@tern-secure/nextjs 3.2.31 → 3.2.33

package/dist/cjs/app-router/server/auth.js

@@ -25,7 +25,7 @@ module.exports = __toCommonJS(auth_exports);
 var import_headers = require("next/headers");
 var import_sessionTernSecure = require("./sessionTernSecure");
 async function auth() {
-  var _a, _b;
+  var _a, _b, _c;
   try {
     const cookieStore = await (0, import_headers.cookies)();
     const sessionCookie = (_a = cookieStore.get("_session_cookie")) == null ? void 0 : _a.value;
@@ -41,10 +41,10 @@ async function auth() {
     }
     const idToken = (_b = cookieStore.get("_session_token")) == null ? void 0 : _b.value;
     if (idToken) {
-      const tokenResult = await (0, import_sessionTernSecure.verifyTernIDToken)(idToken);
+      const tokenResult = await (0, import_sessionTernSecure.verifyTernIdToken)(idToken);
       if (tokenResult.valid) {
         return {
-          userId: tokenResult.uid,
+          userId: (_c = tokenResult.uid) != null ? _c : null,
           token: idToken,
           error: null
         };

package/dist/cjs/app-router/server/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/server/auth.ts"],"sourcesContent":["'use server'\r\n\r\nimport { cookies } from 'next/headers';\r\nimport {  verifyTernIDToken, verifyTernSessionCookie } from './sessionTernSecure';\r\n\r\nexport interface AuthResult {\r\n  userId: string | null;\r\n  token: string | null;\r\n  error: Error | null;\r\n}\r\n\r\nexport async function auth(): Promise<AuthResult> {\r\n  try {\r\n    const cookieStore = await cookies();\r\n    const sessionCookie = cookieStore.get('_session_cookie')?.value;\r\n    if (sessionCookie) {\r\n      const sessionResult = await verifyTernSessionCookie(sessionCookie);\r\n      if (sessionResult.valid) {\r\n        return {\r\n          userId: sessionResult.uid,\r\n          token: sessionCookie,\r\n          error: null\r\n        };\r\n      }\r\n    }\r\n\r\n    // If session cookie is not present or invalid, try the ID token\r\n    const idToken = cookieStore.get('_session_token')?.value;\r\n    if (idToken) {\r\n      const tokenResult = await verifyTernIDToken(idToken);\r\n      if (tokenResult.valid) {\r\n        return {\r\n          userId: tokenResult.uid,\r\n          token: idToken,\r\n          error: null\r\n        };\r\n      }\r\n    }\r\n\r\n    // If both checks fail, return null values\r\n    return {\r\n      userId: null,\r\n      token: null,\r\n      error: new Error('No valid session or token found')\r\n    };\r\n  } catch (error) {\r\n    console.error('Error in auth function:', error);\r\n    return {\r\n      userId: null,\r\n      token: null,\r\n      error: error instanceof Error ? error : new Error('An unknown error occurred')\r\n    };\r\n  }\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,qBAAwB;AACxB,+BAA4D;AAQ5D,eAAsB,OAA4B;AAXlD;AAYE,MAAI;AACF,UAAM,cAAc,UAAM,wBAAQ;AAClC,UAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAC1D,QAAI,eAAe;AACjB,YAAM,gBAAgB,UAAM,kDAAwB,aAAa;AACjE,UAAI,cAAc,OAAO;AACvB,eAAO;AAAA,UACL,QAAQ,cAAc;AAAA,UACtB,OAAO;AAAA,UACP,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAGA,UAAM,WAAU,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AACnD,QAAI,SAAS;AACX,YAAM,cAAc,UAAM,4CAAkB,OAAO;AACnD,UAAI,YAAY,OAAO;AACrB,eAAO;AAAA,UACL,QAAQ,YAAY;AAAA,UACpB,OAAO;AAAA,UACP,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAGA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,OAAO,IAAI,MAAM,iCAAiC;AAAA,IACpD;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAC9C,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,2BAA2B;AAAA,IAC/E;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/app-router/server/auth.ts"],"sourcesContent":["'use server'\r\n\r\nimport { cookies } from 'next/headers';\r\nimport {  verifyTernIdToken, verifyTernSessionCookie } from './sessionTernSecure';\r\n\r\nexport interface AuthResult {\r\n  userId: string | null;\r\n  token: string | null;\r\n  error: Error | null;\r\n}\r\n\r\nexport async function auth(): Promise<AuthResult> {\r\n  try {\r\n    const cookieStore = await cookies();\r\n    const sessionCookie = cookieStore.get('_session_cookie')?.value;\r\n    if (sessionCookie) {\r\n      const sessionResult = await verifyTernSessionCookie(sessionCookie);\r\n      if (sessionResult.valid) {\r\n        return {\r\n          userId: sessionResult.uid,\r\n          token: sessionCookie,\r\n          error: null\r\n        };\r\n      }\r\n    }\r\n\r\n    // If session cookie is not present or invalid, try the ID token\r\n    const idToken = cookieStore.get('_session_token')?.value;\r\n    if (idToken) {\r\n      const tokenResult = await verifyTernIdToken(idToken);\r\n      if (tokenResult.valid) {\r\n        return {\r\n          userId: tokenResult.uid ?? null,\r\n          token: idToken,\r\n          error: null\r\n        };\r\n      }\r\n    }\r\n\r\n    // If both checks fail, return null values\r\n    return {\r\n      userId: null,\r\n      token: null,\r\n      error: new Error('No valid session or token found')\r\n    };\r\n  } catch (error) {\r\n    console.error('Error in auth function:', error);\r\n    return {\r\n      userId: null,\r\n      token: null,\r\n      error: error instanceof Error ? error : new Error('An unknown error occurred')\r\n    };\r\n  }\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,qBAAwB;AACxB,+BAA4D;AAQ5D,eAAsB,OAA4B;AAXlD;AAYE,MAAI;AACF,UAAM,cAAc,UAAM,wBAAQ;AAClC,UAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAC1D,QAAI,eAAe;AACjB,YAAM,gBAAgB,UAAM,kDAAwB,aAAa;AACjE,UAAI,cAAc,OAAO;AACvB,eAAO;AAAA,UACL,QAAQ,cAAc;AAAA,UACtB,OAAO;AAAA,UACP,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAGA,UAAM,WAAU,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AACnD,QAAI,SAAS;AACX,YAAM,cAAc,UAAM,4CAAkB,OAAO;AACnD,UAAI,YAAY,OAAO;AACrB,eAAO;AAAA,UACL,SAAQ,iBAAY,QAAZ,YAAmB;AAAA,UAC3B,OAAO;AAAA,UACP,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAGA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,OAAO,IAAI,MAAM,iCAAiC;AAAA,IACpD;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAC9C,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,2BAA2B;AAAA,IAC/E;AAAA,EACF;AACF;","names":[]}

package/dist/cjs/app-router/server/sessionTernSecure.js

@@ -23,7 +23,7 @@ __export(sessionTernSecure_exports, {
   getIdToken: () => getIdToken,
   getServerSessionCookie: () => getServerSessionCookie,
   setServerSession: () => setServerSession,
-  verifyTernIDToken: () => verifyTernIDToken,
+  verifyTernIdToken: () => verifyTernIdToken,
   verifyTernSessionCookie: () => verifyTernSessionCookie
 });
 module.exports = __toCommonJS(sessionTernSecure_exports);
@@ -92,16 +92,27 @@ async function setServerSession(token) {
     path: "/"
   });
 }
-async function verifyTernIDToken(token) {
+async function verifyTernIdToken(token) {
   try {
-    const res = await import_admin_init.adminTernSecureAuth.verifyIdToken(token);
-    if (res) {
-      return { valid: true, uid: res.uid };
-    } else {
-      return { valid: false, error: "Invalid token" };
-    }
+    const decodedToken = await import_admin_init.adminTernSecureAuth.verifyIdToken(token);
+    return { valid: true, uid: decodedToken.uid };
   } catch (error) {
-    return { error, valid: false };
+    if (error instanceof Error) {
+      const firebaseError = error;
+      if (error.name === "FirebaseAuthError") {
+        switch (firebaseError.code) {
+          case "auth/id-token-expired":
+            return { valid: false, error: "Token has expired" };
+          case "auth/id-token-revoked":
+            return { valid: false, error: "Token has been revoked" };
+          case "auth/user-disabled":
+            return { valid: false, error: "User account has been disabled" };
+          default:
+            return { valid: false, error: "Invalid token" };
+        }
+      }
+    }
+    return { valid: false, error: "Error verifying token" };
   }
 }
 async function verifyTernSessionCookie(session) {
@@ -122,7 +133,7 @@ async function verifyTernSessionCookie(session) {
   getIdToken,
   getServerSessionCookie,
   setServerSession,
-  verifyTernIDToken,
+  verifyTernIdToken,
   verifyTernSessionCookie
 });
 //# sourceMappingURL=sessionTernSecure.js.map

