,6DAA6D,CAAC;AAE3E,QAAA,OAAO,YAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAChD;IACH;IAEA,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;AAChD,QAAA,OAAO,GAAG,KAAK,CAAC;;AAEhB,QAAA,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC;IAC9C;IAEA,MAAM,cAAc,GAAG;UACnB,CAAA,MAAA,EAAS,kBAAkB,CAAA;UAC3B,EAAE;IAEN,OAAO,YAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CACL,IAAI,MAAM,CAAA,EAAG,WAAW,CAAC,mBAAmB,GAAG,cAAc,CAAA,CAAE,EAC/D,UAAU,CACX,CACF;AACH,CAAC;MAEY,iBAAiB,GAC5B,CAAC,EACC,WAAW,EACX,UAAU,EACV,OAAO,GAKR,KACD,OACE,KAAsB,EACtB,OAA0B,EAC1B,OAA2B,KACF;IACzB,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC;IAC/D,IAAI,KAAK,EAAE;AACT,QAAA,OAAO,gBAAgB,CAAC;YACtB,KAAK;YACL,WAAW;YACX,UAAU;YACV,aAAa;YACb,OAAO;AACR,SAAA,CAAC;IACJ;AAEA,IAAA,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;AACnC,QAAA,OAAO,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC;IACpD;AAEA,IAAA,MAAM,WAAW,GAAG,MAAM,OAAO,EAAE;IACnC,MAAM,YAAY,GAAG,SAAS,CAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAC7B;AACD,IAAA,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE;AAC1B,QAAA,OAAO,gBAAgB,CAAC;YACtB,KAAK,EAAE,IAAI,gBAAgB,CACzB,wBAAwB,EACxB,wBAAwB,EACxB,IAAI,WAAW,CAAC;AACd,gBAAA,IAAI,EAAE,wBAAwB;AAC9B,gBAAA,OAAO,EAAE,wBAAwB;AAClC,aAAA,CAAC,CACH;YACD,WAAW;YACX,UAAU;YACV,aAAa;YACb,OAAO;AACR,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,kBAAkB,GAAG,YAAY,CAAC;SACrC,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;AAClC,SAAA,MAAM,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAClD,IAAA,MAAM,6BAA6B,GAAG,YAAY,CAAC;AACjD,UAAE,kBAAkB,CAAC,CAAC;UACpB,IAAI;AACR,IAAA,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CACxC,WAAW,CAAC,sBAAsB,CAAC,IAAI,CACxC,EAAE,KAAK;IACR,MAAM,sBAAsB,GAAG;AAC7B,UAAE,MAAM,CAAC,kBAAkB;UACzB,SAAS;IACb,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC3C,QAAA,kBAAkB,EAAE,sBAAsB;QAC1C,sBAAsB,EAAE,6BAA6B,IAAI,SAAS;AAClE,QAAA,kBAAkB,EAAE,kBAA2C;AAChE,KAAA,CAAC;IAEF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC;IAC5D,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,WAAW,CAAC,sBAAsB,CAAC,IAAI,EACvC,MAAM,CAAC,gBAAgB,CAAC,EACxB,WAAW,CAAC,sBAAsB,CACnC;IAED,IAAI,6BAA6B,EAAE;QACjC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,WAAW,CAAC,0BAA0B,CAAC,IAAI,EAC3C,MAAM,CAAC,6BAA6B,CAAC,EACrC,WAAW,CAAC,0BAA0B,CACvC;IACH;SAAO;AACL,QAAA,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,0BAA0B,CAAC,IAAI,EAAE,EAAE,EAAE;YACpE,GAAG,WAAW,CAAC,0BAA0B;AACzC,YAAA,MAAM,EAAE,CAAC;AACV,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC;UACpC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO;UAClC,IAAI;AAER,IAAA,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE;AACjC,IAAA,OAAO,CAAC,GAAG,GAAG,cAAc,GAAG,cAAc,CAAC,GAAG,GAAG,IAAI;AAExD,IAAA,OAAO,QAAQ;AACjB;;;;"}
+{"version":3,"file":"onCallbackFactory.js","sources":["../../../../../src/server/hooks/onCallbackFactory.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;AAcA,MAAM,sBAAsB,GAAG,CAC7B,OAA0B,EAC1B,UAAkB,KACf,YAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC;AAExE,MAAM,8BAA8B,GAAG,CACrC,OAA0B,EAC1B,WAAwB,EACxB,UAAkB,KAChB;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,wBAAwB,EAAE,UAAU,CAAC;AAC5E,IAAA,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC;AAEhE,IAAA,OAAO,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;AAC1C,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,OAAoB,KAAI;AACnD,IAAA,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC;UACpC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO;UAClC,IAAI;AAER,IAAA,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE;AACjC,IAAA,OAAO,CAAC,GAAG,GAAG,cAAc,GAAG,cAAc,CAAC,GAAG,GAAG,IAAI;AAC1D,CAAC;AAED,MAAM,cAAc,GAAG,gCAAgC;AAEvD,MAAM,gBAAgB,GAAG,CAAC,EACxB,KAAK,EACL,WAAW,EACX,UAAU,EACV,QAAQ,EACR,OAAO,GAOR,KAAkB;AACjB,IAAA,MAAM,cAAc,GAAG;QACrB,kBAAkB;QAClB,0BAA0B;QAC1B,wBAAwB;KACzB;IACD,IAAI,kBAAkB,GAAG,EAAE;AAE3B,IAAA,IAAI,KAAK,CAAC,KAAK,EAAE;AACf,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,KAAoB;QACxC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;AAC5D,QAAA,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE;IAClE;AAEA,IAAA,IAAI,kBAAkB,KAAK,wBAAwB,EAAE;QACnD,OAAO,mCAAmC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IACzE;IAEA,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;AAChD,QAAA,OAAO,GAAG,KAAK,CAAC;;AAEhB,QAAA,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC;IAC9C;AAEA,IAAA,OAAO,6BAA6B,CAAC;QACnC,WAAW;QACX,UAAU;QACV,QAAQ;AACR,QAAA,IAAI,EAAE,kBAAkB;AACzB,KAAA,CAAC;AACJ,CAAC;MAEY,iBAAiB,GAC5B,CAAC,EACC,WAAW,EACX,UAAU,EACV,OAAO,GAKR,KACD,OACE,KAAsB,EACtB,OAA0B,EAC1B,OAA2B,KACF;IACzB,IAAI,KAAK,EAAE;AACT,QAAA,OAAO,gBAAgB,CAAC;YACtB,KAAK;YACL,WAAW;YACX,UAAU;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO;AACR,SAAA,CAAC;IACJ;AAEA,IAAA,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;AACnC,QAAA,OAAO,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC;IACpD;AAEA,IAAA,MAAM,WAAW,GAAG,MAAM,OAAO,EAAE;IACnC,MAAM,YAAY,GAAG,SAAS,CAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAC7B;IACD,mBAAmB,CAAC,OAAO,CAAC;AAE5B,IAAA,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE;;AAE1B,QAAA,OAAO,CAAC,IAAI,CACV,4FAA4F,CAC7F;QAED,OAAO,8BAA8B,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC;IACzE;AAEA,IAAA,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CACxC,WAAW,CAAC,sBAAsB,CAAC,IAAI,CACxC,EAAE,KAAK;IAER,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC;AAC5D,IAAA,4BAA4B,CAAC;QAC3B,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,kBAAkB,EAAE,kBAAkB,IAAI,SAAS;AACpD,KAAA,CAAC;AAEF,IAAA,OAAO,QAAQ;AACjB;;;;"}

package/dist/esm/server/middleware/index.js

@@ -8,6 +8,7 @@ import { handleSwitchTenantRequest } from './switchTenant.js';
 import { getOrCreateRequestId, requestIdHeader } from './requestId.js';
 import { protectRoute } from './protectRoute.js';
 import { handleUserProfile } from './profile.js';
+import { handlePostLoginRefreshRequest } from './postLoginRefresh.js';
 import { handleCrossDomainLogout, deleteRelatedSessionCookies } from './logout.js';
 import { addLoginParams } from './login.js';
 import { crossApplicationStateSynchronization } from './crossApplicationStateSynchronization.js';
@@ -15,11 +16,12 @@ import { combineHeaders } from './combineHeaders.js';
 
 const log = debug('@smg-automotive/auth:middleware');
 const isAuthRoute = (pathname, auth0Config) => {
-    const { loginEndpoint, logoutEndpoint, callbackEndpoint, userProfileEndpoint, tokenEndpoint, } = auth0Config;
+    const { loginEndpoint, logoutEndpoint, callbackEndpoint, postLoginRefreshEndpoint, userProfileEndpoint, tokenEndpoint, } = auth0Config;
     return [
         loginEndpoint,
         logoutEndpoint,
         callbackEndpoint,
+        postLoginRefreshEndpoint,
         userProfileEndpoint,
         tokenEndpoint,
     ].includes(pathname);
@@ -90,6 +92,17 @@ const authMiddleware = async ({ request, isProtectedRoute, language, host, proto
         log('User profile request handled', { requestId });
         return handleUserProfileResult;
     }
+    // Post-login refresh handling - /api/auth/post-login-refresh
