@stackframe/stack 2.5.8 → 2.5.10

package/dist/esm/providers/stack-provider-client.js

@@ -11,9 +11,7 @@ var StackContext = React.createContext(null);
 function StackProviderClient(props) {
   const appJson = props.appJson;
   const app = StackClientApp[stackAppInternalsSymbol].fromClientJson(appJson);
-  if (process.env.NODE_ENV === "development") {
-    globalVar.stackApp = app;
-  }
+  globalVar.__STACK_AUTH__ = { app };
   return /* @__PURE__ */ jsx(StackContext.Provider, { value: { app }, children: props.children });
 }
 function UserSetter(props) {

package/dist/esm/providers/stack-provider-client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/providers/stack-provider-client.tsx"],"sourcesContent":["\"use client\";\n\nimport { CurrentUserCrud } from \"@stackframe/stack-shared/dist/interface/crud/current-user\";\nimport { globalVar } from \"@stackframe/stack-shared/dist/utils/globals\";\nimport React, { useEffect } from \"react\";\nimport { useStackApp } from \"..\";\nimport { StackClientApp, StackClientAppJson, stackAppInternalsSymbol } from \"../lib/stack-app\";\n\nexport const StackContext = React.createContext<null | {\n  app: StackClientApp<true>,\n}>(null);\n\nexport function StackProviderClient(props: {\n  appJson: StackClientAppJson<true, string>,\n  children?: React.ReactNode,\n}) {\n  const appJson = props.appJson;\n  const app = StackClientApp[stackAppInternalsSymbol].fromClientJson(appJson);\n\n  if (process.env.NODE_ENV === \"development\") {\n    globalVar.stackApp = app;\n  }\n\n  return (\n    <StackContext.Provider value={{ app }}>\n      {props.children}\n    </StackContext.Provider>\n  );\n}\n\nexport function UserSetter(props: { userJsonPromise: Promise<CurrentUserCrud['Client']['Read'] | null> }) {\n  const app = useStackApp();\n  useEffect(() => {\n    const promise = (async () => await props.userJsonPromise)();  // there is a Next.js bug where Promises passed by server components return `undefined` as their `then` value, so wrap it in a normal promise\n    app[stackAppInternalsSymbol].setCurrentUser(promise);\n  }, []);\n  return null;\n}\n"],"mappings":";;;AAGA,SAAS,iBAAiB;AAC1B,OAAO,SAAS,iBAAiB;AACjC,SAAS,mBAAmB;AAC5B,SAAS,gBAAoC,+BAA+B;AAkBxE;AAhBG,IAAM,eAAe,MAAM,cAE/B,IAAI;AAEA,SAAS,oBAAoB,OAGjC;AACD,QAAM,UAAU,MAAM;AACtB,QAAM,MAAM,eAAe,uBAAuB,EAAE,eAAe,OAAO;AAE1E,MAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,cAAU,WAAW;AAAA,EACvB;AAEA,SACE,oBAAC,aAAa,UAAb,EAAsB,OAAO,EAAE,IAAI,GACjC,gBAAM,UACT;AAEJ;AAEO,SAAS,WAAW,OAA+E;AACxG,QAAM,MAAM,YAAY;AACxB,YAAU,MAAM;AACd,UAAM,WAAW,YAAY,MAAM,MAAM,iBAAiB;AAC1D,QAAI,uBAAuB,EAAE,eAAe,OAAO;AAAA,EACrD,GAAG,CAAC,CAAC;AACL,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../src/providers/stack-provider-client.tsx"],"sourcesContent":["\"use client\";\n\nimport { CurrentUserCrud } from \"@stackframe/stack-shared/dist/interface/crud/current-user\";\nimport { globalVar } from \"@stackframe/stack-shared/dist/utils/globals\";\nimport React, { useEffect } from \"react\";\nimport { useStackApp } from \"..\";\nimport { StackClientApp, StackClientAppJson, stackAppInternalsSymbol } from \"../lib/stack-app\";\n\nexport const StackContext = React.createContext<null | {\n  app: StackClientApp<true>,\n}>(null);\n\nexport function StackProviderClient(props: {\n  appJson: StackClientAppJson<true, string>,\n  children?: React.ReactNode,\n}) {\n  const appJson = props.appJson;\n  const app = StackClientApp[stackAppInternalsSymbol].fromClientJson(appJson);\n\n  globalVar.__STACK_AUTH__ = { app };\n\n  return (\n    <StackContext.Provider value={{ app }}>\n      {props.children}\n    </StackContext.Provider>\n  );\n}\n\nexport function UserSetter(props: { userJsonPromise: Promise<CurrentUserCrud['Client']['Read'] | null> }) {\n  const app = useStackApp();\n  useEffect(() => {\n    const promise = (async () => await props.userJsonPromise)();  // there is a Next.js bug where Promises passed by server components return `undefined` as their `then` value, so wrap it in a normal promise\n    app[stackAppInternalsSymbol].setCurrentUser(promise);\n  }, []);\n  return null;\n}\n"],"mappings":";;;AAGA,SAAS,iBAAiB;AAC1B,OAAO,SAAS,iBAAiB;AACjC,SAAS,mBAAmB;AAC5B,SAAS,gBAAoC,+BAA+B;AAgBxE;AAdG,IAAM,eAAe,MAAM,cAE/B,IAAI;AAEA,SAAS,oBAAoB,OAGjC;AACD,QAAM,UAAU,MAAM;AACtB,QAAM,MAAM,eAAe,uBAAuB,EAAE,eAAe,OAAO;AAE1E,YAAU,iBAAiB,EAAE,IAAI;AAEjC,SACE,oBAAC,aAAa,UAAb,EAAsB,OAAO,EAAE,IAAI,GACjC,gBAAM,UACT;AAEJ;AAEO,SAAS,WAAW,OAA+E;AACxG,QAAM,MAAM,YAAY;AACxB,YAAU,MAAM;AACd,UAAM,WAAW,YAAY,MAAM,MAAM,iBAAiB;AAC1D,QAAI,uBAAuB,EAAE,eAAe,OAAO;AAAA,EACrD,GAAG,CAAC,CAAC;AACL,SAAO;AACT;","names":[]}