package/dist/cjs/app-router/server/sessionTernSecure.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/server/sessionTernSecure.ts"],"sourcesContent":["'use server'\r\n\r\nimport { cookies } from 'next/headers';\r\nimport { adminTernSecureAuth as adminAuth } from '../../utils/admin-init';\r\n\r\n\r\nexport interface User {\r\n    uid: string;\r\n    email: string;\r\n  }\r\n\r\nexport interface Session {\r\n    user: User | null;\r\n    token: string | null;\r\n    error: Error | null;\r\n}\r\n\r\nexport async function createSessionCookie(idToken: string) {\r\n  try {\r\n    const expiresIn = 60 * 60 * 24 * 5 * 1000;\r\n      const sessionCookie = await adminAuth.createSessionCookie(idToken, { expiresIn });\r\n\r\n      const cookieStore = await cookies();\r\n      cookieStore.set('_session_cookie', sessionCookie, {\r\n          maxAge: expiresIn,\r\n          httpOnly: true,\r\n          secure: process.env.NODE_ENV === 'production',\r\n          path: '/',\r\n      });\r\n      return { success: true, message: 'Session created' };\r\n  } catch (error) {\r\n      return { success: false, message: 'Failed to create session' };\r\n  }\r\n}\r\n\r\n\r\n\r\nexport async function getServerSessionCookie() {\r\n  const cookieStore = await cookies();\r\n  const sessionCookie = cookieStore.get('_session_cookie')?.value;\r\n\r\n  if (!sessionCookie) {\r\n    throw new Error('No session cookie found')\r\n  }\r\n    \r\n  try {\r\n    const decondeClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\r\n    return {\r\n      token: sessionCookie,\r\n      userId: decondeClaims.uid\r\n    }\r\n  } catch (error) {\r\n    console.error('Error verifying session:', error)\r\n    throw new Error('Invalid Session')\r\n  }\r\n}\r\n\r\n\r\nexport async function getIdToken() {\r\n  const cookieStore = await cookies();\r\n  const token = cookieStore.get('_session_token')?.value;\r\n\r\n  if (!token) {\r\n    throw new Error('No session cookie found')\r\n  }\r\n    \r\n  try {\r\n    const decodedClaims = await adminAuth.verifyIdToken(token)\r\n    return {\r\n      token: token,\r\n      userId: decodedClaims.uid\r\n    }\r\n  } catch (error) {\r\n    console.error('Error verifying session:', error)\r\n    throw new Error('Invalid Session')\r\n  }\r\n}\r\n\r\nexport async function setServerSession(token: string) {\r\n    const cookieStore = await cookies();\r\n    cookieStore.set('_session', token, {\r\n      httpOnly: true,\r\n      secure: process.env.NODE_ENV === 'production',\r\n      sameSite: 'strict',\r\n      maxAge: 60 * 60, // 1 hour\r\n      path: '/',\r\n    });\r\n  }\r\n\r\n  export async function verifyTernIDToken(token: string): Promise<{ valid: boolean; uid?: any; error?: any }>{\r\n    try {\r\n      const res = await adminAuth.verifyIdToken(token);\r\n      if (res) {\r\n        return { valid: true, uid: res.uid };\r\n      } else {\r\n        return { valid: false, error: 'Invalid token'};\r\n      }\r\n    } catch (error) {\r\n      return {error: error, valid: false}\r\n    }\r\n  }\r\n\r\n  export async function verifyTernSessionCookie(session: string): Promise<{ valid: boolean; uid?: any; error?: any }>{\r\n    try {\r\n      const res = await adminAuth.verifySessionCookie(session, true);\r\n      if (res) {\r\n        return { valid: true, uid: res.uid };\r\n      } else {\r\n        return { valid: false, error: 'Invalid session'};\r\n      }\r\n    } catch (error) {\r\n      return {error: error, valid: false}\r\n    }\r\n  }\r\n\r\n\r\n\r\n/*\r\n  export async function GET(request: NextRequest) {\r\n    const cookieStore = await cookies();\r\n    const sessionCookie = cookieStore.get('session')?.value\r\n  \r\n    if (!sessionCookie) {\r\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\r\n    }\r\n  \r\n    try {\r\n      const decodedClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\r\n      return NextResponse.json({ isAuthenticated: true, user: decodedClaims }, { status: 200 })\r\n    } catch (error) {\r\n      console.error('Error verifying session cookie:', error)\r\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\r\n    }\r\n  }\r\n\r\n*/"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,qBAAwB;AACxB,wBAAiD;AAcjD,eAAsB,oBAAoB,SAAiB;AACzD,MAAI;AACF,UAAM,YAAY,KAAK,KAAK,KAAK,IAAI;AACnC,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,oBAAoB,SAAS,EAAE,UAAU,CAAC;AAEhF,UAAM,cAAc,UAAM,wBAAQ;AAClC,gBAAY,IAAI,mBAAmB,eAAe;AAAA,MAC9C,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,MAAM;AAAA,IACV,CAAC;AACD,WAAO,EAAE,SAAS,MAAM,SAAS,kBAAkB;AAAA,EACvD,SAAS,OAAO;AACZ,WAAO,EAAE,SAAS,OAAO,SAAS,2BAA2B;AAAA,EACjE;AACF;AAIA,eAAsB,yBAAyB;AArC/C;AAsCE,QAAM,cAAc,UAAM,wBAAQ;AAClC,QAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAE1D,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,oBAAoB,eAAe,IAAI;AAC7E,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAGA,eAAsB,aAAa;AA1DnC;AA2DE,QAAM,cAAc,UAAM,wBAAQ;AAClC,QAAM,SAAQ,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AAEjD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,cAAc,KAAK;AACzD,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAEA,eAAsB,iBAAiB,OAAe;AAClD,QAAM,cAAc,UAAM,wBAAQ;AAClC,cAAY,IAAI,YAAY,OAAO;AAAA,IACjC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAQ,KAAK;AAAA;AAAA,IACb,MAAM;AAAA,EACR,CAAC;AACH;AAEA,eAAsB,kBAAkB,OAAmE;AACzG,MAAI;AACF,UAAM,MAAM,MAAM,kBAAAA,oBAAU,cAAc,KAAK;AAC/C,QAAI,KAAK;AACP,aAAO,EAAE,OAAO,MAAM,KAAK,IAAI,IAAI;AAAA,IACrC,OAAO;AACL,aAAO,EAAE,OAAO,OAAO,OAAO,gBAAe;AAAA,IAC/C;AAAA,EACF,SAAS,OAAO;AACd,WAAO,EAAC,OAAc,OAAO,MAAK;AAAA,EACpC;AACF;AAEA,eAAsB,wBAAwB,SAAqE;AACjH,MAAI;AACF,UAAM,MAAM,MAAM,kBAAAA,oBAAU,oBAAoB,SAAS,IAAI;AAC7D,QAAI,KAAK;AACP,aAAO,EAAE,OAAO,MAAM,KAAK,IAAI,IAAI;AAAA,IACrC,OAAO;AACL,aAAO,EAAE,OAAO,OAAO,OAAO,kBAAiB;AAAA,IACjD;AAAA,EACF,SAAS,OAAO;AACd,WAAO,EAAC,OAAc,OAAO,MAAK;AAAA,EACpC;AACF;","names":["adminAuth"]}
+{"version":3,"sources":["../../../../src/app-router/server/sessionTernSecure.ts"],"sourcesContent":["'use server'\r\n\r\nimport { cookies } from 'next/headers';\r\nimport { adminTernSecureAuth as adminAuth } from '../../utils/admin-init';\r\n\r\ninterface FirebaseAuthError extends Error {\r\n  code?: string;\r\n}\r\n\r\nexport interface User {\r\n    uid: string | null;\r\n    email: string | null;\r\n  }\r\n\r\nexport interface Session {\r\n    user: User | null;\r\n    token: string | null;\r\n    error: Error | null;\r\n}\r\n\r\nexport async function createSessionCookie(idToken: string) {\r\n  try {\r\n    const expiresIn = 60 * 60 * 24 * 5 * 1000;\r\n      const sessionCookie = await adminAuth.createSessionCookie(idToken, { expiresIn });\r\n\r\n      const cookieStore = await cookies();\r\n      cookieStore.set('_session_cookie', sessionCookie, {\r\n          maxAge: expiresIn,\r\n          httpOnly: true,\r\n          secure: process.env.NODE_ENV === 'production',\r\n          path: '/',\r\n      });\r\n      return { success: true, message: 'Session created' };\r\n  } catch (error) {\r\n      return { success: false, message: 'Failed to create session' };\r\n  }\r\n}\r\n\r\n\r\n\r\nexport async function getServerSessionCookie() {\r\n  const cookieStore = await cookies();\r\n  const sessionCookie = cookieStore.get('_session_cookie')?.value;\r\n\r\n  if (!sessionCookie) {\r\n    throw new Error('No session cookie found')\r\n  }\r\n    \r\n  try {\r\n    const decondeClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\r\n    return {\r\n      token: sessionCookie,\r\n      userId: decondeClaims.uid\r\n    }\r\n  } catch (error) {\r\n    console.error('Error verifying session:', error)\r\n    throw new Error('Invalid Session')\r\n  }\r\n}\r\n\r\n\r\nexport async function getIdToken() {\r\n  const cookieStore = await cookies();\r\n  const token = cookieStore.get('_session_token')?.value;\r\n\r\n  if (!token) {\r\n    throw new Error('No session cookie found')\r\n  }\r\n    \r\n  try {\r\n    const decodedClaims = await adminAuth.verifyIdToken(token)\r\n    return {\r\n      token: token,\r\n      userId: decodedClaims.uid\r\n    }\r\n  } catch (error) {\r\n    console.error('Error verifying session:', error)\r\n    throw new Error('Invalid Session')\r\n  }\r\n}\r\n\r\nexport async function setServerSession(token: string) {\r\n    const cookieStore = await cookies();\r\n    cookieStore.set('_session', token, {\r\n      httpOnly: true,\r\n      secure: process.env.NODE_ENV === 'production',\r\n      sameSite: 'strict',\r\n      maxAge: 60 * 60, // 1 hour\r\n      path: '/',\r\n    });\r\n  }\r\n\r\n  export async function verifyTernIdToken(token: string): Promise<{ valid: boolean; uid?: string; error?: string }> {\r\n    try {\r\n      const decodedToken = await adminAuth.verifyIdToken(token);\r\n      return { valid: true, uid: decodedToken.uid };\r\n    } catch (error) {\r\n      if (error instanceof Error) {\r\n        const firebaseError = error as FirebaseAuthError;\r\n        if (error.name === 'FirebaseAuthError') {\r\n          // Handle specific Firebase Auth errors\r\n          switch (firebaseError.code) {\r\n            case 'auth/id-token-expired':\r\n              return { valid: false, error: 'Token has expired' };\r\n            case 'auth/id-token-revoked':\r\n              return { valid: false, error: 'Token has been revoked' };\r\n            case 'auth/user-disabled':\r\n              return { valid: false, error: 'User account has been disabled' };\r\n            default:\r\n              return { valid: false, error: 'Invalid token' };\r\n          }\r\n        }\r\n      }\r\n      return { valid: false, error: 'Error verifying token' };\r\n    }\r\n  }\r\n  \r\n\r\n  export async function verifyTernSessionCookie(session: string): Promise<{ valid: boolean; uid?: any; error?: any }>{\r\n    try {\r\n      const res = await adminAuth.verifySessionCookie(session, true);\r\n      if (res) {\r\n        return { valid: true, uid: res.uid };\r\n      } else {\r\n        return { valid: false, error: 'Invalid session'};\r\n      }\r\n    } catch (error) {\r\n      return {error: error, valid: false}\r\n    }\r\n  }\r\n\r\n\r\n\r\n/*\r\n  export async function GET(request: NextRequest) {\r\n    const cookieStore = await cookies();\r\n    const sessionCookie = cookieStore.get('session')?.value\r\n  \r\n    if (!sessionCookie) {\r\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\r\n    }\r\n  \r\n    try {\r\n      const decodedClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\r\n      return NextResponse.json({ isAuthenticated: true, user: decodedClaims }, { status: 200 })\r\n    } catch (error) {\r\n      console.error('Error verifying session cookie:', error)\r\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\r\n    }\r\n  }\r\n\r\n*/"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,qBAAwB;AACxB,wBAAiD;AAiBjD,eAAsB,oBAAoB,SAAiB;AACzD,MAAI;AACF,UAAM,YAAY,KAAK,KAAK,KAAK,IAAI;AACnC,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,oBAAoB,SAAS,EAAE,UAAU,CAAC;AAEhF,UAAM,cAAc,UAAM,wBAAQ;AAClC,gBAAY,IAAI,mBAAmB,eAAe;AAAA,MAC9C,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,MAAM;AAAA,IACV,CAAC;AACD,WAAO,EAAE,SAAS,MAAM,SAAS,kBAAkB;AAAA,EACvD,SAAS,OAAO;AACZ,WAAO,EAAE,SAAS,OAAO,SAAS,2BAA2B;AAAA,EACjE;AACF;AAIA,eAAsB,yBAAyB;AAxC/C;AAyCE,QAAM,cAAc,UAAM,wBAAQ;AAClC,QAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAE1D,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,oBAAoB,eAAe,IAAI;AAC7E,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAGA,eAAsB,aAAa;AA7DnC;AA8DE,QAAM,cAAc,UAAM,wBAAQ;AAClC,QAAM,SAAQ,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AAEjD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,cAAc,KAAK;AACzD,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAEA,eAAsB,iBAAiB,OAAe;AAClD,QAAM,cAAc,UAAM,wBAAQ;AAClC,cAAY,IAAI,YAAY,OAAO;AAAA,IACjC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAQ,KAAK;AAAA;AAAA,IACb,MAAM;AAAA,EACR,CAAC;AACH;AAEA,eAAsB,kBAAkB,OAA0E;AAChH,MAAI;AACF,UAAM,eAAe,MAAM,kBAAAA,oBAAU,cAAc,KAAK;AACxD,WAAO,EAAE,OAAO,MAAM,KAAK,aAAa,IAAI;AAAA,EAC9C,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,YAAM,gBAAgB;AACtB,UAAI,MAAM,SAAS,qBAAqB;AAEtC,gBAAQ,cAAc,MAAM;AAAA,UAC1B,KAAK;AACH,mBAAO,EAAE,OAAO,OAAO,OAAO,oBAAoB;AAAA,UACpD,KAAK;AACH,mBAAO,EAAE,OAAO,OAAO,OAAO,yBAAyB;AAAA,UACzD,KAAK;AACH,mBAAO,EAAE,OAAO,OAAO,OAAO,iCAAiC;AAAA,UACjE;AACE,mBAAO,EAAE,OAAO,OAAO,OAAO,gBAAgB;AAAA,QAClD;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,OAAO,OAAO,OAAO,wBAAwB;AAAA,EACxD;AACF;AAGA,eAAsB,wBAAwB,SAAqE;AACjH,MAAI;AACF,UAAM,MAAM,MAAM,kBAAAA,oBAAU,oBAAoB,SAAS,IAAI;AAC7D,QAAI,KAAK;AACP,aAAO,EAAE,OAAO,MAAM,KAAK,IAAI,IAAI;AAAA,IACrC,OAAO;AACL,aAAO,EAAE,OAAO,OAAO,OAAO,kBAAiB;AAAA,IACjD;AAAA,EACF,SAAS,OAAO;AACd,WAAO,EAAC,OAAc,OAAO,MAAK;AAAA,EACpC;AACF;","names":["adminAuth"]}

