@tern-secure/nextjs 5.0.0 → 5.1.0

package/dist/cjs/app-router/admin/index.js

@@ -20,14 +20,17 @@ var admin_exports = {};
 __export(admin_exports, {
   clearSessionCookie: () => import_backend.clearSessionCookie,
   createSessionCookie: () => import_backend.createSessionCookie,
+  createSessionHandler: () => import_sessionHandler.createSessionHandler,
   verifyTernSessionCookie: () => import_backend.verifyTernSessionCookie
 });
 module.exports = __toCommonJS(admin_exports);
 var import_backend = require("@tern-secure/backend");
+var import_sessionHandler = require("./sessionHandler");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   clearSessionCookie,
   createSessionCookie,
+  createSessionHandler,
   verifyTernSessionCookie
 });
 //# sourceMappingURL=index.js.map

package/dist/cjs/app-router/admin/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/admin/index.ts"],"sourcesContent":["export { \r\n    verifyTernSessionCookie, \r\n    createSessionCookie, \r\n    clearSessionCookie,\r\n} from '@tern-secure/backend'"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAIO;","names":[]}
+{"version":3,"sources":["../../../../src/app-router/admin/index.ts"],"sourcesContent":["export { \r\n    verifyTernSessionCookie, \r\n    createSessionCookie, \r\n    clearSessionCookie,\r\n} from '@tern-secure/backend'\r\n\r\nexport { createSessionHandler } from './sessionHandler'"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAIO;AAEP,4BAAqC;","names":[]}

package/dist/cjs/app-router/admin/sessionHandler.js

@@ -0,0 +1,74 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var sessionHandler_exports = {};
+__export(sessionHandler_exports, {
+  createSessionHandler: () => createSessionHandler
+});
+module.exports = __toCommonJS(sessionHandler_exports);
+var import_server = require("next/server");
+var import_backend = require("@tern-secure/backend");
+async function createSessionHandler(request) {
+  try {
+    const body = await request.json();
+    const { idToken, csrfToken } = body;
+    if (!idToken) {
+      return import_server.NextResponse.json(
+        {
+          success: false,
+          message: "ID token is required",
+          error: "INVALID_TOKEN"
+        },
+        { status: 400 }
+      );
+    }
+    if (!csrfToken) {
+      return import_server.NextResponse.json(
+        {
+          success: false,
+          message: "CSRF token is required",
+          error: "INVALID_CSRF_TOKEN"
+        },
+        { status: 400 }
+      );
+    }
+    const res = await (0, import_backend.createSessionCookie)(idToken);
+    if (!res.success) {
+      console.error("[createSessionHandler] Error creating session cookie:", {
+        error: res.error,
+        message: res.message,
+        cookieSet: res.cookieSet
+      });
+    }
+    const statusCode = res.success ? 200 : res.error === "INVALID_TOKEN" ? 400 : res.error === "EXPIRED_TOKEN" ? 401 : 500;
+    return import_server.NextResponse.json(res, { status: statusCode });
+  } catch (error) {
+    return import_server.NextResponse.json(
+      {
+        success: false,
+        message: "Invalid request format"
+      },
+      { status: 400 }
+    );
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createSessionHandler
+});
+//# sourceMappingURL=sessionHandler.js.map

package/dist/cjs/app-router/admin/sessionHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/app-router/admin/sessionHandler.ts"],"sourcesContent":["import { NextRequest, NextResponse } from \"next/server\"\nimport { createSessionCookie } from \"@tern-secure/backend\"\n\nexport async function createSessionHandler(request: NextRequest): Promise<NextResponse> {\n    try {\n        const body = await request.json()\n        const { idToken, csrfToken } = body\n\n        if (!idToken) {\n            return NextResponse.json(\n                {\n                    success: false, \n                    message: 'ID token is required', \n                    error: 'INVALID_TOKEN'\n                },\n                { status: 400 }\n            );\n        }\n\n        if (!csrfToken) {\n            return NextResponse.json(\n                {\n                    success: false, \n                    message: 'CSRF token is required', \n                    error: 'INVALID_CSRF_TOKEN'\n                },\n                { status: 400 }\n            );\n        }\n\n        const res = await createSessionCookie(idToken);\n\n        if (!res.success) {\n            console.error('[createSessionHandler] Error creating session cookie:', {\n                error: res.error,\n                message: res.message,\n                cookieSet: res.cookieSet\n            });\n        }\n\n        const statusCode = res.success ? 200 : \n                           res.error === 'INVALID_TOKEN' ? 400 :\n                            res.error === 'EXPIRED_TOKEN' ? 401 : 500;\n\n        return NextResponse.json(res, { status: statusCode })\n\n    } catch (error) {\n        return NextResponse.json(\n            {\n                success: false,\n                message: 'Invalid request format'\n            },\n            { status: 400 }\n        )\n    }\n}"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAA0C;AAC1C,qBAAoC;AAEpC,eAAsB,qBAAqB,SAA6C;AACpF,MAAI;AACA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,UAAM,EAAE,SAAS,UAAU,IAAI;AAE/B,QAAI,CAAC,SAAS;AACV,aAAO,2BAAa;AAAA,QAChB;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,UACT,OAAO;AAAA,QACX;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAClB;AAAA,IACJ;AAEA,QAAI,CAAC,WAAW;AACZ,aAAO,2BAAa;AAAA,QAChB;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,UACT,OAAO;AAAA,QACX;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,MAAM,UAAM,oCAAoB,OAAO;AAE7C,QAAI,CAAC,IAAI,SAAS;AACd,cAAQ,MAAM,yDAAyD;AAAA,QACnE,OAAO,IAAI;AAAA,QACX,SAAS,IAAI;AAAA,QACb,WAAW,IAAI;AAAA,MACnB,CAAC;AAAA,IACL;AAEA,UAAM,aAAa,IAAI,UAAU,MACd,IAAI,UAAU,kBAAkB,MAC/B,IAAI,UAAU,kBAAkB,MAAM;AAE1D,WAAO,2BAAa,KAAK,KAAK,EAAE,QAAQ,WAAW,CAAC;AAAA,EAExD,SAAS,OAAO;AACZ,WAAO,2BAAa;AAAA,MAChB;AAAA,QACI,SAAS;AAAA,QACT,SAAS;AAAA,MACb;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAClB;AAAA,EACJ;AACJ;","names":[]}