+    const postLoginRefreshResult = await handlePostLoginRefreshRequest({
+        request,
+        auth0Instance,
+        auth0Config,
+        onError,
+    });
+    if (postLoginRefreshResult) {
+        log('Post-login refresh request handled', { requestId });
+        return postLoginRefreshResult;
+    }
     // Auth routes handling - /api/auth/*
     let authResponse;
     try {

package/dist/esm/server/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../../../src/server/middleware/index.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;;;;AAqBA,MAAM,GAAG,GAAG,KAAK,CAAC,iCAAiC,CAAC;AAEpD,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,WAAwB,KAAI;AACjE,IAAA,MAAM,EACJ,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,GACd,GAAG,WAAW;IAEf,OAAO;QACL,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,mBAAmB;QACnB,aAAa;AACd,KAAA,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACtB,CAAC;MAEY,cAAc,GAAG,OAAO,EACnC,OAAO,EACP,gBAAgB,EAChB,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,KAAK,GASN,KAA2B;AAC1B,IAAA,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC;IAE/C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO;IACpD,GAAG,CAAC,oBAAoB,EAAE;QACxB,SAAS;QACT,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,MAAM;AACvB,KAAA,CAAC;IAEF,MAAM,aAAa,GAAG,gBAAgB,CAAC;QACrC,IAAI;QACJ,QAAQ;AACT,KAAA,CAAC;AAEF,IAAA,MAAM,WAAW,GAAG,cAAc,EAAE;IAEpC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,CAAC;IAC3E,GAAG,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAElE,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;QACtD,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,WAAW;AACZ,KAAA,CAAC;IACF,IAAI,uBAAuB,EAAE;QAC3B,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC;AAC/D,QAAA,GAAG,CAAC,2CAA2C,EAAE,EAAE,SAAS,EAAE,CAAC;AAC/D,QAAA,OAAO,uBAAuB;IAChC;;AAGA,IAAA,cAAc,CAAC;QACb,OAAO;QACP,WAAW;AACZ,KAAA,CAAC;AAEF,IAAA,MAAM,kBAAkB,GAAG,MAAM,yBAAyB,CAAC;QACzD,OAAO;QACP,WAAW;QACX,aAAa;AACd,KAAA,CAAC;IACF,IAAI,kBAAkB,EAAE;AACtB,QAAA,GAAG,CAAC,+BAA+B,EAAE,EAAE,SAAS,EAAE,CAAC;AACnD,QAAA,OAAO,kBAAkB;IAC3B;;AAGA,IAAA,MAAM,wBAAwB,GAAG,MAAM,wBAAwB,CAAC;QAC9D,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY,CAAC,IAAI,EAAE;QAC7B,aAAa;QACb,WAAW;QACX,OAAO;AACR,KAAA,CAAC;IACF,IAAI,wBAAwB,EAAE;AAC5B,QAAA,GAAG,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC;AAClD,QAAA,OAAO,wBAAwB;IACjC;;AAGA,IAAA,MAAM,uBAAuB,GAAG,MAAM,iBAAiB,CAAC;QACtD,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY,CAAC,IAAI,EAAE;QAC7B,aAAa;QACb,WAAW;QACX,KAAK;AACN,KAAA,CAAC;IACF,IAAI,uBAAuB,EAAE;AAC3B,QAAA,GAAG,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC;AAClD,QAAA,OAAO,uBAAuB;IAChC;;AAGA,IAAA,IAAI,YAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,CAAC;QAC9C,YAAY,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;QACtD,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC;QACpD,GAAG,CAAC,4BAA4B,EAAE;YAChC,SAAS;YACT,MAAM,EAAE,YAAY,CAAC,MAAM;AAC5B,SAAA,CAAC;IACJ;IAAE,OAAO,KAAK,EAAE;;QAEd,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAEtE,QAAA,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE;YAC9B,GAAG,CAAC,wDAAwD,EAAE;gBAC5D,SAAS;AACV,aAAA,CAAC;YACF,OAAO,YAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CACL,YAAY,CAAC;AACX,gBAAA,QAAQ,EAAE,CAAA,EAAG,QAAQ,CAAA,EAAG,MAAM,CAAA,CAAE;gBAChC,QAAQ;gBACR,WAAW;AACZ,aAAA,CAAC,EACF,MAAM,CACP,CACF;QACH;AAEA,QAAA,GAAG,CAAC,4CAA4C,EAAE,EAAE,SAAS,EAAE,CAAC;AAChE,QAAA,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE;AACpC,QAAA,MAAM,cAAc,GAAG;AACrB,YAAA,WAAW,CAAC,iBAAiB;YAC7B,CAAA,EAAG,WAAW,CAAC,iBAAiB,CAAA,GAAA,CAAK;YACrC,CAAA,EAAG,WAAW,CAAC,iBAAiB,CAAA,GAAA,CAAK;SACtC;AACD,QAAA,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,KAAI;YACpC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE;AACnC,gBAAA,MAAM,EAAE,CAAC;AACT,gBAAA,IAAI,EAAE,GAAG;AACV,aAAA,CAAC;AACJ,QAAA,CAAC,CAAC;AACF,QAAA,OAAO,QAAQ;IACjB;;AAGA,IAAA,2BAA2B,CAAC;QAC1B,IAAI;QACJ,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,WAAW;AACZ,KAAA,CAAC;IAEF,IAAI,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,gBAAgB,EAAE;AAC1D,QAAA,GAAG,CAAC,gCAAgC,EAAE,EAAE,SAAS,EAAE,CAAC;AACpD,QAAA,OAAO,YAAY;IACrB;;AAGA,IAAA,MAAM,YAAY,GAAG,MAAM,oCAAoC,CAAC;QAC9D,OAAO;QACP,QAAQ;QACR,aAAa;QACb,WAAW;AACX,QAAA,QAAQ,EAAE,YAAY;AACvB,KAAA,CAAC;IACF,IAAI,YAAY,EAAE;AAChB,QAAA,OAAO,YAAY;IACrB;;IAGA,MAAM,WAAW,GAAG,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,QAAQ,CAAC;IACnE,GAAG,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnE,IAAA,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC;QAC5C,WAAW;QACX,aAAa;QACb,WAAW;QACX,QAAQ;QACR,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,OAAO;AACR,KAAA,CAAC;IACF,IAAI,kBAAkB,EAAE;QACtB,GAAG,CAAC,0BAA0B,EAAE;YAC9B,SAAS;AACT,YAAA,UAAU,EAAE,kBAAkB,CAAC,MAAM,KAAK,GAAG;AAC9C,SAAA,CAAC;AACF,QAAA,OAAO,kBAAkB;IAC3B;AAEA,IAAA,GAAG,CAAC,sCAAsC,EAAE,EAAE,SAAS,EAAE,CAAC;IAC1D,MAAM,aAAa,GAAG,cAAc,CAAC;AACnC,QAAA,kBAAkB,EAAE,YAAY,CAAC,IAAI,CAAC;AACpC,YAAA,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;AACzB,aAAA;SACF,CAAC;QACF,YAAY;AACb,KAAA,CAAC;IACF,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC;;IAGrD,IAAI,QAAQ,GAAG,WAAW;AAC1B,IAAA,IAAI;QACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;QACvD,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,WAAW;IACnD;AAAE,IAAA,MAAM;;QAEN,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,CAAC;IACpE;IACA,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC;AAErD,IAAA,OAAO,aAAa;AACtB;;;;"}
+{"version":3,"file":"index.js","sources":["../../../../../src/server/middleware/index.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;;;;;AAsBA,MAAM,GAAG,GAAG,KAAK,CAAC,iCAAiC,CAAC;AAEpD,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,WAAwB,KAAI;AACjE,IAAA,MAAM,EACJ,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,aAAa,GACd,GAAG,WAAW;IAEf,OAAO;QACL,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,wBAAwB;QACxB,mBAAmB;QACnB,aAAa;AACd,KAAA,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACtB,CAAC;MAEY,cAAc,GAAG,OAAO,EACnC,OAAO,EACP,gBAAgB,EAChB,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,KAAK,GASN,KAA2B;AAC1B,IAAA,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC;IAE/C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO;IACpD,GAAG,CAAC,oBAAoB,EAAE;QACxB,SAAS;QACT,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,MAAM;AACvB,KAAA,CAAC;IAEF,MAAM,aAAa,GAAG,gBAAgB,CAAC;QACrC,IAAI;QACJ,QAAQ;AACT,KAAA,CAAC;AAEF,IAAA,MAAM,WAAW,GAAG,cAAc,EAAE;IAEpC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,CAAC;IAC3E,GAAG,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAElE,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;QACtD,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,WAAW;AACZ,KAAA,CAAC;IACF,IAAI,uBAAuB,EAAE;QAC3B,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC;AAC/D,QAAA,GAAG,CAAC,2CAA2C,EAAE,EAAE,SAAS,EAAE,CAAC;AAC/D,QAAA,OAAO,uBAAuB;IAChC;;AAGA,IAAA,cAAc,CAAC;QACb,OAAO;QACP,WAAW;AACZ,KAAA,CAAC;AAEF,IAAA,MAAM,kBAAkB,GAAG,MAAM,yBAAyB,CAAC;QACzD,OAAO;QACP,WAAW;QACX,aAAa;AACd,KAAA,CAAC;IACF,IAAI,kBAAkB,EAAE;AACtB,QAAA,GAAG,CAAC,+BAA+B,EAAE,EAAE,SAAS,EAAE,CAAC;AACnD,QAAA,OAAO,kBAAkB;IAC3B;;AAGA,IAAA,MAAM,wBAAwB,GAAG,MAAM,wBAAwB,CAAC;QAC9D,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY,CAAC,IAAI,EAAE;QAC7B,aAAa;QACb,WAAW;QACX,OAAO;AACR,KAAA,CAAC;IACF,IAAI,wBAAwB,EAAE;AAC5B,QAAA,GAAG,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC;AAClD,QAAA,OAAO,wBAAwB;IACjC;;AAGA,IAAA,MAAM,uBAAuB,GAAG,MAAM,iBAAiB,CAAC;QACtD,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY,CAAC,IAAI,EAAE;QAC7B,aAAa;QACb,WAAW;QACX,KAAK;AACN,KAAA,CAAC;IACF,IAAI,uBAAuB,EAAE;AAC3B,QAAA,GAAG,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC;AAClD,QAAA,OAAO,uBAAuB;IAChC;;AAGA,IAAA,MAAM,sBAAsB,GAAG,MAAM,6BAA6B,CAAC;QACjE,OAAO;QACP,aAAa;QACb,WAAW;QACX,OAAO;AACR,KAAA,CAAC;IACF,IAAI,sBAAsB,EAAE;AAC1B,QAAA,GAAG,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,CAAC;AACxD,QAAA,OAAO,sBAAsB;IAC/B;;AAGA,IAAA,IAAI,YAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,CAAC;QAC9C,YAAY,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;QACtD,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC;QACpD,GAAG,CAAC,4BAA4B,EAAE;YAChC,SAAS;YACT,MAAM,EAAE,YAAY,CAAC,MAAM;AAC5B,SAAA,CAAC;IACJ;IAAE,OAAO,KAAK,EAAE;;QAEd,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAEtE,QAAA,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE;YAC9B,GAAG,CAAC,wDAAwD,EAAE;gBAC5D,SAAS;AACV,aAAA,CAAC;YACF,OAAO,YAAY,CAAC,QAAQ,CAC1B,IAAI,GAAG,CACL,YAAY,CAAC;AACX,gBAAA,QAAQ,EAAE,CAAA,EAAG,QAAQ,CAAA,EAAG,MAAM,CAAA,CAAE;gBAChC,QAAQ;gBACR,WAAW;AACZ,aAAA,CAAC,EACF,MAAM,CACP,CACF;QACH;AAEA,QAAA,GAAG,CAAC,4CAA4C,EAAE,EAAE,SAAS,EAAE,CAAC;AAChE,QAAA,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE;AACpC,QAAA,MAAM,cAAc,GAAG;AACrB,YAAA,WAAW,CAAC,iBAAiB;YAC7B,CAAA,EAAG,WAAW,CAAC,iBAAiB,CAAA,GAAA,CAAK;YACrC,CAAA,EAAG,WAAW,CAAC,iBAAiB,CAAA,GAAA,CAAK;SACtC;AACD,QAAA,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,KAAI;YACpC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE;AACnC,gBAAA,MAAM,EAAE,CAAC;AACT,gBAAA,IAAI,EAAE,GAAG;AACV,aAAA,CAAC;AACJ,QAAA,CAAC,CAAC;AACF,QAAA,OAAO,QAAQ;IACjB;;AAGA,IAAA,2BAA2B,CAAC;QAC1B,IAAI;QACJ,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,WAAW;AACZ,KAAA,CAAC;IAEF,IAAI,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,gBAAgB,EAAE;AAC1D,QAAA,GAAG,CAAC,gCAAgC,EAAE,EAAE,SAAS,EAAE,CAAC;AACpD,QAAA,OAAO,YAAY;IACrB;;AAGA,IAAA,MAAM,YAAY,GAAG,MAAM,oCAAoC,CAAC;QAC9D,OAAO;QACP,QAAQ;QACR,aAAa;QACb,WAAW;AACX,QAAA,QAAQ,EAAE,YAAY;AACvB,KAAA,CAAC;IACF,IAAI,YAAY,EAAE;AAChB,QAAA,OAAO,YAAY;IACrB;;IAGA,MAAM,WAAW,GAAG,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,QAAQ,CAAC;IACnE,GAAG,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnE,IAAA,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC;QAC5C,WAAW;QACX,aAAa;QACb,WAAW;QACX,QAAQ;QACR,OAAO;AACP,QAAA,QAAQ,EAAE,YAAY;QACtB,OAAO;AACR,KAAA,CAAC;IACF,IAAI,kBAAkB,EAAE;QACtB,GAAG,CAAC,0BAA0B,EAAE;YAC9B,SAAS;AACT,YAAA,UAAU,EAAE,kBAAkB,CAAC,MAAM,KAAK,GAAG;AAC9C,SAAA,CAAC;AACF,QAAA,OAAO,kBAAkB;IAC3B;AAEA,IAAA,GAAG,CAAC,sCAAsC,EAAE,EAAE,SAAS,EAAE,CAAC;IAC1D,MAAM,aAAa,GAAG,cAAc,CAAC;AACnC,QAAA,kBAAkB,EAAE,YAAY,CAAC,IAAI,CAAC;AACpC,YAAA,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;AACzB,aAAA;SACF,CAAC;QACF,YAAY;AACb,KAAA,CAAC;IACF,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC;;IAGrD,IAAI,QAAQ,GAAG,WAAW;AAC1B,IAAA,IAAI;QACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;QACvD,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,WAAW;IACnD;AAAE,IAAA,MAAM;;QAEN,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,CAAC;IACpE;IACA,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC;AAErD,IAAA,OAAO,aAAa;AACtB;;;;"}

package/dist/esm/server/middleware/postLoginRefresh.js