package/dist/cjs/boundary/TernSecureClientProvider.js

@@ -27,8 +27,16 @@ var import_react = require("react");
 var import_client_init = require("../utils/client-init");
 var import_auth = require("firebase/auth");
 var import_TernSecureCtx = require("./TernSecureCtx");
-function TernSecureClientProvider({ children, onUserChanged }) {
+var import_navigation = require("next/navigation");
+var import_sessionTernSecure = require("../app-router/server/sessionTernSecure");
+function TernSecureClientProvider({
+  children,
+  onUserChanged,
+  loginPath = "/sign-in"
+}) {
   const auth = (0, import_react.useMemo)(() => import_client_init.ternSecureAuth, []);
+  const router = (0, import_navigation.useRouter)();
+  const pathname = (0, import_navigation.usePathname)();
   const [authState, setAuthState] = (0, import_react.useState)(() => ({
     userId: null,
     isLoaded: false,
@@ -45,52 +53,60 @@ function TernSecureClientProvider({ children, onUserChanged }) {
       isValid: false,
       token: null
     });
-  }, [auth]);
+    router.push(loginPath);
+  }, [auth, router, loginPath]);
   const checkTokenValidity = (0, import_react.useCallback)(async (user) => {
     if (user) {
       try {
         const token = await user.getIdToken(true);
-        setAuthState((prev) => ({
-          ...prev,
-          isLoaded: true,
-          userId: user.uid,
-          isValid: true,
-          token,
-          error: null
-        }));
+        const decodedToken = await (0, import_sessionTernSecure.verifyTernIdToken)(token);
+        const isValid = decodedToken.valid;
+        if (isValid) {
+          return { isValid: true, token, userId: user.uid };
+        }
       } catch (error) {
         console.error("Token validation error:", error);
         await handleSignOut(error instanceof Error ? error : new Error("Authentication token is invalid"));
+        return { isValid: false, token: null, userId: null };
       }
-    } else {
-      setAuthState((prev) => ({
-        ...prev,
-        isLoaded: true,
-        userId: null,
-        isValid: false,
-        token: null,
-        error: null
-      }));
     }
+    return { isValid: false, token: null, userId: null };
   }, [handleSignOut]);
   const handleAuthStateChange = (0, import_react.useCallback)(async (user) => {
-    await checkTokenValidity(user);
+    const { isValid, token, userId } = await checkTokenValidity(user);
+    setAuthState({
+      isLoaded: true,
+      userId,
+      isValid,
+      token,
+      error: null
+    });
     if (onUserChanged) {
       await onUserChanged(user);
     }
-  }, [checkTokenValidity, onUserChanged]);
+    if (!isValid && pathname !== loginPath) {
+      router.push(loginPath);
+    }
+  }, [checkTokenValidity, onUserChanged, router, loginPath, pathname]);
   (0, import_react.useEffect)(() => {
     const unsubscribeAuthState = (0, import_auth.onAuthStateChanged)(auth, handleAuthStateChange);
-    const unsubscribeTokenChange = (0, import_auth.onIdTokenChanged)(auth, checkTokenValidity);
+    const intervalId = setInterval(() => {
+      handleAuthStateChange(auth.currentUser);
+    }, 6e4);
     return () => {
       unsubscribeAuthState();
-      unsubscribeTokenChange();
+      clearInterval(intervalId);
     };
-  }, [auth, handleAuthStateChange, checkTokenValidity]);
+  }, [auth, handleAuthStateChange]);
+  const contextValue = (0, import_react.useMemo)(() => ({
+    ...authState,
+    checkTokenValidity: () => handleAuthStateChange(auth.currentUser),
+    signOut: handleSignOut
+  }), [authState, handleAuthStateChange, auth, handleSignOut]);
   if (!authState.isLoaded) {
-    return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_TernSecureCtx.TernSecureCtx.Provider, { value: authState, children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { "aria-live": "polite", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "sr-only", children: "Loading authentication state..." }) }) });
+    return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_TernSecureCtx.TernSecureCtx.Provider, { value: contextValue, children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { "aria-live": "polite", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "sr-only", children: "Loading authentication state..." }) }) });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_TernSecureCtx.TernSecureCtx.Provider, { value: authState, children });
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_TernSecureCtx.TernSecureCtx.Provider, { value: contextValue, children });
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/cjs/boundary/TernSecureClientProvider.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/boundary/TernSecureClientProvider.tsx"],"sourcesContent":["\"use client\"\r\n\r\nimport React, { useState, useEffect, useMemo, useCallback } from 'react'\r\nimport { ternSecureAuth } from '../utils/client-init'\r\nimport { onAuthStateChanged, User, onIdTokenChanged } from \"firebase/auth\"\r\nimport { TernSecureCtx, TernSecureState } from './TernSecureCtx'\r\n\r\ninterface TernSecureClientProviderProps {\r\n  children: React.ReactNode;\r\n  onUserChanged?: (user: User | null) => Promise<void>;\r\n}\r\n\r\nexport function TernSecureClientProvider({ children, onUserChanged }: TernSecureClientProviderProps) {\r\n  const auth = useMemo(() => ternSecureAuth, []);\r\n\r\n  const [authState, setAuthState] = useState<TernSecureState>(() => ({\r\n    userId: null,\r\n    isLoaded: false,\r\n    error: null,\r\n    isValid: false,\r\n    token: null\r\n  }));\r\n\r\n  const handleSignOut = useCallback(async (error?: Error) => {\r\n    await auth.signOut();\r\n    setAuthState({\r\n      isLoaded: true,\r\n      userId: null,\r\n      error: error || null,\r\n      isValid: false,\r\n      token: null\r\n    });\r\n  }, [auth]);\r\n\r\n  const checkTokenValidity = useCallback(async (user: User | null) => {\r\n    if (user) {\r\n      try {\r\n        const token = await user.getIdToken(true);\r\n        setAuthState(prev => ({\r\n          ...prev,\r\n          isLoaded: true,\r\n          userId: user.uid,\r\n          isValid: true,\r\n          token,\r\n          error: null\r\n        }));\r\n      } catch (error) {\r\n        console.error('Token validation error:', error);\r\n        await handleSignOut(error instanceof Error ? error : new Error('Authentication token is invalid'));\r\n      }\r\n    } else {\r\n      setAuthState(prev => ({\r\n        ...prev,\r\n        isLoaded: true,\r\n        userId: null,\r\n        isValid: false,\r\n        token: null,\r\n        error: null\r\n      }));\r\n    }\r\n  }, [handleSignOut]);\r\n\r\n  const handleAuthStateChange = useCallback(async (user: User | null) => {\r\n    await checkTokenValidity(user);\r\n    if (onUserChanged) {\r\n      await onUserChanged(user);\r\n    }\r\n  }, [checkTokenValidity, onUserChanged]);\r\n\r\n  useEffect(() => {\r\n    const unsubscribeAuthState = onAuthStateChanged(auth, handleAuthStateChange);\r\n    const unsubscribeTokenChange = onIdTokenChanged(auth, checkTokenValidity);\r\n    \r\n    return () => {\r\n      unsubscribeAuthState();\r\n      unsubscribeTokenChange();\r\n    };\r\n  }, [auth, handleAuthStateChange, checkTokenValidity]);\r\n\r\n  if (!authState.isLoaded) {\r\n    return (\r\n      <TernSecureCtx.Provider value={authState}>\r\n        <div aria-live=\"polite\" aria-busy=\"true\">\r\n          <span className=\"sr-only\">Loading authentication state...</span>\r\n        </div>\r\n      </TernSecureCtx.Provider>\r\n    );\r\n  }\r\n\r\n  return (\r\n    <TernSecureCtx.Provider value={authState}>\r\n      {children}\r\n    </TernSecureCtx.Provider>\r\n  );\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAmFU;AAjFV,mBAAiE;AACjE,yBAA+B;AAC/B,kBAA2D;AAC3D,2BAA+C;AAOxC,SAAS,yBAAyB,EAAE,UAAU,cAAc,GAAkC;AACnG,QAAM,WAAO,sBAAQ,MAAM,mCAAgB,CAAC,CAAC;AAE7C,QAAM,CAAC,WAAW,YAAY,QAAI,uBAA0B,OAAO;AAAA,IACjE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,OAAO;AAAA,IACP,SAAS;AAAA,IACT,OAAO;AAAA,EACT,EAAE;AAEF,QAAM,oBAAgB,0BAAY,OAAO,UAAkB;AACzD,UAAM,KAAK,QAAQ;AACnB,iBAAa;AAAA,MACX,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,OAAO,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,OAAO;AAAA,IACT,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,CAAC;AAET,QAAM,yBAAqB,0BAAY,OAAO,SAAsB;AAClE,QAAI,MAAM;AACR,UAAI;AACF,cAAM,QAAQ,MAAM,KAAK,WAAW,IAAI;AACxC,qBAAa,WAAS;AAAA,UACpB,GAAG;AAAA,UACH,UAAU;AAAA,UACV,QAAQ,KAAK;AAAA,UACb,SAAS;AAAA,UACT;AAAA,UACA,OAAO;AAAA,QACT,EAAE;AAAA,MACJ,SAAS,OAAO;AACd,gBAAQ,MAAM,2BAA2B,KAAK;AAC9C,cAAM,cAAc,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,iCAAiC,CAAC;AAAA,MACnG;AAAA,IACF,OAAO;AACL,mBAAa,WAAS;AAAA,QACpB,GAAG;AAAA,QACH,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,OAAO;AAAA,QACP,OAAO;AAAA,MACT,EAAE;AAAA,IACJ;AAAA,EACF,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,4BAAwB,0BAAY,OAAO,SAAsB;AACrE,UAAM,mBAAmB,IAAI;AAC7B,QAAI,eAAe;AACjB,YAAM,cAAc,IAAI;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,oBAAoB,aAAa,CAAC;AAEtC,8BAAU,MAAM;AACd,UAAM,2BAAuB,gCAAmB,MAAM,qBAAqB;AAC3E,UAAM,6BAAyB,8BAAiB,MAAM,kBAAkB;AAExE,WAAO,MAAM;AACX,2BAAqB;AACrB,6BAAuB;AAAA,IACzB;AAAA,EACF,GAAG,CAAC,MAAM,uBAAuB,kBAAkB,CAAC;AAEpD,MAAI,CAAC,UAAU,UAAU;AACvB,WACE,4CAAC,mCAAc,UAAd,EAAuB,OAAO,WAC7B,sDAAC,SAAI,aAAU,UAAS,aAAU,QAChC,sDAAC,UAAK,WAAU,WAAU,6CAA+B,GAC3D,GACF;AAAA,EAEJ;AAEA,SACE,4CAAC,mCAAc,UAAd,EAAuB,OAAO,WAC5B,UACH;AAEJ;","names":[]}
+{"version":3,"sources":["../../../src/boundary/TernSecureClientProvider.tsx"],"sourcesContent":["\"use client\"\r\n\r\nimport React, { useState, useEffect, useMemo, useCallback } from 'react'\r\nimport { ternSecureAuth } from '../utils/client-init'\r\nimport { User, onAuthStateChanged } from \"firebase/auth\"\r\nimport { TernSecureCtx, TernSecureState, TernSecureCtxValue } from './TernSecureCtx'\r\nimport { useRouter, usePathname } from 'next/navigation'\r\nimport { verifyTernIdToken } from '../app-router/server/sessionTernSecure'\r\n\r\ninterface TernSecureClientProviderProps {\r\n  children: React.ReactNode;\r\n  onUserChanged?: (user: User | null) => Promise<void>;\r\n  loginPath?: string;\r\n}\r\n\r\nexport function TernSecureClientProvider({ \r\n  children, \r\n  onUserChanged,\r\n  loginPath = '/sign-in'\r\n}: TernSecureClientProviderProps) {\r\n  const auth = useMemo(() => ternSecureAuth, []);\r\n  const router = useRouter();\r\n  const pathname = usePathname();\r\n\r\n  const [authState, setAuthState] = useState<TernSecureState>(() => ({\r\n    userId: null,\r\n    isLoaded: false,\r\n    error: null,\r\n    isValid: false,\r\n    token: null\r\n  }));\r\n\r\n  const handleSignOut = useCallback(async (error?: Error) => {\r\n    await auth.signOut();\r\n    setAuthState({\r\n      isLoaded: true,\r\n      userId: null,\r\n      error: error || null,\r\n      isValid: false,\r\n      token: null\r\n    });\r\n    router.push(loginPath);\r\n  }, [auth, router, loginPath]);\r\n\r\n  const checkTokenValidity = useCallback(async (user: User | null) => {\r\n    if (user) {\r\n      try {\r\n        // Force token refresh\r\n        const token = await user.getIdToken(true);\r\n    \r\n        const decodedToken = await verifyTernIdToken(token);\r\n        const isValid = decodedToken.valid\r\n\r\n        if(isValid) {\r\n          return { isValid: true, token, userId: user.uid };\r\n        }\r\n      } catch (error) {\r\n        console.error('Token validation error:', error);\r\n        await handleSignOut(error instanceof Error ? error : new Error('Authentication token is invalid'));\r\n        return { isValid: false, token: null, userId: null };\r\n      }\r\n    }\r\n    return { isValid: false, token: null, userId: null };\r\n  }, [handleSignOut]);\r\n\r\n  const handleAuthStateChange = useCallback(async (user: User | null) => {\r\n    const { isValid, token, userId } = await checkTokenValidity(user);\r\n    \r\n    setAuthState({\r\n      isLoaded: true,\r\n      userId,\r\n      isValid,\r\n      token,\r\n      error: null\r\n    });\r\n\r\n    if (onUserChanged) {\r\n      await onUserChanged(user);\r\n    }\r\n\r\n    if (!isValid && pathname !== loginPath) {\r\n      router.push(loginPath);\r\n    }\r\n  }, [checkTokenValidity, onUserChanged, router, loginPath, pathname]);\r\n\r\n  useEffect(() => {\r\n    const unsubscribeAuthState = onAuthStateChanged(auth, handleAuthStateChange);\r\n    \r\n    // Set up an interval to periodically check token validity\r\n    const intervalId = setInterval(() => {\r\n      handleAuthStateChange(auth.currentUser);\r\n    }, 60000); // Check every minute\r\n\r\n    return () => {\r\n      unsubscribeAuthState();\r\n      clearInterval(intervalId);\r\n    };\r\n  }, [auth, handleAuthStateChange]);\r\n\r\n  const contextValue: TernSecureCtxValue = useMemo(() => ({\r\n    ...authState,\r\n    checkTokenValidity: () => handleAuthStateChange(auth.currentUser),\r\n    signOut: handleSignOut,\r\n  }), [authState, handleAuthStateChange, auth, handleSignOut]);\r\n\r\n  if (!authState.isLoaded) {\r\n    return (\r\n      <TernSecureCtx.Provider value={contextValue}>\r\n        <div aria-live=\"polite\" aria-busy=\"true\">\r\n          <span className=\"sr-only\">Loading authentication state...</span>\r\n        </div>\r\n      </TernSecureCtx.Provider>\r\n    );\r\n  }\r\n\r\n  return (\r\n    <TernSecureCtx.Provider value={contextValue}>\r\n      {children}\r\n    </TernSecureCtx.Provider>\r\n  );\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA6GU;AA3GV,mBAAiE;AACjE,yBAA+B;AAC/B,kBAAyC;AACzC,2BAAmE;AACnE,wBAAuC;AACvC,+BAAkC;AAQ3B,SAAS,yBAAyB;AAAA,EACvC;AAAA,EACA;AAAA,EACA,YAAY;AACd,GAAkC;AAChC,QAAM,WAAO,sBAAQ,MAAM,mCAAgB,CAAC,CAAC;AAC7C,QAAM,aAAS,6BAAU;AACzB,QAAM,eAAW,+BAAY;AAE7B,QAAM,CAAC,WAAW,YAAY,QAAI,uBAA0B,OAAO;AAAA,IACjE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,OAAO;AAAA,IACP,SAAS;AAAA,IACT,OAAO;AAAA,EACT,EAAE;AAEF,QAAM,oBAAgB,0BAAY,OAAO,UAAkB;AACzD,UAAM,KAAK,QAAQ;AACnB,iBAAa;AAAA,MACX,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,OAAO,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,OAAO;AAAA,IACT,CAAC;AACD,WAAO,KAAK,SAAS;AAAA,EACvB,GAAG,CAAC,MAAM,QAAQ,SAAS,CAAC;AAE5B,QAAM,yBAAqB,0BAAY,OAAO,SAAsB;AAClE,QAAI,MAAM;AACR,UAAI;AAEF,cAAM,QAAQ,MAAM,KAAK,WAAW,IAAI;AAExC,cAAM,eAAe,UAAM,4CAAkB,KAAK;AAClD,cAAM,UAAU,aAAa;AAE7B,YAAG,SAAS;AACV,iBAAO,EAAE,SAAS,MAAM,OAAO,QAAQ,KAAK,IAAI;AAAA,QAClD;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,MAAM,2BAA2B,KAAK;AAC9C,cAAM,cAAc,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,iCAAiC,CAAC;AACjG,eAAO,EAAE,SAAS,OAAO,OAAO,MAAM,QAAQ,KAAK;AAAA,MACrD;AAAA,IACF;AACA,WAAO,EAAE,SAAS,OAAO,OAAO,MAAM,QAAQ,KAAK;AAAA,EACrD,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,4BAAwB,0BAAY,OAAO,SAAsB;AACrE,UAAM,EAAE,SAAS,OAAO,OAAO,IAAI,MAAM,mBAAmB,IAAI;AAEhE,iBAAa;AAAA,MACX,UAAU;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AAED,QAAI,eAAe;AACjB,YAAM,cAAc,IAAI;AAAA,IAC1B;AAEA,QAAI,CAAC,WAAW,aAAa,WAAW;AACtC,aAAO,KAAK,SAAS;AAAA,IACvB;AAAA,EACF,GAAG,CAAC,oBAAoB,eAAe,QAAQ,WAAW,QAAQ,CAAC;AAEnE,8BAAU,MAAM;AACd,UAAM,2BAAuB,gCAAmB,MAAM,qBAAqB;AAG3E,UAAM,aAAa,YAAY,MAAM;AACnC,4BAAsB,KAAK,WAAW;AAAA,IACxC,GAAG,GAAK;AAER,WAAO,MAAM;AACX,2BAAqB;AACrB,oBAAc,UAAU;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,MAAM,qBAAqB,CAAC;AAEhC,QAAM,mBAAmC,sBAAQ,OAAO;AAAA,IACtD,GAAG;AAAA,IACH,oBAAoB,MAAM,sBAAsB,KAAK,WAAW;AAAA,IAChE,SAAS;AAAA,EACX,IAAI,CAAC,WAAW,uBAAuB,MAAM,aAAa,CAAC;AAE3D,MAAI,CAAC,UAAU,UAAU;AACvB,WACE,4CAAC,mCAAc,UAAd,EAAuB,OAAO,cAC7B,sDAAC,SAAI,aAAU,UAAS,aAAU,QAChC,sDAAC,UAAK,WAAU,WAAU,6CAA+B,GAC3D,GACF;AAAA,EAEJ;AAEA,SACE,4CAAC,mCAAc,UAAd,EAAuB,OAAO,cAC5B,UACH;AAEJ;","names":[]}