package/dist/cjs/app-router/client/TernSecureProvider.js

@@ -26,10 +26,10 @@ var import_react2 = require("@tern-secure/react");
 var import_allNextProviderProps = require("../../utils/allNextProviderProps");
 var import_tern_ui_script = require("../../utils/tern-ui-script");
 function TernSecureProvider(props) {
-  const { children, ...nextProps } = props;
+  const { children, enableServiceWorker, ...nextProps } = props;
   const providerProps = (0, import_allNextProviderProps.allNextProviderPropsWithEnv)(nextProps);
   return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_react2.TernSecureProvider, { ...providerProps, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_tern_ui_script.TernUIScript, {}),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_tern_ui_script.TernUIScript, { router: "app" }),
     children
   ] });
 }

package/dist/cjs/app-router/client/TernSecureProvider.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/client/TernSecureProvider.tsx"],"sourcesContent":["import React from \"react\"\r\nimport { \r\n  TernSecureProvider as TernSecureReactProvider \r\n} from \"@tern-secure/react\"\r\nimport type { TernSecureNextProps } from \"../../types\"\r\nimport { allNextProviderPropsWithEnv } from \"../../utils/allNextProviderProps\"\r\nimport { TernUIScript } from \"../../utils/tern-ui-script\";\r\n\r\n\r\n\r\n// Loading fallback component\r\n/*function TernSecureLoadingFallback() {\r\n  return (\r\n    <div>\r\n      <span className=\"sr-only\">Loading...</span>\r\n    </div>\r\n  )\r\n}*/\r\n/**\r\n * Root Provider for TernSecure\r\n * Use this in your Next.js App Router root layout\r\n * Automatically handles client/server boundary and authentication state\r\n * \r\n * @example\r\n * /// app/layout.tsx\r\n * import { TernSecureProvider } from '@tern/secure'\r\n * \r\n * export default function RootLayout({ children }) {\r\n *   return (\r\n *     <html>\r\n *       <body>\r\n *         <TernSecureProvider>\r\n *           {children}\r\n *         </TernSecureProvider>\r\n *       </body>\r\n *     </html>\r\n *   )\r\n * }\r\n */\r\nexport function TernSecureProvider(props: React.PropsWithChildren<TernSecureNextProps>) {\r\n  const {children, ...nextProps } = props;\r\n  const providerProps = allNextProviderPropsWithEnv(nextProps);\r\n  return (\r\n    <TernSecureReactProvider {...providerProps}>\r\n      <TernUIScript />\r\n        {children}\r\n    </TernSecureReactProvider>\r\n  )\r\n}"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA2CI;AA1CJ,IAAAA,gBAEO;AAEP,kCAA4C;AAC5C,4BAA6B;AAiCtB,SAAS,mBAAmB,OAAqD;AACtF,QAAM,EAAC,UAAU,GAAG,UAAU,IAAI;AAClC,QAAM,oBAAgB,yDAA4B,SAAS;AAC3D,SACE,6CAAC,cAAAC,oBAAA,EAAyB,GAAG,eAC3B;AAAA,gDAAC,sCAAa;AAAA,IACX;AAAA,KACL;AAEJ;","names":["import_react","TernSecureReactProvider"]}
+{"version":3,"sources":["../../../../src/app-router/client/TernSecureProvider.tsx"],"sourcesContent":["import React from \"react\"\r\nimport { \r\n  TernSecureProvider as TernSecureReactProvider \r\n} from \"@tern-secure/react\"\r\nimport type { TernSecureNextProps } from \"../../types\"\r\nimport { allNextProviderPropsWithEnv } from \"../../utils/allNextProviderProps\"\r\nimport { TernUIScript } from \"../../utils/tern-ui-script\";\r\n\r\n\r\n\r\n// Loading fallback component\r\n/*function TernSecureLoadingFallback() {\r\n  return (\r\n    <div>\r\n      <span className=\"sr-only\">Loading...</span>\r\n    </div>\r\n  )\r\n}*/\r\n/**\r\n * Root Provider for TernSecure\r\n * Use this in your Next.js App Router root layout\r\n * Automatically handles client/server boundary and authentication state\r\n * \r\n * @example\r\n * /// app/layout.tsx\r\n * import { TernSecureProvider } from '@tern/secure'\r\n * \r\n * export default function RootLayout({ children }) {\r\n *   return (\r\n *     <html>\r\n *       <body>\r\n *         <TernSecureProvider>\r\n *           {children}\r\n *         </TernSecureProvider>\r\n *       </body>\r\n *     </html>\r\n *   )\r\n * }\r\n */\r\nexport function TernSecureProvider(props: React.PropsWithChildren<TernSecureNextProps>) {\r\n  const {children, enableServiceWorker, ...nextProps } = props;\r\n  const providerProps = allNextProviderPropsWithEnv(nextProps);\r\n  return (\r\n    <TernSecureReactProvider {...providerProps}>\r\n      <TernUIScript router='app' />\r\n        {children}\r\n    </TernSecureReactProvider>\r\n  )\r\n}"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA2CI;AA1CJ,IAAAA,gBAEO;AAEP,kCAA4C;AAC5C,4BAA6B;AAiCtB,SAAS,mBAAmB,OAAqD;AACtF,QAAM,EAAC,UAAU,qBAAqB,GAAG,UAAU,IAAI;AACvD,QAAM,oBAAgB,yDAA4B,SAAS;AAC3D,SACE,6CAAC,cAAAC,oBAAA,EAAyB,GAAG,eAC3B;AAAA,gDAAC,sCAAa,QAAO,OAAM;AAAA,IACxB;AAAA,KACL;AAEJ;","names":["import_react","TernSecureReactProvider"]}