package/dist/esm/utils/url.js

@@ -12,8 +12,16 @@ function autoRedirect() {
   }
 }
 function constructRedirectUrl(redirectUrl) {
+  const retainedQueryParams = ["after_auth_return_to"];
+  const currentUrl = new URL(window.location.href);
   const url = redirectUrl ? new URL(redirectUrl, window.location.href) : new URL(window.location.href);
-  return url.href.split("#")[0];
+  for (const param of retainedQueryParams) {
+    if (currentUrl.searchParams.has(param)) {
+      url.searchParams.set(param, currentUrl.searchParams.get(param));
+    }
+  }
+  url.hash = "";
+  return url.toString();
 }
 export {
   autoRedirect,

package/dist/esm/utils/url.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/utils/url.tsx"],"sourcesContent":["export function autoRedirect() {\n  const url = new URL(window.location.href);\n  const redirectUrl = url.searchParams.get(\"auto-redirect-url\");\n  if (redirectUrl) {\n    const urlObject = new URL(redirectUrl);\n    if (urlObject.origin !== window.location.origin) {\n      throw new Error(\"auto-redirect-url is not same origin (\" + urlObject.origin + \" !== \" + window.location.origin + \")\");\n    }\n    url.searchParams.delete(\"auto-redirect-url\");\n    window.location.replace(urlObject.href);\n  }\n}\n\nexport function constructRedirectUrl(redirectUrl: URL | string | undefined) {\n  const url = redirectUrl ? new URL(redirectUrl, window.location.href) : new URL(window.location.href);\n  return url.href.split(\"#\")[0];\n}\n"],"mappings":";AAAO,SAAS,eAAe;AAC7B,QAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,QAAM,cAAc,IAAI,aAAa,IAAI,mBAAmB;AAC5D,MAAI,aAAa;AACf,UAAM,YAAY,IAAI,IAAI,WAAW;AACrC,QAAI,UAAU,WAAW,OAAO,SAAS,QAAQ;AAC/C,YAAM,IAAI,MAAM,2CAA2C,UAAU,SAAS,UAAU,OAAO,SAAS,SAAS,GAAG;AAAA,IACtH;AACA,QAAI,aAAa,OAAO,mBAAmB;AAC3C,WAAO,SAAS,QAAQ,UAAU,IAAI;AAAA,EACxC;AACF;AAEO,SAAS,qBAAqB,aAAuC;AAC1E,QAAM,MAAM,cAAc,IAAI,IAAI,aAAa,OAAO,SAAS,IAAI,IAAI,IAAI,IAAI,OAAO,SAAS,IAAI;AACnG,SAAO,IAAI,KAAK,MAAM,GAAG,EAAE,CAAC;AAC9B;","names":[]}
+{"version":3,"sources":["../../../src/utils/url.tsx"],"sourcesContent":["export function autoRedirect() {\n  const url = new URL(window.location.href);\n  const redirectUrl = url.searchParams.get(\"auto-redirect-url\");\n  if (redirectUrl) {\n    const urlObject = new URL(redirectUrl);\n    if (urlObject.origin !== window.location.origin) {\n      throw new Error(\"auto-redirect-url is not same origin (\" + urlObject.origin + \" !== \" + window.location.origin + \")\");\n    }\n    url.searchParams.delete(\"auto-redirect-url\");\n    window.location.replace(urlObject.href);\n  }\n}\n\nexport function constructRedirectUrl(redirectUrl: URL | string | undefined) {\n  const retainedQueryParams = [\"after_auth_return_to\"];\n  const currentUrl = new URL(window.location.href);\n  const url = redirectUrl ? new URL(redirectUrl, window.location.href) : new URL(window.location.href);\n  for (const param of retainedQueryParams) {\n    if (currentUrl.searchParams.has(param)) {\n      url.searchParams.set(param, currentUrl.searchParams.get(param)!);\n    }\n  }\n  url.hash = \"\";\n  return url.toString();\n}\n"],"mappings":";AAAO,SAAS,eAAe;AAC7B,QAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,QAAM,cAAc,IAAI,aAAa,IAAI,mBAAmB;AAC5D,MAAI,aAAa;AACf,UAAM,YAAY,IAAI,IAAI,WAAW;AACrC,QAAI,UAAU,WAAW,OAAO,SAAS,QAAQ;AAC/C,YAAM,IAAI,MAAM,2CAA2C,UAAU,SAAS,UAAU,OAAO,SAAS,SAAS,GAAG;AAAA,IACtH;AACA,QAAI,aAAa,OAAO,mBAAmB;AAC3C,WAAO,SAAS,QAAQ,UAAU,IAAI;AAAA,EACxC;AACF;AAEO,SAAS,qBAAqB,aAAuC;AAC1E,QAAM,sBAAsB,CAAC,sBAAsB;AACnD,QAAM,aAAa,IAAI,IAAI,OAAO,SAAS,IAAI;AAC/C,QAAM,MAAM,cAAc,IAAI,IAAI,aAAa,OAAO,SAAS,IAAI,IAAI,IAAI,IAAI,OAAO,SAAS,IAAI;AACnG,aAAW,SAAS,qBAAqB;AACvC,QAAI,WAAW,aAAa,IAAI,KAAK,GAAG;AACtC,UAAI,aAAa,IAAI,OAAO,WAAW,aAAa,IAAI,KAAK,CAAE;AAAA,IACjE;AAAA,EACF;AACA,MAAI,OAAO;AACX,SAAO,IAAI,SAAS;AACtB;","names":[]}

package/dist/index.d.mts

@@ -12,20 +12,20 @@ export { MessageCard } from './components/message-cards/message-card.mjs';
 export { UserButton } from './components/user-button.mjs';
 export { AccountSettings } from './components-page/account-settings.mjs';
 export { AuthPage } from './components-page/auth-page.mjs';
-export { CredentialSignInForm as CredentialSignIn } from './components/credential-sign-in-form.mjs';
-export { CredentialSignUpForm as CredentialSignUp } from './components/credential-sign-up-form.mjs';
-export { MagicLinkSignInForm as MagicLinkSignIn } from './components/magic-link-sign-in-form.mjs';
+export { CredentialSignIn } from './components/credential-sign-in.mjs';
+export { CredentialSignUp } from './components/credential-sign-up.mjs';
+export { MagicLinkSignIn } from './components/magic-link-sign-in.mjs';
 export { OAuthButton } from './components/oauth-button.mjs';
 export { OAuthButtonGroup } from './components/oauth-button-group.mjs';
-export { SelectedTeamSwitcher, SelectedTeamSwitcher as TeamSwitcher } from './components/selected-team-switcher.mjs';
+export { SelectedTeamSwitcher } from './components/selected-team-switcher.mjs';
 import 'react/jsx-runtime';
 import 'react';
 import '@stackframe/stack-shared';
 import '@stackframe/stack-shared/dist/helpers/production-mode';
-import '@stackframe/stack-shared/dist/interface/clientInterface';
 import '@stackframe/stack-shared/dist/interface/crud/api-keys';
 import '@stackframe/stack-shared/dist/interface/crud/current-user';
 import '@stackframe/stack-shared/dist/interface/crud/email-templates';
 import '@stackframe/stack-shared/dist/interface/crud/team-permissions';
 import '@stackframe/stack-shared/dist/sessions';
 import '@stackframe/stack-shared/dist/utils/json';
+import '@stackframe/stack-shared/dist/utils/oauth';