@@ -0,0 +1,93 @@
+import { NextResponse } from 'next/server';
+import { decodeJwt } from 'jose';
+import { setSellerIdCookiesOnResponse } from '../helpers/sellerCookies.js';
+import { createGlobalAuthErrorRedirect, createIncompleteTokenLogoutRedirect } from '../helpers/authRedirects.js';
+import { debug } from '../../lib/debug.js';
+import { getOrCreateRequestId } from './requestId.js';
+
+const log = debug('@smg-automotive/auth:postLoginRefresh');
+const missingSessionErrorCode = 'MISSING_SESSION';
+const unknownAuthErrorCode = 'UNKNOWN_AUTH_ERROR';
+const postLoginRefreshDelayMs = 1000;
+const sleep = (delayMs) => new Promise((resolve) => {
+    setTimeout(resolve, delayMs);
+});
+const getSafeReturnTo = ({ request, auth0Config, }) => {
+    const fallbackReturnTo = '/';
+    const rawReturnTo = request.nextUrl.searchParams.get('returnTo');
+    if (!rawReturnTo) {
+        return fallbackReturnTo;
+    }
+    try {
+        const returnToUrl = new URL(rawReturnTo, request.nextUrl.origin);
+        if (returnToUrl.origin !== request.nextUrl.origin) {
+            return fallbackReturnTo;
+        }
+        if (returnToUrl.pathname === auth0Config.postLoginRefreshEndpoint ||
+            returnToUrl.pathname === request.nextUrl.pathname) {
+            return fallbackReturnTo;
+        }
+        return `${returnToUrl.pathname}${returnToUrl.search}${returnToUrl.hash}`;
+    }
+    catch (error) {
+        log('Failed to parse returnTo for post-login refresh', { error });
+        return fallbackReturnTo;
+    }
+};
+const handlePostLoginRefreshRequest = async ({ request, auth0Instance, auth0Config, onError, }) => {
+    if (request.nextUrl.pathname !== auth0Config.postLoginRefreshEndpoint)
+        return;
+    const requestId = getOrCreateRequestId(request);
+    const returnTo = getSafeReturnTo({ request, auth0Config });
+    log('Handling post-login refresh request', { requestId, returnTo });
+    const session = await auth0Instance.getSession(request);
+    if (!session) {
+        log('Post-login refresh request failed: no session', { requestId });
+        return createGlobalAuthErrorRedirect({
+            auth0Config,
+            appBaseUrl: request.nextUrl.origin,
+            code: missingSessionErrorCode,
+            returnTo,
+        });
+    }
+    const selectedFromCookie = request.cookies.get(auth0Config.selectedSellerIdCookie.name)?.value;
+    await sleep(postLoginRefreshDelayMs);
+    const response = NextResponse.redirect(new URL(returnTo, request.nextUrl.origin));
+    try {
+        const { token, expiresAt } = await auth0Instance.getAccessToken(request, response, { refresh: true });
+        log('Post-login token refresh completed', { requestId, expiresAt });
+        const decodedToken = decodeJwt(token);
+        if (decodedToken.complete === true) {
+            setSellerIdCookiesOnResponse({
+                decodedToken,
+                response,
+                auth0Config,
+                selectedFromCookie,
+            });
+            return response;
+        }
+        log('Post-login token is still incomplete after refresh', { requestId });
+        return createIncompleteTokenLogoutRedirect({
+            auth0Config,
+            appBaseUrl: request.nextUrl.origin,
+        });
+    }
+    catch (error) {
+        const authError = error;
+        log('Post-login token refresh failed', {
+            requestId,
+            message: authError.message,
+            code: authError.code,
+        });
+        onError?.(authError);
+        return createGlobalAuthErrorRedirect({
