@tern-secure/nextjs 4.2.1 → 4.2.3

package/dist/cjs/app-router/admin/sessionTernSecure.js

@@ -30,6 +30,7 @@ __export(sessionTernSecure_exports, {
 module.exports = __toCommonJS(sessionTernSecure_exports);
 var import_headers = require("next/headers");
 var import_admin_init = require("../../utils/admin-init");
+var import_errors = require("../../errors");
 async function createSessionCookie(idToken) {
   try {
     const expiresIn = 60 * 60 * 24 * 5 * 1e3;
@@ -100,37 +101,40 @@ async function setServerSession(token) {
 }
 async function verifyTernIdToken(token) {
   try {
-    const decodedToken = await import_admin_init.adminTernSecureAuth.verifyIdToken(token, true);
-    return { valid: true, uid: decodedToken.uid };
+    const decodedToken = await import_admin_init.adminTernSecureAuth.verifyIdToken(token);
+    return {
+      valid: true,
+      uid: decodedToken.uid,
+      email: decodedToken.email || null,
+      authTime: decodedToken.auth_time
+    };
   } catch (error) {
-    if (error instanceof Error) {
-      const firebaseError = error;
-      if (error.name === "FirebaseAuthError") {
-        switch (firebaseError.code) {
-          case "auth/id-token-expired":
-            return { valid: false, error: "Token has expired" };
-          case "auth/id-token-revoked":
-            return { valid: false, error: "Token has been revoked" };
-          case "auth/user-disabled":
-            return { valid: false, error: "User account has been disabled" };
-          default:
-            return { valid: false, error: "Invalid token" };
-        }
-      }
-    }
-    return { valid: false, error: "Error verifying token" };
+    const errorResponse = (0, import_errors.handleFirebaseAuthError)(error);
+    return {
+      valid: false,
+      uid: null,
+      email: null,
+      error: errorResponse
+    };
   }
 }
 async function verifyTernSessionCookie(session) {
   try {
-    const res = await import_admin_init.adminTernSecureAuth.verifySessionCookie(session, true);
-    if (res) {
-      return { valid: true, uid: res.uid };
-    } else {
-      return { valid: false, error: "Invalid session" };
-    }
+    const res = await import_admin_init.adminTernSecureAuth.verifySessionCookie(session);
+    return {
+      valid: true,
+      uid: res.uid,
+      email: res.email || null,
+      authTime: res.auth_time
+    };
   } catch (error) {
-    return { error, valid: false };
+    const errorResponse = (0, import_errors.handleFirebaseAuthError)(error);
+    return {
+      valid: false,
+      uid: null,
+      email: null,
+      error: errorResponse
+    };
   }
 }
 async function clearSessionCookie() {

package/dist/cjs/app-router/admin/sessionTernSecure.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/admin/sessionTernSecure.ts"],"sourcesContent":["'use server'\n\nimport { cookies } from 'next/headers';\nimport { adminTernSecureAuth as adminAuth } from '../../utils/admin-init';\n\ninterface FirebaseAuthError extends Error {\n  code?: string;\n}\n\nexport interface User {\n    uid: string | null;\n    email: string | null;\n  }\n\nexport interface Session {\n    user: User | null;\n    token: string | null;\n    error: Error | null;\n}\n\nexport async function createSessionCookie(idToken: string) {\n  try {\n    const expiresIn = 60 * 60 * 24 * 5 * 1000;\n      const sessionCookie = await adminAuth.createSessionCookie(idToken, { expiresIn });\n\n      const cookieStore = await cookies();\n      cookieStore.set('_session_cookie', sessionCookie, {\n          maxAge: expiresIn,\n          httpOnly: true,\n          secure: process.env.NODE_ENV === 'production',\n          path: '/',\n      });\n      return { success: true, message: 'Session created' };\n  } catch (error) {\n      return { success: false, message: 'Failed to create session' };\n  }\n}\n\n\n\nexport async function getServerSessionCookie() {\n  const cookieStore = await cookies();\n  const sessionCookie = cookieStore.get('_session_cookie')?.value;\n\n  if (!sessionCookie) {\n    throw new Error('No session cookie found')\n  }\n    \n  try {\n    const decondeClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\n    return {\n      token: sessionCookie,\n      userId: decondeClaims.uid\n    }\n  } catch (error) {\n    console.error('Error verifying session:', error)\n    throw new Error('Invalid Session')\n  }\n}\n\n\nexport async function getIdToken() {\n  const cookieStore = await cookies();\n  const token = cookieStore.get('_session_token')?.value;\n\n  if (!token) {\n    throw new Error('No session cookie found')\n  }\n    \n  try {\n    const decodedClaims = await adminAuth.verifyIdToken(token)\n    return {\n      token: token,\n      userId: decodedClaims.uid\n    }\n  } catch (error) {\n    console.error('Error verifying session:', error)\n    throw new Error('Invalid Session')\n  }\n}\n\nexport async function setServerSession(token: string) {\n  try {\n    const cookieStore = await cookies();\n    cookieStore.set('_session_token', token, {\n      httpOnly: true,\n      secure: process.env.NODE_ENV === 'production',\n      sameSite: 'strict',\n      maxAge: 60 * 60, // 1 hour\n      path: '/',\n    });\n    return { success: true, message: 'Session created' };\n  } catch {\n    return { success: false, message: 'Failed to create session' };\n  }\n}\n\n  export async function verifyTernIdToken(token: string): Promise<{ valid: boolean; uid?: string; error?: string }> {\n    try {\n      const decodedToken = await adminAuth.verifyIdToken(token, true);\n      return { valid: true, uid: decodedToken.uid };\n    } catch (error) {\n      if (error instanceof Error) {\n        const firebaseError = error as FirebaseAuthError;\n        if (error.name === 'FirebaseAuthError') {\n          // Handle specific Firebase Auth errors\n          switch (firebaseError.code) {\n            case 'auth/id-token-expired':\n              return { valid: false, error: 'Token has expired' };\n            case 'auth/id-token-revoked':\n              return { valid: false, error: 'Token has been revoked' };\n            case 'auth/user-disabled':\n              return { valid: false, error: 'User account has been disabled' };\n            default:\n              return { valid: false, error: 'Invalid token' };\n          }\n        }\n      }\n      return { valid: false, error: 'Error verifying token' };\n    }\n  }\n  \n\n  export async function verifyTernSessionCookie(session: string): Promise<{ valid: boolean; uid?: any; error?: any }>{\n    try {\n      const res = await adminAuth.verifySessionCookie(session, true);\n      if (res) {\n        return { valid: true, uid: res.uid };\n      } else {\n        return { valid: false, error: 'Invalid session'};\n      }\n    } catch (error) {\n      return {error: error, valid: false}\n    }\n  }\n\n\n  export async function clearSessionCookie() {\n    const cookieStore = await cookies()\n    \n    cookieStore.delete('_session_cookie')\n    cookieStore.delete('_session_token')\n    cookieStore.delete('_session')\n  \n    try {\n      // Verify if there's an active session before revoking\n      const sessionCookie = cookieStore.get('_session_cookie')?.value\n      if (sessionCookie) {\n        // Get the decoded claims to get the user's ID\n        const decodedClaims = await adminAuth.verifySessionCookie(sessionCookie)\n        \n        // Revoke all sessions for the user\n        await adminAuth.revokeRefreshTokens(decodedClaims.uid)\n      }\n      \n      return { success: true, message: 'Session cleared successfully' }\n    } catch (error) {\n      console.error('Error clearing session:', error)\n      // Still return success even if revoking fails, as cookies are cleared\n      return { success: true, message: 'Session cookies cleared' }\n    }\n  }\n\n\n\n/*\n  export async function GET(request: NextRequest) {\n    const cookieStore = await cookies();\n    const sessionCookie = cookieStore.get('session')?.value\n  \n    if (!sessionCookie) {\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\n    }\n  \n    try {\n      const decodedClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\n      return NextResponse.json({ isAuthenticated: true, user: decodedClaims }, { status: 200 })\n    } catch (error) {\n      console.error('Error verifying session cookie:', error)\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\n    }\n  }\n\n*/"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,qBAAwB;AACxB,wBAAiD;AAiBjD,eAAsB,oBAAoB,SAAiB;AACzD,MAAI;AACF,UAAM,YAAY,KAAK,KAAK,KAAK,IAAI;AACnC,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,oBAAoB,SAAS,EAAE,UAAU,CAAC;AAEhF,UAAM,cAAc,UAAM,wBAAQ;AAClC,gBAAY,IAAI,mBAAmB,eAAe;AAAA,MAC9C,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,MAAM;AAAA,IACV,CAAC;AACD,WAAO,EAAE,SAAS,MAAM,SAAS,kBAAkB;AAAA,EACvD,SAAS,OAAO;AACZ,WAAO,EAAE,SAAS,OAAO,SAAS,2BAA2B;AAAA,EACjE;AACF;AAIA,eAAsB,yBAAyB;AAxC/C;AAyCE,QAAM,cAAc,UAAM,wBAAQ;AAClC,QAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAE1D,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,oBAAoB,eAAe,IAAI;AAC7E,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAGA,eAAsB,aAAa;AA7DnC;AA8DE,QAAM,cAAc,UAAM,wBAAQ;AAClC,QAAM,SAAQ,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AAEjD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,cAAc,KAAK;AACzD,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAEA,eAAsB,iBAAiB,OAAe;AACpD,MAAI;AACF,UAAM,cAAc,UAAM,wBAAQ;AAClC,gBAAY,IAAI,kBAAkB,OAAO;AAAA,MACvC,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,UAAU;AAAA,MACV,QAAQ,KAAK;AAAA;AAAA,MACb,MAAM;AAAA,IACR,CAAC;AACD,WAAO,EAAE,SAAS,MAAM,SAAS,kBAAkB;AAAA,EACrD,QAAQ;AACN,WAAO,EAAE,SAAS,OAAO,SAAS,2BAA2B;AAAA,EAC/D;AACF;AAEE,eAAsB,kBAAkB,OAA0E;AAChH,MAAI;AACF,UAAM,eAAe,MAAM,kBAAAA,oBAAU,cAAc,OAAO,IAAI;AAC9D,WAAO,EAAE,OAAO,MAAM,KAAK,aAAa,IAAI;AAAA,EAC9C,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,YAAM,gBAAgB;AACtB,UAAI,MAAM,SAAS,qBAAqB;AAEtC,gBAAQ,cAAc,MAAM;AAAA,UAC1B,KAAK;AACH,mBAAO,EAAE,OAAO,OAAO,OAAO,oBAAoB;AAAA,UACpD,KAAK;AACH,mBAAO,EAAE,OAAO,OAAO,OAAO,yBAAyB;AAAA,UACzD,KAAK;AACH,mBAAO,EAAE,OAAO,OAAO,OAAO,iCAAiC;AAAA,UACjE;AACE,mBAAO,EAAE,OAAO,OAAO,OAAO,gBAAgB;AAAA,QAClD;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,OAAO,OAAO,OAAO,wBAAwB;AAAA,EACxD;AACF;AAGA,eAAsB,wBAAwB,SAAqE;AACjH,MAAI;AACF,UAAM,MAAM,MAAM,kBAAAA,oBAAU,oBAAoB,SAAS,IAAI;AAC7D,QAAI,KAAK;AACP,aAAO,EAAE,OAAO,MAAM,KAAK,IAAI,IAAI;AAAA,IACrC,OAAO;AACL,aAAO,EAAE,OAAO,OAAO,OAAO,kBAAiB;AAAA,IACjD;AAAA,EACF,SAAS,OAAO;AACd,WAAO,EAAC,OAAc,OAAO,MAAK;AAAA,EACpC;AACF;AAGA,eAAsB,qBAAqB;AAzI7C;AA0II,QAAM,cAAc,UAAM,wBAAQ;AAElC,cAAY,OAAO,iBAAiB;AACpC,cAAY,OAAO,gBAAgB;AACnC,cAAY,OAAO,UAAU;AAE7B,MAAI;AAEF,UAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAC1D,QAAI,eAAe;AAEjB,YAAM,gBAAgB,MAAM,kBAAAA,oBAAU,oBAAoB,aAAa;AAGvE,YAAM,kBAAAA,oBAAU,oBAAoB,cAAc,GAAG;AAAA,IACvD;AAEA,WAAO,EAAE,SAAS,MAAM,SAAS,+BAA+B;AAAA,EAClE,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAE9C,WAAO,EAAE,SAAS,MAAM,SAAS,0BAA0B;AAAA,EAC7D;AACF;","names":["adminAuth"]}
+{"version":3,"sources":["../../../../src/app-router/admin/sessionTernSecure.ts"],"sourcesContent":["'use server'\n\nimport { cookies } from 'next/headers';\nimport { adminTernSecureAuth as adminAuth } from '../../utils/admin-init';\nimport { handleFirebaseAuthError, type AuthErrorResponse } from '../../errors';\n\ninterface FirebaseAuthError extends Error {\n  code?: string;\n}\n\nexport interface User {\n    uid: string | null;\n    email: string | null;\n  }\n\nexport interface Session {\n    user: User | null;\n    token: string | null;\n    error: Error | null;\n}\n\ninterface TernVerificationResult extends User {\n  valid: boolean\n  authTime?: number\n  error?: AuthErrorResponse\n}\n\nexport async function createSessionCookie(idToken: string) {\n  try {\n    const expiresIn = 60 * 60 * 24 * 5 * 1000;\n      const sessionCookie = await adminAuth.createSessionCookie(idToken, { expiresIn });\n\n      const cookieStore = await cookies();\n      cookieStore.set('_session_cookie', sessionCookie, {\n          maxAge: expiresIn,\n          httpOnly: true,\n          secure: process.env.NODE_ENV === 'production',\n          path: '/',\n      });\n      return { success: true, message: 'Session created' };\n  } catch (error) {\n      return { success: false, message: 'Failed to create session' };\n  }\n}\n\n\n\nexport async function getServerSessionCookie() {\n  const cookieStore = await cookies();\n  const sessionCookie = cookieStore.get('_session_cookie')?.value;\n\n  if (!sessionCookie) {\n    throw new Error('No session cookie found')\n  }\n    \n  try {\n    const decondeClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\n    return {\n      token: sessionCookie,\n      userId: decondeClaims.uid\n    }\n  } catch (error) {\n    console.error('Error verifying session:', error)\n    throw new Error('Invalid Session')\n  }\n}\n\n\nexport async function getIdToken() {\n  const cookieStore = await cookies();\n  const token = cookieStore.get('_session_token')?.value;\n\n  if (!token) {\n    throw new Error('No session cookie found')\n  }\n    \n  try {\n    const decodedClaims = await adminAuth.verifyIdToken(token)\n    return {\n      token: token,\n      userId: decodedClaims.uid\n    }\n  } catch (error) {\n    console.error('Error verifying session:', error)\n    throw new Error('Invalid Session')\n  }\n}\n\nexport async function setServerSession(token: string) {\n  try {\n    const cookieStore = await cookies();\n    cookieStore.set('_session_token', token, {\n      httpOnly: true,\n      secure: process.env.NODE_ENV === 'production',\n      sameSite: 'strict',\n      maxAge: 60 * 60, // 1 hour\n      path: '/',\n    });\n    return { success: true, message: 'Session created' };\n  } catch {\n    return { success: false, message: 'Failed to create session' };\n  }\n}\n\n  export async function verifyTernIdToken(token: string): Promise<TernVerificationResult> {\n    try {\n      const decodedToken = await adminAuth.verifyIdToken(token);\n      return {\n        valid: true,\n        uid: decodedToken.uid,\n        email: decodedToken.email || null,\n        authTime: decodedToken.auth_time\n      };\n    } catch (error) {\n      const errorResponse = handleFirebaseAuthError(error)\n      return {\n        valid: false,\n        uid: null,\n        email: null,\n        error: errorResponse\n      };\n    }\n  }\n  \n\n  export async function verifyTernSessionCookie(session: string): Promise<TernVerificationResult>{\n    try {\n      const res = await adminAuth.verifySessionCookie(session);\n      return { \n          valid: true, \n          uid: res.uid,\n          email: res.email || null,\n          authTime: res.auth_time\n        };\n    } catch (error) {\n      const errorResponse = handleFirebaseAuthError(error)\n      return {\n        valid: false, \n        uid: null,\n        email: null,\n        error: errorResponse\n      };\n    }\n  }\n\n\n  export async function clearSessionCookie() {\n    const cookieStore = await cookies()\n    \n    cookieStore.delete('_session_cookie')\n    cookieStore.delete('_session_token')\n    cookieStore.delete('_session')\n  \n    try {\n      // Verify if there's an active session before revoking\n      const sessionCookie = cookieStore.get('_session_cookie')?.value\n      if (sessionCookie) {\n        // Get the decoded claims to get the user's ID\n        const decodedClaims = await adminAuth.verifySessionCookie(sessionCookie)\n        \n        // Revoke all sessions for the user\n        await adminAuth.revokeRefreshTokens(decodedClaims.uid)\n      }\n      \n      return { success: true, message: 'Session cleared successfully' }\n    } catch (error) {\n      console.error('Error clearing session:', error)\n      // Still return success even if revoking fails, as cookies are cleared\n      return { success: true, message: 'Session cookies cleared' }\n    }\n  }\n\n\n\n/*\n  export async function GET(request: NextRequest) {\n    const cookieStore = await cookies();\n    const sessionCookie = cookieStore.get('session')?.value\n  \n    if (!sessionCookie) {\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\n    }\n  \n    try {\n      const decodedClaims = await adminAuth.verifySessionCookie(sessionCookie, true)\n      return NextResponse.json({ isAuthenticated: true, user: decodedClaims }, { status: 200 })\n    } catch (error) {\n      console.error('Error verifying session cookie:', error)\n      return NextResponse.json({ isAuthenticated: false }, { status: 401 })\n    }\n  }\n\n*/"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,qBAAwB;AACxB,wBAAiD;AACjD,oBAAgE;AAuBhE,eAAsB,oBAAoB,SAAiB;AACzD,MAAI;AACF,UAAM,YAAY,KAAK,KAAK,KAAK,IAAI;AACnC,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,oBAAoB,SAAS,EAAE,UAAU,CAAC;AAEhF,UAAM,cAAc,UAAM,wBAAQ;AAClC,gBAAY,IAAI,mBAAmB,eAAe;AAAA,MAC9C,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,MAAM;AAAA,IACV,CAAC;AACD,WAAO,EAAE,SAAS,MAAM,SAAS,kBAAkB;AAAA,EACvD,SAAS,OAAO;AACZ,WAAO,EAAE,SAAS,OAAO,SAAS,2BAA2B;AAAA,EACjE;AACF;AAIA,eAAsB,yBAAyB;AA/C/C;AAgDE,QAAM,cAAc,UAAM,wBAAQ;AAClC,QAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAE1D,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,oBAAoB,eAAe,IAAI;AAC7E,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAGA,eAAsB,aAAa;AApEnC;AAqEE,QAAM,cAAc,UAAM,wBAAQ;AAClC,QAAM,SAAQ,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AAEjD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,kBAAAA,oBAAU,cAAc,KAAK;AACzD,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,4BAA4B,KAAK;AAC/C,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAEA,eAAsB,iBAAiB,OAAe;AACpD,MAAI;AACF,UAAM,cAAc,UAAM,wBAAQ;AAClC,gBAAY,IAAI,kBAAkB,OAAO;AAAA,MACvC,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,UAAU;AAAA,MACV,QAAQ,KAAK;AAAA;AAAA,MACb,MAAM;AAAA,IACR,CAAC;AACD,WAAO,EAAE,SAAS,MAAM,SAAS,kBAAkB;AAAA,EACrD,QAAQ;AACN,WAAO,EAAE,SAAS,OAAO,SAAS,2BAA2B;AAAA,EAC/D;AACF;AAEE,eAAsB,kBAAkB,OAAgD;AACtF,MAAI;AACF,UAAM,eAAe,MAAM,kBAAAA,oBAAU,cAAc,KAAK;AACxD,WAAO;AAAA,MACL,OAAO;AAAA,MACP,KAAK,aAAa;AAAA,MAClB,OAAO,aAAa,SAAS;AAAA,MAC7B,UAAU,aAAa;AAAA,IACzB;AAAA,EACF,SAAS,OAAO;AACd,UAAM,oBAAgB,uCAAwB,KAAK;AACnD,WAAO;AAAA,MACL,OAAO;AAAA,MACP,KAAK;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AACF;AAGA,eAAsB,wBAAwB,SAAiD;AAC7F,MAAI;AACF,UAAM,MAAM,MAAM,kBAAAA,oBAAU,oBAAoB,OAAO;AACvD,WAAO;AAAA,MACH,OAAO;AAAA,MACP,KAAK,IAAI;AAAA,MACT,OAAO,IAAI,SAAS;AAAA,MACpB,UAAU,IAAI;AAAA,IAChB;AAAA,EACJ,SAAS,OAAO;AACd,UAAM,oBAAgB,uCAAwB,KAAK;AACnD,WAAO;AAAA,MACL,OAAO;AAAA,MACP,KAAK;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AACF;AAGA,eAAsB,qBAAqB;AAlJ7C;AAmJI,QAAM,cAAc,UAAM,wBAAQ;AAElC,cAAY,OAAO,iBAAiB;AACpC,cAAY,OAAO,gBAAgB;AACnC,cAAY,OAAO,UAAU;AAE7B,MAAI;AAEF,UAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAC1D,QAAI,eAAe;AAEjB,YAAM,gBAAgB,MAAM,kBAAAA,oBAAU,oBAAoB,aAAa;AAGvE,YAAM,kBAAAA,oBAAU,oBAAoB,cAAc,GAAG;AAAA,IACvD;AAEA,WAAO,EAAE,SAAS,MAAM,SAAS,+BAA+B;AAAA,EAClE,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAE9C,WAAO,EAAE,SAAS,MAAM,SAAS,0BAA0B;AAAA,EAC7D;AACF;","names":["adminAuth"]}