package/dist/index.d.ts

@@ -12,20 +12,20 @@ export { MessageCard } from './components/message-cards/message-card.js';
 export { UserButton } from './components/user-button.js';
 export { AccountSettings } from './components-page/account-settings.js';
 export { AuthPage } from './components-page/auth-page.js';
-export { CredentialSignInForm as CredentialSignIn } from './components/credential-sign-in-form.js';
-export { CredentialSignUpForm as CredentialSignUp } from './components/credential-sign-up-form.js';
-export { MagicLinkSignInForm as MagicLinkSignIn } from './components/magic-link-sign-in-form.js';
+export { CredentialSignIn } from './components/credential-sign-in.js';
+export { CredentialSignUp } from './components/credential-sign-up.js';
+export { MagicLinkSignIn } from './components/magic-link-sign-in.js';
 export { OAuthButton } from './components/oauth-button.js';
 export { OAuthButtonGroup } from './components/oauth-button-group.js';
-export { SelectedTeamSwitcher, SelectedTeamSwitcher as TeamSwitcher } from './components/selected-team-switcher.js';
+export { SelectedTeamSwitcher } from './components/selected-team-switcher.js';
 import 'react/jsx-runtime';
 import 'react';
 import '@stackframe/stack-shared';
 import '@stackframe/stack-shared/dist/helpers/production-mode';
-import '@stackframe/stack-shared/dist/interface/clientInterface';
 import '@stackframe/stack-shared/dist/interface/crud/api-keys';
 import '@stackframe/stack-shared/dist/interface/crud/current-user';
 import '@stackframe/stack-shared/dist/interface/crud/email-templates';
 import '@stackframe/stack-shared/dist/interface/crud/team-permissions';
 import '@stackframe/stack-shared/dist/sessions';
 import '@stackframe/stack-shared/dist/utils/json';
+import '@stackframe/stack-shared/dist/utils/oauth';