+            auth0Config,
+            appBaseUrl: request.nextUrl.origin,
+            code: authError.code || unknownAuthErrorCode,
+            returnTo,
+        });
+    }
+};
+
+export { handlePostLoginRefreshRequest };
+//# sourceMappingURL=postLoginRefresh.js.map

package/dist/esm/server/middleware/postLoginRefresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postLoginRefresh.js","sources":["../../../../../src/server/middleware/postLoginRefresh.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;AAeA,MAAM,GAAG,GAAG,KAAK,CAAC,uCAAuC,CAAC;AAC1D,MAAM,uBAAuB,GAAG,iBAAiB;AACjD,MAAM,oBAAoB,GAAG,oBAAoB;AACjD,MAAM,uBAAuB,GAAG,IAAI;AAEpC,MAAM,KAAK,GAAG,CAAC,OAAe,KAC5B,IAAI,OAAO,CAAO,CAAC,OAAO,KAAI;AAC5B,IAAA,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC;AAC9B,CAAC,CAAC;AAEJ,MAAM,eAAe,GAAG,CAAC,EACvB,OAAO,EACP,WAAW,GAIZ,KAAI;IACH,MAAM,gBAAgB,GAAG,GAAG;AAC5B,IAAA,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;IAEhE,IAAI,CAAC,WAAW,EAAE;AAChB,QAAA,OAAO,gBAAgB;IACzB;AAEA,IAAA,IAAI;AACF,QAAA,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAChE,IAAI,WAAW,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;AACjD,YAAA,OAAO,gBAAgB;QACzB;AAEA,QAAA,IACE,WAAW,CAAC,QAAQ,KAAK,WAAW,CAAC,wBAAwB;YAC7D,WAAW,CAAC,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,EACjD;AACA,YAAA,OAAO,gBAAgB;QACzB;AAEA,QAAA,OAAO,CAAA,EAAG,WAAW,CAAC,QAAQ,CAAA,EAAG,WAAW,CAAC,MAAM,CAAA,EAAG,WAAW,CAAC,IAAI,EAAE;IAC1E;IAAE,OAAO,KAAK,EAAE;AACd,QAAA,GAAG,CAAC,iDAAiD,EAAE,EAAE,KAAK,EAAE,CAAC;AACjE,QAAA,OAAO,gBAAgB;IACzB;AACF,CAAC;AAEM,MAAM,6BAA6B,GAAG,OAAO,EAClD,OAAO,EACP,aAAa,EACb,WAAW,EACX,OAAO,GAMR,KAAkC;IACjC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,wBAAwB;QAAE;AAEvE,IAAA,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC;IAC/C,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC1D,GAAG,CAAC,qCAAqC,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAEnE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;IACvD,IAAI,CAAC,OAAO,EAAE;AACZ,QAAA,GAAG,CAAC,+CAA+C,EAAE,EAAE,SAAS,EAAE,CAAC;AACnE,QAAA,OAAO,6BAA6B,CAAC;YACnC,WAAW;AACX,YAAA,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;AAClC,YAAA,IAAI,EAAE,uBAAuB;YAC7B,QAAQ;AACT,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAC5C,WAAW,CAAC,sBAAsB,CAAC,IAAI,CACxC,EAAE,KAAK;AAER,IAAA,MAAM,KAAK,CAAC,uBAAuB,CAAC;AAEpC,IAAA,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CACpC,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAC1C;AAED,IAAA,IAAI;QACF,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,aAAa,CAAC,cAAc,CAC7D,OAAO,EACP,QAAQ,EACR,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB;QACD,GAAG,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAEnE,QAAA,MAAM,YAAY,GAAG,SAAS,CAAkB,KAAK,CAAC;AACtD,QAAA,IAAI,YAAY,CAAC,QAAQ,KAAK,IAAI,EAAE;AAClC,YAAA,4BAA4B,CAAC;gBAC3B,YAAY;gBACZ,QAAQ;gBACR,WAAW;gBACX,kBAAkB;AACnB,aAAA,CAAC;AACF,YAAA,OAAO,QAAQ;QACjB;AAEA,QAAA,GAAG,CAAC,oDAAoD,EAAE,EAAE,SAAS,EAAE,CAAC;AAExE,QAAA,OAAO,mCAAmC,CAAC;YACzC,WAAW;AACX,YAAA,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;AACnC,SAAA,CAAC;IACJ;IAAE,OAAO,KAAK,EAAE;QACd,MAAM,SAAS,GAAG,KAAiB;QACnC,GAAG,CAAC,iCAAiC,EAAE;YACrC,SAAS;YACT,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,SAAS,CAAC,IAAI;AACrB,SAAA,CAAC;AAEF,QAAA,OAAO,GAAG,SAAS,CAAC;AAEpB,QAAA,OAAO,6BAA6B,CAAC;YACnC,WAAW;AACX,YAAA,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;AAClC,YAAA,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,oBAAoB;YAC5C,QAAQ;AACT,SAAA,CAAC;IACJ;AACF;;;;"}

package/dist/fixtures.d.ts

@@ -1,4 +1,4 @@