package/dist/cjs/components/sign-in.js

@@ -44,6 +44,9 @@ var import_useAuth = require("../boundary/hooks/useAuth");
 var import_errors = require("../errors");
 const authDomain = process.env.NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN;
 const appName = process.env.NEXT_PUBLIC_FIREBASE_APP_NAME || "TernSecure";
+const prefix = (classes) => {
+  return classes.split(" ").map((cls) => `tern-${cls}`).join(" ");
+};
 function SignIn({
   redirectUrl,
   onError,

package/dist/cjs/components/sign-in.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/sign-in.tsx"],"sourcesContent":["'use client'\n\nimport React, { useState, useCallback, useEffect } from 'react'\nimport { useSearchParams, useRouter, usePathname} from 'next/navigation'\nimport { signInWithEmail, signInWithRedirectGoogle, signInWithMicrosoft } from '../app-router/client/actions'\nimport { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle } from \"./ui/card\"\nimport { Input } from \"./ui/input\"\nimport { Label } from \"./ui/label\"\nimport { Button } from \"./ui/button\"\nimport { Alert, AlertDescription } from \"./ui/alert\"\nimport { Separator } from \"./ui/separator\"\nimport { cn } from \"../lib/utils\"\nimport { Loader2, Eye, EyeOff } from 'lucide-react'\nimport { getRedirectResult, User } from 'firebase/auth'\nimport { ternSecureAuth } from '../utils/client-init'\nimport { createSessionCookie } from '../app-router/admin/sessionTernSecure'\nimport { AuthBackground } from './background'\nimport { getValidRedirectUrl } from '../utils/construct'\nimport { handleInternalRoute } from '../app-router/route-handler/internal-route'\nimport type { SignInResponse } from '../types'\nimport { useAuth } from '../boundary/hooks/useAuth'\nimport { getErrorAlertVariant, ErrorCode } from '../errors'\n\n\n\nconst authDomain = process.env.NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN;\nconst appName = process.env.NEXT_PUBLIC_FIREBASE_APP_NAME || 'TernSecure';\n\n\nexport interface SignInProps {\n  redirectUrl?: string\n  onError?: (error: Error) => void\n  onSuccess?: () => void\n  className?: string\n  customStyles?: {\n    card?: string\n    input?: string\n    button?: string\n    label?: string\n    separator?: string\n    title?: string\n    description?: string\n    socialButton?: string\n  }\n}\n\n\nexport function SignIn({\n  redirectUrl,\n  onError,\n  onSuccess,\n  className,\n  customStyles = {}\n}: SignInProps) {\n  const [loading, setLoading] = useState(false)\n  const [checkingRedirect, setCheckingRedirect] = useState(true)\n  const [formError, setFormError] = useState<SignInResponse | null>(null)\n  const [error, setError] = useState('')\n  const [email, setEmail] = useState('')\n  const [password, setPassword] = useState('')\n  const [showPassword, setShowPassword] = useState(false)\n  const [passwordFocused, setPasswordFocused] = useState(false)\n  const [authResponse, setAuthResponse] = useState<SignInResponse | null>(null)\n  const [authErrorMessage, setAuthErrorMessage] = useState<string | null>(null)\n  const searchParams = useSearchParams()\n  const isRedirectSignIn = searchParams.get('signInRedirect') === 'true'\n  const router = useRouter()\n  const pathname = usePathname()\n  const InternalComponent = handleInternalRoute(pathname || \"\")\n  const { requiresVerification, error: authError, status } = useAuth()\n  const validRedirectUrl = getValidRedirectUrl(searchParams, redirectUrl)\n\n\n  if (InternalComponent) {\n    return <InternalComponent />\n  }\n\n  useEffect(() => {\n    if (authError && status !== \"loading\" && status !== \"unauthenticated\") {\n\n      const message = authError.message || \"Authentication failed\"\n      setAuthErrorMessage(message)\n\n      if(!authResponse || authResponse.message !== message) {\n        setAuthResponse(authError as SignInResponse)\n      }\n    } else {\n      setAuthErrorMessage(null)\n    }\n  }, [authError, status, authResponse])\n\n  const handleSuccessfulAuth = useCallback(\n    async (user: User) => {\n      try {\n        const idToken = await user.getIdToken()\n        const sessionResult = await createSessionCookie(idToken)\n\n        if (!sessionResult.success) {\n          setFormError({\n            success: false, \n            message: sessionResult.message || \"Failed to create session\", \n            error: 'INTERNAL_ERROR', \n            user: null\n          })\n        }\n\n        onSuccess?.()\n\n        // Use the finalRedirectUrl for navigation\n        if (process.env.NODE_ENV === \"production\") {\n          // Use window.location.href in production for a full page reload\n          window.location.href = validRedirectUrl\n        } else {\n          // Use router.push in development\n          router.push(validRedirectUrl)\n        }\n      } catch (err) {\n        setFormError({\n          success: false, \n          message: \"Failed to complete authentication\", \n          error: 'INTERNAL_ERROR', \n          user: null\n        })\n      }\n    },\n    [validRedirectUrl, router, onSuccess],\n  )\n\n\n  const handleRedirectResult = useCallback(async () => {\n    if (!isRedirectSignIn) return false\n    setCheckingRedirect(true)\n    try {\n      console.log('Checking redirect result...');\n      console.log('Current hostname:', window.location.hostname);\n      console.log('Auth domain hostname:', authDomain);\n\n    const isOnAuth = authDomain && \n    window.location.hostname === authDomain.replace(/https?:\\/\\//, '');\n    console.log('Is on  AuthDomain:', isOnAuth);\n\n\n      const result = await getRedirectResult(ternSecureAuth)\n      console.log('Redirect result:', result);\n      if (result) {\n        const idToken = await result.user.getIdToken()\n        const sessionResult = await createSessionCookie(idToken)\n        if (!sessionResult.success) {\n          throw new Error('Failed to create session')\n        }\n        const storedRedirectUrl = sessionStorage.getItem('auth_return_url')\n        sessionStorage.removeItem('auth_redirect_url') \n        onSuccess?.()\n        window.location.href = storedRedirectUrl || getValidRedirectUrl(searchParams, redirectUrl)\n        return true\n      }\n      setCheckingRedirect(false)\n    } catch (err) { \n      const errorMessage = err as SignInResponse\n      setFormError(errorMessage)\n      if (onError && err instanceof Error) {\n        onError(err)\n      }\n      sessionStorage.removeItem('auth_redirect_url')\n      return false\n    }\n  }, [isRedirectSignIn, redirectUrl, searchParams, onSuccess, onError])\n\n //const REDIRECT_TIMEOUT = 5000;\n\n  useEffect(() => {\n    if (isRedirectSignIn) {\n      handleRedirectResult()\n    }\n  }, [handleRedirectResult, isRedirectSignIn])\n\n  const handleSubmit = async (e: React.FormEvent) => {\n    e.preventDefault()\n    setLoading(true)\n    setFormError(null)\n    setAuthResponse(null)\n\n    try {\n      const response= await signInWithEmail(email, password)\n      setAuthResponse(response)\n\n      if (!response.success) {\n        setFormError({\n          success: false, \n          message: response.message, \n          error: response.error, \n          user: null\n        })\n        return\n      }\n\n      if (response.user) {\n        if(requiresVerification && !response.user.emailVerified) {\n          setFormError({\n            success: false, \n            message: 'Email verification required', \n            error: 'REQUIRES_VERIFICATION', \n            user: response.user\n          })\n          return\n      }\n\n      await handleSuccessfulAuth(response.user)\n    }\n    } catch (err) {\n      const errorMessage = err as SignInResponse\n      setFormError(errorMessage)\n      if (onError && err instanceof Error) {\n        onError(err)\n      }\n    } finally {\n      setLoading(false)\n    }\n  }\n\n  const handleSocialSignIn = async (provider: 'google' | 'microsoft') => {\n    setLoading(true)\n    try {\n\n      const validRedirectUrl = getValidRedirectUrl(searchParams, redirectUrl)\n      sessionStorage.setItem('auth_redirect_url', validRedirectUrl)\n\n      const currentUrl = new URL(window.location.href)\n      currentUrl.searchParams.set('signInRedirect', 'true')\n      window.history.replaceState({}, '', currentUrl.toString())\n\n      const result = provider === 'google' ? await signInWithRedirectGoogle() : await signInWithMicrosoft()\n      if (!result.success) {\n        throw new Error(result.error)\n      }\n    } catch (err) {\n      const errorMessage = err as SignInResponse\n      setFormError(errorMessage)\n      if (onError && err instanceof Error) {\n        onError(err)\n      }\n      setLoading(false)\n      sessionStorage.removeItem('auth_redirect_url')\n    }\n  }\n\n  const handleVerificationRedirect = (e: React.MouseEvent) => {\n    e.preventDefault()\n    router.push(\"/sign-in/verify\")\n  }\n\n\n  if (checkingRedirect && isRedirectSignIn) {\n    return (\n      <div className=\"flex min-h-screen items-center justify-center\">\n        <div className=\"text-center space-y-4\">\n          <div className=\"animate-spin rounded-full h-12 w-12 border-b-2 border-primary mx-auto\" />\n          \n        </div>\n      </div>\n    )\n  }\n\n\nconst activeError = formError || authResponse\nconst showEmailVerificationButton =\n  activeError?.error === \"EMAIL_NOT_VERIFIED\" || activeError?.error === \"REQUIRES_VERIFICATION\"\n\n  return (\n    <div className=\"relative flex items-center justify-center\">\n      <AuthBackground />\n    <Card className={cn(\"w-full max-w-md mx-auto mt-8\", className, customStyles.card)}>\n      <CardHeader className=\"space-y-1 text-center\">\n        <CardTitle className={cn(\"font-bold\", customStyles.title)}>Sign in to {`${appName}`} </CardTitle>\n        <CardDescription className={cn(\"text-muted-foreground\", customStyles.description)}>\n          Please sign in to continue\n        </CardDescription>\n      </CardHeader>\n      <CardContent className=\"space-y-4\">\n        <form onSubmit={handleSubmit} className=\"space-y-4\">\n          {activeError && (\n            <Alert variant={getErrorAlertVariant(activeError)} className=\"animate-in fade-in-50\">\n              <AlertDescription>\n              <span>{activeError.message}</span>\n              {showEmailVerificationButton && (\n                    <Button\n                      type='button'\n                      variant=\"link\"\n                      className=\"p-0 h-auto font-normal text-sm hover:underline\"\n                      onClick={handleVerificationRedirect}\n                    >\n                      Request new verification email →\n                    </Button>\n                  )}\n              </AlertDescription>\n            </Alert>\n          )}\n          <div className=\"space-y-2\">\n            <Label htmlFor=\"email\" className={cn(customStyles.label)}>Email</Label>\n            <Input\n              id=\"email\"\n              type=\"email\"\n              placeholder=\"m@example.com\"\n              value={email}\n              onChange={(e) => setEmail(e.target.value)}\n              disabled={loading}\n              className={cn(customStyles.input)}\n              required\n              aria-invalid={activeError?.error === \"INVALID_EMAIL\"}\n              aria-describedby={activeError ? \"error-message\" : undefined}\n            />\n          </div>\n          <div className=\"space-y-2\">\n            <Label htmlFor=\"password\" className={cn(customStyles.label)}>Password</Label>\n            <div className=\"relative\">\n            <Input\n              id=\"password\"\n              name=\"password\"\n              type={showPassword ? \"text\" : \"password\"}\n              value={password}\n              onChange={(e) => setPassword(e.target.value)}\n              onFocus={() => setPasswordFocused(true)}\n              onBlur={() => setPasswordFocused(false)}\n              disabled={loading}\n              className={cn(customStyles.input)}\n              required\n              aria-invalid={activeError?.error === \"INVALID_CREDENTIALS\"}\n              aria-describedby={activeError ? \"error-message\" : undefined}\n            />\n          <Button\n                  type=\"button\"\n                  variant=\"ghost\"\n                  size=\"icon\"\n                  className=\"absolute right-2 top-1/2 -translate-y-1/2 h-8 w-8 hover:bg-transparent\"\n                  onClick={() => setShowPassword(!showPassword)}\n                >\n                  {showPassword ? (\n                    <EyeOff className=\"h-4 w-4 text-muted-foreground hover:text-foreground\" />\n                  ) : (\n                    <Eye className=\"h-4 w-4 text-muted-foreground hover:text-foreground\" />\n                  )}\n                  <span className=\"sr-only\">{showPassword ? \"Hide password\" : \"Show password\"}</span>\n                </Button>\n            </div>\n          </div>\n          <Button type=\"submit\" disabled={loading} className={cn(\"w-full\", customStyles.button)}>\n            {loading ? (\n              <>\n                <Loader2 className=\"mr-2 h-4 w-4 animate-spin\" />\n                Signing in...\n              </>\n            ) : (\n              'Sign in'\n            )}\n          </Button>\n        </form>\n        <div className=\"relative\">\n          <Separator className={cn(customStyles.separator)} />\n          <div className=\"absolute inset-0 flex items-center justify-center\">\n            <span className=\"bg-background px-2 text-muted-foreground text-sm\">Or continue with</span>\n          </div>\n        </div>\n        <div className=\"grid grid-cols-2 gap-4\">\n          <Button \n            variant=\"outline\" \n            disabled={loading} \n            onClick={() => handleSocialSignIn('google')} \n            className={cn(\"flex items-center justify-center\", customStyles.socialButton)}\n          >\n            <svg className=\"w-5 h-5 mr-2\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\">\n              <path d=\"M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z\" fill=\"#4285F4\"/>\n              <path d=\"M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z\" fill=\"#34A853\"/>\n              <path d=\"M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z\" fill=\"#FBBC05\"/>\n              <path d=\"M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z\" fill=\"#EA4335\"/>\n            </svg>\n            Google\n          </Button>\n          <Button \n            variant=\"outline\" \n            disabled={loading} \n            onClick={() => handleSocialSignIn('microsoft')} \n            className={cn(\"flex items-center justify-center\", customStyles.socialButton)}\n          >\n            <svg className=\"w-5 h-5 mr-2\" viewBox=\"0 0 23 23\" xmlns=\"http://www.w3.org/2000/svg\">\n              <path fill=\"#f3f3f3\" d=\"M0 0h23v23H0z\"/>\n              <path fill=\"#f35325\" d=\"M1 1h10v10H1z\"/>\n              <path fill=\"#81bc06\" d=\"M12 1h10v10H12z\"/>\n              <path fill=\"#05a6f0\" d=\"M1 12h10v10H1z\"/>\n              <path fill=\"#ffba08\" d=\"M12 12h10v10H12z\"/>\n            </svg>\n            Microsoft\n          </Button>\n        </div>\n      </CardContent>\n      <CardFooter className=\"flex justify-center\">\n        <p className=\"text-sm text-muted-foreground\">\n        Don&apos;t have an account?{' '}\n          <a href=\"/sign-up\" className=\"text-primary hover:underline\">\n            Sign up\n          </a>\n        </p>\n      </CardFooter>\n    </Card>\n    </div>\n  )\n}\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA0EW;AAxEX,mBAAwD;AACxD,wBAAuD;AACvD,qBAA+E;AAC/E,kBAAsF;AACtF,mBAAsB;AACtB,mBAAsB;AACtB,oBAAuB;AACvB,mBAAwC;AACxC,uBAA0B;AAC1B,mBAAmB;AACnB,0BAAqC;AACrC,kBAAwC;AACxC,yBAA+B;AAC/B,+BAAoC;AACpC,wBAA+B;AAC/B,uBAAoC;AACpC,4BAAoC;AAEpC,qBAAwB;AACxB,oBAAgD;AAIhD,MAAM,aAAa,QAAQ,IAAI;AAC/B,MAAM,UAAU,QAAQ,IAAI,iCAAiC;AAqBtD,SAAS,OAAO;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe,CAAC;AAClB,GAAgB;AACd,QAAM,CAAC,SAAS,UAAU,QAAI,uBAAS,KAAK;AAC5C,QAAM,CAAC,kBAAkB,mBAAmB,QAAI,uBAAS,IAAI;AAC7D,QAAM,CAAC,WAAW,YAAY,QAAI,uBAAgC,IAAI;AACtE,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAS,EAAE;AACrC,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAS,EAAE;AACrC,QAAM,CAAC,UAAU,WAAW,QAAI,uBAAS,EAAE;AAC3C,QAAM,CAAC,cAAc,eAAe,QAAI,uBAAS,KAAK;AACtD,QAAM,CAAC,iBAAiB,kBAAkB,QAAI,uBAAS,KAAK;AAC5D,QAAM,CAAC,cAAc,eAAe,QAAI,uBAAgC,IAAI;AAC5E,QAAM,CAAC,kBAAkB,mBAAmB,QAAI,uBAAwB,IAAI;AAC5E,QAAM,mBAAe,mCAAgB;AACrC,QAAM,mBAAmB,aAAa,IAAI,gBAAgB,MAAM;AAChE,QAAM,aAAS,6BAAU;AACzB,QAAM,eAAW,+BAAY;AAC7B,QAAM,wBAAoB,2CAAoB,YAAY,EAAE;AAC5D,QAAM,EAAE,sBAAsB,OAAO,WAAW,OAAO,QAAI,wBAAQ;AACnE,QAAM,uBAAmB,sCAAoB,cAAc,WAAW;AAGtE,MAAI,mBAAmB;AACrB,WAAO,4CAAC,qBAAkB;AAAA,EAC5B;AAEA,8BAAU,MAAM;AACd,QAAI,aAAa,WAAW,aAAa,WAAW,mBAAmB;AAErE,YAAM,UAAU,UAAU,WAAW;AACrC,0BAAoB,OAAO;AAE3B,UAAG,CAAC,gBAAgB,aAAa,YAAY,SAAS;AACpD,wBAAgB,SAA2B;AAAA,MAC7C;AAAA,IACF,OAAO;AACL,0BAAoB,IAAI;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,WAAW,QAAQ,YAAY,CAAC;AAEpC,QAAM,2BAAuB;AAAA,IAC3B,OAAO,SAAe;AACpB,UAAI;AACF,cAAM,UAAU,MAAM,KAAK,WAAW;AACtC,cAAM,gBAAgB,UAAM,8CAAoB,OAAO;AAEvD,YAAI,CAAC,cAAc,SAAS;AAC1B,uBAAa;AAAA,YACX,SAAS;AAAA,YACT,SAAS,cAAc,WAAW;AAAA,YAClC,OAAO;AAAA,YACP,MAAM;AAAA,UACR,CAAC;AAAA,QACH;AAEA;AAGA,YAAI,QAAQ,IAAI,aAAa,cAAc;AAEzC,iBAAO,SAAS,OAAO;AAAA,QACzB,OAAO;AAEL,iBAAO,KAAK,gBAAgB;AAAA,QAC9B;AAAA,MACF,SAAS,KAAK;AACZ,qBAAa;AAAA,UACX,SAAS;AAAA,UACT,SAAS;AAAA,UACT,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AAAA,IACA,CAAC,kBAAkB,QAAQ,SAAS;AAAA,EACtC;AAGA,QAAM,2BAAuB,0BAAY,YAAY;AACnD,QAAI,CAAC,iBAAkB,QAAO;AAC9B,wBAAoB,IAAI;AACxB,QAAI;AACF,cAAQ,IAAI,6BAA6B;AACzC,cAAQ,IAAI,qBAAqB,OAAO,SAAS,QAAQ;AACzD,cAAQ,IAAI,yBAAyB,UAAU;AAEjD,YAAM,WAAW,cACjB,OAAO,SAAS,aAAa,WAAW,QAAQ,eAAe,EAAE;AACjE,cAAQ,IAAI,sBAAsB,QAAQ;AAGxC,YAAM,SAAS,UAAM,+BAAkB,iCAAc;AACrD,cAAQ,IAAI,oBAAoB,MAAM;AACtC,UAAI,QAAQ;AACV,cAAM,UAAU,MAAM,OAAO,KAAK,WAAW;AAC7C,cAAM,gBAAgB,UAAM,8CAAoB,OAAO;AACvD,YAAI,CAAC,cAAc,SAAS;AAC1B,gBAAM,IAAI,MAAM,0BAA0B;AAAA,QAC5C;AACA,cAAM,oBAAoB,eAAe,QAAQ,iBAAiB;AAClE,uBAAe,WAAW,mBAAmB;AAC7C;AACA,eAAO,SAAS,OAAO,yBAAqB,sCAAoB,cAAc,WAAW;AACzF,eAAO;AAAA,MACT;AACA,0BAAoB,KAAK;AAAA,IAC3B,SAAS,KAAK;AACZ,YAAM,eAAe;AACrB,mBAAa,YAAY;AACzB,UAAI,WAAW,eAAe,OAAO;AACnC,gBAAQ,GAAG;AAAA,MACb;AACA,qBAAe,WAAW,mBAAmB;AAC7C,aAAO;AAAA,IACT;AAAA,EACF,GAAG,CAAC,kBAAkB,aAAa,cAAc,WAAW,OAAO,CAAC;AAIpE,8BAAU,MAAM;AACd,QAAI,kBAAkB;AACpB,2BAAqB;AAAA,