package/dist/cjs/server/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/auth.ts"],"sourcesContent":["import { cache } from \"react\"\r\nimport { cookies } from \"next/headers\"\r\nimport type { User } from \"./types\"\r\nimport { verifyFirebaseToken } from \"./jwt-edge\"\r\nimport { TernSecureError } from \"../errors\"\r\n\r\n\r\n\r\nexport interface AuthResult {\r\n  user: User | null\r\n  error: Error | null\r\n}\r\n\r\n  /**\r\n   * Get the current authenticated user from the session or token\r\n   */\r\nexport const auth = cache(async (): Promise<AuthResult> => {\r\n  try {\r\n    // Get all active sessions for debugging\r\n   console.log(\"auth: Starting auth check...\")\r\n   const cookieStore = await cookies()\r\n\r\n    // First try session cookie as it's more secure\r\n    const sessionCookie = cookieStore.get(\"_session_cookie\")?.value\r\n    if (sessionCookie) {\r\n      const result = await verifyFirebaseToken(sessionCookie, true)\r\n      if (result.valid) {\r\n        const user: User = {\r\n          uid: result.uid ?? '',\r\n          email: result.email || null,\r\n          authTime: result.authTime\r\n        }\r\n        return { user, error: null }\r\n      }\r\n    }\r\n\r\n    // Fallback to ID token\r\n    const idToken = cookieStore.get(\"_session_token\")?.value\r\n    if (idToken) {\r\n      const result = await verifyFirebaseToken(idToken, false)\r\n      if (result.valid) {\r\n        const user: User = {\r\n          uid: result.uid ?? '',\r\n          email: result.email || null,\r\n          authTime: result.authTime\r\n        }\r\n        return { user, error: null }\r\n      }\r\n    }\r\n\r\n      return {\r\n          user: null,\r\n          error: new TernSecureError('UNAUTHENTICATED', 'No valid session found')\r\n      }\r\n\r\n    } catch (error) {\r\n      console.error(\"Error in Auth:\", error)\r\n      if (error instanceof TernSecureError) {\r\n        return {\r\n          user: null,\r\n          error\r\n        }\r\n      }\r\n      return {\r\n        user: null,\r\n        error: new TernSecureError('INTERNAL_ERROR', 'An unexpected error occurred')\r\n      }\r\n    }\r\n  })\r\n\r\n/**\r\n * Type guard to check if user is authenticated\r\n */\r\nexport const isAuthenticated = cache(async (): Promise<boolean>  => {\r\n  const { user } = await auth()\r\n  return user !== null\r\n})\r\n\r\n/**\r\n * Get user info from auth result\r\n */\r\nexport const getUser = cache(async (): Promise<User | null> => {\r\n  const { user } = await auth()\r\n  return user\r\n})\r\n\r\n/**\r\n * Require authentication\r\n * Throws error if not authenticated\r\n */\r\nexport const requireAuth = cache(async (): Promise<User> => {\r\n  const { user, error } = await auth()\r\n\r\n  if (!user) {\r\n    throw error || new Error(\"Authentication required\")\r\n  }\r\n\r\n  return user\r\n})"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAsB;AACtB,qBAAwB;AAExB,sBAAoC;AACpC,oBAAgC;AAYzB,MAAM,WAAO,oBAAM,YAAiC;AACzD,MAAI;AAEH,YAAQ,IAAI,8BAA8B;AAC1C,UAAM,cAAc,UAAM,wBAAQ;AAGjC,UAAM,gBAAgB,YAAY,IAAI,iBAAiB,GAAG;AAC1D,QAAI,eAAe;AACjB,YAAM,SAAS,UAAM,qCAAoB,eAAe,IAAI;AAC5D,UAAI,OAAO,OAAO;AAChB,cAAM,OAAa;AAAA,UACjB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AACA,eAAO,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAGA,UAAM,UAAU,YAAY,IAAI,gBAAgB,GAAG;AACnD,QAAI,SAAS;AACX,YAAM,SAAS,UAAM,qCAAoB,SAAS,KAAK;AACvD,UAAI,OAAO,OAAO;AAChB,cAAM,OAAa;AAAA,UACjB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AACA,eAAO,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAEE,WAAO;AAAA,MACH,MAAM;AAAA,MACN,OAAO,IAAI,8BAAgB,mBAAmB,wBAAwB;AAAA,IAC1E;AAAA,EAEF,SAAS,OAAO;AACd,YAAQ,MAAM,kBAAkB,KAAK;AACrC,QAAI,iBAAiB,+BAAiB;AACpC,aAAO;AAAA,QACL,MAAM;AAAA,QACN;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO,IAAI,8BAAgB,kBAAkB,8BAA8B;AAAA,IAC7E;AAAA,EACF;AACF,CAAC;AAKI,MAAM,sBAAkB,oBAAM,YAA+B;AAClE,QAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAC5B,SAAO,SAAS;AAClB,CAAC;AAKM,MAAM,cAAU,oBAAM,YAAkC;AAC7D,QAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAC5B,SAAO;AACT,CAAC;AAMM,MAAM,kBAAc,oBAAM,YAA2B;AAC1D,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,KAAK;AAEnC,MAAI,CAAC,MAAM;AACT,UAAM,SAAS,IAAI,MAAM,yBAAyB;AAAA,EACpD;AAEA,SAAO;AACT,CAAC;","names":[]}
+{"version":3,"sources":["../../../src/server/auth.ts"],"sourcesContent":["import { cache } from \"react\"\r\nimport { cookies } from \"next/headers\"\r\nimport type { UserInfo } from \"./types\"\r\nimport { verifyFirebaseToken } from \"./jwt-edge\"\r\nimport { TernSecureError } from \"../errors\"\r\n\r\n\r\n\r\nexport interface AuthResult {\r\n  user: UserInfo | null\r\n  error: Error | null\r\n}\r\n\r\n  /**\r\n   * Get the current authenticated user from the session or token\r\n   */\r\nexport const auth = cache(async (): Promise<AuthResult> => {\r\n  try {\r\n    // Get all active sessions for debugging\r\n   console.log(\"auth: Starting auth check...\")\r\n   const cookieStore = await cookies()\r\n\r\n    // First try session cookie as it's more secure\r\n    const sessionCookie = cookieStore.get(\"_session_cookie\")?.value\r\n    if (sessionCookie) {\r\n      const result = await verifyFirebaseToken(sessionCookie, true)\r\n      if (result.valid) {\r\n        const user: UserInfo = {\r\n          uid: result.uid ?? '',\r\n          email: result.email || null,\r\n          authTime: result.authTime\r\n        }\r\n        return { user, error: null }\r\n      }\r\n    }\r\n\r\n    // Fallback to ID token\r\n    const idToken = cookieStore.get(\"_session_token\")?.value\r\n    if (idToken) {\r\n      const result = await verifyFirebaseToken(idToken, false)\r\n      if (result.valid) {\r\n        const user: UserInfo = {\r\n          uid: result.uid ?? '',\r\n          email: result.email || null,\r\n          authTime: result.authTime\r\n        }\r\n        return { user, error: null }\r\n      }\r\n    }\r\n\r\n      return {\r\n          user: null,\r\n          error: new TernSecureError('UNAUTHENTICATED', 'No valid session found')\r\n      }\r\n\r\n    } catch (error) {\r\n      console.error(\"Error in Auth:\", error)\r\n      if (error instanceof TernSecureError) {\r\n        return {\r\n          user: null,\r\n          error\r\n        }\r\n      }\r\n      return {\r\n        user: null,\r\n        error: new TernSecureError('INTERNAL_ERROR', 'An unexpected error occurred')\r\n      }\r\n    }\r\n  })\r\n\r\n/**\r\n * Type guard to check if user is authenticated\r\n */\r\nexport const isAuthenticated = cache(async (): Promise<boolean>  => {\r\n  const { user } = await auth()\r\n  return user !== null\r\n})\r\n\r\n/**\r\n * Get user info from auth result\r\n */\r\nexport const getUser = cache(async (): Promise<UserInfo | null> => {\r\n  const { user } = await auth()\r\n  return user\r\n})\r\n\r\n/**\r\n * Require authentication\r\n * Throws error if not authenticated\r\n */\r\nexport const requireAuth = cache(async (): Promise<UserInfo> => {\r\n  const { user, error } = await auth()\r\n\r\n  if (!user) {\r\n    throw error || new Error(\"Authentication required\")\r\n  }\r\n\r\n  return user\r\n})"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAsB;AACtB,qBAAwB;AAExB,sBAAoC;AACpC,oBAAgC;AAYzB,MAAM,WAAO,oBAAM,YAAiC;AACzD,MAAI;AAEH,YAAQ,IAAI,8BAA8B;AAC1C,UAAM,cAAc,UAAM,wBAAQ;AAGjC,UAAM,gBAAgB,YAAY,IAAI,iBAAiB,GAAG;AAC1D,QAAI,eAAe;AACjB,YAAM,SAAS,UAAM,qCAAoB,eAAe,IAAI;AAC5D,UAAI,OAAO,OAAO;AAChB,cAAM,OAAiB;AAAA,UACrB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AACA,eAAO,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAGA,UAAM,UAAU,YAAY,IAAI,gBAAgB,GAAG;AACnD,QAAI,SAAS;AACX,YAAM,SAAS,UAAM,qCAAoB,SAAS,KAAK;AACvD,UAAI,OAAO,OAAO;AAChB,cAAM,OAAiB;AAAA,UACrB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,UAAU,OAAO;AAAA,QACnB;AACA,eAAO,EAAE,MAAM,OAAO,KAAK;AAAA,MAC7B;AAAA,IACF;AAEE,WAAO;AAAA,MACH,MAAM;AAAA,MACN,OAAO,IAAI,8BAAgB,mBAAmB,wBAAwB;AAAA,IAC1E;AAAA,EAEF,SAAS,OAAO;AACd,YAAQ,MAAM,kBAAkB,KAAK;AACrC,QAAI,iBAAiB,+BAAiB;AACpC,aAAO;AAAA,QACL,MAAM;AAAA,QACN;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO,IAAI,8BAAgB,kBAAkB,8BAA8B;AAAA,IAC7E;AAAA,EACF;AACF,CAAC;AAKI,MAAM,sBAAkB,oBAAM,YAA+B;AAClE,QAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAC5B,SAAO,SAAS;AAClB,CAAC;AAKM,MAAM,cAAU,oBAAM,YAAsC;AACjE,QAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAC5B,SAAO;AACT,CAAC;AAMM,MAAM,kBAAc,oBAAM,YAA+B;AAC9D,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,KAAK;AAEnC,MAAI,CAAC,MAAM;AACT,UAAM,SAAS,IAAI,MAAM,yBAAyB;AAAA,EACpD;AAEA,SAAO;AACT,CAAC;","names":[]}