package/dist/cjs/boundary/TernSecureCtx.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/boundary/TernSecureCtx.tsx"],"sourcesContent":["\"use client\"\r\n\r\nimport { createContext, useContext } from 'react'\r\nimport { ternSecureAuth } from '../utils/client-init';\r\nimport { User } from 'firebase/auth';\r\n\r\nexport const TernSecureUser = (): User | null => {\r\n  return ternSecureAuth.currentUser;\r\n}\r\n\r\nexport interface TernSecureState {\r\n  userId: string | null\r\n  isLoaded: boolean\r\n  error: Error | null\r\n  isValid: boolean\r\n  token: string | null\r\n}\r\n\r\nexport type TernSecureCtxValue = TernSecureState\r\n\r\nexport const TernSecureCtx = createContext<TernSecureCtxValue | null>(null)\r\n\r\nTernSecureCtx.displayName = 'TernSecureCtx'\r\n\r\nexport const useTernSecure = (hookName: string) => {\r\n  const context = useContext(TernSecureCtx)\r\n  \r\n  if (!context) {\r\n    throw new Error(\r\n      `${hookName} must be used within TernSecureProvider`\r\n    )\r\n  }\r\n\r\n  return context\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,mBAA0C;AAC1C,yBAA+B;AAGxB,MAAM,iBAAiB,MAAmB;AAC/C,SAAO,kCAAe;AACxB;AAYO,MAAM,oBAAgB,4BAAyC,IAAI;AAE1E,cAAc,cAAc;AAErB,MAAM,gBAAgB,CAAC,aAAqB;AACjD,QAAM,cAAU,yBAAW,aAAa;AAExC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,QAAQ;AAAA,IACb;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../src/boundary/TernSecureCtx.tsx"],"sourcesContent":["\"use client\"\r\n\r\nimport { createContext, useContext } from 'react'\r\nimport { ternSecureAuth } from '../utils/client-init';\r\nimport { User } from 'firebase/auth';\r\n\r\nexport const TernSecureUser = (): User | null => {\r\n  return ternSecureAuth.currentUser;\r\n}\r\n\r\nexport interface TernSecureState {\r\n  userId: string | null\r\n  isLoaded: boolean\r\n  error: Error | null\r\n  isValid: boolean\r\n  token: string | null\r\n}\r\n\r\nexport interface TernSecureCtxValue extends TernSecureState {\r\n  checkTokenValidity: () => Promise<void>;\r\n  signOut: () => Promise<void>;\r\n}\r\n\r\nexport const TernSecureCtx = createContext<TernSecureCtxValue | null>(null)\r\n\r\nTernSecureCtx.displayName = 'TernSecureCtx'\r\n\r\nexport const useTernSecure = (hookName: string) => {\r\n  const context = useContext(TernSecureCtx)\r\n  \r\n  if (!context) {\r\n    throw new Error(\r\n      `${hookName} must be used within TernSecureProvider`\r\n    )\r\n  }\r\n\r\n  return context\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,mBAA0C;AAC1C,yBAA+B;AAGxB,MAAM,iBAAiB,MAAmB;AAC/C,SAAO,kCAAe;AACxB;AAeO,MAAM,oBAAgB,4BAAyC,IAAI;AAE1E,cAAc,cAAc;AAErB,MAAM,gBAAgB,CAAC,aAAqB;AACjD,QAAM,cAAU,yBAAW,aAAa;AAExC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,QAAQ;AAAA,IACb;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}

package/dist/cjs/boundary/hooks/useAuth.js

@@ -1,4 +1,5 @@
 "use strict";
+"use client";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -21,15 +22,32 @@ __export(useAuth_exports, {
   useAuth: () => useAuth
 });
 module.exports = __toCommonJS(useAuth_exports);
+var import_react = require("react");
 var import_TernSecureCtx = require("../TernSecureCtx");
+var import_TernSecureCtx2 = require("../TernSecureCtx");
 function useAuth() {
-  const authState = (0, import_TernSecureCtx.useTernSecure)("useAuth");
+  const {
+    userId,
+    isLoaded,
+    error,
+    isValid,
+    token,
+    checkTokenValidity,
+    signOut
+  } = (0, import_TernSecureCtx.useTernSecure)("useAuth");
+  const user = (0, import_TernSecureCtx2.TernSecureUser)();
+  const refreshToken = (0, import_react.useCallback)(async () => {
+    await checkTokenValidity();
+  }, [checkTokenValidity]);
   return {
-    userId: authState.userId,
-    isLoaded: authState.isLoaded,
-    error: authState.error,
-    isValid: authState.isValid,
-    token: authState.token
+    user,
+    userId,
+    isLoaded,
+    error,
+    isAuthenticated: isValid,
+    token,
+    refreshToken,
+    signOut
   };
 }
 // Annotate the CommonJS export names for ESM import in node:

package/dist/cjs/boundary/hooks/useAuth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/boundary/hooks/useAuth.ts"],"sourcesContent":["import { useTernSecure } from '../TernSecureCtx'\r\n\r\nexport function useAuth() {\r\n  const authState = useTernSecure('useAuth')\r\n\r\n  return {\r\n    userId: authState.userId,\r\n    isLoaded: authState.isLoaded,\r\n    error: authState.error,\r\n    isValid: authState.isValid,\r\n    token: authState.token\r\n  }\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAA8B;AAEvB,SAAS,UAAU;AACxB,QAAM,gBAAY,oCAAc,SAAS;AAEzC,SAAO;AAAA,IACL,QAAQ,UAAU;AAAA,IAClB,UAAU,UAAU;AAAA,IACpB,OAAO,UAAU;AAAA,IACjB,SAAS,UAAU;AAAA,IACnB,OAAO,UAAU;AAAA,EACnB;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/boundary/hooks/useAuth.ts"],"sourcesContent":["\"use client\"\r\n\r\nimport { useCallback } from 'react'\r\nimport { useTernSecure } from '../TernSecureCtx'\r\nimport { User } from 'firebase/auth'\r\nimport { TernSecureUser } from '../TernSecureCtx'\r\n\r\nexport function useAuth() {\r\n  const {\r\n    userId,\r\n    isLoaded,\r\n    error,\r\n    isValid,\r\n    token,\r\n    checkTokenValidity,\r\n    signOut\r\n  } = useTernSecure('useAuth')\r\n\r\n  const user: User | null = TernSecureUser()\r\n\r\n  const refreshToken = useCallback(async () => {\r\n    await checkTokenValidity()\r\n  }, [checkTokenValidity])\r\n\r\n  return {\r\n    user,\r\n    userId,\r\n    isLoaded,\r\n    error,\r\n    isAuthenticated: isValid,\r\n    token,\r\n    refreshToken,\r\n    signOut\r\n  }\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,mBAA4B;AAC5B,2BAA8B;AAE9B,IAAAA,wBAA+B;AAExB,SAAS,UAAU;AACxB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,QAAI,oCAAc,SAAS;AAE3B,QAAM,WAAoB,sCAAe;AAEzC,QAAM,mBAAe,0BAAY,YAAY;AAC3C,UAAM,mBAAmB;AAAA,EAC3B,GAAG,CAAC,kBAAkB,CAAC;AAEvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,iBAAiB;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["import_TernSecureCtx"]}

package/dist/esm/app-router/server/auth.js

@@ -1,8 +1,8 @@
 "use server";
 import { cookies } from "next/headers";
-import { verifyTernIDToken, verifyTernSessionCookie } from "./sessionTernSecure";
+import { verifyTernIdToken, verifyTernSessionCookie } from "./sessionTernSecure";
 async function auth() {
-  var _a, _b;
+  var _a, _b, _c;
   try {
     const cookieStore = await cookies();
     const sessionCookie = (_a = cookieStore.get("_session_cookie")) == null ? void 0 : _a.value;
@@ -18,10 +18,10 @@ async function auth() {
     }
     const idToken = (_b = cookieStore.get("_session_token")) == null ? void 0 : _b.value;
     if (idToken) {
-      const tokenResult = await verifyTernIDToken(idToken);
+      const tokenResult = await verifyTernIdToken(idToken);
       if (tokenResult.valid) {
         return {
-          userId: tokenResult.uid,
+          userId: (_c = tokenResult.uid) != null ? _c : null,
           token: idToken,
           error: null
         };