IACvB;AAAA,EACF,GAAG,CAAC,sBAAsB,gBAAgB,CAAC;AAE3C,QAAM,eAAe,OAAO,MAAuB;AACjD,MAAE,eAAe;AACjB,eAAW,IAAI;AACf,iBAAa,IAAI;AACjB,oBAAgB,IAAI;AAEpB,QAAI;AACF,YAAM,WAAU,UAAM,gCAAgB,OAAO,QAAQ;AACrD,sBAAgB,QAAQ;AAExB,UAAI,CAAC,SAAS,SAAS;AACrB,qBAAa;AAAA,UACX,SAAS;AAAA,UACT,SAAS,SAAS;AAAA,UAClB,OAAO,SAAS;AAAA,UAChB,MAAM;AAAA,QACR,CAAC;AACD;AAAA,MACF;AAEA,UAAI,SAAS,MAAM;AACjB,YAAG,wBAAwB,CAAC,SAAS,KAAK,eAAe;AACvD,uBAAa;AAAA,YACX,SAAS;AAAA,YACT,SAAS;AAAA,YACT,OAAO;AAAA,YACP,MAAM,SAAS;AAAA,UACjB,CAAC;AACD;AAAA,QACJ;AAEA,cAAM,qBAAqB,SAAS,IAAI;AAAA,MAC1C;AAAA,IACA,SAAS,KAAK;AACZ,YAAM,eAAe;AACrB,mBAAa,YAAY;AACzB,UAAI,WAAW,eAAe,OAAO;AACnC,gBAAQ,GAAG;AAAA,MACb;AAAA,IACF,UAAE;AACA,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,qBAAqB,OAAO,aAAqC;AACrE,eAAW,IAAI;AACf,QAAI;AAEF,YAAMA,wBAAmB,sCAAoB,cAAc,WAAW;AACtE,qBAAe,QAAQ,qBAAqBA,iBAAgB;AAE5D,YAAM,aAAa,IAAI,IAAI,OAAO,SAAS,IAAI;AAC/C,iBAAW,aAAa,IAAI,kBAAkB,MAAM;AACpD,aAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,WAAW,SAAS,CAAC;AAEzD,YAAM,SAAS,aAAa,WAAW,UAAM,yCAAyB,IAAI,UAAM,oCAAoB;AACpG,UAAI,CAAC,OAAO,SAAS;AACnB,cAAM,IAAI,MAAM,OAAO,KAAK;AAAA,MAC9B;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,eAAe;AACrB,mBAAa,YAAY;AACzB,UAAI,WAAW,eAAe,OAAO;AACnC,gBAAQ,GAAG;AAAA,MACb;AACA,iBAAW,KAAK;AAChB,qBAAe,WAAW,mBAAmB;AAAA,IAC/C;AAAA,EACF;AAEA,QAAM,6BAA6B,CAAC,MAAwB;AAC1D,MAAE,eAAe;AACjB,WAAO,KAAK,iBAAiB;AAAA,EAC/B;AAGA,MAAI,oBAAoB,kBAAkB;AACxC,WACE,4CAAC,SAAI,WAAU,iDACb,sDAAC,SAAI,WAAU,yBACb,sDAAC,SAAI,WAAU,yEAAwE,GAEzF,GACF;AAAA,EAEJ;AAGF,QAAM,cAAc,aAAa;AACjC,QAAM,+BACJ,2CAAa,WAAU,yBAAwB,2CAAa,WAAU;AAEtE,SACE,6CAAC,SAAI,WAAU,6CACb;AAAA,gDAAC,oCAAe;AAAA,IAClB,6CAAC,oBAAK,eAAW,iBAAG,gCAAgC,WAAW,aAAa,IAAI,GAC9E;AAAA,mDAAC,0BAAW,WAAU,yBACpB;AAAA,qDAAC,yBAAU,eAAW,iBAAG,aAAa,aAAa,KAAK,GAAG;AAAA;AAAA,UAAY,GAAG,OAAO;AAAA,UAAG;AAAA,WAAC;AAAA,QACrF,4CAAC,+BAAgB,eAAW,iBAAG,yBAAyB,aAAa,WAAW,GAAG,wCAEnF;AAAA,SACF;AAAA,MACA,6CAAC,2BAAY,WAAU,aACrB;AAAA,qDAAC,UAAK,UAAU,cAAc,WAAU,aACrC;AAAA,yBACC,4CAAC,sBAAM,aAAS,oCAAqB,WAAW,GAAG,WAAU,yBAC3D,uDAAC,iCACD;AAAA,wDAAC,UAAM,sBAAY,SAAQ;AAAA,YAC1B,+BACK;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR,WAAU;AAAA,gBACV,SAAS;AAAA,gBACV;AAAA;AAAA,YAED;AAAA,aAEN,GACF;AAAA,UAEF,6CAAC,SAAI,WAAU,aACb;AAAA,wDAAC,sBAAM,SAAQ,SAAQ,eAAW,iBAAG,aAAa,KAAK,GAAG,mBAAK;AAAA,YAC/D;AAAA,cAAC;AAAA;AAAA,gBACC,IAAG;AAAA,gBACH,MAAK;AAAA,gBACL,aAAY;AAAA,gBACZ,OAAO;AAAA,gBACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,gBACxC,UAAU;AAAA,gBACV,eAAW,iBAAG,aAAa,KAAK;AAAA,gBAChC,UAAQ;AAAA,gBACR,iBAAc,2CAAa,WAAU;AAAA,gBACrC,oBAAkB,cAAc,kBAAkB;AAAA;AAAA,YACpD;AAAA,aACF;AAAA,UACA,6CAAC,SAAI,WAAU,aACb;AAAA,wDAAC,sBAAM,SAAQ,YAAW,eAAW,iBAAG,aAAa,KAAK,GAAG,sBAAQ;AAAA,YACrE,6CAAC,SAAI,WAAU,YACf;AAAA;AAAA,gBAAC;AAAA;AAAA,kBACC,IAAG;AAAA,kBACH,MAAK;AAAA,kBACL,MAAM,eAAe,SAAS;AAAA,kBAC9B,OAAO;AAAA,kBACP,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK;AAAA,kBAC3C,SAAS,MAAM,mBAAmB,IAAI;AAAA,kBACtC,QAAQ,MAAM,mBAAmB,KAAK;AAAA,kBACtC,UAAU;AAAA,kBACV,eAAW,iBAAG,aAAa,KAAK;AAAA,kBAChC,UAAQ;AAAA,kBACR,iBAAc,2CAAa,WAAU;AAAA,kBACrC,oBAAkB,cAAc,kBAAkB;AAAA;AAAA,cACpD;AAAA,cACF;AAAA,gBAAC;AAAA;AAAA,kBACO,MAAK;AAAA,kBACL,SAAQ;AAAA,kBACR,MAAK;AAAA,kBACL,WAAU;AAAA,kBACV,SAAS,MAAM,gBAAgB,CAAC,YAAY;AAAA,kBAE3C;AAAA,mCACC,4CAAC,8BAAO,WAAU,uDAAsD,IAExE,4CAAC,2BAAI,WAAU,uDAAsD;AAAA,oBAEvE,4CAAC,UAAK,WAAU,WAAW,yBAAe,kBAAkB,iBAAgB;AAAA;AAAA;AAAA,cAC9E;AAAA,eACJ;AAAA,aACF;AAAA,UACA,4CAAC,wBAAO,MAAK,UAAS,UAAU,SAAS,eAAW,iBAAG,UAAU,aAAa,MAAM,GACjF,oBACC,4EACE;AAAA,wDAAC,+BAAQ,WAAU,6BAA4B;AAAA,YAAE;AAAA,aAEnD,IAEA,WAEJ;AAAA,WACF;AAAA,QACA,6CAAC,SAAI,WAAU,YACb;AAAA,sDAAC,8BAAU,eAAW,iBAAG,aAAa,SAAS,GAAG;AAAA,UAClD,4CAAC,SAAI,WAAU,qDACb,sDAAC,UAAK,WAAU,oDAAmD,8BAAgB,GACrF;AAAA,WACF;AAAA,QACA,6CAAC,SAAI,WAAU,0BACb;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,UAAU;AAAA,cACV,SAAS,MAAM,mBAAmB,QAAQ;AAAA,cAC1C,eAAW,iBAAG,oCAAoC,aAAa,YAAY;AAAA,cAE3E;AAAA,6DAAC,SAAI,WAAU,gBAAe,SAAQ,aAAY,OAAM,8BACtD;AAAA,8DAAC,UAAK,GAAE,2HAA0H,MAAK,WAAS;AAAA,kBAChJ,4CAAC,UAAK,GAAE,yIAAwI,MAAK,WAAS;AAAA,kBAC9J,4CAAC,UAAK,GAAE,iIAAgI,MAAK,WAAS;AAAA,kBACtJ,4CAAC,UAAK,GAAE,uIAAsI,MAAK,WAAS;AAAA,mBAC9J;AAAA,gBAAM;AAAA;AAAA;AAAA,UAER;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,UAAU;AAAA,cACV,SAAS,MAAM,mBAAmB,WAAW;AAAA,cAC7C,eAAW,iBAAG,oCAAoC,aAAa,YAAY;AAAA,cAE3E;AAAA,6DAAC,SAAI,WAAU,gBAAe,SAAQ,aAAY,OAAM,8BACtD;AAAA,8DAAC,UAAK,MAAK,WAAU,GAAE,iBAAe;AAAA,kBACtC,4CAAC,UAAK,MAAK,WAAU,GAAE,iBAAe;AAAA,kBACtC,4CAAC,UAAK,MAAK,WAAU,GAAE,mBAAiB;AAAA,kBACxC,4CAAC,UAAK,MAAK,WAAU,GAAE,kBAAgB;AAAA,kBACvC,4CAAC,UAAK,MAAK,WAAU,GAAE,oBAAkB;AAAA,mBAC3C;AAAA,gBAAM;AAAA;AAAA;AAAA,UAER;AAAA,WACF;AAAA,SACF;AAAA,MACA,4CAAC,0BAAW,WAAU,uBACpB,uDAAC,OAAE,WAAU,iCAAgC;AAAA;AAAA,QACjB;AAAA,QAC1B,4CAAC,OAAE,MAAK,YAAW,WAAU,gCAA+B,qBAE5D;AAAA,SACF,GACF;AAAA,OACF;AAAA,KACA;AAEJ;","names":["validRedirectUrl"]}
+{"version":3,"sources":["../../../src/components/sign-in.tsx"],"sourcesContent":["'use client'\n\nimport React, { useState, useCallback, useEffect } from 'react'\nimport { useSearchParams, useRouter, usePathname} from 'next/navigation'\nimport { signInWithEmail, signInWithRedirectGoogle, signInWithMicrosoft } from '../app-router/client/actions'\nimport { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle } from \"./ui/card\"\nimport { Input } from \"./ui/input\"\nimport { Label } from \"./ui/label\"\nimport { Button } from \"./ui/button\"\nimport { Alert, AlertDescription } from \"./ui/alert\"\nimport { Separator } from \"./ui/separator\"\nimport { cn } from \"../lib/utils\"\nimport { Loader2, Eye, EyeOff } from 'lucide-react'\nimport { getRedirectResult, User } from 'firebase/auth'\nimport { ternSecureAuth } from '../utils/client-init'\nimport { createSessionCookie } from '../app-router/admin/sessionTernSecure'\nimport { AuthBackground } from './background'\nimport { getValidRedirectUrl } from '../utils/construct'\nimport { handleInternalRoute } from '../app-router/route-handler/internal-route'\nimport type { SignInResponse } from '../types'\nimport { useAuth } from '../boundary/hooks/useAuth'\nimport { getErrorAlertVariant } from '../errors'\nimport { twMerge } from 'tailwind-merge'\n\n\n\nconst authDomain = process.env.NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN;\nconst appName = process.env.NEXT_PUBLIC_FIREBASE_APP_NAME || 'TernSecure';\n\n\nexport interface SignInProps {\n  redirectUrl?: string\n  onError?: (error: Error) => void\n  onSuccess?: () => void\n  className?: string\n  customStyles?: {\n    card?: string\n    input?: string\n    button?: string\n    label?: string\n    separator?: string\n    title?: string\n    description?: string\n    socialButton?: string\n  }\n}\n\nconst prefix = (classes: string) => {\n  return classes.split(' ').map(cls => `tern-${cls}`).join(' ')\n}\n\n\nexport function SignIn({\n  redirectUrl,\n  onError,\n  onSuccess,\n  className,\n  customStyles = {}\n}: SignInProps) {\n  const [loading, setLoading] = useState(false)\n  const [checkingRedirect, setCheckingRedirect] = useState(true)\n  const [formError, setFormError] = useState<SignInResponse | null>(null)\n  const [error, setError] = useState('')\n  const [email, setEmail] = useState('')\n  const [password, setPassword] = useState('')\n  const [showPassword, setShowPassword] = useState(false)\n  const [passwordFocused, setPasswordFocused] = useState(false)\n  const [authResponse, setAuthResponse] = useState<SignInResponse | null>(null)\n  const [authErrorMessage, setAuthErrorMessage] = useState<string | null>(null)\n  const searchParams = useSearchParams()\n  const isRedirectSignIn = searchParams.get('signInRedirect') === 'true'\n  const router = useRouter()\n  const pathname = usePathname()\n  const InternalComponent = handleInternalRoute(pathname || \"\")\n  const { requiresVerification, error: authError, status } = useAuth()\n  const validRedirectUrl = getValidRedirectUrl(searchParams, redirectUrl)\n\n\n  if (InternalComponent) {\n    return <InternalComponent />\n  }\n\n  useEffect(() => {\n    if (authError && status !== \"loading\" && status !== \"unauthenticated\") {\n\n      const message = authError.message || \"Authentication failed\"\n      setAuthErrorMessage(message)\n\n      if(!authResponse || authResponse.message !== message) {\n        setAuthResponse(authError as SignInResponse)\n      }\n    } else {\n      setAuthErrorMessage(null)\n    }\n  }, [authError, status, authResponse])\n\n  const handleSuccessfulAuth = useCallback(\n    async (user: User) => {\n      try {\n        const idToken = await user.getIdToken()\n        const sessionResult = await createSessionCookie(idToken)\n\n        if (!sessionResult.success) {\n          setFormError({\n            success: false, \n            message: sessionResult.message || \"Failed to create session\", \n            error: 'INTERNAL_ERROR', \n            user: null\n          })\n        }\n\n        onSuccess?.