package/dist/cjs/server/edge-session.js

@@ -33,12 +33,12 @@ async function verifySession(request) {
           uid: result.uid ?? "",
           email: result.email || null,
           emailVerified: result.emailVerified ?? false,
+          disabled: false,
           authTime: result.authTime
         };
         return {
-          user,
-          token: sessionCookie,
-          sessionId: sessionCookie
+          isAuthenticated: true,
+          user
         };
       }
     }
@@ -49,27 +49,25 @@ async function verifySession(request) {
           uid: result.uid ?? "",
           email: result.email || null,
           emailVerified: result.emailVerified ?? false,
+          disabled: false,
           authTime: result.authTime
         };
         return {
-          user,
-          token: idToken,
-          sessionId: idToken
+          isAuthenticated: true,
+          user
         };
       }
     }
     return {
+      isAuthenticated: false,
       user: null,
-      token: null,
-      sessionId: null,
       error: "No valid session found"
     };
   } catch (error) {
     console.error("Session verification error:", error);
     return {
+      isAuthenticated: false,
       user: null,
-      token: null,
-      sessionId: null,
       error: error instanceof Error ? error.message : "Session verification failed"
     };
   }

package/dist/cjs/server/edge-session.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/edge-session.ts"],"sourcesContent":["import { verifyFirebaseToken } from \"./jwt-edge\"\r\nimport type { NextRequest } from \"next/server\"\r\nimport type { SessionResult, User } from \"./types\"\r\n\r\n\r\n\r\nexport async function verifySession(request: NextRequest): Promise<SessionResult> {\r\n  try {\r\n    //const cookieStore = await cookies()\r\n\r\n    // First try session cookie\r\n\r\n    const sessionCookie = request.cookies.get(\"_session_cookie\")?.value\r\n    const idToken = request.cookies.get(\"_session_token\")?.value\r\n\r\n    //const sessionCookie = request.cookies.get(\"_session_cookie\")?.value\r\n    if (sessionCookie) {\r\n      const result = await verifyFirebaseToken(sessionCookie, true)\r\n      if (result.valid) {\r\n          const user: User = {\r\n            uid: result.uid ?? '',\r\n            email: result.email || null,\r\n            emailVerified: result.emailVerified ?? false,\r\n            authTime: result.authTime,\r\n        }\r\n\r\n        return {\r\n          user,\r\n          token: sessionCookie,\r\n          sessionId: sessionCookie,\r\n        }\r\n      }\r\n    }\r\n\r\n    // Then try ID token\r\n    //const idToken = request.cookies.get(\"_session_token\")?.value\r\n    if (idToken) {\r\n      const result = await verifyFirebaseToken(idToken, false)\r\n      if (result.valid) {\r\n        const user: User =  {\r\n            uid: result.uid ?? '',\r\n            email: result.email || null,\r\n            emailVerified: result.emailVerified ?? false,\r\n            authTime: result.authTime,\r\n        }\r\n\r\n\r\n        return {\r\n          user,\r\n          token: idToken,\r\n          sessionId: idToken,\r\n        }\r\n      }\r\n    }\r\n\r\n    return {\r\n      user: null,\r\n      token: null,\r\n      sessionId: null,\r\n      error: \"No valid session found\",\r\n    }\r\n  } catch (error) {\r\n    console.error(\"Session verification error:\", error)\r\n    return {\r\n      user: null,\r\n      token: null,\r\n      sessionId: null,\r\n      error: error instanceof Error ? error.message : \"Session verification failed\",\r\n    }\r\n  }\r\n}"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sBAAoC;AAMpC,eAAsB,cAAc,SAA8C;AAChF,MAAI;AAKF,UAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB,GAAG;AAC9D,UAAM,UAAU,QAAQ,QAAQ,IAAI,gBAAgB,GAAG;AAGvD,QAAI,eAAe;AACjB,YAAM,SAAS,UAAM,qCAAoB,eAAe,IAAI;AAC5D,UAAI,OAAO,OAAO;AACd,cAAM,OAAa;AAAA,UACjB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,eAAe,OAAO,iBAAiB;AAAA,UACvC,UAAU,OAAO;AAAA,QACrB;AAEA,eAAO;AAAA,UACL;AAAA,UACA,OAAO;AAAA,UACP,WAAW;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAIA,QAAI,SAAS;AACX,YAAM,SAAS,UAAM,qCAAoB,SAAS,KAAK;AACvD,UAAI,OAAO,OAAO;AAChB,cAAM,OAAc;AAAA,UAChB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,eAAe,OAAO,iBAAiB;AAAA,UACvC,UAAU,OAAO;AAAA,QACrB;AAGA,eAAO;AAAA,UACL;AAAA,UACA,OAAO;AAAA,UACP,WAAW;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,OAAO;AAAA,IACT;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,+BAA+B,KAAK;AAClD,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/server/edge-session.ts"],"sourcesContent":["import { verifyFirebaseToken } from \"./jwt-edge\"\r\nimport type { NextRequest } from \"next/server\"\r\nimport type { SessionResult, UserInfo } from \"./types\"\r\n\r\n\r\n\r\nexport async function verifySession(request: NextRequest): Promise<SessionResult> {\r\n  try {\r\n    //const cookieStore = await cookies()\r\n\r\n    // First try session cookie\r\n\r\n    const sessionCookie = request.cookies.get(\"_session_cookie\")?.value\r\n    const idToken = request.cookies.get(\"_session_token\")?.value\r\n\r\n    //const sessionCookie = request.cookies.get(\"_session_cookie\")?.value\r\n    if (sessionCookie) {\r\n      const result = await verifyFirebaseToken(sessionCookie, true)\r\n      if (result.valid) {\r\n          const user: UserInfo = {\r\n            uid: result.uid ?? '',\r\n            email: result.email || null,\r\n            emailVerified: result.emailVerified ?? false,\r\n            disabled: false,\r\n            authTime: result.authTime,\r\n        }\r\n\r\n        return {\r\n          isAuthenticated: true,\r\n          user\r\n        }\r\n      }\r\n    }\r\n\r\n    // Then try ID token\r\n    //const idToken = request.cookies.get(\"_session_token\")?.value\r\n    if (idToken) {\r\n      const result = await verifyFirebaseToken(idToken, false)\r\n      if (result.valid) {\r\n        const user: UserInfo =  {\r\n            uid: result.uid ?? '',\r\n            email: result.email || null,\r\n            emailVerified: result.emailVerified ?? false,\r\n            disabled: false,\r\n            authTime: result.authTime,\r\n        }\r\n        \r\n        return {\r\n          isAuthenticated: true,\r\n          user\r\n        }\r\n      }\r\n    }\r\n\r\n    return {\r\n      isAuthenticated: false,\r\n      user: null,\r\n      error: \"No valid session found\"\r\n    }\r\n  } catch (error) {\r\n    console.error(\"Session verification error:\", error)\r\n    return {\r\n      isAuthenticated: false,\r\n      user: null,\r\n      error: error instanceof Error ? error.message : \"Session verification failed\",\r\n    }\r\n  }\r\n}"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sBAAoC;AAMpC,eAAsB,cAAc,SAA8C;AAChF,MAAI;AAKF,UAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB,GAAG;AAC9D,UAAM,UAAU,QAAQ,QAAQ,IAAI,gBAAgB,GAAG;AAGvD,QAAI,eAAe;AACjB,YAAM,SAAS,UAAM,qCAAoB,eAAe,IAAI;AAC5D,UAAI,OAAO,OAAO;AACd,cAAM,OAAiB;AAAA,UACrB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,eAAe,OAAO,iBAAiB;AAAA,UACvC,UAAU;AAAA,UACV,UAAU,OAAO;AAAA,QACrB;AAEA,eAAO;AAAA,UACL,iBAAiB;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAIA,QAAI,SAAS;AACX,YAAM,SAAS,UAAM,qCAAoB,SAAS,KAAK;AACvD,UAAI,OAAO,OAAO;AAChB,cAAM,OAAkB;AAAA,UACpB,KAAK,OAAO,OAAO;AAAA,UACnB,OAAO,OAAO,SAAS;AAAA,UACvB,eAAe,OAAO,iBAAiB;AAAA,UACvC,UAAU;AAAA,UACV,UAAU,OAAO;AAAA,QACrB;AAEA,eAAO;AAAA,UACL,iBAAiB;AAAA,UACjB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,iBAAiB;AAAA,MACjB,MAAM;AAAA,MACN,OAAO;AAAA,IACT;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,+BAA+B,KAAK;AAClD,WAAO;AAAA,MACL,iBAAiB;AAAA,MACjB,MAAM;AAAA,MACN,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD;AAAA,EACF;AACF;","names":[]}