package/dist/index.js

@@ -33,11 +33,11 @@ var src_exports = {};
 __export(src_exports, {
   AccountSettings: () => import_account_settings.AccountSettings,
   AuthPage: () => import_auth_page.AuthPage,
-  CredentialSignIn: () => import_credential_sign_in_form.CredentialSignInForm,
-  CredentialSignUp: () => import_credential_sign_up_form.CredentialSignUpForm,
+  CredentialSignIn: () => import_credential_sign_in.CredentialSignIn,
+  CredentialSignUp: () => import_credential_sign_up.CredentialSignUp,
   EmailVerification: () => import_email_verification.EmailVerification,
   ForgotPassword: () => import_forgot_password.ForgotPassword,
-  MagicLinkSignIn: () => import_magic_link_sign_in_form.MagicLinkSignInForm,
+  MagicLinkSignIn: () => import_magic_link_sign_in.MagicLinkSignIn,
   MessageCard: () => import_message_card.MessageCard,
   OAuthButton: () => import_oauth_button.OAuthButton,
   OAuthButtonGroup: () => import_oauth_button_group.OAuthButtonGroup,
@@ -48,7 +48,6 @@ __export(src_exports, {
   StackHandler: () => import_stack_handler.default,
   StackProvider: () => import_stack_provider.default,
   StackTheme: () => import_theme_provider.StackTheme,
-  TeamSwitcher: () => import_selected_team_switcher.SelectedTeamSwitcher,
   UserButton: () => import_user_button.UserButton,
   useStackApp: () => import_hooks.useStackApp,
   useUser: () => import_hooks.useUser
@@ -68,9 +67,9 @@ var import_message_card = require("./components/message-cards/message-card");
 var import_user_button = require("./components/user-button");
 var import_account_settings = require("./components-page/account-settings");
 var import_auth_page = require("./components-page/auth-page");
-var import_credential_sign_in_form = require("./components/credential-sign-in-form");
-var import_credential_sign_up_form = require("./components/credential-sign-up-form");
-var import_magic_link_sign_in_form = require("./components/magic-link-sign-in-form");
+var import_credential_sign_in = require("./components/credential-sign-in");
+var import_credential_sign_up = require("./components/credential-sign-up");
+var import_magic_link_sign_in = require("./components/magic-link-sign-in");
 var import_oauth_button = require("./components/oauth-button");
 var import_oauth_button_group = require("./components/oauth-button-group");
 var import_selected_team_switcher = require("./components/selected-team-switcher");
@@ -93,7 +92,6 @@ var import_selected_team_switcher = require("./components/selected-team-switcher
   StackHandler,
   StackProvider,
   StackTheme,
-  TeamSwitcher,
   UserButton,
   useStackApp,
   useUser,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.tsx"],"sourcesContent":["export { default as StackProvider } from \"./providers/stack-provider\";\nexport { useUser, useStackApp } from \"./lib/hooks\";\nexport { default as StackHandler } from \"./components-page/stack-handler\";\nexport { StackTheme } from './providers/theme-provider';\nexport * from './lib/stack-app';\n\nexport { SignIn } from \"./components-page/sign-in\";\nexport { SignUp } from \"./components-page/sign-up\";\nexport { EmailVerification } from \"./components-page/email-verification\";\nexport { PasswordReset } from \"./components-page/password-reset\";\nexport { ForgotPassword } from \"./components-page/forgot-password\";\nexport { MessageCard } from \"./components/message-cards/message-card\";\nexport { UserButton } from \"./components/user-button\";\nexport { AccountSettings } from \"./components-page/account-settings\";\nexport { AuthPage } from \"./components-page/auth-page\";\nexport { CredentialSignInForm as CredentialSignIn } from \"./components/credential-sign-in-form\";\nexport { CredentialSignUpForm as CredentialSignUp } from \"./components/credential-sign-up-form\";\nexport { MagicLinkSignInForm as MagicLinkSignIn } from \"./components/magic-link-sign-in-form\";\nexport { OAuthButton } from \"./components/oauth-button\";\nexport { OAuthButtonGroup } from \"./components/oauth-button-group\";\n\nexport {\n  SelectedTeamSwitcher,\n  /**\n   * @deprecated This was renamed to `SelectedTeamSwitcher`.\n   */\n  SelectedTeamSwitcher as TeamSwitcher,\n} from \"./components/selected-team-switcher\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4BAAyC;AACzC,mBAAqC;AACrC,2BAAwC;AACxC,4BAA2B;AAC3B,wBAAc,4BAJd;AAMA,qBAAuB;AACvB,qBAAuB;AACvB,gCAAkC;AAClC,4BAA8B;AAC9B,6BAA+B;AAC/B,0BAA4B;AAC5B,yBAA2B;AAC3B,8BAAgC;AAChC,uBAAyB;AACzB,qCAAyD;AACzD,qCAAyD;AACzD,qCAAuD;AACvD,0BAA4B;AAC5B,gCAAiC;AAEjC,oCAMO;","names":[]}
+{"version":3,"sources":["../src/index.tsx"],"sourcesContent":["export { default as StackProvider } from \"./providers/stack-provider\";\nexport { useUser, useStackApp } from \"./lib/hooks\";\nexport { default as StackHandler } from \"./components-page/stack-handler\";\nexport { StackTheme } from './providers/theme-provider';\nexport * from './lib/stack-app';\n\nexport { SignIn } from \"./components-page/sign-in\";\nexport { SignUp } from \"./components-page/sign-up\";\nexport { EmailVerification } from \"./components-page/email-verification\";\nexport { PasswordReset } from \"./components-page/password-reset\";\nexport { ForgotPassword } from \"./components-page/forgot-password\";\nexport { MessageCard } from \"./components/message-cards/message-card\";\nexport { UserButton } from \"./components/user-button\";\nexport { AccountSettings } from \"./components-page/account-settings\";\nexport { AuthPage } from \"./components-page/auth-page\";\nexport { CredentialSignIn as CredentialSignIn } from \"./components/credential-sign-in\";\nexport { CredentialSignUp as CredentialSignUp } from \"./components/credential-sign-up\";\nexport { MagicLinkSignIn as MagicLinkSignIn } from \"./components/magic-link-sign-in\";\nexport { OAuthButton } from \"./components/oauth-button\";\nexport { OAuthButtonGroup } from \"./components/oauth-button-group\";\n\nexport {\n  SelectedTeamSwitcher,\n} from \"./components/selected-team-switcher\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4BAAyC;AACzC,mBAAqC;AACrC,2BAAwC;AACxC,4BAA2B;AAC3B,wBAAc,4BAJd;AAMA,qBAAuB;AACvB,qBAAuB;AACvB,gCAAkC;AAClC,4BAA8B;AAC9B,6BAA+B;AAC/B,0BAA4B;AAC5B,yBAA2B;AAC3B,8BAAgC;AAChC,uBAAyB;AACzB,gCAAqD;AACrD,gCAAqD;AACrD,gCAAmD;AACnD,0BAA4B;AAC5B,gCAAiC;AAEjC,oCAEO;","names":[]}

package/dist/lib/auth.js

@@ -25,10 +25,10 @@ __export(auth_exports, {
   signInWithOAuth: () => signInWithOAuth
 });
 module.exports = __toCommonJS(auth_exports);
-var import_cookie = require("./cookie");
-var import_url = require("../utils/url");
-var import_promises = require("@stackframe/stack-shared/dist/utils/promises");
 var import_errors = require("@stackframe/stack-shared/dist/utils/errors");
+var import_promises = require("@stackframe/stack-shared/dist/utils/promises");
+var import_url = require("../utils/url");
+var import_cookie = require("./cookie");
 async function signInWithOAuth(iface, options) {
   const { codeChallenge, state } = await (0, import_cookie.saveVerifierAndState)();
   const location = await iface.getOAuthUrl({