()\n\n        // Use the finalRedirectUrl for navigation\n        if (process.env.NODE_ENV === \"production\") {\n          // Use window.location.href in production for a full page reload\n          window.location.href = validRedirectUrl\n        } else {\n          // Use router.push in development\n          router.push(validRedirectUrl)\n        }\n      } catch (err) {\n        setFormError({\n          success: false, \n          message: \"Failed to complete authentication\", \n          error: 'INTERNAL_ERROR', \n          user: null\n        })\n      }\n    },\n    [validRedirectUrl, router, onSuccess],\n  )\n\n\n  const handleRedirectResult = useCallback(async () => {\n    if (!isRedirectSignIn) return false\n    setCheckingRedirect(true)\n    try {\n      console.log('Checking redirect result...');\n      console.log('Current hostname:', window.location.hostname);\n      console.log('Auth domain hostname:', authDomain);\n\n    const isOnAuth = authDomain && \n    window.location.hostname === authDomain.replace(/https?:\\/\\//, '');\n    console.log('Is on  AuthDomain:', isOnAuth);\n\n\n      const result = await getRedirectResult(ternSecureAuth)\n      console.log('Redirect result:', result);\n      if (result) {\n        const idToken = await result.user.getIdToken()\n        const sessionResult = await createSessionCookie(idToken)\n        if (!sessionResult.success) {\n          throw new Error('Failed to create session')\n        }\n        const storedRedirectUrl = sessionStorage.getItem('auth_return_url')\n        sessionStorage.removeItem('auth_redirect_url') \n        onSuccess?.()\n        window.location.href = storedRedirectUrl || getValidRedirectUrl(searchParams, redirectUrl)\n        return true\n      }\n      setCheckingRedirect(false)\n    } catch (err) { \n      const errorMessage = err as SignInResponse\n      setFormError(errorMessage)\n      if (onError && err instanceof Error) {\n        onError(err)\n      }\n      sessionStorage.removeItem('auth_redirect_url')\n      return false\n    }\n  }, [isRedirectSignIn, redirectUrl, searchParams, onSuccess, onError])\n\n //const REDIRECT_TIMEOUT = 5000;\n\n  useEffect(() => {\n    if (isRedirectSignIn) {\n      handleRedirectResult()\n    }\n  }, [handleRedirectResult, isRedirectSignIn])\n\n  const handleSubmit = async (e: React.FormEvent) => {\n    e.preventDefault()\n    setLoading(true)\n    setFormError(null)\n    setAuthResponse(null)\n\n    try {\n      const response= await signInWithEmail(email, password)\n      setAuthResponse(response)\n\n      if (!response.success) {\n        setFormError({\n          success: false, \n          message: response.message, \n          error: response.error, \n          user: null\n        })\n        return\n      }\n\n      if (response.user) {\n        if(requiresVerification && !response.user.emailVerified) {\n          setFormError({\n            success: false, \n            message: 'Email verification required', \n            error: 'REQUIRES_VERIFICATION', \n            user: response.user\n          })\n          return\n      }\n\n      await handleSuccessfulAuth(response.user)\n    }\n    } catch (err) {\n      const errorMessage = err as SignInResponse\n      setFormError(errorMessage)\n      if (onError && err instanceof Error) {\n        onError(err)\n      }\n    } finally {\n      setLoading(false)\n    }\n  }\n\n  const handleSocialSignIn = async (provider: 'google' | 'microsoft') => {\n    setLoading(true)\n    try {\n\n      const validRedirectUrl = getValidRedirectUrl(searchParams, redirectUrl)\n      sessionStorage.setItem('auth_redirect_url', validRedirectUrl)\n\n      const currentUrl = new URL(window.location.href)\n      currentUrl.searchParams.set('signInRedirect', 'true')\n      window.history.replaceState({}, '', currentUrl.toString())\n\n      const result = provider === 'google' ? await signInWithRedirectGoogle() : await signInWithMicrosoft()\n      if (!result.success) {\n        throw new Error(result.error)\n      }\n    } catch (err) {\n      const errorMessage = err as SignInResponse\n      setFormError(errorMessage)\n      if (onError && err instanceof Error) {\n        onError(err)\n      }\n      setLoading(false)\n      sessionStorage.removeItem('auth_redirect_url')\n    }\n  }\n\n  const handleVerificationRedirect = (e: React.MouseEvent) => {\n    e.preventDefault()\n    router.push(\"/sign-in/verify\")\n  }\n\n\n  if (checkingRedirect && isRedirectSignIn) {\n    return (\n      <div className=\"flex min-h-screen items-center justify-center\">\n        <div className=\"text-center space-y-4\">\n          <div className=\"animate-spin rounded-full h-12 w-12 border-b-2 border-primary mx-auto\" />\n          \n        </div>\n      </div>\n    )\n  }\n\n\nconst activeError = formError || authResponse\nconst showEmailVerificationButton =\n  activeError?.error === \"EMAIL_NOT_VERIFIED\" || activeError?.error === \"REQUIRES_VERIFICATION\"\n\n  return (\n    <div className=\"relative flex items-center justify-center\">\n      <AuthBackground />\n    <Card className={cn(\"w-full max-w-md mx-auto mt-8\", className, customStyles.card)}>\n      <CardHeader className=\"space-y-1 text-center\">\n        <CardTitle className={cn(\"font-bold\", customStyles.title)}>Sign in to {`${appName}`} </CardTitle>\n        <CardDescription className={cn(\"text-muted-foreground\", customStyles.description)}>\n          Please sign in to continue\n        </CardDescription>\n      </CardHeader>\n      <CardContent className=\"space-y-4\">\n        <form onSubmit={handleSubmit} className=\"space-y-4\">\n          {activeError && (\n            <Alert variant={getErrorAlertVariant(activeError)} className=\"animate-in fade-in-50\">\n              <AlertDescription>\n              <span>{activeError.message}</span>\n              {showEmailVerificationButton && (\n                    <Button\n                      type='button'\n                      variant=\"link\"\n                      className=\"p-0 h-auto font-normal text-sm hover:underline\"\n                      onClick={handleVerificationRedirect}\n                    >\n                      Request new verification email →\n                    </Button>\n                  )}\n              </AlertDescription>\n            </Alert>\n          )}\n          <div className=\"space-y-2\">\n            <Label htmlFor=\"email\" className={cn(customStyles.label)}>Email</Label>\n            <Input\n              id=\"email\"\n              type=\"email\"\n              placeholder=\"m@example.com\"\n              value={email}\n              onChange={(e) => setEmail(e.target.value)}\n              disabled={loading}\n              className={cn(customStyles.input)}\n              required\n              aria-invalid={activeError?.error === \"INVALID_EMAIL\"}\n              aria-describedby={activeError ? \"error-message\" : undefined}\n            />\n          </div>\n          <div className=\"space-y-2\">\n            <Label htmlFor=\"password\" className={cn(customStyles.label)}>Password</Label>\n            <div className=\"relative\">\n            <Input\n              id=\"password\"\n              name=\"password\"\n              type={showPassword ? \"text\" : \"password\"}\n              value={password}\n              onChange={(e) => setPassword(e.target.value)}\n              onFocus={() => setPasswordFocused(true)}\n              onBlur={() => setPasswordFocused(false)}\n              disabled={loading}\n              className={cn(customStyles.input)}\n              required\n              aria-invalid={activeError?.error === \"INVALID_CREDENTIALS\"}\n              aria-describedby={activeError ? \"error-message\" : undefined}\n            />\n          <Button\n                  type=\"button\"\n                  variant=\"ghost\"\n                  size=\"icon\"\n                  className=\"absolute right-2 top-1/2 -translate-y-1/2 h-8 w-8 hover:bg-transparent\"\n                  onClick={() => setShowPassword(!showPassword)}\n                >\n                  {showPassword ? (\n                    <EyeOff className=\"h-4 w-4 text-muted-foreground hover:text-foreground\" />\n                  ) : (\n                    <Eye className=\"h-4 w-4 text-muted-foreground hover:text-foreground\" />\n                  )}\n                  <span className=\"sr-only\">{showPassword ? \"Hide password\" : \"Show password\"}</span>\n                </Button>\n            </div>\n          </div>\n          <Button type=\"submit\" disabled={loading} className={cn(\"w-full\", customStyles.button)}>\n            {loading ? (\n              <>\n                <Loader2 className=\"mr-2 h-4 w-4 animate-spin\" />\n                Signing in...