package/dist/esm/app-router/server/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/server/auth.ts"],"sourcesContent":["'use server'\r\n\r\nimport { cookies } from 'next/headers';\r\nimport {  verifyTernIDToken, verifyTernSessionCookie } from './sessionTernSecure';\r\n\r\nexport interface AuthResult {\r\n  userId: string | null;\r\n  token: string | null;\r\n  error: Error | null;\r\n}\r\n\r\nexport async function auth(): Promise<AuthResult> {\r\n  try {\r\n    const cookieStore = await cookies();\r\n    const sessionCookie = cookieStore.get('_session_cookie')?.value;\r\n    if (sessionCookie) {\r\n      const sessionResult = await verifyTernSessionCookie(sessionCookie);\r\n      if (sessionResult.valid) {\r\n        return {\r\n          userId: sessionResult.uid,\r\n          token: sessionCookie,\r\n          error: null\r\n        };\r\n      }\r\n    }\r\n\r\n    // If session cookie is not present or invalid, try the ID token\r\n    const idToken = cookieStore.get('_session_token')?.value;\r\n    if (idToken) {\r\n      const tokenResult = await verifyTernIDToken(idToken);\r\n      if (tokenResult.valid) {\r\n        return {\r\n          userId: tokenResult.uid,\r\n          token: idToken,\r\n          error: null\r\n        };\r\n      }\r\n    }\r\n\r\n    // If both checks fail, return null values\r\n    return {\r\n      userId: null,\r\n      token: null,\r\n      error: new Error('No valid session or token found')\r\n    };\r\n  } catch (error) {\r\n    console.error('Error in auth function:', error);\r\n    return {\r\n      userId: null,\r\n      token: null,\r\n      error: error instanceof Error ? error : new Error('An unknown error occurred')\r\n    };\r\n  }\r\n}\r\n\r\n"],"mappings":";AAEA,SAAS,eAAe;AACxB,SAAU,mBAAmB,+BAA+B;AAQ5D,eAAsB,OAA4B;AAXlD;AAYE,MAAI;AACF,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAC1D,QAAI,eAAe;AACjB,YAAM,gBAAgB,MAAM,wBAAwB,aAAa;AACjE,UAAI,cAAc,OAAO;AACvB,eAAO;AAAA,UACL,QAAQ,cAAc;AAAA,UACtB,OAAO;AAAA,UACP,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAGA,UAAM,WAAU,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AACnD,QAAI,SAAS;AACX,YAAM,cAAc,MAAM,kBAAkB,OAAO;AACnD,UAAI,YAAY,OAAO;AACrB,eAAO;AAAA,UACL,QAAQ,YAAY;AAAA,UACpB,OAAO;AAAA,UACP,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAGA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,OAAO,IAAI,MAAM,iCAAiC;AAAA,IACpD;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAC9C,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,2BAA2B;AAAA,IAC/E;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/app-router/server/auth.ts"],"sourcesContent":["'use server'\r\n\r\nimport { cookies } from 'next/headers';\r\nimport {  verifyTernIdToken, verifyTernSessionCookie } from './sessionTernSecure';\r\n\r\nexport interface AuthResult {\r\n  userId: string | null;\r\n  token: string | null;\r\n  error: Error | null;\r\n}\r\n\r\nexport async function auth(): Promise<AuthResult> {\r\n  try {\r\n    const cookieStore = await cookies();\r\n    const sessionCookie = cookieStore.get('_session_cookie')?.value;\r\n    if (sessionCookie) {\r\n      const sessionResult = await verifyTernSessionCookie(sessionCookie);\r\n      if (sessionResult.valid) {\r\n        return {\r\n          userId: sessionResult.uid,\r\n          token: sessionCookie,\r\n          error: null\r\n        };\r\n      }\r\n    }\r\n\r\n    // If session cookie is not present or invalid, try the ID token\r\n    const idToken = cookieStore.get('_session_token')?.value;\r\n    if (idToken) {\r\n      const tokenResult = await verifyTernIdToken(idToken);\r\n      if (tokenResult.valid) {\r\n        return {\r\n          userId: tokenResult.uid ?? null,\r\n          token: idToken,\r\n          error: null\r\n        };\r\n      }\r\n    }\r\n\r\n    // If both checks fail, return null values\r\n    return {\r\n      userId: null,\r\n      token: null,\r\n      error: new Error('No valid session or token found')\r\n    };\r\n  } catch (error) {\r\n    console.error('Error in auth function:', error);\r\n    return {\r\n      userId: null,\r\n      token: null,\r\n      error: error instanceof Error ? error : new Error('An unknown error occurred')\r\n    };\r\n  }\r\n}\r\n\r\n"],"mappings":";AAEA,SAAS,eAAe;AACxB,SAAU,mBAAmB,+BAA+B;AAQ5D,eAAsB,OAA4B;AAXlD;AAYE,MAAI;AACF,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAC1D,QAAI,eAAe;AACjB,YAAM,gBAAgB,MAAM,wBAAwB,aAAa;AACjE,UAAI,cAAc,OAAO;AACvB,eAAO;AAAA,UACL,QAAQ,cAAc;AAAA,UACtB,OAAO;AAAA,UACP,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAGA,UAAM,WAAU,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AACnD,QAAI,SAAS;AACX,YAAM,cAAc,MAAM,kBAAkB,OAAO;AACnD,UAAI,YAAY,OAAO;AACrB,eAAO;AAAA,UACL,SAAQ,iBAAY,QAAZ,YAAmB;AAAA,UAC3B,OAAO;AAAA,UACP,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAGA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,OAAO,IAAI,MAAM,iCAAiC;AAAA,IACpD;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAC9C,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,2BAA2B;AAAA,IAC/E;AAAA,EACF;AACF;","names":[]}

package/dist/esm/app-router/server/sessionTernSecure.js

@@ -64,16 +64,27 @@ async function setServerSession(token) {
     path: "/"
   });
 }
-async function verifyTernIDToken(token) {
+async function verifyTernIdToken(token) {
   try {
-    const res = await adminAuth.verifyIdToken(token);
-    if (res) {
-      return { valid: true, uid: res.uid };
-    } else {
-      return { valid: false, error: "Invalid token" };
-    }
+    const decodedToken = await adminAuth.verifyIdToken(token);
+    return { valid: true, uid: decodedToken.uid };
   } catch (error) {
-    return { error, valid: false };
+    if (error instanceof Error) {
+      const firebaseError = error;
+      if (error.name === "FirebaseAuthError") {
+        switch (firebaseError.code) {
+          case "auth/id-token-expired":
+            return { valid: false, error: "Token has expired" };
+          case "auth/id-token-revoked":
+            return { valid: false, error: "Token has been revoked" };
+          case "auth/user-disabled":
+            return { valid: false, error: "User account has been disabled" };
+          default:
+            return { valid: false, error: "Invalid token" };
+        }
+      }
+    }
+    return { valid: false, error: "Error verifying token" };
   }
 }
 async function verifyTernSessionCookie(session) {
@@ -93,7 +104,7 @@ export {
   getIdToken,
   getServerSessionCookie,
   setServerSession,
-  verifyTernIDToken,
+  verifyTernIdToken,
   verifyTernSessionCookie
 };
 //# sourceMappingURL=sessionTernSecure.js.map

package/dist/esm/app-router/server/sessionTernSecure.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/server/sessionTernSecure.ts"],"sourcesContent":["'use server'\r\n\r\nimport { cookies } from 'next/headers';\r\nimport { adminTernSecureAuth as adminAuth } from '../../utils/admin-init';\r\n\r\n\r\nexport interface User {\r\n    uid: string;\r\n    email: string;\r\n  }\r\n\r\nexport interface Session {\r\n    user: User | null;\r\n    token: string | null;\r\n    error: Error | null;\r\n}\r\n\r\nexport async function createSessionCookie(idToken: string) {\r\n  try {\r\n    const expiresIn = 60 * 60 * 24 * 5 * 1000;\r\n      const sessionCookie = await adminAuth.createSessionCookie(idToken, { expiresIn });\r\n\r\n      const cookieStore = await cookies();\r\n      cookieStore.set('_session_cookie', sessionCookie, {\r\n          maxAge: expiresIn,\r\n          httpOnly: true,\r\n          secure: process.env.NODE_ENV === 'production',\r\n          path: '/',\r\n      });\r\n      return { success: true, message: 'Session created' };\r\n  } catch (error) {\r\n      return { success: false, message: 'Failed to create session' };\r\n  }\r\n}\r\n\r\n\r\n\r\nexport async function getServerSessionCookie() {\r\n  const cookieStore = await cookies();\r\n  const sessionCookie = cookieStore.get('_session_cookie')?.value;\r\n\r\n  if (!sessionCookie) {\r\n    throw new Error('No session cookie found')\r\n  }\r\n    \r\n  try {\r\n    const decondeClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\r\n    return {\r\n      token: sessionCookie,\r\n      userId: decondeClaims.uid\r\n    }\r\n  } catch (error) {\r\n    console.error('Error verifying session:', error)\r\n    throw new Error('Invalid Session')\r\n  }\r\n}\r\n\r\n\r\nexport async function getIdToken() {\r\n  const cookieStore = await cookies();\r\n  const token = cookieStore.get('_session_token')?.value;\r\n\r\n  if (!token) {\r\n    throw new Error('No session cookie found')\r\n  }\r\n    \r\n  try {\r\n    const decodedClaims = await adminAuth.verifyIdToken(token)\r\n    return {\r\n      token: token,\r\n      userId: decodedClaims.uid\r\n    }\r\n  } catch (error) {\r\n    console.error('Error verifying session:', error)\r\n    throw new Error('Invalid Session')\r\n  }\r\n}\r\n\r\nexport async function setServerSession(token: string) {\r\n    const cookieStore = await cookies();\r\n    cookieStore.set('_session', token, {\r\n      httpOnly: true,\r\n      secure: process.env.NODE_ENV === 'production',\r\n      sameSite: 'strict',\r\n      maxAge: 60 * 60, // 1 hour\r\n      path: '/',\r\n    });\r\n  }\r\n\r\n  export async function verifyTernIDToken(token: string): Promise<{ valid: boolean; uid?: any; error?: any }>{\r\n    try {\r\n      const res = await adminAuth.verifyIdToken(token);\r\n      if (res) {\r\n        return { valid: true, uid: res.uid };\r\n      } else {\r\n        return { valid: false, error: 'Invalid token'};\r\n      }\r\n    } catch (error) {\r\n      return {error: error, valid: false}\r\n    }\r\n  }\r\n\r\n  export async function verifyTernSessionCookie(session: string): Promise<{ valid: boolean; uid?: any; error?: any }>{\r\n    try {\r\n      const res = await adminAuth.verifySessionCookie(session, true);\r\n      if (res) {\r\n        return { valid: true, uid: res.uid };\r\n      } else {\r\n        return { valid: false, error: 'Invalid session'};\r\n      }\r\n    } catch (error) {\r\n      return {error: error, valid: false}\r\n    }\r\n  }\r\n\r\n\r\n\r\n/*\r\n  export async function GET(request: NextRequest) {\r\n    const cookieStore = await cookies();\r\n    const sessionCookie = cookieStore.get('session')?.value\r\n  \r\n    if (!sessionCookie) {\r\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\r\n    }\r\n  \r\n    try {\r\n      const decodedClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\r\n      return NextResponse.json({ isAuthenticated: true, user: decodedClaims }, { status: 200 })\r\n    } catch (error) {\r\n      console.error('Error verifying session cookie:', error)\r\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\r\n    }\r\n  }\r\n\r\n*/"],"mappings":";AAEA,SAAS,eAAe;AACxB,SAAS,uBAAuB,iBAAiB;AAcjD,eAAsB,oBAAoB,SAAiB;AACzD,MAAI;AACF,UAAM,YAAY,KAAK,KAAK,KAAK,IAAI;AACnC,UAAM,gBAAgB,MAAM,UAAU,oBAAoB,SAAS,EAAE,UAAU,CAAC;AAEhF,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,IAAI,mBAAmB,eAAe;AAAA,MAC9C,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,MAAM;AAAA,IACV,CAAC;AACD,WAAO,EAAE,SAAS,MAAM,SAAS,kBAAkB;AAAA,EACvD,SAAS,OAAO;AACZ,WAAO,EAAE,SAAS,OAAO,SAAS,2BAA2B;AAAA,EACjE;AACF;AAIA,eAAsB,yBAAyB;AArC/C;AAsCE,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAE1D,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,UAAU,oBAAoB,eAAe,IAAI;AAC7E,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAGA,eAAsB,aAAa;AA1DnC;AA2DE,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,SAAQ,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AAEjD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,UAAU,cAAc,KAAK;AACzD,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAEA,eAAsB,iBAAiB,OAAe;AAClD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,YAAY,OAAO;AAAA,IACjC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAQ,KAAK;AAAA;AAAA,IACb,MAAM;AAAA,EACR,CAAC;AACH;AAEA,eAAsB,kBAAkB,OAAmE;AACzG,MAAI;AACF,UAAM,MAAM,MAAM,UAAU,cAAc,KAAK;AAC/C,QAAI,KAAK;AACP,aAAO,EAAE,OAAO,MAAM,KAAK,IAAI,IAAI;AAAA,IACrC,OAAO;AACL,aAAO,EAAE,OAAO,OAAO,OAAO,gBAAe;AAAA,IAC/C;AAAA,EACF,SAAS,OAAO;AACd,WAAO,EAAC,OAAc,OAAO,MAAK;AAAA,EACpC;AACF;AAEA,eAAsB,wBAAwB,SAAqE;AACjH,MAAI;AACF,UAAM,MAAM,MAAM,UAAU,oBAAoB,SAAS,IAAI;AAC7D,QAAI,KAAK;AACP,aAAO,EAAE,OAAO,MAAM,KAAK,IAAI,IAAI;AAAA,IACrC,OAAO;AACL,aAAO,EAAE,OAAO,OAAO,OAAO,kBAAiB;AAAA,IACjD;AAAA,EACF,SAAS,OAAO;AACd,WAAO,EAAC,OAAc,OAAO,MAAK;AAAA,EACpC;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/app-router/server/sessionTernSecure.ts"],"sourcesContent":["'use server'\r\n\r\nimport { cookies } from 'next/headers';\r\nimport { adminTernSecureAuth as adminAuth } from '../../utils/admin-init';\r\n\r\ninterface FirebaseAuthError extends Error {\r\n  code?: string;\r\n}\r\n\r\nexport interface User {\r\n    uid: string | null;\r\n    email: string | null;\r\n  }\r\n\r\nexport interface Session {\r\n    user: User | null;\r\n    token: string | null;\r\n    error: Error | null;\r\n}\r\n\r\nexport async function createSessionCookie(idToken: string) {\r\n  try {\r\n    const expiresIn = 60 * 60 * 24 * 5 * 1000;\r\n      const sessionCookie = await adminAuth.createSessionCookie(idToken, { expiresIn });\r\n\r\n      const cookieStore = await cookies();\r\n      cookieStore.set('_session_cookie', sessionCookie, {\r\n          maxAge: expiresIn,\r\n          httpOnly: true,\r\n          secure: process.env.NODE_ENV === 'production',\r\n          path: '/',\r\n      });\r\n      return { success: true, message: 'Session created' };\r\n  } catch (error) {\r\n      return { success: false, message: 'Failed to create session' };\r\n  }\r\n}\r\n\r\n\r\n\r\nexport async function getServerSessionCookie() {\r\n  const cookieStore = await cookies();\r\n  const sessionCookie = cookieStore.get('_session_cookie')?.value;\r\n\r\n  if (!sessionCookie) {\r\n    throw new Error('No session cookie found')\r\n  }\r\n    \r\n  try {\r\n    const decondeClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\r\n    return {\r\n      token: sessionCookie,\r\n      userId: decondeClaims.uid\r\n    }\r\n  } catch (error) {\r\n    console.error('Error verifying session:', error)\r\n    throw new Error('Invalid Session')\r\n  }\r\n}\r\n\r\n\r\nexport async function getIdToken() {\r\n  const cookieStore = await cookies();\r\n  const token = cookieStore.get('_session_token')?.value;\r\n\r\n  if (!token) {\r\n    throw new Error('No session cookie found')\r\n  }\r\n    \r\n  try {\r\n    const decodedClaims = await adminAuth.verifyIdToken(token)\r\n    return {\r\n      token: token,\r\n      userId: decodedClaims.uid\r\n    }\r\n  } catch (error) {\r\n    console.error('Error verifying session:', error)\r\n    throw new Error('Invalid Session')\r\n  }\r\n}\r\n\r\nexport async function setServerSession(token: string) {\r\n    const cookieStore = await cookies();\r\n    cookieStore.set('_session', token, {\r\n      httpOnly: true,\r\n      secure: process.env.NODE_ENV === 'production',\r\n      sameSite: 'strict',\r\n      maxAge: 60 * 60, // 1 hour\r\n      path: '/',\r\n    });\r\n  }\r\n\r\n  export async function verifyTernIdToken(token: string): Promise<{ valid: boolean; uid?: string; error?: string }> {\r\n    try {\r\n      const decodedToken = await adminAuth.verifyIdToken(token);\r\n      return { valid: true, uid: decodedToken.uid };\r\n    } catch (error) {\r\n      if (error instanceof Error) {\r\n        const firebaseError = error as FirebaseAuthError;\r\n        if (error.name === 'FirebaseAuthError') {\r\n          // Handle specific Firebase Auth errors\r\n          switch (firebaseError.code) {\r\n            case 'auth/id-token-expired':\r\n              return { valid: false, error: 'Token has expired' };\r\n            case 'auth/id-token-revoked':\r\n              return { valid: false, error: 'Token has been revoked' };\r\n            case 'auth/user-disabled':\r\n              return { valid: false, error: 'User account has been disabled' };\r\n            default:\r\n              return { valid: false, error: 'Invalid token' };\r\n          }\r\n        }\r\n      }\r\n      return { valid: false, error: 'Error verifying token' };\r\n    }\r\n  }\r\n  \r\n\r\n  export async function verifyTernSessionCookie(session: string): Promise<{ valid: boolean; uid?: any; error?: any }>{\r\n    try {\r\n      const res = await adminAuth.verifySessionCookie(session, true);\r\n      if (res) {\r\n        return { valid: true, uid: res.uid };\r\n      } else {\r\n        return { valid: false, error: 'Invalid session'};\r\n      }\r\n    } catch (error) {\r\n      return {error: error, valid: false}\r\n    }\r\n  }\r\n\r\n\r\n\r\n/*\r\n  export async function GET(request: NextRequest) {\r\n    const cookieStore = await cookies();\r\n    const sessionCookie = cookieStore.get('session')?.value\r\n  \r\n    if (!sessionCookie) {\r\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\r\n    }\r\n  \r\n    try {\r\n      const decodedClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\r\n      return NextResponse.json({ isAuthenticated: true, user: decodedClaims }, { status: 200 })\r\n    } catch (error) {\r\n      console.error('Error verifying session cookie:', error)\r\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\r\n    }\r\n  }\r\n\r\n*/"],"mappings":";AAEA,SAAS,eAAe;AACxB,SAAS,uBAAuB,iBAAiB;AAiBjD,eAAsB,oBAAoB,SAAiB;AACzD,MAAI;AACF,UAAM,YAAY,KAAK,KAAK,KAAK,IAAI;AACnC,UAAM,gBAAgB,MAAM,UAAU,oBAAoB,SAAS,EAAE,UAAU,CAAC;AAEhF,UAAM,cAAc,MAAM,QAAQ;AAClC,gBAAY,IAAI,mBAAmB,eAAe;AAAA,MAC9C,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,MAAM;AAAA,IACV,CAAC;AACD,WAAO,EAAE,SAAS,MAAM,SAAS,kBAAkB;AAAA,EACvD,SAAS,OAAO;AACZ,WAAO,EAAE,SAAS,OAAO,SAAS,2BAA2B;AAAA,EACjE;AACF;AAIA,eAAsB,yBAAyB;AAxC/C;AAyCE,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAE1D,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,UAAU,oBAAoB,eAAe,IAAI;AAC7E,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAGA,eAAsB,aAAa;AA7DnC;AA8DE,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,SAAQ,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AAEjD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,UAAU,cAAc,KAAK;AACzD,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAEA,eAAsB,iBAAiB,OAAe;AAClD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,YAAY,OAAO;AAAA,IACjC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,QAAQ,KAAK;AAAA;AAAA,IACb,MAAM;AAAA,EACR,CAAC;AACH;AAEA,eAAsB,kBAAkB,OAA0E;AAChH,MAAI;AACF,UAAM,eAAe,MAAM,UAAU,cAAc,KAAK;AACxD,WAAO,EAAE,OAAO,MAAM,KAAK,aAAa,IAAI;AAAA,EAC9C,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,YAAM,gBAAgB;AACtB,UAAI,MAAM,SAAS,qBAAqB;AAEtC,gBAAQ,cAAc,MAAM;AAAA,UAC1B,KAAK;AACH,mBAAO,EAAE,OAAO,OAAO,OAAO,oBAAoB;AAAA,UACpD,KAAK;AACH,mBAAO,EAAE,OAAO,OAAO,OAAO,yBAAyB;AAAA,UACzD,KAAK;AACH,mBAAO,EAAE,OAAO,OAAO,OAAO,iCAAiC;AAAA,UACjE;AACE,mBAAO,EAAE,OAAO,OAAO,OAAO,gBAAgB;AAAA,QAClD;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,OAAO,OAAO,OAAO,wBAAwB;AAAA,EACxD;AACF;AAGA,eAAsB,wBAAwB,SAAqE;AACjH,MAAI;AACF,UAAM,MAAM,MAAM,UAAU,oBAAoB,SAAS,IAAI;AAC7D,QAAI,KAAK;AACP,aAAO,EAAE,OAAO,MAAM,KAAK,IAAI,IAAI;AAAA,IACrC,OAAO;AACL,aAAO,EAAE,OAAO,OAAO,OAAO,kBAAiB;AAAA,IACjD;AAAA,EACF,SAAS,OAAO;AACd,WAAO,EAAC,OAAc,OAAO,MAAK;AAAA,EACpC;AACF;","names":[]}