package/dist/cjs/server/ternSecureMiddleware.js

@@ -24,45 +24,63 @@ __export(ternSecureMiddleware_exports, {
 });
 module.exports = __toCommonJS(ternSecureMiddleware_exports);
 var import_server = require("next/server");
+var import_edge_session = require("./edge-session");
 const runtime = "edge";
 function createRouteMatcher(patterns) {
   return (request) => {
     const { pathname } = request.nextUrl;
     return patterns.some((pattern) => {
-      const regexPattern = new RegExp(`^${pattern.replace(/\*/g, ".*").replace(/$$(.*)$$/, "(?:$1)?")}$`);
-      return regexPattern.test(pathname);
+      const regexPattern = pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").replace(/\\\*/g, ".*");
+      return new RegExp(`^${regexPattern}$`).test(pathname);
     });
   };
 }
-function ternSecureMiddleware(callback) {
-  return async function middleware(request) {
-    try {
-      const sessionCookie = request.cookies.get("_session_cookie");
-      const idToken = request.cookies.get("_session_token");
-      const hasCookies = !!sessionCookie || !!idToken;
-      const auth = {
-        user: null,
-        sessionId: null,
+async function edgeAuth(request) {
+  async function protect() {
+    throw new Error("Unauthorized access");
+  }
+  try {
+    const sessionResult = await (0, import_edge_session.verifySession)(request);
+    if (sessionResult.isAuthenticated && sessionResult.user) {
+      return {
+        user: sessionResult.user,
+        token: request.cookies.get("_session_cookie")?.value || request.cookies.get("_session_token")?.value || null,
         protect: async () => {
-          if (!hasCookies) {
-            const currentPath = request.nextUrl.pathname;
-            if (currentPath !== "/sign-in") {
-              const redirectUrl = new URL("/sign-in", request.url);
-              redirectUrl.searchParams.set("redirect", currentPath);
-              return import_server.NextResponse.redirect(redirectUrl);
-            }
-          }
         }
       };
-      if (callback) {
-        const result = await callback(auth, request);
-        if (result instanceof Response) {
-          return result;
+    }
+    return {
+      user: null,
+      token: null,
+      protect
+    };
+  } catch (error) {
+    console.error("Auth check error:", error instanceof Error ? error.message : "Unknown error");
+    return {
+      user: null,
+      token: null,
+      protect
+    };
+  }
+}
+function ternSecureMiddleware(callback) {
+  return async function middleware(request) {
+    try {
+      const auth = await edgeAuth(request);
+      try {
+        await callback(auth, request);
+        const response = import_server.NextResponse.next();
+        return response;
+      } catch (error) {
+        if (error instanceof Error && error.message === "Unauthorized access") {
+          const redirectUrl = new URL("/sign-in", request.url);
+          redirectUrl.searchParams.set("redirect", request.nextUrl.pathname);
+          return import_server.NextResponse.redirect(redirectUrl);
         }
+        throw error;
       }
-      return import_server.NextResponse.next();
     } catch (error) {
-      console.error("Middleware error:", error);
+      console.error("Middleware error:", error instanceof Error ? error.message : "Unknown error");
       const redirectUrl = new URL("/sign-in", request.url);
       return import_server.NextResponse.redirect(redirectUrl);
     }

