@stackframe/stack 2.6.19 → 2.6.21

package/dist/esm/lib/stack-app.js

@@ -23,9 +23,9 @@ import * as NextNavigationUnscrambled from "next/navigation";
 import React, { useCallback, useMemo } from "react";
 import { constructRedirectUrl } from "../utils/url";
 import { addNewOAuthProviderOrScope, callOAuthCallback, signInWithOAuth } from "./auth";
-import { deleteCookie, getCookie, setOrDeleteCookie } from "./cookie";
+import { createBrowserCookieHelper, createCookieHelper, deleteCookieClient, getCookieClient, setOrDeleteCookie, setOrDeleteCookieClient } from "./cookie";
 var NextNavigation = scrambleDuringCompileTime(NextNavigationUnscrambled);
-var clientVersion = "js @stackframe/stack@2.6.19";
+var clientVersion = "js @stackframe/stack@2.6.21";
 function getUrls(partial) {
   const handler = partial.handler ?? "/handler";
   const home = partial.home ?? "/";
@@ -195,7 +195,7 @@ var _StackClientAppImpl = class __StackClientAppImpl {
     );
     this._memoryTokenStore = createEmptyTokenStore();
     this._requestTokenStores = /* @__PURE__ */ new WeakMap();
-    this._storedCookieTokenStore = null;
+    this._storedBrowserCookieTokenStore = null;
     /**
      * A map from token stores and session keys to sessions.
      *
@@ -319,38 +319,38 @@ var _StackClientAppImpl = class __StackClientAppImpl {
   get _accessTokenCookieName() {
     return `stack-access`;
   }
-  _getCookieTokenStore() {
+  _getBrowserCookieTokenStore() {
     if (!isBrowserLike()) {
       throw new Error("Cannot use cookie token store on the server!");
     }
-    if (this._storedCookieTokenStore === null) {
+    if (this._storedBrowserCookieTokenStore === null) {
       const getCurrentValue = (old) => {
         const tokens = this._getTokensFromCookies({
-          refreshTokenCookie: getCookie(this._refreshTokenCookieName) ?? getCookie("stack-refresh"),
+          refreshTokenCookie: getCookieClient(this._refreshTokenCookieName) ?? getCookieClient("stack-refresh"),
           // keep old cookie name for backwards-compatibility
-          accessTokenCookie: getCookie(this._accessTokenCookieName)
+          accessTokenCookie: getCookieClient(this._accessTokenCookieName)
         });
         return {
           refreshToken: tokens.refreshToken,
           accessToken: tokens.accessToken ?? (old?.refreshToken === tokens.refreshToken ? old.accessToken : null)
         };
       };
-      this._storedCookieTokenStore = new Store(getCurrentValue(null));
+      this._storedBrowserCookieTokenStore = new Store(getCurrentValue(null));
       let hasSucceededInWriting = true;
       setInterval(() => {
         if (hasSucceededInWriting) {
-          const oldValue = this._storedCookieTokenStore.get();
+          const oldValue = this._storedBrowserCookieTokenStore.get();
           const currentValue = getCurrentValue(oldValue);
           if (!deepPlainEquals(currentValue, oldValue)) {
-            this._storedCookieTokenStore.set(currentValue);
+            this._storedBrowserCookieTokenStore.set(currentValue);
           }
         }
       }, 100);
-      this._storedCookieTokenStore.onChange((value) => {
+      this._storedBrowserCookieTokenStore.onChange((value) => {
         try {
-          setOrDeleteCookie(this._refreshTokenCookieName, value.refreshToken, { maxAge: 60 * 60 * 24 * 365 });
-          setOrDeleteCookie(this._accessTokenCookieName, value.accessToken ? JSON.stringify([value.refreshToken, value.accessToken]) : null, { maxAge: 60 * 60 * 24 });
-          deleteCookie("stack-refresh");
+          setOrDeleteCookieClient(this._refreshTokenCookieName, value.refreshToken, { maxAge: 60 * 60 * 24 * 365 });
+          setOrDeleteCookieClient(this._accessTokenCookieName, value.accessToken ? JSON.stringify([value.refreshToken, value.accessToken]) : null, { maxAge: 60 * 60 * 24 });