\n              </>\n            ) : (\n              'Sign in'\n            )}\n          </Button>\n        </form>\n        <div className=\"relative\">\n          <Separator className={cn(customStyles.separator)} />\n          <div className=\"absolute inset-0 flex items-center justify-center\">\n            <span className=\"bg-background px-2 text-muted-foreground text-sm\">Or continue with</span>\n          </div>\n        </div>\n        <div className=\"grid grid-cols-2 gap-4\">\n          <Button \n            variant=\"outline\" \n            disabled={loading} \n            onClick={() => handleSocialSignIn('google')} \n            className={cn(\"flex items-center justify-center\", customStyles.socialButton)}\n          >\n            <svg className=\"w-5 h-5 mr-2\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\">\n              <path d=\"M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z\" fill=\"#4285F4\"/>\n              <path d=\"M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z\" fill=\"#34A853\"/>\n              <path d=\"M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z\" fill=\"#FBBC05\"/>\n              <path d=\"M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z\" fill=\"#EA4335\"/>\n            </svg>\n            Google\n          </Button>\n          <Button \n            variant=\"outline\" \n            disabled={loading} \n            onClick={() => handleSocialSignIn('microsoft')} \n            className={cn(\"flex items-center justify-center\", customStyles.socialButton)}\n          >\n            <svg className=\"w-5 h-5 mr-2\" viewBox=\"0 0 23 23\" xmlns=\"http://www.w3.org/2000/svg\">\n              <path fill=\"#f3f3f3\" d=\"M0 0h23v23H0z\"/>\n              <path fill=\"#f35325\" d=\"M1 1h10v10H1z\"/>\n              <path fill=\"#81bc06\" d=\"M12 1h10v10H12z\"/>\n              <path fill=\"#05a6f0\" d=\"M1 12h10v10H1z\"/>\n              <path fill=\"#ffba08\" d=\"M12 12h10v10H12z\"/>\n            </svg>\n            Microsoft\n          </Button>\n        </div>\n      </CardContent>\n      <CardFooter className=\"flex justify-center\">\n        <p className=\"text-sm text-muted-foreground\">\n        Don&apos;t have an account?{' '}\n          <a href=\"/sign-up\" className=\"text-primary hover:underline\">\n            Sign up\n          </a>\n        </p>\n      </CardFooter>\n    </Card>\n    </div>\n  )\n}\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA+EW;AA7EX,mBAAwD;AACxD,wBAAuD;AACvD,qBAA+E;AAC/E,kBAAsF;AACtF,mBAAsB;AACtB,mBAAsB;AACtB,oBAAuB;AACvB,mBAAwC;AACxC,uBAA0B;AAC1B,mBAAmB;AACnB,0BAAqC;AACrC,kBAAwC;AACxC,yBAA+B;AAC/B,+BAAoC;AACpC,wBAA+B;AAC/B,uBAAoC;AACpC,4BAAoC;AAEpC,qBAAwB;AACxB,oBAAqC;AAKrC,MAAM,aAAa,QAAQ,IAAI;AAC/B,MAAM,UAAU,QAAQ,IAAI,iCAAiC;AAoB7D,MAAM,SAAS,CAAC,YAAoB;AAClC,SAAO,QAAQ,MAAM,GAAG,EAAE,IAAI,SAAO,QAAQ,GAAG,EAAE,EAAE,KAAK,GAAG;AAC9D;AAGO,SAAS,OAAO;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe,CAAC;AAClB,GAAgB;AACd,QAAM,CAAC,SAAS,UAAU,QAAI,uBAAS,KAAK;AAC5C,QAAM,CAAC,kBAAkB,mBAAmB,QAAI,uBAAS,IAAI;AAC7D,QAAM,CAAC,WAAW,YAAY,QAAI,uBAAgC,IAAI;AACtE,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAS,EAAE;AACrC,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAS,EAAE;AACrC,QAAM,CAAC,UAAU,WAAW,QAAI,uBAAS,EAAE;AAC3C,QAAM,CAAC,cAAc,eAAe,QAAI,uBAAS,KAAK;AACtD,QAAM,CAAC,iBAAiB,kBAAkB,QAAI,uBAAS,KAAK;AAC5D,QAAM,CAAC,cAAc,eAAe,QAAI,uBAAgC,IAAI;AAC5E,QAAM,CAAC,kBAAkB,mBAAmB,QAAI,uBAAwB,IAAI;AAC5E,QAAM,mBAAe,mCAAgB;AACrC,QAAM,mBAAmB,aAAa,IAAI,gBAAgB,MAAM;AAChE,QAAM,aAAS,6BAAU;AACzB,QAAM,eAAW,+BAAY;AAC7B,QAAM,wBAAoB,2CAAoB,YAAY,EAAE;AAC5D,QAAM,EAAE,sBAAsB,OAAO,WAAW,OAAO,QAAI,wBAAQ;AACnE,QAAM,uBAAmB,sCAAoB,cAAc,WAAW;AAGtE,MAAI,mBAAmB;AACrB,WAAO,4CAAC,qBAAkB;AAAA,EAC5B;AAEA,8BAAU,MAAM;AACd,QAAI,aAAa,WAAW,aAAa,WAAW,mBAAmB;AAErE,YAAM,UAAU,UAAU,WAAW;AACrC,0BAAoB,OAAO;AAE3B,UAAG,CAAC,gBAAgB,aAAa,YAAY,SAAS;AACpD,wBAAgB,SAA2B;AAAA,MAC7C;AAAA,IACF,OAAO;AACL,0BAAoB,IAAI;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,WAAW,QAAQ,YAAY,CAAC;AAEpC,QAAM,2BAAuB;AAAA,IAC3B,OAAO,SAAe;AACpB,UAAI;AACF,cAAM,UAAU,MAAM,KAAK,WAAW;AACtC,cAAM,gBAAgB,UAAM,8CAAoB,OAAO;AAEvD,YAAI,CAAC,cAAc,SAAS;AAC1B,uBAAa;AAAA,YACX,SAAS;AAAA,YACT,SAAS,cAAc,WAAW;AAAA,YAClC,OAAO;AAAA,YACP,MAAM;AAAA,UACR,CAAC;AAAA,QACH;AAEA;AAGA,YAAI,QAAQ,IAAI,aAAa,cAAc;AAEzC,iBAAO,SAAS,OAAO;AAAA,QACzB,OAAO;AAEL,iBAAO,KAAK,gBAAgB;AAAA,QAC9B;AAAA,MACF,SAAS,KAAK;AACZ,qBAAa;AAAA,UACX,SAAS;AAAA,UACT,SAAS;AAAA,UACT,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AAAA,IACA,CAAC,kBAAkB,QAAQ,SAAS;AAAA,EACtC;AAGA,QAAM,2BAAuB,0BAAY,YAAY;AACnD,QAAI,CAAC,iBAAkB,QAAO;AAC9B,wBAAoB,IAAI;AACxB,QAAI;AACF,cAAQ,IAAI,6BAA6B;AACzC,cAAQ,IAAI,qBAAqB,OAAO,SAAS,QAAQ;AACzD,cAAQ,IAAI,yBAAyB,UAAU;AAEjD,YAAM,WAAW,cACjB,OAAO,SAAS,aAAa,WAAW,QAAQ,eAAe,EAAE;AACjE,cAAQ,IAAI,sBAAsB,QAAQ;AAGxC,YAAM,SAAS,UAAM,+BAAkB,iCAAc;AACrD,cAAQ,IAAI,oBAAoB,MAAM;AACtC,UAAI,QAAQ;AACV,cAAM,UAAU,MAAM,OAAO,KAAK,WAAW;AAC7C,cAAM,gBAAgB,UAAM,8CAAoB,OAAO;AACvD,YAAI,CAAC,cAAc,SAAS;AAC1B,gBAAM,IAAI,MAAM,0BAA0B;AAAA,QAC5C;AACA,cAAM,oBAAoB,eAAe,QAAQ,iBAAiB;AAClE,uBAAe,WAAW,mBAAmB;AAC7C;AACA,eAAO,SAAS,OAAO,yBAAqB,sCAAoB,cAAc,WAAW;AACzF,eAAO;AAAA,MACT;AACA,0BAAoB,KAAK;AAAA,IAC3B,SAAS,KAAK;AACZ,YAAM,eAAe;AACrB,mBAAa,YAAY;AACzB,UAAI,WAAW,eAAe,OAAO;AACnC,gBAAQ,GAAG;AAAA,MACb;AACA,qBAAe,WAAW,mBAAmB;AAC7C,aAAO;AAAA,IACT;AAAA,EACF,GAAG,CAAC,kBAAkB,aAAa,cAAc,WAAW,OAAO,CAAC;AAIpE,8BAAU,MAAM;AACd,QAAI,kBAAkB;AACpB,2BAAqB;AAAA,IACvB;AAAA,EACF,GAAG,CAAC,sBAAsB,gBAAgB,CAAC;AAE3C,QAAM,eAAe,OAAO,MAAuB;AACjD,MAAE,eAAe;AACjB,eAAW,IAAI;AACf,iBAAa,IAAI;AACjB,oBAAgB,IAAI;AAEpB,QAAI;AACF,YAAM,WAAU,UAAM,gCAAgB,OAAO,QAAQ;AACrD,sBAAgB,QAAQ;AAExB,UAAI,CAAC,SAAS,SAAS;AACrB,qBAAa;AAAA,UACX,SAAS;AAAA,UACT,SAAS,SAAS;AAAA,UAClB,OAAO,SAAS;AAAA,UAChB,MAAM;AAAA,QACR,CAAC;AACD;AAAA,MACF;AAEA,UAAI,SAAS,MAAM;AACjB,YAAG,wBAAwB,CAAC,SAAS,KAAK,eAAe;AACvD,uBAAa;AAAA,YACX,SAAS;AAAA,YACT,SAAS;AAAA,YACT,OAAO;AAAA,YACP,MAAM,SAAS;AAAA,UACjB,CAAC;AACD;AAAA,QACJ;AAEA,cAAM,qBAAqB,SAAS,IAAI;AAAA,MAC1C;AAAA,IACA,SAAS,KAAK;AACZ,YAAM,eAAe;AACrB,mBAAa,YAAY;AACzB,UAAI,WAAW,eAAe,OAAO;AACnC,gBAAQ,GAAG;AAAA,MACb;AAAA,IACF,UAAE;AACA,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,qBAAqB,OAAO,aAAqC;AACrE,eAAW,IAAI;AACf,QAAI;AAEF,YAAMA,wBAAmB,sCAAoB,cAAc,WAAW;AACtE,qBAAe,QAAQ,qBAAqBA,iBAAgB;AAE5D,YAAM,aAAa,IAAI,IAAI,OAAO,SAAS,IAAI;AAC/C,iBAAW,aAAa,IAAI,kBAAkB,MAAM;AACpD,aAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,WAAW,SAAS,CAAC;AAEzD,YAAM,SAAS,aAAa,WAAW,UAAM,yCAAyB,IAAI,UAAM,oCAAoB;AACpG,UAAI,CAAC,OAAO,SAAS;AACnB,cAAM,IAAI,MAAM,OAAO,KAAK;AAAA,MAC9B;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,eAAe;AACrB,mBAAa,YAAY;AACzB,UAAI,WAAW,eAAe,OAAO;AACnC,gBAAQ,GAAG;AAAA,MACb;AACA,iBAAW,KAAK;AAChB,qBAAe,WAAW,mBAAmB;AAAA,IAC/C;AAAA,EACF;AAEA,QAAM,6BAA6B,CAAC,MAAwB;AAC1D,MAAE,eAAe;AACjB,WAAO,KAAK,iBAAiB;AAAA,EAC/B;AAGA,MAAI,oBAAoB,kBAAkB;AACxC,WACE,4CAAC,SAAI,WAAU,iDACb,sDAAC,SAAI,WAAU,yBACb,sDAAC,SAAI,WAAU,yEAAwE,GAEzF,GACF;AAAA,EAEJ;AAGF,QAAM,cAAc,aAAa;AACjC,QAAM,+BACJ,2CAAa,WAAU,yBAAwB,2CAAa,WAAU;AAEtE,SACE,6CAAC,SAAI,WAAU,6CACb;AAAA,gDAAC,oCAAe;AAAA,IAClB,6CAAC,oBAAK,eAAW,iBAAG,gCAAgC,WAAW,aAAa,IAAI,GAC9E;AAAA,mDAAC,0BAAW,WAAU,yBACpB;AAAA,qDAAC,yBAAU,eAAW,iBAAG,aAAa,aAAa,KAAK,GAAG;AAAA;AAAA,UAAY,GAAG,OAAO;AAAA,UAAG;AAAA,WAAC;AAAA,QACrF,4CAAC,+BAAgB,eAAW,iBAAG,yBAAyB,aAAa,WAAW,GAAG,wCAEnF;AAAA,SACF;AAAA,MACA,6CAAC,2BAAY,WAAU,aACrB;AAAA,qDAAC,UAAK,UAAU,cAAc,WAAU,aACrC;AAAA,yBACC,4CAAC,sBAAM,aAAS,oCAAqB,WAAW,GAAG,WAAU,yBAC3D,uDAAC,iCACD;AAAA,wDAAC,UAAM,sBAAY,SAAQ;AAAA,YAC1B,+BACK;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR,WAAU;AAAA,gBACV,SAAS;AAAA,gBACV;AAAA;AAAA,YAED;AAAA,aAEN,GACF;AAAA,UAEF,6CAAC,SAAI,WAAU,aACb;AAAA,wDAAC,sBAAM,SAAQ,SAAQ,eAAW,iBAAG,aAAa,KAAK,GAAG,mBAAK;AAAA,YAC/D;AAAA,cAAC;AAAA;AAAA,gBACC,IAAG;AAAA,gBACH,MAAK;AAAA,gBACL,aAAY;AAAA,gBACZ,OAAO;AAAA,gBACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,gBACxC,UAAU;AAAA,gBACV,eAAW,iBAAG,aAAa,KAAK;AAAA,gBAChC,UAAQ;AAAA,gBACR,iBAAc,2CAAa,WAAU;AAAA,gBACrC,oBAAkB,cAAc,kBAAkB;AAAA;AAAA,YACpD;AAAA,aACF;AAAA,UACA,6CAAC,SAAI,WAAU,aACb;AAAA,wDAAC,sBAAM,SAAQ,YAAW,eAAW,iBAAG,aAAa,KAAK,GAAG,sBAAQ;AAAA,YACrE,6CAAC,SAAI,WAAU,YACf;AAAA;AAAA,gBAAC;AAAA;AAAA,kBACC,IAAG;AAAA,kBACH,MAAK;AAAA,kBACL,MAAM,eAAe,SAAS;AAAA,kBAC9B,OAAO;AAAA,kBACP,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK;AAAA,kBAC3C,SAAS,MAAM,mBAAmB,IAAI;AAAA,kBACtC,QAAQ,MAAM,mBAAmB,KAAK;AAAA,kBACtC,UAAU;AAAA,kBACV,eAAW,iBAAG,aAAa,KAAK;AAAA,kBAChC,UAAQ;AAAA,kBACR,iBAAc,2CAAa,WAAU;AAAA,kBACrC,oBAAkB,cAAc,kBAAkB;AAAA;AAAA,cACpD;AAAA,cACF;AAAA,gBAAC;AAAA;AAAA,kBACO,MAAK;AAAA,kBACL,SAAQ;AAAA,kBACR,MAAK;AAAA,kBACL,WAAU;AAAA,kBACV,SAAS,MAAM,gBAAgB,CAAC,YAAY;AAAA,kBAE3C;AAAA,mCACC,4CAAC,8BAAO,WAAU,uDAAsD,IAExE,4CAAC,2BAAI,WAAU,uDAAsD;AAAA,oBAEvE,4CAAC,UAAK,WAAU,WAAW,yBAAe,kBAAkB,iBAAgB;AAAA;AAAA;AAAA,cAC9E;AAAA,eACJ;AAAA,aACF;AAAA,UACA,4CAAC,wBAAO,MAAK,UAAS,UAAU,SAAS,eAAW,iBAAG,UAAU,aAAa,MAAM,GACjF,oBACC,4EACE;AAAA,wDAAC,+BAAQ,WAAU,6BAA4B;AAAA,YAAE;AAAA,aAEnD,IAEA,WAEJ;AAAA,WACF;AAAA,QACA,6CAAC,SAAI,WAAU,YACb;AAAA,sDAAC,8BAAU,eAAW,iBAAG,aAAa,SAAS,GAAG;AAAA,UAClD,4CAAC,SAAI,WAAU,qDACb,sDAAC,UAAK,WAAU,oDAAmD,8BAAgB,GACrF;AAAA,WACF;AAAA,QACA,6CAAC,SAAI,WAAU,0BACb;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,UAAU;AAAA,cACV,SAAS,MAAM,mBAAmB,QAAQ;AAAA,cAC1C,eAAW,iBAAG,oCAAoC,aAAa,YAAY;AAAA,cAE3E;AAAA,6DAAC,SAAI,WAAU,gBAAe,SAAQ,aAAY,OAAM,8BACtD;AAAA,8DAAC,UAAK,GAAE,2HAA0H,MAAK,WAAS;AAAA,kBAChJ,4CAAC,UAAK,GAAE,yIAAwI,MAAK,WAAS;AAAA,kBAC9J,4CAAC,UAAK,GAAE,iIAAgI,MAAK,WAAS;AAAA,kBACtJ,4CAAC,UAAK,GAAE,uIAAsI,MAAK,WAAS;AAAA,mBAC9J;AAAA,gBAAM;AAAA;AAAA;AAAA,UAER;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,UAAU;AAAA,cACV,SAAS,MAAM,mBAAmB,WAAW;AAAA,cAC7C,eAAW,iBAAG,oCAAoC,aAAa,YAAY;AAAA,cAE3E;AAAA,6DAAC,SAAI,WAAU,gBAAe,SAAQ,aAAY,OAAM,8BACtD;AAAA,8DAAC,UAAK,MAAK,WAAU,GAAE,iBAAe;AAAA,kBACtC,4CAAC,UAAK,MAAK,WAAU,GAAE,iBAAe;AAAA,kBACtC,4CAAC,UAAK,MAAK,WAAU,GAAE,mBAAiB;AAAA,kBACxC,4CAAC,UAAK,MAAK,WAAU,GAAE,kBAAgB;AAAA,kBACvC,4CAAC,UAAK,MAAK,WAAU,GAAE,oBAAkB;AAAA,mBAC3C;AAAA,gBAAM;AAAA;AAAA;AAAA,UAER;AAAA,WACF;AAAA,SACF;AAAA,MACA,4CAAC,0BAAW,WAAU,uBACpB,uDAAC,OAAE,WAAU,iCAAgC;AAAA;AAAA,QACjB;AAAA,QAC1B,4CAAC,OAAE,MAAK,YAAW,WAAU,gCAA+B,qBAE5D;AAAA,SACF,GACF;AAAA,OACF;AAAA,KACA;AAEJ;","names":["validRedirectUrl"]}