package/dist/lib/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/lib/auth.ts"],"sourcesContent":["import { StackClientInterface } from \"@stackframe/stack-shared\";\nimport { saveVerifierAndState, getVerifierAndState } from \"./cookie\";\nimport { constructRedirectUrl } from \"../utils/url\";\nimport { neverResolve } from \"@stackframe/stack-shared/dist/utils/promises\";\nimport { StackAssertionError } from \"@stackframe/stack-shared/dist/utils/errors\";\nimport { InternalSession } from \"@stackframe/stack-shared/dist/sessions\";\n\nexport async function signInWithOAuth(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  }\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl),\n    codeChallenge,\n    state,\n    type: \"authenticate\",\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\nexport async function addNewOAuthProviderOrScope(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl),\n    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href),\n    codeChallenge,\n    state,\n    type: \"link\",\n    session,\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\n/**\n * Checks if the current URL has the query parameters for an OAuth callback, and if so, removes them.\n *\n * Must be synchronous for the logic in callOAuthCallback to work without race conditions.\n */\nfunction consumeOAuthCallbackQueryParams(expectedState: string): null | URL {\n  const requiredParams = [\"code\", \"state\"];\n  const originalUrl = new URL(window.location.href);\n  for (const param of requiredParams) {\n    if (!originalUrl.searchParams.has(param)) {\n      return null;\n    }\n  }\n\n  if (expectedState !== originalUrl.searchParams.get(\"state\")) {\n    // If the state doesn't match, then the callback wasn't meant for us.\n    // Maybe the website uses another OAuth library?\n    return null;\n  }\n\n\n  const newUrl = new URL(originalUrl);\n  for (const param of requiredParams) {\n    newUrl.searchParams.delete(param);\n  }\n\n  // let's get rid of the authorization code in the history as we\n  // don't redirect to `redirectUrl` if there's a validation error\n  // (as the redirectUrl might be malicious!).\n  //\n  // We use history.replaceState instead of location.assign(...) to\n  // prevent an unnecessary reload\n  window.history.replaceState({}, \"\", newUrl.toString());\n\n  return originalUrl;\n}\n\nexport async function callOAuthCallback(\n  iface: StackClientInterface,\n  redirectUrl: string,\n) {\n  // note: this part of the function (until the return) needs\n  // to be synchronous, to prevent race conditions when\n  // callOAuthCallback is called multiple times in parallel\n  const { codeVerifier, state } = getVerifierAndState();\n  if (!codeVerifier || !state) {\n    throw new Error(\"Invalid OAuth callback URL parameters. It seems like the OAuth flow was interrupted, so please try again.\");\n  }\n  const originalUrl = consumeOAuthCallbackQueryParams(state);\n  if (!originalUrl) return null;\n\n  // the rest can be asynchronous (we now know that we are the\n  // intended recipient of the callback)\n  try {\n    return await iface.callOAuthCallback({\n      oauthParams: originalUrl.searchParams,\n      redirectUri: constructRedirectUrl(redirectUrl),\n      codeVerifier,\n      state,\n    });\n  } catch (e) {\n    throw new StackAssertionError(\"Error signing in during OAuth callback. Please try again.\", { cause: e });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAA0D;AAC1D,iBAAqC;AACrC,sBAA6B;AAC7B,oBAAoC;AAGpC,eAAsB,gBACpB,OACA,SAMA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,UAAM,oCAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,iBAAa,iCAAqB,QAAQ,WAAW;AAAA,IACrD,sBAAkB,iCAAqB,QAAQ,gBAAgB;AAAA,IAC/D;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,YAAM,8BAAa;AACrB;AAEA,eAAsB,2BACpB,OACA,SAMA,SACA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,UAAM,oCAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,iBAAa,iCAAqB,QAAQ,WAAW;AAAA,IACrD,sBAAkB,iCAAqB,QAAQ,gBAAgB;AAAA,IAC/D,8BAA0B,iCAAqB,OAAO,SAAS,IAAI;AAAA,IACnE;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,YAAM,8BAAa;AACrB;AAOA,SAAS,gCAAgC,eAAmC;AAC1E,QAAM,iBAAiB,CAAC,QAAQ,OAAO;AACvC,QAAM,cAAc,IAAI,IAAI,OAAO,SAAS,IAAI;AAChD,aAAW,SAAS,gBAAgB;AAClC,QAAI,CAAC,YAAY,aAAa,IAAI,KAAK,GAAG;AACxC,aAAO;AAAA,IACT;AAAA,EACF;AAEA,MAAI,kBAAkB,YAAY,aAAa,IAAI,OAAO,GAAG;AAG3D,WAAO;AAAA,EACT;AAGA,QAAM,SAAS,IAAI,IAAI,WAAW;AAClC,aAAW,SAAS,gBAAgB;AAClC,WAAO,aAAa,OAAO,KAAK;AAAA,EAClC;AAQA,SAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC;AAErD,SAAO;AACT;AAEA,eAAsB,kBACpB,OACA,aACA;AAIA,QAAM,EAAE,cAAc,MAAM,QAAI,mCAAoB;AACpD,MAAI,CAAC,gBAAgB,CAAC,OAAO;AAC3B,UAAM,IAAI,MAAM,2GAA2G;AAAA,EAC7H;AACA,QAAM,cAAc,gCAAgC,KAAK;AACzD,MAAI,CAAC,YAAa,QAAO;AAIzB,MAAI;AACF,WAAO,MAAM,MAAM,kBAAkB;AAAA,MACnC,aAAa,YAAY;AAAA,MACzB,iBAAa,iCAAqB,WAAW;AAAA,MAC7C;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,GAAG;AACV,UAAM,IAAI,kCAAoB,6DAA6D,EAAE,OAAO,EAAE,CAAC;AAAA,EACzG;AACF;","names":[]}