-import { A as Auth0Config, E as EnrichedSessionUser, a as Entitlements } from './sessionUser-qBgR12pF.js';
+import { A as Auth0Config, E as EnrichedSessionUser, a as Entitlements } from './sessionUser-sPuqul_E.js';
 import '@smg-automotive/i18n-pkg';
 import '@auth0/nextjs-auth0/types';
 

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-export { A as AuthProvider, a as AuthProviderProps } from './Auth-CJU-jY1w.js';
-import { N as NonEmptyArray, M as MfaEnrollmentType, b as MfaEnrollmentTicket, A as Auth0Config, E as EnrichedSessionUser } from './sessionUser-qBgR12pF.js';
-export { c as Auth0User, d as Auth0UserType, e as AuthSessionData, I as IncompleteSessionUser, S as SessionInfo, f as SessionUser } from './sessionUser-qBgR12pF.js';
+export { A as AuthProvider, a as AuthProviderProps } from './Auth-lfX7CuuS.js';
+import { N as NonEmptyArray, M as MfaEnrollmentType, b as MfaEnrollmentTicket, A as Auth0Config, E as EnrichedSessionUser } from './sessionUser-sPuqul_E.js';
+export { c as Auth0User, d as Auth0UserType, e as AuthSessionData, I as IncompleteSessionUser, S as SessionInfo, f as SessionUser } from './sessionUser-sPuqul_E.js';
 import { Language } from '@smg-automotive/i18n-pkg';
 import 'react';
 import '@auth0/nextjs-auth0/types';

package/dist/server.d.ts

@@ -1,7 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { Language } from '@smg-automotive/i18n-pkg';
-import { a as AuthProviderProps } from './Auth-CJU-jY1w.js';
-import { f as SessionUser, S as SessionInfo } from './sessionUser-qBgR12pF.js';
+import { a as AuthProviderProps } from './Auth-lfX7CuuS.js';
+import { f as SessionUser, S as SessionInfo } from './sessionUser-sPuqul_E.js';
 import 'react';
 import '@auth0/nextjs-auth0/types';
 

package/dist/{sessionUser-qBgR12pF.d.ts → sessionUser-sPuqul_E.d.ts}

@@ -15,6 +15,7 @@ type Auth0Config = {
     logoutEndpoint: string;
     tokenEndpoint: string;
     callbackEndpoint: string;
+    postLoginRefreshEndpoint: string;
     userProfileEndpoint: string;
     switchTenantEndpoint: string;
     selectedSellerIdCookie: CookieOptions;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smg-automotive/auth",
-  "version": "9.1.1",
+  "version": "9.1.3",
   "description": "SMG Automotive auth package",
   "exports": {
     ".": {
@@ -74,7 +74,7 @@
     "@rollup/plugin-commonjs": "29.0.2",
     "@rollup/plugin-node-resolve": "16.0.3",
     "@rollup/plugin-typescript": "12.3.0",
-    "@smg-automotive/eslint-config": "6.0.1",
+    "@smg-automotive/eslint-config": "6.0.2",
     "@testing-library/dom": "10.4.1",
     "@testing-library/jest-dom": "6.9.1",
     "@testing-library/react": "16.3.2",
@@ -82,7 +82,7 @@
     "@types/debug": "4.1.13",
     "@types/react": "19.2.14",
     "dotenv": "17.4.2",
-    "eslint": "10.2.0",
+    "eslint": "10.2.1",
     "jest": "30.3.0",
     "jest-environment-jsdom": "30.3.0",
     "jest-fetch-mock": "3.0.3",
@@ -90,7 +90,7 @@
     "react": "19.2.5",
     "react-dom": "19.2.5",
     "rimraf": "6.1.3",
-    "rollup": "4.60.1",
+    "rollup": "4.60.2",
     "rollup-plugin-dts": "6.4.1",
     "rollup-plugin-peer-deps-external": "2.2.4",
     "rollup-plugin-preserve-directives": "0.4.0",
@@ -98,11 +98,11 @@
     "swr": "2.4.1",
     "ts-jest": "29.4.9",
     "ts-node": "10.9.2",
-    "typescript": "6.0.2",
+    "typescript": "6.0.3",
     "whatwg-fetch": "3.6.20"
   },
   "dependencies": {
-    "@auth0/nextjs-auth0": "4.18.0",
+    "@auth0/nextjs-auth0": "4.19.0",
     "@smg-automotive/api-client-pkg": "4.6.0",
     "@smg-automotive/i18n-pkg": "3.2.0",
     "debug": "4.4.3",