package/dist/cjs/server/auth.js

@@ -1,5 +1,4 @@
 "use strict";
-"use server";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -20,66 +19,82 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var auth_exports = {};
 __export(auth_exports, {
   auth: () => auth,
-  getUserInfo: () => getUserInfo,
-  isAuthenticated: () => isAuthenticated
+  getUser: () => getUser,
+  isAuthenticated: () => isAuthenticated,
+  requireAuth: () => requireAuth
 });
 module.exports = __toCommonJS(auth_exports);
+var import_react = require("react");
 var import_headers = require("next/headers");
-async function auth() {
-  var _a, _b;
+var import_jwt_edge = require("./jwt-edge");
+var import_errors = require("../errors");
+const auth = (0, import_react.cache)(async () => {
+  var _a, _b, _c, _d;
   try {
-    const headersList = await (0, import_headers.headers)();
+    console.log("auth: Starting auth check...");
     const cookieStore = await (0, import_headers.cookies)();
-    const userId = headersList.get("x-user-id");
-    const authTime = headersList.get("x-auth-time");
-    const emailVerified = headersList.get("x-auth-verified") === "true";
-    if (userId) {
-      const token = ((_a = cookieStore.get("_session_cookie")) == null ? void 0 : _a.value) || ((_b = cookieStore.get("_session_token")) == null ? void 0 : _b.value) || null;
-      return {
-        user: {
-          uid: userId,
-          email: headersList.get("x-user-email") || null,
-          emailVerified,
-          authTime: authTime ? parseInt(authTime) : void 0
-        },
-        token,
-        error: null
-      };
+    const sessionCookie = (_a = cookieStore.get("_session_cookie")) == null ? void 0 : _a.value;
+    if (sessionCookie) {
+      const result = await (0, import_jwt_edge.verifyFirebaseToken)(sessionCookie, true);
+      if (result.valid && result.uid) {
+        const user = {
+          uid: (_b = result.uid) != null ? _b : "",
+          email: result.email || null,
+          authTime: result.authTime
+        };
+        return { user, error: null };
+      }
+    }
+    const idToken = (_c = cookieStore.get("_session_token")) == null ? void 0 : _c.value;
+    if (idToken) {
+      const result = await (0, import_jwt_edge.verifyFirebaseToken)(idToken, false);
+      if (result.valid) {
+        const user = {
+          uid: (_d = result.uid) != null ? _d : "",
+          email: result.email || null,
+          authTime: result.authTime
+        };
+        return { user, error: null };
+      }
     }
     return {
       user: null,
-      token: null,
-      error: new Error("No valid session or token found")
+      error: new import_errors.TernSecureError("UNAUTHENTICATED", "No valid session found")
     };
   } catch (error) {
-    console.error("Error in getAuthResult:", error);
+    console.error("Error in Auth:", error);
+    if (error instanceof import_errors.TernSecureError) {
+      return {
+        user: null,
+        error
+      };
+    }
     return {
       user: null,
-      token: null,
-      error: error instanceof Error ? error : new Error("An unknown error occurred")
+      error: new import_errors.TernSecureError("INTERNAL_ERROR", "An unexpected error occurred")
     };
   }
-}
-async function isAuthenticated() {
-  const authResult = await auth();
-  return authResult.user !== null;
-}
-async function getUserInfo() {
-  const authResult = await auth();
-  if (!authResult.user) {
-    return null;
+});
+const isAuthenticated = (0, import_react.cache)(async () => {
+  const { user } = await auth();
+  return user !== null;
+});
+const getUser = (0, import_react.cache)(async () => {
+  const { user } = await auth();
+  return user;
+});
+const requireAuth = (0, import_react.cache)(async () => {
+  const { user, error } = await auth();
+  if (!user) {
+    throw error || new Error("Authentication required");
   }
-  return {
-    uid: authResult.user.uid,
-    email: authResult.user.email,
-    emailVerified: authResult.user.emailVerified,
-    authTime: authResult.user.authTime
-  };
-}
+  return user;
+});
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   auth,
-  getUserInfo,
-  isAuthenticated
+  getUser,
+  isAuthenticated,
+  requireAuth
 });
 //# sourceMappingURL=auth.js.map

package/dist/cjs/server/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/auth.ts"],"sourcesContent":["'use server'\nimport { cookies, headers } from \"next/headers\"\nimport type { UserInfo, SessionResult } from \"./edge-session\"\n\n\nexport interface AuthResult {\n  user: UserInfo | null\n  token: string | null\n  error: Error | null\n}\n\n\n  /**\n   * Get the current authenticated user from the session or token\n   */\n  export async function auth(): Promise<AuthResult> {\n    try {\n      const headersList = await headers()\n      const cookieStore = await cookies()\n\n      const userId = headersList.get('x-user-id')\n      const authTime = headersList.get('x-auth-time')\n      const emailVerified = headersList.get('x-auth-verified') === 'true'\n\n      if (userId) {\n        const token = cookieStore.get(\"_session_cookie\")?.value || \n                     cookieStore.get(\"_session_token\")?.value || \n                     null\n  \n        return {\n          user: {\n            uid: userId,\n            email: headersList.get('x-user-email') || null,\n            emailVerified,\n            authTime: authTime ? parseInt(authTime) : undefined\n          },\n          token,\n          error: null\n        }\n      }\n\n      return {\n        user: null,\n        token: null,\n        error: new Error(\"No valid session or token found\"),\n      }\n    } catch (error) {\n      console.error(\"Error in getAuthResult:\", error)\n      return {\n        user: null,\n        token: null,\n        error: error instanceof Error ? error : new Error(\"An unknown error occurred\"),\n      }\n    }\n}\n\n/**\n * Type guard to check if user is authenticated\n */\nexport async function isAuthenticated(): Promise<boolean> {\n  const authResult = await auth()\n  return authResult.user !== null\n}\n\n/**\n * Get user info from auth result\n */\nexport async function getUserInfo(): Promise<UserInfo | null> {\n  const authResult = await auth()\n  if (!authResult.user) {\n    return null\n  }\n\n  return {\n    uid: authResult.user.uid,\n    email: authResult.user.email,\n    emailVerified: authResult.user.emailVerified,\n    authTime: authResult.user.authTime\n  }\n  }\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,qBAAiC;AAc/B,eAAsB,OAA4B;AAfpD;AAgBI,MAAI;AACF,UAAM,cAAc,UAAM,wBAAQ;AAClC,UAAM,cAAc,UAAM,wBAAQ;AAElC,UAAM,SAAS,YAAY,IAAI,WAAW;AAC1C,UAAM,WAAW,YAAY,IAAI,aAAa;AAC9C,UAAM,gBAAgB,YAAY,IAAI,iBAAiB,MAAM;AAE7D,QAAI,QAAQ;AACV,YAAM,UAAQ,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC,YACrC,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC,UACnC;AAEb,aAAO;AAAA,QACL,MAAM;AAAA,UACJ,KAAK;AAAA,UACL,OAAO,YAAY,IAAI,cAAc,KAAK;AAAA,UAC1C;AAAA,UACA,UAAU,WAAW,SAAS,QAAQ,IAAI;AAAA,QAC5C;AAAA,QACA;AAAA,QACA,OAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,OAAO,IAAI,MAAM,iCAAiC;AAAA,IACpD;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAC9C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,2BAA2B;AAAA,IAC/E;AAAA,EACF;AACJ;AAKA,eAAsB,kBAAoC;AACxD,QAAM,aAAa,MAAM,KAAK;AAC9B,SAAO,WAAW,SAAS;AAC7B;AAKA,eAAsB,cAAwC;AAC5D,QAAM,aAAa,MAAM,KAAK;AAC9B,MAAI,CAAC,WAAW,MAAM;AACpB,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,KAAK,WAAW,KAAK;AAAA,IACrB,OAAO,WAAW,KAAK;AAAA,IACvB,eAAe,WAAW,KAAK;AAAA,IAC/B,UAAU,WAAW,KAAK;AAAA,EAC5B;AACA;","names":[]}
+{"version":3,"sources":["../../../src/server/auth.ts"],"sourcesContent":["import { cache } from \"react\"\nimport { cookies } from \"next/headers\"\nimport type { UserInfo } from \"./types\"\nimport { verifyFirebaseToken } from \"./jwt-edge\"\nimport { TernSecureError } from \"../errors\"\n\n\n\nexport interface AuthResult {\n  user: UserInfo | null\n  error: Error | null\n}\n\n  /**\n   * Get the current authenticated user from the session or token\n   */\nexport const auth = cache(async (): Promise<AuthResult> => {\n  try {\n    // Get all active sessions for debugging\n   console.log(\"auth: Starting auth check...\")\n   const cookieStore = await cookies()\n\n    // First try session cookie as it's more secure\n    const sessionCookie = cookieStore.get(\"_session_cookie\")?.value\n    if (sessionCookie) {\n      const result = await verifyFirebaseToken(sessionCookie, true)\n      if (result.valid && result.uid) {\n        const user: UserInfo = {\n          uid: result.uid ?? '',\n          email: result.email || null,\n          authTime: result.authTime\n        }\n        return { user, error: null }\n      }\n    }\n\n    // Fallback to ID token\n    const idToken = cookieStore.get(\"_session_token\")?.value\n    if (idToken) {\n      const result = await verifyFirebaseToken(idToken, false)\n      if (result.valid) {\n        const user: UserInfo = {\n          uid: result.uid ?? '',\n          email: result.email || null,\n          authTime: result.authTime\n        }\n        return { user, error: null }\n      }\n    }\n\n      return {\n          user: null,\n          error: new TernSecureError('UNAUTHENTICATED', 'No valid session found')\n      }\n\n    } catch (error) {\n      console.error(\"Error in Auth:\", error)\n      if (error instanceof TernSecureError) {\n        return {\n          user: null,\n          error\n        }\n      }\n      return {\n        user: null,\n        error: new TernSecureError('INTERNAL_ERROR', 'An unexpected error occurred')\n      }\n    }\n  })\n\n/**\n * Type guard to check if user is authenticated\n */\nexport const isAuthenticated = cache(async (): Promise<boolean>  => {\n  const { user } = await auth()\n  return user !== null\n})\n\n/**\n * Get user info from auth result\n */\nexport const getUser = cache(async (): Promise<UserInfo | null> => {\n  const { user } = await auth()\n  return user\n})\n\n/**\n * Require authentication\n * Throws error if not authenticated\n */\nexport const requireAuth = cache(async (): Promise<UserInfo> => {\n  const { user, error } = await auth()\n\n  if (!user) {\n    throw error || new Error(\"Authentication required\")\n  }\n\n  return user\n})"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAsB;AACtB,qBAAwB;AAExB,sBAAoC;AACpC,oBAAgC;AAYzB,MAAM,WAAO,oBAAM,YAAiC;AAhB3D;AAiBE,MAAI;AAEH,YAAQ,IAAI,8BAA8B;AAC1C,UAAM,cAAc,UAAM,wBAAQ;AAGjC,UAAM,iBAAgB,iBAAY,IAAI,iBAAiB,MAAjC,mBAAoC;AAC1D,QAAI,eAAe;AACjB,YAAM,SAAS,UAAM,qCAAoB,eAAe,IAAI;AAC5D,UAAI,OAAO,SAAS,OAAO,KAAK;AAC9B,cAAM,OAAiB;AAAA,UACrB,MAAK,YAAO,QAAP,YAAc;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AACA,eAAO,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAGA,UAAM,WAAU,iBAAY,IAAI,gBAAgB,MAAhC,mBAAmC;AACnD,QAAI,SAAS;AACX,YAAM,SAAS,UAAM,qCAAoB,SAAS,KAAK;AACvD,UAAI,OAAO,OAAO;AAChB,cAAM,OAAiB;AAAA,UACrB,MAAK,YAAO,QAAP,YAAc;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AACA,eAAO,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAEE,WAAO;AAAA,MACH,MAAM;AAAA,MACN,OAAO,IAAI,8BAAgB,mBAAmB,wBAAwB;AAAA,IAC1E;AAAA,EAEF,SAAS,OAAO;AACd,YAAQ,MAAM,kBAAkB,KAAK;AACrC,QAAI,iBAAiB,+BAAiB;AACpC,aAAO;AAAA,QACL,MAAM;AAAA,QACN;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO,IAAI,8BAAgB,kBAAkB,8BAA8B;AAAA,IAC7E;AAAA,EACF;AACF,CAAC;AAKI,MAAM,sBAAkB,oBAAM,YAA+B;AAClE,QAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAC5B,SAAO,SAAS;AAClB,CAAC;AAKM,MAAM,cAAU,oBAAM,YAAsC;AACjE,QAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAC5B,SAAO;AACT,CAAC;AAMM,MAAM,kBAAc,oBAAM,YAA+B;AAC9D,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,KAAK;AAEnC,MAAI,CAAC,MAAM;AACT,UAAM,SAAS,IAAI,MAAM,yBAAyB;AAAA,EACpD;AAEA,SAAO;AACT,CAAC;","names":[]}