package/dist/cjs/server/ternSecureMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/ternSecureMiddleware.ts"],"sourcesContent":["import { NextResponse, type NextMiddleware, type NextRequest } from 'next/server';\r\nimport type { User } from './types'\r\n\r\nexport const runtime = \"edge\"\r\n\r\ninterface Auth {\r\n  user: User | null\r\n  sessionId: string | null\r\n  protect: () => Promise<void | Response>\r\n}\r\n\r\ntype MiddlewareCallback = (\r\n  auth: Auth,\r\n  request: NextRequest\r\n) => Promise<void | Response>\r\n\r\n\r\n/**\r\n * Create a route matcher function for public paths\r\n */\r\nexport function createRouteMatcher(patterns: string[]) {\r\n  return (request: NextRequest): boolean => {\r\n    const { pathname } = request.nextUrl\r\n    return patterns.some((pattern) => {\r\n      // Convert route pattern to regex\r\n      const regexPattern = new RegExp(`^${pattern.replace(/\\*/g, \".*\").replace(/$$(.*)$$/, \"(?:$1)?\")}$`)\r\n      return regexPattern.test(pathname)\r\n    })\r\n  }\r\n}\r\n\r\n\r\n/**\r\n * Middleware factory that handles authentication and custom logic\r\n * @param customHandler Optional function for additional custom logic\r\n */\r\n\r\nexport function ternSecureMiddleware(callback?: MiddlewareCallback): NextMiddleware {\r\n  return async function middleware(request: NextRequest) {\r\n    try {\r\n\r\n      const sessionCookie = request.cookies.get(\"_session_cookie\")\r\n      const idToken = request.cookies.get(\"_session_token\")\r\n      const hasCookies = !!sessionCookie || !!idToken\r\n\r\n      const auth: Auth = {\r\n        user: null,\r\n        sessionId: null,\r\n        protect: async () => {\r\n          if (!hasCookies) {\r\n            const currentPath = request.nextUrl.pathname\r\n            if (currentPath !== '/sign-in') {\r\n              const redirectUrl = new URL('/sign-in', request.url)\r\n              redirectUrl.searchParams.set('redirect', currentPath)\r\n              return NextResponse.redirect(redirectUrl)\r\n            }\r\n          }\r\n        },\r\n      }\r\n\r\n    if (callback) {\r\n        const result = await callback(auth, request)\r\n        if (result instanceof Response) {\r\n          return result\r\n        }\r\n    }\r\n\r\n\r\n      // Continue to the next middleware or route handler\r\n      return  NextResponse.next()\r\n    } catch (error) {\r\n      console.error(\"Middleware error:\", error)\r\n      const redirectUrl = new URL(\"/sign-in\", request.url)\r\n      return NextResponse.redirect(redirectUrl)\r\n    }\r\n  }\r\n}"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAAoE;AAG7D,MAAM,UAAU;AAiBhB,SAAS,mBAAmB,UAAoB;AACrD,SAAO,CAAC,YAAkC;AACxC,UAAM,EAAE,SAAS,IAAI,QAAQ;AAC7B,WAAO,SAAS,KAAK,CAAC,YAAY;AAEhC,YAAM,eAAe,IAAI,OAAO,IAAI,QAAQ,QAAQ,OAAO,IAAI,EAAE,QAAQ,YAAY,SAAS,CAAC,GAAG;AAClG,aAAO,aAAa,KAAK,QAAQ;AAAA,IACnC,CAAC;AAAA,EACH;AACF;AAQO,SAAS,qBAAqB,UAA+C;AAClF,SAAO,eAAe,WAAW,SAAsB;AACrD,QAAI;AAEF,YAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,YAAM,UAAU,QAAQ,QAAQ,IAAI,gBAAgB;AACpD,YAAM,aAAa,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAExC,YAAM,OAAa;AAAA,QACjB,MAAM;AAAA,QACN,WAAW;AAAA,QACX,SAAS,YAAY;AACnB,cAAI,CAAC,YAAY;AACf,kBAAM,cAAc,QAAQ,QAAQ;AACpC,gBAAI,gBAAgB,YAAY;AAC9B,oBAAM,cAAc,IAAI,IAAI,YAAY,QAAQ,GAAG;AACnD,0BAAY,aAAa,IAAI,YAAY,WAAW;AACpD,qBAAO,2BAAa,SAAS,WAAW;AAAA,YAC1C;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAEF,UAAI,UAAU;AACV,cAAM,SAAS,MAAM,SAAS,MAAM,OAAO;AAC3C,YAAI,kBAAkB,UAAU;AAC9B,iBAAO;AAAA,QACT;AAAA,MACJ;AAIE,aAAQ,2BAAa,KAAK;AAAA,IAC5B,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,KAAK;AACxC,YAAM,cAAc,IAAI,IAAI,YAAY,QAAQ,GAAG;AACnD,aAAO,2BAAa,SAAS,WAAW;AAAA,IAC1C;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/server/ternSecureMiddleware.ts"],"sourcesContent":["import { type NextRequest, NextResponse } from 'next/server';\r\nimport { verifySession } from './edge-session'\r\nimport type { UserInfo } from \"./types\"\r\n\r\nexport const runtime = \"edge\"\r\n\r\ninterface Auth {\r\n  user: UserInfo | null\r\n  token: string | null\r\n  protect: () => Promise<void>\r\n}\r\n\r\ntype MiddlewareCallback = (\r\n  auth: Auth,\r\n  request: NextRequest\r\n) => Promise<void>\r\n\r\n\r\n/**\r\n * Create a route matcher function for public paths\r\n */\r\nexport function createRouteMatcher(patterns: string[]) {\r\n  return (request: NextRequest): boolean => {\r\n    const { pathname } = request.nextUrl\r\n    return patterns.some((pattern) => {\r\n      // Convert glob pattern to regex safely without dynamic evaluation\r\n      const regexPattern = pattern\r\n      .replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\")\r\n      .replace(/\\\\\\*/g, \".