+          deleteCookieClient("stack-refresh");
           hasSucceededInWriting = true;
         } catch (e) {
           if (!isBrowserLike()) {
@@ -361,30 +361,31 @@ var _StackClientAppImpl = class __StackClientAppImpl {
         }
       });
     }
-    return this._storedCookieTokenStore;
+    return this._storedBrowserCookieTokenStore;
   }
-  _getOrCreateTokenStore(overrideTokenStoreInit) {
+  _getOrCreateTokenStore(cookieHelper, overrideTokenStoreInit) {
     const tokenStoreInit = overrideTokenStoreInit === void 0 ? this._tokenStoreInit : overrideTokenStoreInit;
     switch (tokenStoreInit) {
       case "cookie": {
-        return this._getCookieTokenStore();
+        return this._getBrowserCookieTokenStore();
       }
       case "nextjs-cookie": {
         if (isBrowserLike()) {
-          return this._getCookieTokenStore();
+          return this._getBrowserCookieTokenStore();
         } else {
           const tokens = this._getTokensFromCookies({
-            refreshTokenCookie: getCookie(this._refreshTokenCookieName) ?? getCookie("stack-refresh"),
+            refreshTokenCookie: cookieHelper.get(this._refreshTokenCookieName) ?? cookieHelper.get("stack-refresh"),
             // keep old cookie name for backwards-compatibility
-            accessTokenCookie: getCookie(this._accessTokenCookieName)
+            accessTokenCookie: cookieHelper.get(this._accessTokenCookieName)
           });
           const store = new Store(tokens);
           store.onChange((value) => {
-            try {
-              setOrDeleteCookie(this._refreshTokenCookieName, value.refreshToken, { maxAge: 60 * 60 * 24 * 365 });
-              setOrDeleteCookie(this._accessTokenCookieName, value.accessToken ? JSON.stringify([value.refreshToken, value.accessToken]) : null, { maxAge: 60 * 60 * 24 });
-            } catch (e) {
-            }
+            runAsynchronously(async () => {
+              await Promise.all([
+                setOrDeleteCookie(this._refreshTokenCookieName, value.refreshToken, { maxAge: 60 * 60 * 24 * 365, noOpIfServerComponent: true }),
+                setOrDeleteCookie(this._accessTokenCookieName, value.accessToken ? JSON.stringify([value.refreshToken, value.accessToken]) : null, { maxAge: 60 * 60 * 24, noOpIfServerComponent: true })
+              ]);
+            });
           });
           return store;
         }
@@ -407,7 +408,7 @@ var _StackClientAppImpl = class __StackClientAppImpl {
             } catch (e) {
               throw new Error(`Invalid x-stack-auth header: ${stackAuthHeader}`, { cause: e });
             }
-            return this._getOrCreateTokenStore({
+            return this._getOrCreateTokenStore(cookieHelper, {
               accessToken: parsed2.accessToken ?? null,
               refreshToken: parsed2.refreshToken ?? null
             });
@@ -431,6 +432,12 @@ var _StackClientAppImpl = class __StackClientAppImpl {
       }
     }
   }
+  _useTokenStore(overrideTokenStoreInit) {
+    suspendIfSsr();
+    const cookieHelper = createBrowserCookieHelper();
+    const tokenStore = this._getOrCreateTokenStore(cookieHelper, overrideTokenStoreInit);
+    return tokenStore;
+  }
   _getSessionFromTokenStore(tokenStore) {
     const tokenObj = tokenStore.get();
     const sessionKey = InternalSession.calculateSessionKey(tokenObj);
@@ -458,12 +465,12 @@ var _StackClientAppImpl = class __StackClientAppImpl {
     sessionsBySessionKey.set(sessionKey, session);
     return session;
   }
-  _getSession(overrideTokenStoreInit) {
-    const tokenStore = this._getOrCreateTokenStore(overrideTokenStoreInit);
+  async _getSession(overrideTokenStoreInit) {
+    const tokenStore = this._getOrCreateTokenStore(await createCookieHelper(), overrideTokenStoreInit);