package/dist/esm/boundary/TernSecureClientProvider.js

@@ -2,10 +2,18 @@
 import { jsx } from "react/jsx-runtime";
 import { useState, useEffect, useMemo, useCallback } from "react";
 import { ternSecureAuth } from "../utils/client-init";
-import { onAuthStateChanged, onIdTokenChanged } from "firebase/auth";
+import { onAuthStateChanged } from "firebase/auth";
 import { TernSecureCtx } from "./TernSecureCtx";
-function TernSecureClientProvider({ children, onUserChanged }) {
+import { useRouter, usePathname } from "next/navigation";
+import { verifyTernIdToken } from "../app-router/server/sessionTernSecure";
+function TernSecureClientProvider({
+  children,
+  onUserChanged,
+  loginPath = "/sign-in"
+}) {
   const auth = useMemo(() => ternSecureAuth, []);
+  const router = useRouter();
+  const pathname = usePathname();
   const [authState, setAuthState] = useState(() => ({
     userId: null,
     isLoaded: false,
@@ -22,52 +30,60 @@ function TernSecureClientProvider({ children, onUserChanged }) {
       isValid: false,
       token: null
     });
-  }, [auth]);
+    router.push(loginPath);
+  }, [auth, router, loginPath]);
   const checkTokenValidity = useCallback(async (user) => {
     if (user) {
       try {
         const token = await user.getIdToken(true);
-        setAuthState((prev) => ({
-          ...prev,
-          isLoaded: true,
-          userId: user.uid,
-          isValid: true,
-          token,
-          error: null
-        }));
+        const decodedToken = await verifyTernIdToken(token);
+        const isValid = decodedToken.valid;
+        if (isValid) {
+          return { isValid: true, token, userId: user.uid };
+        }
       } catch (error) {
         console.error("Token validation error:", error);
         await handleSignOut(error instanceof Error ? error : new Error("Authentication token is invalid"));
+        return { isValid: false, token: null, userId: null };
       }
-    } else {
-      setAuthState((prev) => ({
-        ...prev,
-        isLoaded: true,
-        userId: null,
-        isValid: false,
-        token: null,
-        error: null
-      }));
     }
+    return { isValid: false, token: null, userId: null };
   }, [handleSignOut]);
   const handleAuthStateChange = useCallback(async (user) => {
-    await checkTokenValidity(user);
+    const { isValid, token, userId } = await checkTokenValidity(user);
+    setAuthState({
+      isLoaded: true,
+      userId,
+      isValid,
+      token,
+      error: null
+    });
     if (onUserChanged) {
       await onUserChanged(user);
     }
-  }, [checkTokenValidity, onUserChanged]);
+    if (!isValid && pathname !== loginPath) {
+      router.push(loginPath);
+    }
+  }, [checkTokenValidity, onUserChanged, router, loginPath, pathname]);
   useEffect(() => {
     const unsubscribeAuthState = onAuthStateChanged(auth, handleAuthStateChange);
-    const unsubscribeTokenChange = onIdTokenChanged(auth, checkTokenValidity);
+    const intervalId = setInterval(() => {
+      handleAuthStateChange(auth.currentUser);
+    }, 6e4);
     return () => {
       unsubscribeAuthState();
-      unsubscribeTokenChange();
+      clearInterval(intervalId);
     };
-  }, [auth, handleAuthStateChange, checkTokenValidity]);
+  }, [auth, handleAuthStateChange]);
+  const contextValue = useMemo(() => ({
+    ...authState,
+    checkTokenValidity: () => handleAuthStateChange(auth.currentUser),
+    signOut: handleSignOut
+  }), [authState, handleAuthStateChange, auth, handleSignOut]);
   if (!authState.isLoaded) {
-    return /* @__PURE__ */ jsx(TernSecureCtx.Provider, { value: authState, children: /* @__PURE__ */ jsx("div", { "aria-live": "polite", "aria-busy": "true", children: /* @__PURE__ */ jsx("span", { className: "sr-only", children: "Loading authentication state..." }) }) });
+    return /* @__PURE__ */ jsx(TernSecureCtx.Provider, { value: contextValue, children: /* @__PURE__ */ jsx("div", { "aria-live": "polite", "aria-busy": "true", children: /* @__PURE__ */ jsx("span", { className: "sr-only", children: "Loading authentication state..." }) }) });
   }
-  return /* @__PURE__ */ jsx(TernSecureCtx.Provider, { value: authState, children });
+  return /* @__PURE__ */ jsx(TernSecureCtx.Provider, { value: contextValue, children });
 }
 export {
   TernSecureClientProvider