*\")\r\n      \r\n      return new RegExp(`^${regexPattern}$`).test(pathname)\r\n    })\r\n  }\r\n}\r\n\r\n\r\n/**\r\n * Edge-compatible auth check\r\n */\r\nasync function edgeAuth(request: NextRequest): Promise<Auth> {\r\n  async function protect() {\r\n    throw new Error(\"Unauthorized access\")\r\n  }\r\n\r\n  try {\r\n    const sessionResult = await verifySession(request)\r\n\r\n    if (sessionResult.isAuthenticated && sessionResult.user) {\r\n      return {\r\n        user: sessionResult.user,\r\n        token: request.cookies.get(\"_session_cookie\")?.value || request.cookies.get(\"_session_token\")?.value || null,\r\n        protect: async () => {},\r\n      }\r\n    }\r\n\r\n    return {\r\n      user: null,\r\n      token: null,\r\n      protect,\r\n    }\r\n  } catch (error) {\r\n    console.error(\"Auth check error:\", error instanceof Error ? error\r\n    .message : \"Unknown error\")\r\n    return {\r\n      user: null,\r\n      token: null,\r\n      protect,\r\n    }\r\n  }\r\n}\r\n\r\n\r\n\r\n/**\r\n * Middleware factory that handles authentication and custom logic\r\n * @param customHandler Optional function for additional custom logic\r\n */\r\n\r\nexport function ternSecureMiddleware(callback: MiddlewareCallback) {\r\n  return async function middleware(request: NextRequest) {\r\n    try {\r\n      const auth = await edgeAuth(request)\r\n\r\n      try {\r\n        \r\n        await callback(auth, request)\r\n\r\n        const response = NextResponse.next()\r\n\r\n\r\n        return response\r\n      } catch (error) {\r\n        // Handle unauthorized access\r\n        if (error instanceof Error && error.message === 'Unauthorized access') {\r\n          const redirectUrl = new URL(\"/sign-in\", request.url)\r\n          redirectUrl.searchParams.set(\"redirect\", request.nextUrl.pathname)\r\n          return NextResponse.redirect(redirectUrl)\r\n        }\r\n        throw error\r\n      }\r\n    } catch (error) {\r\n      console.error(\"Middleware error:\", error instanceof Error ? error.message : \"Unknown error\")\r\n      const redirectUrl = new URL(\"/sign-in\", request.url)\r\n      return NextResponse.redirect(redirectUrl)\r\n    }\r\n  }\r\n}"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAA+C;AAC/C,0BAA8B;AAGvB,MAAM,UAAU;AAiBhB,SAAS,mBAAmB,UAAoB;AACrD,SAAO,CAAC,YAAkC;AACxC,UAAM,EAAE,SAAS,IAAI,QAAQ;AAC7B,WAAO,SAAS,KAAK,CAAC,YAAY;AAEhC,YAAM,eAAe,QACpB,QAAQ,uBAAuB,MAAM,EACrC,QAAQ,SAAS,IAAI;AAEtB,aAAO,IAAI,OAAO,IAAI,YAAY,GAAG,EAAE,KAAK,QAAQ;AAAA,IACtD,CAAC;AAAA,EACH;AACF;AAMA,eAAe,SAAS,SAAqC;AAC3D,iBAAe,UAAU;AACvB,UAAM,IAAI,MAAM,qBAAqB;AAAA,EACvC;AAEA,MAAI;AACF,UAAM,gBAAgB,UAAM,mCAAc,OAAO;AAEjD,QAAI,cAAc,mBAAmB,cAAc,MAAM;AACvD,aAAO;AAAA,QACL,MAAM,cAAc;AAAA,QACpB,OAAO,QAAQ,QAAQ,IAAI,iBAAiB,GAAG,SAAS,QAAQ,QAAQ,IAAI,gBAAgB,GAAG,SAAS;AAAA,QACxG,SAAS,YAAY;AAAA,QAAC;AAAA,MACxB;AAAA,IACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,qBAAqB,iBAAiB,QAAQ,MAC3D,UAAU,eAAe;AAC1B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP;AAAA,IACF;AAAA,EACF;AACF;AASO,SAAS,qBAAqB,UAA8B;AACjE,SAAO,eAAe,WAAW,SAAsB;AACrD,QAAI;AACF,YAAM,OAAO,MAAM,SAAS,OAAO;AAEnC,UAAI;AAEF,cAAM,SAAS,MAAM,OAAO;AAE5B,cAAM,WAAW,2BAAa,KAAK;AAGnC,eAAO;AAAA,MACT,SAAS,OAAO;AAEd,YAAI,iBAAiB,SAAS,MAAM,YAAY,uBAAuB;AACrE,gBAAM,cAAc,IAAI,IAAI,YAAY,QAAQ,GAAG;AACnD,sBAAY,aAAa,IAAI,YAAY,QAAQ,QAAQ,QAAQ;AACjE,iBAAO,2BAAa,SAAS,WAAW;AAAA,QAC1C;AACA,cAAM;AAAA,MACR;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,qBAAqB,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAC3F,YAAM,cAAc,IAAI,IAAI,YAAY,QAAQ,GAAG;AACnD,aAAO,2BAAa,SAAS,WAAW;AAAA,IAC1C;AAAA,EACF;AACF;","names":[]}