package/dist/cjs/server/crypto.js

@@ -0,0 +1,43 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var crypto_exports = {};
+__export(crypto_exports, {
+  decrypt: () => decrypt,
+  encrypt: () => encrypt
+});
+module.exports = __toCommonJS(crypto_exports);
+const ENCRYPTION_KEY = process.env.TERN_ENCRYPTION_KEY || "default-key-32-chars-exactly!!!!!";
+function encrypt(text) {
+  const textBytes = new TextEncoder().encode(text);
+  const encrypted = textBytes.map((byte, i) => byte ^ ENCRYPTION_KEY.charCodeAt(i % ENCRYPTION_KEY.length));
+  return Buffer.from(encrypted).toString("base64url");
+}
+function decrypt(encoded) {
+  const encrypted = Buffer.from(encoded, "base64url");
+  const decrypted = new Uint8Array(encrypted).map(
+    (byte, i) => byte ^ ENCRYPTION_KEY.charCodeAt(i % ENCRYPTION_KEY.length)
+  );
+  return new TextDecoder().decode(decrypted);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  decrypt,
+  encrypt
+});
+//# sourceMappingURL=crypto.js.map

package/dist/cjs/server/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/server/crypto.ts"],"sourcesContent":["const ENCRYPTION_KEY = process.env.TERN_ENCRYPTION_KEY || \"default-key-32-chars-exactly!!!!!\"\n\n// Simple encryption for cookie data\nexport function encrypt(text: string): string {\n  const textBytes = new TextEncoder().encode(text)\n  const encrypted = textBytes.map((byte, i) => byte ^ ENCRYPTION_KEY.charCodeAt(i % ENCRYPTION_KEY.length))\n  return Buffer.from(encrypted).toString(\"base64url\")\n}\n\nexport function decrypt(encoded: string): string {\n  const encrypted = Buffer.from(encoded, \"base64url\")\n  const decrypted = new Uint8Array(encrypted).map(\n    (byte, i) => byte ^ ENCRYPTION_KEY.charCodeAt(i % ENCRYPTION_KEY.length),\n  )\n  return new TextDecoder().decode(decrypted)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAAM,iBAAiB,QAAQ,IAAI,uBAAuB;AAGnD,SAAS,QAAQ,MAAsB;AAC5C,QAAM,YAAY,IAAI,YAAY,EAAE,OAAO,IAAI;AAC/C,QAAM,YAAY,UAAU,IAAI,CAAC,MAAM,MAAM,OAAO,eAAe,WAAW,IAAI,eAAe,MAAM,CAAC;AACxG,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,WAAW;AACpD;AAEO,SAAS,QAAQ,SAAyB;AAC/C,QAAM,YAAY,OAAO,KAAK,SAAS,WAAW;AAClD,QAAM,YAAY,IAAI,WAAW,SAAS,EAAE;AAAA,IAC1C,CAAC,MAAM,MAAM,OAAO,eAAe,WAAW,IAAI,eAAe,MAAM;AAAA,EACzE;AACA,SAAO,IAAI,YAAY,EAAE,OAAO,SAAS;AAC3C;","names":[]}

package/dist/cjs/server/ctx-store.js

@@ -0,0 +1,65 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var ctx_store_exports = {};
+__export(ctx_store_exports, {
+  ContextStore: () => ContextStore
+});
+module.exports = __toCommonJS(ctx_store_exports);
+if (typeof global.__ternSecure === "undefined") {
+  global.__ternSecure = {
+    context: null,
+    sessions: /* @__PURE__ */ new Map()
+  };
+  console.log("ContextStore: Initialized global state");
+}
+class ContextStore {
+  static setContext(context) {
+    console.log("ContextStore: Setting context:", context);
+    global.__ternSecure.context = context;
+    console.log("ContextStore: Context set successfully");
+  }
+  static getContext() {
+    const context = global.__ternSecure.context;
+    console.log("ContextStore: Getting context:", context);
+    return context;
+  }
+  static setSession(sessionId, user) {
+    console.log("ContextStore: Setting session:", { sessionId, user });
+    global.__ternSecure.sessions.set(sessionId, user);
+    console.log("ContextStore: Session set successfully");
+  }
+  static getSession(sessionId) {
+    const user = global.__ternSecure.sessions.get(sessionId) || null;
+    console.log("ContextStore: Getting session:", { sessionId, user });
+    return user;
+  }
+  static debug() {
+    var _a;
+    return {
+      sessionsCount: global.__ternSecure.sessions.size,
+      currentSessionId: ((_a = global.__ternSecure.context) == null ? void 0 : _a.sessionId) || null,
+      sessions: Array.from(global.__ternSecure.sessions.entries())
+    };
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ContextStore
+});
+//# sourceMappingURL=ctx-store.js.map

package/dist/cjs/server/ctx-store.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/server/ctx-store.ts"],"sourcesContent":["import type { UserInfo } from \"./types\"\n\ninterface RequestContext {\n  user: UserInfo\n  sessionId: string\n}\n\n// Use Node.js global for server-side persistence\ndeclare global {\n  var __ternSecure: {\n    context: RequestContext | null\n    sessions: Map<string, UserInfo>\n  }\n}\n\n// Initialize global state if not exists\nif (typeof global.__ternSecure === 'undefined') {\n    global.__ternSecure = {\n      context: null,\n      sessions: new Map(),\n    }\n  console.log(\"ContextStore: Initialized global state\")\n}\n\nexport class ContextStore {\n  static setContext(context: RequestContext) {\n    console.log(\"ContextStore: Setting context:\", context)\n    global.__ternSecure.context = context\n    console.log(\"ContextStore: Context set successfully\")\n  }\n\n  static getContext(): RequestContext | null {\n    const context = global.__ternSecure.context\n    console.log(\"ContextStore: Getting context:\", context)\n    return context\n  }\n\n  static setSession(sessionId: string, user: UserInfo) {\n    console.log(\"ContextStore: Setting session:\", { sessionId, user })\n    global.__ternSecure.sessions.set(sessionId, user)\n    console.log(\"ContextStore: Session set successfully\")\n  }\n\n  static getSession(sessionId: string): UserInfo | null {\n    const user = global.__ternSecure.sessions.get(sessionId) || null\n    console.log(\"ContextStore: Getting session:\", { sessionId, user })\n    return user\n  }\n\n  static debug() {\n    return {\n      sessionsCount: global.__ternSecure.sessions.size,\n      currentSessionId: global.__ternSecure.context?.sessionId || null,\n      sessions: Array.from(global.__ternSecure.sessions.entries()),\n    }\n  }\n}\n\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBA,IAAI,OAAO,OAAO,iBAAiB,aAAa;AAC5C,SAAO,eAAe;AAAA,IACpB,SAAS;AAAA,IACT,UAAU,oBAAI,IAAI;AAAA,EACpB;AACF,UAAQ,IAAI,wCAAwC;AACtD;AAEO,MAAM,aAAa;AAAA,EACxB,OAAO,WAAW,SAAyB;AACzC,YAAQ,IAAI,kCAAkC,OAAO;AACrD,WAAO,aAAa,UAAU;AAC9B,YAAQ,IAAI,wCAAwC;AAAA,EACtD;AAAA,EAEA,OAAO,aAAoC;AACzC,UAAM,UAAU,OAAO,aAAa;AACpC,YAAQ,IAAI,kCAAkC,OAAO;AACrD,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,WAAW,WAAmB,MAAgB;AACnD,YAAQ,IAAI,kCAAkC,EAAE,WAAW,KAAK,CAAC;AACjE,WAAO,aAAa,SAAS,IAAI,WAAW,IAAI;AAChD,YAAQ,IAAI,wCAAwC;AAAA,EACtD;AAAA,EAEA,OAAO,WAAW,WAAoC;AACpD,UAAM,OAAO,OAAO,aAAa,SAAS,IAAI,SAAS,KAAK;AAC5D,YAAQ,IAAI,kCAAkC,EAAE,WAAW,KAAK,CAAC;AACjE,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,QAAQ;AAjDjB;AAkDI,WAAO;AAAA,MACL,eAAe,OAAO,aAAa,SAAS;AAAA,MAC5C,oBAAkB,YAAO,aAAa,YAApB,mBAA6B,cAAa;AAAA,MAC5D,UAAU,MAAM,KAAK,OAAO,aAAa,SAAS,QAAQ,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;","names":[]}

package/dist/cjs/server/edge-session.js

@@ -26,47 +26,51 @@ async function verifySession(request) {
   var _a, _b, _c, _d, _e, _f;
   try {
     const sessionCookie = (_a = request.cookies.get("_session_cookie")) == null ? void 0 : _a.value;
+    const idToken = (_b = request.cookies.get("_session_token")) == null ? void 0 : _b.value;
     if (sessionCookie) {
       const result = await (0, import_jwt_edge.verifyFirebaseToken)(sessionCookie, true);
       if (result.valid) {
+        const user = {
+          uid: (_c = result.uid) != null ? _c : "",
+          email: result.email || null,
+          emailVerified: (_d = result.emailVerified) != null ? _d : false,
+          authTime: result.authTime
+        };
         return {
-          isAuthenticated: true,
-          user: {
-            uid: (_b = result.uid) != null ? _b : "",
-            email: result.email || null,
-            emailVerified: (_c = result.emailVerified) != null ? _c : false,
-            disabled: false
-          }
+          user,
+          token: sessionCookie,
+          sessionId: sessionCookie
         };
       }
-      console.log("Session cookie verification failed:", result.error);
     }
-    const idToken = (_d = request.cookies.get("_session_token")) == null ? void 0 : _d.value;
     if (idToken) {
       const result = await (0, import_jwt_edge.verifyFirebaseToken)(idToken, false);
       if (result.valid) {
+        const user = {
+          uid: (_e = result.uid) != null ? _e : "",
+          email: result.email || null,
+          emailVerified: (_f = result.emailVerified) != null ? _f : false,
+          authTime: result.authTime
+        };
         return {
-          isAuthenticated: true,
-          user: {
-            uid: (_e = result.uid) != null ? _e : "",
-            email: result.email || null,
-            emailVerified: (_f = result.emailVerified) != null ? _f : false,
-            disabled: false
-          }
+          user,
+          token: idToken,
+          sessionId: idToken
         };
       }
-      console.log("ID token verification failed:", result.error);
     }
     return {
-      isAuthenticated: false,
       user: null,
+      token: null,
+      sessionId: null,
       error: "No valid session found"
     };
   } catch (error) {
     console.error("Session verification error:", error);
     return {
-      isAuthenticated: false,
       user: null,
+      token: null,
+      sessionId: null,
       error: error instanceof Error ? error.message : "Session verification failed"
     };
   }