     return this._getSessionFromTokenStore(tokenStore);
   }
   _useSession(overrideTokenStoreInit) {
-    const tokenStore = this._getOrCreateTokenStore(overrideTokenStoreInit);
+    const tokenStore = this._useTokenStore(overrideTokenStoreInit);
     const subscribe = useCallback((cb) => {
       const { unsubscribe } = tokenStore.onChange(() => {
         cb();
@@ -477,7 +484,7 @@ var _StackClientAppImpl = class __StackClientAppImpl {
     if (!("accessToken" in tokens) || !("refreshToken" in tokens)) {
       throw new StackAssertionError("Invalid tokens object; can't sign in with this", { tokens });
     }
-    const tokenStore = this._getOrCreateTokenStore();
+    const tokenStore = this._getOrCreateTokenStore(await createCookieHelper());
     tokenStore.set(tokens);
   }
   _hasPersistentTokenStore(overrideTokenStoreInit) {
@@ -527,7 +534,7 @@ var _StackClientAppImpl = class __StackClientAppImpl {
       }
     };
   }
-  _clientTeamFromCrud(crud) {
+  _clientTeamFromCrud(crud, session) {
     const app = this;
     return {
       id: crud.id,
@@ -536,28 +543,31 @@ var _StackClientAppImpl = class __StackClientAppImpl {
       clientMetadata: crud.client_metadata,
       clientReadOnlyMetadata: crud.client_read_only_metadata,
       async inviteUser(options) {
+        if (!options.callbackUrl && typeof window === "undefined") {
+          throw new Error("Cannot invite user without a callback URL from the server. Make sure you pass the `callbackUrl` option: `inviteUser({ email, callbackUrl: ... })`");
+        }
         await app._interface.sendTeamInvitation({
           teamId: crud.id,
           email: options.email,
-          session: app._getSession(),
-          callbackUrl: constructRedirectUrl(app.urls.teamInvitation)
+          session,
+          callbackUrl: options.callbackUrl ?? constructRedirectUrl(app.urls.teamInvitation)
         });
       },
       async listUsers() {
-        const result = await app._teamMemberProfilesCache.getOrWait([app._getSession(), crud.id], "write-only");
+        const result = await app._teamMemberProfilesCache.getOrWait([session, crud.id], "write-only");
         return result.map((crud2) => app._clientTeamUserFromCrud(crud2));
       },
       useUsers() {
-        const result = useAsyncCache(app._teamMemberProfilesCache, [app._getSession(), crud.id], "team.useUsers()");
+        const result = useAsyncCache(app._teamMemberProfilesCache, [session, crud.id], "team.useUsers()");
         return result.map((crud2) => app._clientTeamUserFromCrud(crud2));
       },
       async update(data) {
-        await app._interface.updateTeam({ data: teamUpdateOptionsToCrud(data), teamId: crud.id }, app._getSession());
-        await app._currentUserTeamsCache.refresh([app._getSession()]);
+        await app._interface.updateTeam({ data: teamUpdateOptionsToCrud(data), teamId: crud.id }, session);
+        await app._currentUserTeamsCache.refresh([session]);
       }
     };
   }
-  _clientContactChannelFromCrud(crud) {
+  _clientContactChannelFromCrud(crud, session) {
     const app = this;
     return {
       id: crud.id,
@@ -567,15 +577,15 @@ var _StackClientAppImpl = class __StackClientAppImpl {
       isPrimary: crud.is_primary,
       usedForAuth: crud.used_for_auth,
       async sendVerificationEmail() {
-        await app._interface.sendCurrentUserContactChannelVerificationEmail(crud.id, constructRedirectUrl(app.urls.emailVerification), app._getSession());
+        await app._interface.sendCurrentUserContactChannelVerificationEmail(crud.id, constructRedirectUrl(app.urls.emailVerification), session);
       },
       async update(data) {
-        await app._interface.updateClientContactChannel(crud.id, contactChannelUpdateOptionsToCrud(data), app._getSession());