package/dist/esm/boundary/TernSecureClientProvider.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/boundary/TernSecureClientProvider.tsx"],"sourcesContent":["\"use client\"\r\n\r\nimport React, { useState, useEffect, useMemo, useCallback } from 'react'\r\nimport { ternSecureAuth } from '../utils/client-init'\r\nimport { onAuthStateChanged, User, onIdTokenChanged } from \"firebase/auth\"\r\nimport { TernSecureCtx, TernSecureState } from './TernSecureCtx'\r\n\r\ninterface TernSecureClientProviderProps {\r\n  children: React.ReactNode;\r\n  onUserChanged?: (user: User | null) => Promise<void>;\r\n}\r\n\r\nexport function TernSecureClientProvider({ children, onUserChanged }: TernSecureClientProviderProps) {\r\n  const auth = useMemo(() => ternSecureAuth, []);\r\n\r\n  const [authState, setAuthState] = useState<TernSecureState>(() => ({\r\n    userId: null,\r\n    isLoaded: false,\r\n    error: null,\r\n    isValid: false,\r\n    token: null\r\n  }));\r\n\r\n  const handleSignOut = useCallback(async (error?: Error) => {\r\n    await auth.signOut();\r\n    setAuthState({\r\n      isLoaded: true,\r\n      userId: null,\r\n      error: error || null,\r\n      isValid: false,\r\n      token: null\r\n    });\r\n  }, [auth]);\r\n\r\n  const checkTokenValidity = useCallback(async (user: User | null) => {\r\n    if (user) {\r\n      try {\r\n        const token = await user.getIdToken(true);\r\n        setAuthState(prev => ({\r\n          ...prev,\r\n          isLoaded: true,\r\n          userId: user.uid,\r\n          isValid: true,\r\n          token,\r\n          error: null\r\n        }));\r\n      } catch (error) {\r\n        console.error('Token validation error:', error);\r\n        await handleSignOut(error instanceof Error ? error : new Error('Authentication token is invalid'));\r\n      }\r\n    } else {\r\n      setAuthState(prev => ({\r\n        ...prev,\r\n        isLoaded: true,\r\n        userId: null,\r\n        isValid: false,\r\n        token: null,\r\n        error: null\r\n      }));\r\n    }\r\n  }, [handleSignOut]);\r\n\r\n  const handleAuthStateChange = useCallback(async (user: User | null) => {\r\n    await checkTokenValidity(user);\r\n    if (onUserChanged) {\r\n      await onUserChanged(user);\r\n    }\r\n  }, [checkTokenValidity, onUserChanged]);\r\n\r\n  useEffect(() => {\r\n    const unsubscribeAuthState = onAuthStateChanged(auth, handleAuthStateChange);\r\n    const unsubscribeTokenChange = onIdTokenChanged(auth, checkTokenValidity);\r\n    \r\n    return () => {\r\n      unsubscribeAuthState();\r\n      unsubscribeTokenChange();\r\n    };\r\n  }, [auth, handleAuthStateChange, checkTokenValidity]);\r\n\r\n  if (!authState.isLoaded) {\r\n    return (\r\n      <TernSecureCtx.Provider value={authState}>\r\n        <div aria-live=\"polite\" aria-busy=\"true\">\r\n          <span className=\"sr-only\">Loading authentication state...</span>\r\n        </div>\r\n      </TernSecureCtx.Provider>\r\n    );\r\n  }\r\n\r\n  return (\r\n    <TernSecureCtx.Provider value={authState}>\r\n      {children}\r\n    </TernSecureCtx.Provider>\r\n  );\r\n}\r\n\r\n"],"mappings":";AAmFU;AAjFV,SAAgB,UAAU,WAAW,SAAS,mBAAmB;AACjE,SAAS,sBAAsB;AAC/B,SAAS,oBAA0B,wBAAwB;AAC3D,SAAS,qBAAsC;AAOxC,SAAS,yBAAyB,EAAE,UAAU,cAAc,GAAkC;AACnG,QAAM,OAAO,QAAQ,MAAM,gBAAgB,CAAC,CAAC;AAE7C,QAAM,CAAC,WAAW,YAAY,IAAI,SAA0B,OAAO;AAAA,IACjE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,OAAO;AAAA,IACP,SAAS;AAAA,IACT,OAAO;AAAA,EACT,EAAE;AAEF,QAAM,gBAAgB,YAAY,OAAO,UAAkB;AACzD,UAAM,KAAK,QAAQ;AACnB,iBAAa;AAAA,MACX,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,OAAO,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,OAAO;AAAA,IACT,CAAC;AAAA,EACH,GAAG,CAAC,IAAI,CAAC;AAET,QAAM,qBAAqB,YAAY,OAAO,SAAsB;AAClE,QAAI,MAAM;AACR,UAAI;AACF,cAAM,QAAQ,MAAM,KAAK,WAAW,IAAI;AACxC,qBAAa,WAAS;AAAA,UACpB,GAAG;AAAA,UACH,UAAU;AAAA,UACV,QAAQ,KAAK;AAAA,UACb,SAAS;AAAA,UACT;AAAA,UACA,OAAO;AAAA,QACT,EAAE;AAAA,MACJ,SAAS,OAAO;AACd,gBAAQ,MAAM,2BAA2B,KAAK;AAC9C,cAAM,cAAc,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,iCAAiC,CAAC;AAAA,MACnG;AAAA,IACF,OAAO;AACL,mBAAa,WAAS;AAAA,QACpB,GAAG;AAAA,QACH,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,OAAO;AAAA,QACP,OAAO;AAAA,MACT,EAAE;AAAA,IACJ;AAAA,EACF,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,wBAAwB,YAAY,OAAO,SAAsB;AACrE,UAAM,mBAAmB,IAAI;AAC7B,QAAI,eAAe;AACjB,YAAM,cAAc,IAAI;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,oBAAoB,aAAa,CAAC;AAEtC,YAAU,MAAM;AACd,UAAM,uBAAuB,mBAAmB,MAAM,qBAAqB;AAC3E,UAAM,yBAAyB,iBAAiB,MAAM,kBAAkB;AAExE,WAAO,MAAM;AACX,2BAAqB;AACrB,6BAAuB;AAAA,IACzB;AAAA,EACF,GAAG,CAAC,MAAM,uBAAuB,kBAAkB,CAAC;AAEpD,MAAI,CAAC,UAAU,UAAU;AACvB,WACE,oBAAC,cAAc,UAAd,EAAuB,OAAO,WAC7B,8BAAC,SAAI,aAAU,UAAS,aAAU,QAChC,8BAAC,UAAK,WAAU,WAAU,6CAA+B,GAC3D,GACF;AAAA,EAEJ;AAEA,SACE,oBAAC,cAAc,UAAd,EAAuB,OAAO,WAC5B,UACH;AAEJ;","names":[]}
+{"version":3,"sources":["../../../src/boundary/TernSecureClientProvider.tsx"],"sourcesContent":["\"use client\"\r\n\r\nimport React, { useState, useEffect, useMemo, useCallback } from 'react'\r\nimport { ternSecureAuth } from '../utils/client-init'\r\nimport { User, onAuthStateChanged } from \"firebase/auth\"\r\nimport { TernSecureCtx, TernSecureState, TernSecureCtxValue } from './TernSecureCtx'\r\nimport { useRouter, usePathname } from 'next/navigation'\r\nimport { verifyTernIdToken } from '../app-router/server/sessionTernSecure'\r\n\r\ninterface TernSecureClientProviderProps {\r\n  children: React.ReactNode;\r\n  onUserChanged?: (user: User | null) => Promise<void>;\r\n  loginPath?: string;\r\n}\r\n\r\nexport function TernSecureClientProvider({ \r\n  children, \r\n  onUserChanged,\r\n  loginPath = '/sign-in'\r\n}: TernSecureClientProviderProps) {\r\n  const auth = useMemo(() => ternSecureAuth, []);\r\n  const router = useRouter();\r\n  const pathname = usePathname();\r\n\r\n  const [authState, setAuthState] = useState<TernSecureState>(() => ({\r\n    userId: null,\r\n    isLoaded: false,\r\n    error: null,\r\n    isValid: false,\r\n    token: null\r\n  }));\r\n\r\n  const handleSignOut = useCallback(async (error?: Error) => {\r\n    await auth.signOut();\r\n    setAuthState({\r\n      isLoaded: true,\r\n      userId: null,\r\n      error: error || null,\r\n      isValid: false,\r\n      token: null\r\n    });\r\n    router.push(loginPath);\r\n  }, [auth, router, loginPath]);\r\n\r\n  const checkTokenValidity = useCallback(async (user: User | null) => {\r\n    if (user) {\r\n      try {\r\n        // Force token refresh\r\n        const token = await user.getIdToken(true);\r\n    \r\n        const decodedToken = await verifyTernIdToken(token);\r\n        const isValid = decodedToken.valid\r\n\r\n        if(isValid) {\r\n          return { isValid: true, token, userId: user.uid };\r\n        }\r\n      } catch (error) {\r\n        console.error('Token validation error:', error);\r\n        await handleSignOut(error instanceof Error ? error : new Error('Authentication token is invalid'));\r\n        return { isValid: false, token: null, userId: null };\r\n      }\r\n    }\r\n    return { isValid: false, token: null, userId: null };\r\n  }, [handleSignOut]);\r\n\r\n  const handleAuthStateChange = useCallback(async (user: User | null) => {\r\n    const { isValid, token, userId } = await checkTokenValidity(user);\r\n    \r\n    setAuthState({\r\n      isLoaded: true,\r\n      userId,\r\n      isValid,\r\n      token,\r\n      error: null\r\n    });\r\n\r\n    if (onUserChanged) {\r\n      await onUserChanged(user);\r\n    }\r\n\r\n    if (!isValid && pathname !== loginPath) {\r\n      router.push(loginPath);\r\n    }\r\n  }, [checkTokenValidity, onUserChanged, router, loginPath, pathname]);\r\n\r\n  useEffect(() => {\r\n    const unsubscribeAuthState = onAuthStateChanged(auth, handleAuthStateChange);\r\n    \r\n    // Set up an interval to periodically check token validity\r\n    const intervalId = setInterval(() => {\r\n      handleAuthStateChange(auth.currentUser);\r\n    }, 60000); // Check every minute\r\n\r\n    return () => {\r\n      unsubscribeAuthState();\r\n      clearInterval(intervalId);\r\n    };\r\n  }, [auth, handleAuthStateChange]);\r\n\r\n  const contextValue: TernSecureCtxValue = useMemo(() => ({\r\n    ...authState,\r\n    checkTokenValidity: () => handleAuthStateChange(auth.currentUser),\r\n    signOut: handleSignOut,\r\n  }), [authState, handleAuthStateChange, auth, handleSignOut]);\r\n\r\n  if (!authState.isLoaded) {\r\n    return (\r\n      <TernSecureCtx.Provider value={contextValue}>\r\n        <div aria-live=\"polite\" aria-busy=\"true\">\r\n          <span className=\"sr-only\">Loading authentication state...</span>\r\n        </div>\r\n      </TernSecureCtx.Provider>\r\n    );\r\n  }\r\n\r\n  return (\r\n    <TernSecureCtx.Provider value={contextValue}>\r\n      {children}\r\n    </TernSecureCtx.Provider>\r\n  );\r\n}\r\n\r\n"],"mappings":";AA6GU;AA3GV,SAAgB,UAAU,WAAW,SAAS,mBAAmB;AACjE,SAAS,sBAAsB;AAC/B,SAAe,0BAA0B;AACzC,SAAS,qBAA0D;AACnE,SAAS,WAAW,mBAAmB;AACvC,SAAS,yBAAyB;AAQ3B,SAAS,yBAAyB;AAAA,EACvC;AAAA,EACA;AAAA,EACA,YAAY;AACd,GAAkC;AAChC,QAAM,OAAO,QAAQ,MAAM,gBAAgB,CAAC,CAAC;AAC7C,QAAM,SAAS,UAAU;AACzB,QAAM,WAAW,YAAY;AAE7B,QAAM,CAAC,WAAW,YAAY,IAAI,SAA0B,OAAO;AAAA,IACjE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,OAAO;AAAA,IACP,SAAS;AAAA,IACT,OAAO;AAAA,EACT,EAAE;AAEF,QAAM,gBAAgB,YAAY,OAAO,UAAkB;AACzD,UAAM,KAAK,QAAQ;AACnB,iBAAa;AAAA,MACX,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,OAAO,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,OAAO;AAAA,IACT,CAAC;AACD,WAAO,KAAK,SAAS;AAAA,EACvB,GAAG,CAAC,MAAM,QAAQ,SAAS,CAAC;AAE5B,QAAM,qBAAqB,YAAY,OAAO,SAAsB;AAClE,QAAI,MAAM;AACR,UAAI;AAEF,cAAM,QAAQ,MAAM,KAAK,WAAW,IAAI;AAExC,cAAM,eAAe,MAAM,kBAAkB,KAAK;AAClD,cAAM,UAAU,aAAa;AAE7B,YAAG,SAAS;AACV,iBAAO,EAAE,SAAS,MAAM,OAAO,QAAQ,KAAK,IAAI;AAAA,QAClD;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,MAAM,2BAA2B,KAAK;AAC9C,cAAM,cAAc,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,iCAAiC,CAAC;AACjG,eAAO,EAAE,SAAS,OAAO,OAAO,MAAM,QAAQ,KAAK;AAAA,MACrD;AAAA,IACF;AACA,WAAO,EAAE,SAAS,OAAO,OAAO,MAAM,QAAQ,KAAK;AAAA,EACrD,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,wBAAwB,YAAY,OAAO,SAAsB;AACrE,UAAM,EAAE,SAAS,OAAO,OAAO,IAAI,MAAM,mBAAmB,IAAI;AAEhE,iBAAa;AAAA,MACX,UAAU;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AAED,QAAI,eAAe;AACjB,YAAM,cAAc,IAAI;AAAA,IAC1B;AAEA,QAAI,CAAC,WAAW,aAAa,WAAW;AACtC,aAAO,KAAK,SAAS;AAAA,IACvB;AAAA,EACF,GAAG,CAAC,oBAAoB,eAAe,QAAQ,WAAW,QAAQ,CAAC;AAEnE,YAAU,MAAM;AACd,UAAM,uBAAuB,mBAAmB,MAAM,qBAAqB;AAG3E,UAAM,aAAa,YAAY,MAAM;AACnC,4BAAsB,KAAK,WAAW;AAAA,IACxC,GAAG,GAAK;AAER,WAAO,MAAM;AACX,2BAAqB;AACrB,oBAAc,UAAU;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,MAAM,qBAAqB,CAAC;AAEhC,QAAM,eAAmC,QAAQ,OAAO;AAAA,IACtD,GAAG;AAAA,IACH,oBAAoB,MAAM,sBAAsB,KAAK,WAAW;AAAA,IAChE,SAAS;AAAA,EACX,IAAI,CAAC,WAAW,uBAAuB,MAAM,aAAa,CAAC;AAE3D,MAAI,CAAC,UAAU,UAAU;AACvB,WACE,oBAAC,cAAc,UAAd,EAAuB,OAAO,cAC7B,8BAAC,SAAI,aAAU,UAAS,aAAU,QAChC,8BAAC,UAAK,WAAU,WAAU,6CAA+B,GAC3D,GACF;AAAA,EAEJ;AAEA,SACE,oBAAC,cAAc,UAAd,EAAuB,OAAO,cAC5B,UACH;AAEJ;","names":[]}