+{"version":3,"sources":["../../src/lib/auth.ts"],"sourcesContent":["import { StackClientInterface } from \"@stackframe/stack-shared\";\nimport { InternalSession } from \"@stackframe/stack-shared/dist/sessions\";\nimport { StackAssertionError } from \"@stackframe/stack-shared/dist/utils/errors\";\nimport { neverResolve } from \"@stackframe/stack-shared/dist/utils/promises\";\nimport { constructRedirectUrl } from \"../utils/url\";\nimport { getVerifierAndState, saveVerifierAndState } from \"./cookie\";\n\nexport async function signInWithOAuth(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  }\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl),\n    codeChallenge,\n    state,\n    type: \"authenticate\",\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\nexport async function addNewOAuthProviderOrScope(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl),\n    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href),\n    codeChallenge,\n    state,\n    type: \"link\",\n    session,\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\n/**\n * Checks if the current URL has the query parameters for an OAuth callback, and if so, removes them.\n *\n * Must be synchronous for the logic in callOAuthCallback to work without race conditions.\n */\nfunction consumeOAuthCallbackQueryParams(expectedState: string): null | URL {\n  const requiredParams = [\"code\", \"state\"];\n  const originalUrl = new URL(window.location.href);\n  for (const param of requiredParams) {\n    if (!originalUrl.searchParams.has(param)) {\n      return null;\n    }\n  }\n\n  if (expectedState !== originalUrl.searchParams.get(\"state\")) {\n    // If the state doesn't match, then the callback wasn't meant for us.\n    // Maybe the website uses another OAuth library?\n    return null;\n  }\n\n\n  const newUrl = new URL(originalUrl);\n  for (const param of requiredParams) {\n    newUrl.searchParams.delete(param);\n  }\n\n  // let's get rid of the authorization code in the history as we\n  // don't redirect to `redirectUrl` if there's a validation error\n  // (as the redirectUrl might be malicious!).\n  //\n  // We use history.replaceState instead of location.assign(...) to\n  // prevent an unnecessary reload\n  window.history.replaceState({}, \"\", newUrl.toString());\n\n  return originalUrl;\n}\n\nexport async function callOAuthCallback(\n  iface: StackClientInterface,\n  redirectUrl: string,\n) {\n  // note: this part of the function (until the return) needs\n  // to be synchronous, to prevent race conditions when\n  // callOAuthCallback is called multiple times in parallel\n  const { codeVerifier, state } = getVerifierAndState();\n  if (!codeVerifier || !state) {\n    throw new Error(\"Invalid OAuth callback URL parameters. It seems like the OAuth flow was interrupted, so please try again.\");\n  }\n  const originalUrl = consumeOAuthCallbackQueryParams(state);\n  if (!originalUrl) return null;\n\n  // the rest can be asynchronous (we now know that we are the\n  // intended recipient of the callback)\n  try {\n    return await iface.callOAuthCallback({\n      oauthParams: originalUrl.searchParams,\n      redirectUri: constructRedirectUrl(redirectUrl),\n      codeVerifier,\n      state,\n    });\n  } catch (e) {\n    throw new StackAssertionError(\"Error signing in during OAuth callback. Please try again.\", { cause: e });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,oBAAoC;AACpC,sBAA6B;AAC7B,iBAAqC;AACrC,oBAA0D;AAE1D,eAAsB,gBACpB,OACA,SAMA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,UAAM,oCAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,iBAAa,iCAAqB,QAAQ,WAAW;AAAA,IACrD,sBAAkB,iCAAqB,QAAQ,gBAAgB;AAAA,IAC/D;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,YAAM,8BAAa;AACrB;AAEA,eAAsB,2BACpB,OACA,SAMA,SACA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,UAAM,oCAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,iBAAa,iCAAqB,QAAQ,WAAW;AAAA,IACrD,sBAAkB,iCAAqB,QAAQ,gBAAgB;AAAA,IAC/D,8BAA0B,iCAAqB,OAAO,SAAS,IAAI;AAAA,IACnE;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,YAAM,8BAAa;AACrB;AAOA,SAAS,gCAAgC,eAAmC;AAC1E,QAAM,iBAAiB,CAAC,QAAQ,OAAO;AACvC,QAAM,cAAc,IAAI,IAAI,OAAO,SAAS,IAAI;AAChD,aAAW,SAAS,gBAAgB;AAClC,QAAI,CAAC,YAAY,aAAa,IAAI,KAAK,GAAG;AACxC,aAAO;AAAA,IACT;AAAA,EACF;AAEA,MAAI,kBAAkB,YAAY,aAAa,IAAI,OAAO,GAAG;AAG3D,WAAO;AAAA,EACT;AAGA,QAAM,SAAS,IAAI,IAAI,WAAW;AAClC,aAAW,SAAS,gBAAgB;AAClC,WAAO,aAAa,OAAO,KAAK;AAAA,EAClC;AAQA,SAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC;AAErD,SAAO;AACT;AAEA,eAAsB,kBACpB,OACA,aACA;AAIA,QAAM,EAAE,cAAc,MAAM,QAAI,mCAAoB;AACpD,MAAI,CAAC,gBAAgB,CAAC,OAAO;AAC3B,UAAM,IAAI,MAAM,2GAA2G;AAAA,EAC7H;AACA,QAAM,cAAc,gCAAgC,KAAK;AACzD,MAAI,CAAC,YAAa,QAAO;AAIzB,MAAI;AACF,WAAO,MAAM,MAAM,kBAAkB;AAAA,MACnC,aAAa,YAAY;AAAA,MACzB,iBAAa,iCAAqB,WAAW;AAAA,MAC7C;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,GAAG;AACV,UAAM,IAAI,kCAAoB,6DAA6D,EAAE,OAAO,EAAE,CAAC;AAAA,EACzG;AACF;","names":[]}