-        await app._clientContactChannelsCache.refresh([app._getSession()]);
+        await app._interface.updateClientContactChannel(crud.id, contactChannelUpdateOptionsToCrud(data), session);
+        await app._clientContactChannelsCache.refresh([session]);
       },
       async delete() {
-        await app._interface.deleteClientContactChannel(crud.id, app._getSession());
-        await app._clientContactChannelsCache.refresh([app._getSession()]);
+        await app._interface.deleteClientContactChannel(crud.id, session);
+        await app._clientContactChannelsCache.refresh([session]);
       }
     };
   }
@@ -631,10 +641,25 @@ var _StackClientAppImpl = class __StackClientAppImpl {
       }
     };
   }
+  _editableTeamProfileFromCrud(crud, session) {
+    const app = this;
+    return {
+      displayName: crud.display_name,
+      profileImageUrl: crud.profile_image_url,
+      async update(update) {
+        await app._interface.updateTeamMemberProfile({
+          teamId: crud.team_id,
+          userId: crud.user_id,
+          profile: {
+            display_name: update.displayName,
+            profile_image_url: update.profileImageUrl
+          }
+        }, session);
+        await app._currentUserTeamProfileCache.refresh([session, crud.team_id]);
+      }
+    };
+  }
   _createBaseUser(crud) {
-    if (!crud) {
-      throw new StackAssertionError("User not found");
-    }
     return {
       id: crud.id,
       displayName: crud.display_name,
@@ -649,32 +674,13 @@ var _StackClientAppImpl = class __StackClientAppImpl {
       otpAuthEnabled: crud.otp_auth_enabled,
       oauthProviders: crud.oauth_providers,
       passkeyAuthEnabled: crud.passkey_auth_enabled,
-      selectedTeam: crud.selected_team && this._clientTeamFromCrud(crud.selected_team),
       isMultiFactorRequired: crud.requires_totp_mfa,
       toClientJson() {
         return crud;
       }
     };
   }
-  _editableTeamProfileFromCrud(crud) {
-    const app = this;
-    return {
-      displayName: crud.display_name,
-      profileImageUrl: crud.profile_image_url,
-      async update(update) {
-        await app._interface.updateTeamMemberProfile({
-          teamId: crud.team_id,
-          userId: crud.user_id,
-          profile: {
-            display_name: update.displayName,
-            profile_image_url: update.profileImageUrl
-          }
-        }, app._getSession());
-        await app._currentUserTeamProfileCache.refresh([app._getSession(), crud.team_id]);
-      }
-    };
-  }
-  _createUserExtra(crud, session) {
+  _createUserExtraFromCurrent(crud, session) {
     const app = this;
     async function getConnectedAccount(id, options) {
       const scopeString = options?.scopes?.join(" ");
@@ -708,11 +714,11 @@ var _StackClientAppImpl = class __StackClientAppImpl {
       },
       async listTeams() {
         const teams = await app._currentUserTeamsCache.getOrWait([session], "write-only");
-        return teams.map((crud2) => app._clientTeamFromCrud(crud2));
+        return teams.map((crud2) => app._clientTeamFromCrud(crud2, session));
       },
       useTeams() {
         const teams = useAsyncCache(app._currentUserTeamsCache, [session], "user.useTeams()");
-        return useMemo(() => teams.map((crud2) => app._clientTeamFromCrud(crud2)), [teams]);
+        return useMemo(() => teams.map((crud2) => app._clientTeamFromCrud(crud2, session)), [teams]);
       },
       async createTeam(data) {
         const crud2 = await app._interface.createClientTeam({
@@ -720,7 +726,7 @@ var _StackClientAppImpl = class __StackClientAppImpl {
           creator_user_id: "me"
         }, session);
         await app._currentUserTeamsCache.refresh([session]);
-        return app._clientTeamFromCrud(crud2);