package/dist/esm/boundary/TernSecureCtx.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/boundary/TernSecureCtx.tsx"],"sourcesContent":["\"use client\"\r\n\r\nimport { createContext, useContext } from 'react'\r\nimport { ternSecureAuth } from '../utils/client-init';\r\nimport { User } from 'firebase/auth';\r\n\r\nexport const TernSecureUser = (): User | null => {\r\n  return ternSecureAuth.currentUser;\r\n}\r\n\r\nexport interface TernSecureState {\r\n  userId: string | null\r\n  isLoaded: boolean\r\n  error: Error | null\r\n  isValid: boolean\r\n  token: string | null\r\n}\r\n\r\nexport type TernSecureCtxValue = TernSecureState\r\n\r\nexport const TernSecureCtx = createContext<TernSecureCtxValue | null>(null)\r\n\r\nTernSecureCtx.displayName = 'TernSecureCtx'\r\n\r\nexport const useTernSecure = (hookName: string) => {\r\n  const context = useContext(TernSecureCtx)\r\n  \r\n  if (!context) {\r\n    throw new Error(\r\n      `${hookName} must be used within TernSecureProvider`\r\n    )\r\n  }\r\n\r\n  return context\r\n}\r\n\r\n"],"mappings":";AAEA,SAAS,eAAe,kBAAkB;AAC1C,SAAS,sBAAsB;AAGxB,MAAM,iBAAiB,MAAmB;AAC/C,SAAO,eAAe;AACxB;AAYO,MAAM,gBAAgB,cAAyC,IAAI;AAE1E,cAAc,cAAc;AAErB,MAAM,gBAAgB,CAAC,aAAqB;AACjD,QAAM,UAAU,WAAW,aAAa;AAExC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,QAAQ;AAAA,IACb;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../src/boundary/TernSecureCtx.tsx"],"sourcesContent":["\"use client\"\r\n\r\nimport { createContext, useContext } from 'react'\r\nimport { ternSecureAuth } from '../utils/client-init';\r\nimport { User } from 'firebase/auth';\r\n\r\nexport const TernSecureUser = (): User | null => {\r\n  return ternSecureAuth.currentUser;\r\n}\r\n\r\nexport interface TernSecureState {\r\n  userId: string | null\r\n  isLoaded: boolean\r\n  error: Error | null\r\n  isValid: boolean\r\n  token: string | null\r\n}\r\n\r\nexport interface TernSecureCtxValue extends TernSecureState {\r\n  checkTokenValidity: () => Promise<void>;\r\n  signOut: () => Promise<void>;\r\n}\r\n\r\nexport const TernSecureCtx = createContext<TernSecureCtxValue | null>(null)\r\n\r\nTernSecureCtx.displayName = 'TernSecureCtx'\r\n\r\nexport const useTernSecure = (hookName: string) => {\r\n  const context = useContext(TernSecureCtx)\r\n  \r\n  if (!context) {\r\n    throw new Error(\r\n      `${hookName} must be used within TernSecureProvider`\r\n    )\r\n  }\r\n\r\n  return context\r\n}\r\n\r\n"],"mappings":";AAEA,SAAS,eAAe,kBAAkB;AAC1C,SAAS,sBAAsB;AAGxB,MAAM,iBAAiB,MAAmB;AAC/C,SAAO,eAAe;AACxB;AAeO,MAAM,gBAAgB,cAAyC,IAAI;AAE1E,cAAc,cAAc;AAErB,MAAM,gBAAgB,CAAC,aAAqB;AACjD,QAAM,UAAU,WAAW,aAAa;AAExC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,QAAQ;AAAA,IACb;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}

package/dist/esm/boundary/hooks/useAuth.js

@@ -1,12 +1,30 @@
+"use client";
+import { useCallback } from "react";
 import { useTernSecure } from "../TernSecureCtx";
+import { TernSecureUser } from "../TernSecureCtx";
 function useAuth() {
-  const authState = useTernSecure("useAuth");
+  const {
+    userId,
+    isLoaded,
+    error,
+    isValid,
+    token,
+    checkTokenValidity,
+    signOut
+  } = useTernSecure("useAuth");
+  const user = TernSecureUser();
+  const refreshToken = useCallback(async () => {
+    await checkTokenValidity();
+  }, [checkTokenValidity]);
   return {
-    userId: authState.userId,
-    isLoaded: authState.isLoaded,
-    error: authState.error,
-    isValid: authState.isValid,
-    token: authState.token
+    user,
+    userId,
+    isLoaded,
+    error,
+    isAuthenticated: isValid,
+    token,
+    refreshToken,
+    signOut
   };
 }
 export {

package/dist/esm/boundary/hooks/useAuth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/boundary/hooks/useAuth.ts"],"sourcesContent":["import { useTernSecure } from '../TernSecureCtx'\r\n\r\nexport function useAuth() {\r\n  const authState = useTernSecure('useAuth')\r\n\r\n  return {\r\n    userId: authState.userId,\r\n    isLoaded: authState.isLoaded,\r\n    error: authState.error,\r\n    isValid: authState.isValid,\r\n    token: authState.token\r\n  }\r\n}\r\n\r\n"],"mappings":"AAAA,SAAS,qBAAqB;AAEvB,SAAS,UAAU;AACxB,QAAM,YAAY,cAAc,SAAS;AAEzC,SAAO;AAAA,IACL,QAAQ,UAAU;AAAA,IAClB,UAAU,UAAU;AAAA,IACpB,OAAO,UAAU;AAAA,IACjB,SAAS,UAAU;AAAA,IACnB,OAAO,UAAU;AAAA,EACnB;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/boundary/hooks/useAuth.ts"],"sourcesContent":["\"use client\"\r\n\r\nimport { useCallback } from 'react'\r\nimport { useTernSecure } from '../TernSecureCtx'\r\nimport { User } from 'firebase/auth'\r\nimport { TernSecureUser } from '../TernSecureCtx'\r\n\r\nexport function useAuth() {\r\n  const {\r\n    userId,\r\n    isLoaded,\r\n    error,\r\n    isValid,\r\n    token,\r\n    checkTokenValidity,\r\n    signOut\r\n  } = useTernSecure('useAuth')\r\n\r\n  const user: User | null = TernSecureUser()\r\n\r\n  const refreshToken = useCallback(async () => {\r\n    await checkTokenValidity()\r\n  }, [checkTokenValidity])\r\n\r\n  return {\r\n    user,\r\n    userId,\r\n    isLoaded,\r\n    error,\r\n    isAuthenticated: isValid,\r\n    token,\r\n    refreshToken,\r\n    signOut\r\n  }\r\n}\r\n\r\n"],"mappings":";AAEA,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAE9B,SAAS,sBAAsB;AAExB,SAAS,UAAU;AACxB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,cAAc,SAAS;AAE3B,QAAM,OAAoB,eAAe;AAEzC,QAAM,eAAe,YAAY,YAAY;AAC3C,UAAM,mBAAmB;AAAA,EAC3B,GAAG,CAAC,kBAAkB,CAAC;AAEvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,iBAAiB;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/types/app-router/server/sessionTernSecure.d.ts

@@ -1,6 +1,6 @@
 export interface User {
-    uid: string;
-    email: string;
+    uid: string | null;
+    email: string | null;
 }
 export interface Session {
     user: User | null;
@@ -20,10 +20,10 @@ export declare function getIdToken(): Promise<{
     userId: string;
 }>;
 export declare function setServerSession(token: string): Promise<void>;
-export declare function verifyTernIDToken(token: string): Promise<{
+export declare function verifyTernIdToken(token: string): Promise<{
     valid: boolean;
-    uid?: any;
-    error?: any;
+    uid?: string;
+    error?: string;
 }>;
 export declare function verifyTernSessionCookie(session: string): Promise<{
     valid: boolean;

package/dist/types/app-router/server/sessionTernSecure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessionTernSecure.d.ts","sourceRoot":"","sources":["../../../../src/app-router/server/sessionTernSecure.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,IAAI;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAEH,MAAM,WAAW,OAAO;IACpB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACvB;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM;;;GAgBxD;AAID,wBAAsB,sBAAsB;;;GAkB3C;AAGD,wBAAsB,UAAU;;;GAkB/B;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,iBASjD;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IAAC,KAAK,CAAC,EAAE,GAAG,CAAA;CAAE,CAAC,CAW1G;AAED,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IAAC,KAAK,CAAC,EAAE,GAAG,CAAA;CAAE,CAAC,CAWlH"}
+{"version":3,"file":"sessionTernSecure.d.ts","sourceRoot":"","sources":["../../../../src/app-router/server/sessionTernSecure.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,IAAI;IACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAEH,MAAM,WAAW,OAAO;IACpB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACvB;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM;;;GAgBxD;AAID,wBAAsB,sBAAsB;;;GAkB3C;AAGD,wBAAsB,UAAU;;;GAkB/B;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,iBASjD;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBhH;AAGD,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IAAC,KAAK,CAAC,EAAE,GAAG,CAAA;CAAE,CAAC,CAWlH"}

package/dist/types/boundary/TernSecureClientProvider.d.ts

@@ -3,7 +3,8 @@ import { User } from "firebase/auth";
 interface TernSecureClientProviderProps {
     children: React.ReactNode;
     onUserChanged?: (user: User | null) => Promise<void>;
+    loginPath?: string;
 }
-export declare function TernSecureClientProvider({ children, onUserChanged }: TernSecureClientProviderProps): import("react/jsx-runtime").JSX.Element;
+export declare function TernSecureClientProvider({ children, onUserChanged, loginPath }: TernSecureClientProviderProps): import("react/jsx-runtime").JSX.Element;
 export {};
 //# sourceMappingURL=TernSecureClientProvider.d.ts.map

package/dist/types/boundary/TernSecureClientProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TernSecureClientProvider.d.ts","sourceRoot":"","sources":["../../../src/boundary/TernSecureClientProvider.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAoD,MAAM,OAAO,CAAA;AAExE,OAAO,EAAsB,IAAI,EAAoB,MAAM,eAAe,CAAA;AAG1E,UAAU,6BAA6B;IACrC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED,wBAAgB,wBAAwB,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,6BAA6B,2CAkFlG"}
+{"version":3,"file":"TernSecureClientProvider.d.ts","sourceRoot":"","sources":["../../../src/boundary/TernSecureClientProvider.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAoD,MAAM,OAAO,CAAA;AAExE,OAAO,EAAE,IAAI,EAAsB,MAAM,eAAe,CAAA;AAKxD,UAAU,6BAA6B;IACrC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,wBAAwB,CAAC,EACvC,QAAQ,EACR,aAAa,EACb,SAAsB,EACvB,EAAE,6BAA6B,2CAqG/B"}

package/dist/types/boundary/TernSecureCtx.d.ts

@@ -7,7 +7,10 @@ export interface TernSecureState {
     isValid: boolean;
     token: string | null;
 }
-export type TernSecureCtxValue = TernSecureState;
-export declare const TernSecureCtx: import("react").Context<TernSecureState | null>;
-export declare const useTernSecure: (hookName: string) => TernSecureState;
+export interface TernSecureCtxValue extends TernSecureState {
+    checkTokenValidity: () => Promise<void>;
+    signOut: () => Promise<void>;
+}
+export declare const TernSecureCtx: import("react").Context<TernSecureCtxValue | null>;
+export declare const useTernSecure: (hookName: string) => TernSecureCtxValue;
 //# sourceMappingURL=TernSecureCtx.d.ts.map

package/dist/types/boundary/TernSecureCtx.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TernSecureCtx.d.ts","sourceRoot":"","sources":["../../../src/boundary/TernSecureCtx.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,eAAO,MAAM,cAAc,QAAO,IAAI,GAAG,IAExC,CAAA;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,QAAQ,EAAE,OAAO,CAAA;IACjB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,MAAM,MAAM,kBAAkB,GAAG,eAAe,CAAA;AAEhD,eAAO,MAAM,aAAa,iDAAiD,CAAA;AAI3E,eAAO,MAAM,aAAa,aAAc,MAAM,oBAU7C,CAAA"}
+{"version":3,"file":"TernSecureCtx.d.ts","sourceRoot":"","sources":["../../../src/boundary/TernSecureCtx.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,eAAO,MAAM,cAAc,QAAO,IAAI,GAAG,IAExC,CAAA;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,QAAQ,EAAE,OAAO,CAAA;IACjB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED,eAAO,MAAM,aAAa,oDAAiD,CAAA;AAI3E,eAAO,MAAM,aAAa,aAAc,MAAM,uBAU7C,CAAA"}

package/dist/types/boundary/hooks/useAuth.d.ts

@@ -1,8 +1,12 @@
+import { User } from 'firebase/auth';
 export declare function useAuth(): {
+    user: User | null;
     userId: string | null;
     isLoaded: boolean;
     error: Error | null;
-    isValid: boolean;
+    isAuthenticated: boolean;
     token: string | null;
+    refreshToken: () => Promise<void>;
+    signOut: () => Promise<void>;
 };
 //# sourceMappingURL=useAuth.d.ts.map

package/dist/types/boundary/hooks/useAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../../../src/boundary/hooks/useAuth.ts"],"names":[],"mappings":"AAEA,wBAAgB,OAAO;;;;;;EAUtB"}
+{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../../../src/boundary/hooks/useAuth.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAA;AAGpC,wBAAgB,OAAO;;;;;;;;;EA2BtB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tern-secure/nextjs",
-  "version": "3.2.31",
+  "version": "3.2.33",
   "packageManager": "npm@10.9.0",
   "publishConfig": {
     "access": "public"