package/dist/lib/cookie.js

@@ -38,6 +38,8 @@ __export(cookie_exports, {
   setOrDeleteCookie: () => setOrDeleteCookie
 });
 module.exports = __toCommonJS(cookie_exports);
+var import_force_react_server = require("@stackframe/stack-sc/force-react-server");
+var import_js_cookie = __toESM(require("js-cookie"));
 
 // ../../node_modules/.pnpm/oauth4webapi@2.10.4/node_modules/oauth4webapi/build/index.js
 var USER_AGENT;
@@ -167,8 +169,6 @@ var skipStateCheck = Symbol();
 var expectNoState = Symbol();
 
 // src/lib/cookie.ts
-var import_js_cookie = __toESM(require("js-cookie"));
-var import_force_react_server = require("@stackframe/stack-sc/force-react-server");
 function isRscCookieUnavailableError(e) {
   const allowedMessageSnippets = ["was called outside a request scope", "cookies() expects to have requestAsyncStorage"];
   return typeof e?.message === "string" && allowedMessageSnippets.some((msg) => e.message.includes(msg));
@@ -227,16 +227,16 @@ async function saveVerifierAndState() {
   const codeVerifier = generateRandomCodeVerifier();
   const codeChallenge = await calculatePKCECodeChallenge(codeVerifier);
   const state = generateRandomState();
-  setCookie("stack-code-verifier", codeVerifier, { maxAge: 60 * 10 });
-  setCookie("stack-state", state, { maxAge: 60 * 10 });
+  setCookie("stack-outer-code-verifier", codeVerifier, { maxAge: 60 * 10 });
+  setCookie("stack-outer-state", state, { maxAge: 60 * 10 });
   return {
     codeChallenge,
     state
   };
 }
 function getVerifierAndState() {
-  const codeVerifier = getCookie("stack-code-verifier");
-  const state = getCookie("stack-state");
+  const codeVerifier = getCookie("stack-outer-code-verifier");
+  const state = getCookie("stack-outer-state");
   return {
     codeVerifier,
     state