+        return app._clientTeamFromCrud(crud2, session);
       },
       async leaveTeam(team) {
         await app._interface.leaveTeam(team.id, session);
@@ -750,7 +756,7 @@ var _StackClientAppImpl = class __StackClientAppImpl {
         return await app._updateClientUser(update, session);
       },
       async sendVerificationEmail() {
-        if (!crud?.primary_email) {
+        if (!crud.primary_email) {
           throw new StackAssertionError("User does not have a primary email");
         }
         return await app._sendVerificationEmail(crud.primary_email, session);
@@ -765,13 +771,14 @@ var _StackClientAppImpl = class __StackClientAppImpl {
         await app._currentUserCache.refresh([session]);
         return result;
       },
+      selectedTeam: crud.selected_team && this._clientTeamFromCrud(crud.selected_team, session),
       async getTeamProfile(team) {
         const result = await app._currentUserTeamProfileCache.getOrWait([session, team.id], "write-only");
-        return app._editableTeamProfileFromCrud(result);
+        return app._editableTeamProfileFromCrud(result, session);
       },
       useTeamProfile(team) {
         const result = useAsyncCache(app._currentUserTeamProfileCache, [session, team.id], "user.useTeamProfile()");
-        return app._editableTeamProfileFromCrud(result);
+        return app._editableTeamProfileFromCrud(result, session);
       },
       async delete() {
         await app._interface.deleteCurrentUser(session);
@@ -779,16 +786,16 @@ var _StackClientAppImpl = class __StackClientAppImpl {
       },
       async listContactChannels() {
         const result = await app._clientContactChannelsCache.getOrWait([session], "write-only");
-        return result.map((crud2) => app._clientContactChannelFromCrud(crud2));
+        return result.map((crud2) => app._clientContactChannelFromCrud(crud2, session));
       },
       useContactChannels() {
         const result = useAsyncCache(app._clientContactChannelsCache, [session], "user.useContactChannels()");
-        return result.map((crud2) => app._clientContactChannelFromCrud(crud2));
+        return result.map((crud2) => app._clientContactChannelFromCrud(crud2, session));
       },
       async createContactChannel(data) {
         const crud2 = await app._interface.createClientContactChannel(contactChannelCreateOptionsToCrud("me", data), session);
         await app._clientContactChannelsCache.refresh([session]);
-        return app._clientContactChannelFromCrud(crud2);
+        return app._clientContactChannelFromCrud(crud2, session);
       }
     };
   }
@@ -811,7 +818,7 @@ var _StackClientAppImpl = class __StackClientAppImpl {
     const currentUser = {
       ...this._createBaseUser(crud),
       ...this._createAuth(session),
-      ...this._createUserExtra(crud, session),
+      ...this._createUserExtraFromCurrent(crud, session),
       ...this._isInternalProject() ? this._createInternalUserExtra(session) : {}
     };
     Object.freeze(currentUser);
@@ -943,14 +950,14 @@ var _StackClientAppImpl = class __StackClientAppImpl {
     return await this._interface.acceptTeamInvitation({
       type: "check",
       code,
-      session: this._getSession()
+      session: await this._getSession()
     });
   }
   async acceptTeamInvitation(code) {
     const result = await this._interface.acceptTeamInvitation({
       type: "use",
       code,
-      session: this._getSession()
+      session: await this._getSession()
     });
     if (result.status === "ok") {
       return Result.ok(void 0);
@@ -962,7 +969,7 @@ var _StackClientAppImpl = class __StackClientAppImpl {
     const result = await this._interface.acceptTeamInvitation({
       type: "details",
       code,
-      session: this._getSession()
+      session: await this._getSession()
     });
     if (result.status === "ok") {
       return Result.ok({ teamDisplayName: result.data.team_display_name });
@@ -972,13 +979,13 @@ var _StackClientAppImpl = class __StackClientAppImpl {
   }
   async verifyEmail(code) {
     const result = await this._interface.verifyEmail(code);
-    await this._currentUserCache.refresh([this._getSession()]);
-    await this._clientContactChannelsCache.refresh([this._getSession()]);
+    await this._currentUserCache.refresh([await this._getSession()]);
+    await this._clientContactChannelsCache.refresh([await this._getSession()]);
     return result;
   }
   async getUser(options) {
     this._ensurePersistentTokenStore(options?.tokenStore);
-    const session = this._getSession(options?.tokenStore);
+    const session = await this._getSession(options?.tokenStore);
     const crud = await this._currentUserCache.getOrWait([session], "write-only");
     if (crud === null) {
       switch (options?.or) {
@@ -1061,14 +1068,14 @@ var _StackClientAppImpl = class __StackClientAppImpl {
       return await callback();
     } catch (e) {
       if (e instanceof KnownErrors.MultiFactorAuthenticationRequired) {
-        return Result.ok(await this._experimentalMfa(e, this._getSession()));
+        return Result.ok(await this._experimentalMfa(e, await this._getSession()));
       }
       throw e;
     }
   }
   async signInWithCredential(options) {
     this._ensurePersistentTokenStore();
-    const session = this._getSession();
+    const session = await this._getSession();
     let result;
     try {
       result = await this._catchMfaRequiredError(async () => {
@@ -1092,7 +1099,7 @@ var _StackClientAppImpl = class __StackClientAppImpl {
   }
   async signUpWithCredential(options) {
     this._ensurePersistentTokenStore();
-    const session = this._getSession();
+    const session = await this._getSession();
     const emailVerificationRedirectUrl = constructRedirectUrl(this.urls.emailVerification);
     const result = await this._interface.signUpWithCredential(
       options.email,
@@ -1137,10 +1144,11 @@ var _StackClientAppImpl = class __StackClientAppImpl {
   }
   async signInWithPasskey() {
     this._ensurePersistentTokenStore();
+    const session = await this._getSession();
     let result;
     try {
       result = await this._catchMfaRequiredError(async () => {
-        const initiationResult = await this._interface.initiatePasskeyAuthentication({}, this._getSession());
+        const initiationResult = await this._interface.initiatePasskeyAuthentication({}, session);
         if (initiationResult.status !== "ok") {
           return Result.error(new KnownErrors.PasskeyAuthenticationFailed("Failed to get initiation options for passkey authentication"));
         }
@@ -1295,7 +1303,9 @@ var _StackClientAppImpl = class __StackClientAppImpl {
         };
       },
       setCurrentUser: (userJsonPromise) => {
-        runAsynchronously(this._currentUserCache.forceSetCachedValueAsync([this._getSession()], userJsonPromise));
+        runAsynchronously(async () => {
+          await this._currentUserCache.forceSetCachedValueAsync([await this._getSession()], userJsonPromise);
+        });
       }
     };
   }
@@ -1385,11 +1395,18 @@ var _StackServerAppImpl = class extends _StackClientAppImpl {
   }
   _serverEditableTeamProfileFromCrud(crud) {
     const app = this;
-    const clientProfile = this._editableTeamProfileFromCrud(crud);
     return {
-      ...clientProfile,
+      displayName: crud.display_name,
+      profileImageUrl: crud.profile_image_url,
       async update(update) {
-        await clientProfile.update(update);
+        await app._interface.updateServerTeamMemberProfile({
+          teamId: crud.team_id,
+          userId: crud.user_id,
+          profile: {
+            display_name: update.displayName,
+            profile_image_url: update.profileImageUrl
+          }
+        });
         await app._serverUserTeamProfileCache.refresh([crud.team_id, crud.user_id]);
       }
     };
@@ -1397,7 +1414,12 @@ var _StackServerAppImpl = class extends _StackClientAppImpl {
   _serverContactChannelFromCrud(userId, crud) {
     const app = this;
     return {
-      ...this._clientContactChannelFromCrud(crud),
+      id: crud.id,
+      value: crud.value,
+      type: crud.type,
+      isVerified: crud.is_verified,
+      isPrimary: crud.is_primary,
+      usedForAuth: crud.used_for_auth,
       async sendVerificationEmail() {
         await app._interface.sendServerContactChannelVerificationEmail(userId, crud.id, constructRedirectUrl(app.urls.emailVerification));
       },
@@ -1468,6 +1490,7 @@ var _StackServerAppImpl = class extends _StackClientAppImpl {
       },
       getConnectedAccount,
       useConnectedAccount,
+      selectedTeam: crud.selected_team ? app._serverTeamFromCrud(crud.selected_team) : null,
       async getTeam(teamId) {
         const teams = await this.listTeams();
         return teams.find((t) => t.id === teamId) ?? null;
@@ -1617,11 +1640,13 @@ var _StackServerAppImpl = class extends _StackClientAppImpl {
         await app._serverTeamMemberProfilesCache.refresh([crud.id]);
       },
       async inviteUser(options) {
-        await app._interface.sendTeamInvitation({
+        if (!options.callbackUrl && typeof window === "undefined") {
+          throw new Error("Cannot invite user without a callback URL from the server. Make sure you pass the `callbackUrl` option: `inviteUser({ email, callbackUrl: ... })`");
+        }
+        await app._interface.sendServerTeamInvitation({
           teamId: crud.id,
           email: options.email,
-          session: null,
-          callbackUrl: constructRedirectUrl(app.urls.teamInvitation)
+          callbackUrl: options.callbackUrl ?? constructRedirectUrl(app.urls.teamInvitation)
         });
       }
     };
@@ -1633,11 +1658,10 @@ var _StackServerAppImpl = class extends _StackClientAppImpl {
   }
   async getUser(options) {
     if (typeof options === "string") {
-      const allUsers = await this.listUsers();
-      return allUsers.find((u) => u.id === options) ?? null;
+      return await this.getServerUserById(options);
     } else {
       this._ensurePersistentTokenStore(options?.tokenStore);
-      const session = this._getSession(options?.tokenStore);
+      const session = await this._getSession(options?.tokenStore);
       const crud = await this._currentServerUserCache.getOrWait([session], "write-only");
       if (crud === null) {
         switch (options?.or) {
@@ -1666,12 +1690,11 @@ var _StackServerAppImpl = class extends _StackClientAppImpl {
   }
   useUser(options) {
     if (typeof options === "string") {
-      const users = this.useUsers();
-      return users.find((u) => u.id === options) ?? null;
+      return this.useUserById(options);
     } else {
       this._ensurePersistentTokenStore(options?.tokenStore);
       const router = NextNavigation.useRouter();
-      const session = this._getSession(options?.tokenStore);
+      const session = this._useSession(options?.tokenStore);
       const crud = useAsyncCache(this._currentServerUserCache, [session], "useUser()");
       if (crud === null) {
         switch (options?.or) {
@@ -1757,7 +1780,7 @@ var _StackServerAppImpl = class extends _StackClientAppImpl {
   async _refreshUsers() {
     await Promise.all([
       super._refreshUsers(),
-      this._serverUsersCache.refresh([])
+      this._serverUsersCache.refreshWhere(() => true)
     ]);
   }
 };