package/dist/cjs/server/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/types.ts"],"sourcesContent":["export interface User {\r\n    uid: string\r\n    email: string | null\r\n    emailVerified?: boolean\r\n    authTime?: number\r\n    disabled?: boolean\r\n}\r\n  \r\n  \r\n  export interface SessionResult {\r\n    user: User | null\r\n    token: string | null\r\n    sessionId: string | null\r\n    error?: string\r\n  }"],"mappings":";;;;;;;;;;;;;;AAAA;AAAA;","names":[]}
+{"version":3,"sources":["../../../src/server/types.ts"],"sourcesContent":["export interface User {\r\n    uid: string\r\n    email: string | null\r\n    emailVerified?: boolean\r\n    authTime?: number\r\n    disabled?: boolean\r\n}\r\n  \r\n\r\n\r\n  export interface UserInfo {\r\n    uid: string\r\n    email: string | null\r\n    emailVerified?: boolean\r\n    authTime?: number\r\n    disabled?: boolean\r\n  }\r\n  \r\n  export interface SessionUser {\r\n    uid: string\r\n    email: string | null\r\n    emailVerified: boolean\r\n    disabled?: boolean\r\n  }\r\n  \r\n  export interface SessionResult {\r\n    isAuthenticated: boolean\r\n    user: UserInfo | null\r\n    error?: string\r\n  }"],"mappings":";;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/dist/cjs/utils/admin-init.js

@@ -1,60 +1,4 @@
 "use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var admin_init_exports = {};
-__export(admin_init_exports, {
-  TernSecureTenantManager: () => TernSecureTenantManager,
-  adminTernSecureAuth: () => adminTernSecureAuth,
-  adminTernSecureDb: () => adminTernSecureDb
-});
-module.exports = __toCommonJS(admin_init_exports);
-var import_firebase_admin = __toESM(require("firebase-admin"));
-var import_config = require("./config");
-if (!import_firebase_admin.default.apps.length) {
-  try {
-    const config = (0, import_config.initializeAdminConfig)();
-    import_firebase_admin.default.initializeApp({
-      credential: import_firebase_admin.default.credential.cert({
-        ...config,
-        privateKey: config.privateKey.replace(/\\n/g, "\n")
-      })
-    });
-  } catch (error) {
-    console.error("Firebase admin initialization error", error);
-  }
+{
 }
-const adminTernSecureAuth = import_firebase_admin.default.auth();
-const adminTernSecureDb = import_firebase_admin.default.firestore();
-const TernSecureTenantManager = import_firebase_admin.default.auth().tenantManager();
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  TernSecureTenantManager,
-  adminTernSecureAuth,
-  adminTernSecureDb
-});
 //# sourceMappingURL=admin-init.js.map

package/dist/cjs/utils/admin-init.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/utils/admin-init.ts"],"sourcesContent":["import admin from 'firebase-admin';\r\nimport { initializeAdminConfig } from './config';\r\n\r\n// Initialize Firebase Admin if not already initialized\r\nif (!admin.apps.length) {\r\n  try {\r\n    const config = initializeAdminConfig();\r\n    admin.initializeApp({\r\n      credential: admin.credential.cert({\r\n        ...config,\r\n        privateKey: config.privateKey.replace(/\\\\n/g, '\\n'),\r\n      }),\r\n    });\r\n  } catch (error) {\r\n    console.error('Firebase admin initialization error', error);\r\n  }\r\n}\r\n\r\n// Add explicit type annotations using the types from the admin namespace\r\nexport const adminTernSecureAuth: admin.auth.Auth = admin.auth();\r\nexport const adminTernSecureDb: admin.firestore.Firestore = admin.firestore();\r\nexport const TernSecureTenantManager: admin.auth.TenantManager = admin.auth().tenantManager();"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4BAAkB;AAClB,oBAAsC;AAGtC,IAAI,CAAC,sBAAAA,QAAM,KAAK,QAAQ;AACtB,MAAI;AACF,UAAM,aAAS,qCAAsB;AACrC,0BAAAA,QAAM,cAAc;AAAA,MAClB,YAAY,sBAAAA,QAAM,WAAW,KAAK;AAAA,QAChC,GAAG;AAAA,QACH,YAAY,OAAO,WAAW,QAAQ,QAAQ,IAAI;AAAA,MACpD,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,uCAAuC,KAAK;AAAA,EAC5D;AACF;AAGO,MAAM,sBAAuC,sBAAAA,QAAM,KAAK;AACxD,MAAM,oBAA+C,sBAAAA,QAAM,UAAU;AACrE,MAAM,0BAAoD,sBAAAA,QAAM,KAAK,EAAE,cAAc;","names":["admin"]}
+{"version":3,"sources":["../../../src/utils/admin-init.ts"],"sourcesContent":["{/*import admin from 'firebase-admin';\r\nimport { initializeAdminConfig } from './config';\r\n\r\n// Initialize Firebase Admin if not already initialized\r\nif (!admin.apps.length) {\r\n  try {\r\n    const config = initializeAdminConfig();\r\n    admin.initializeApp({\r\n      credential: admin.credential.cert({\r\n        ...config,\r\n        privateKey: config.privateKey.replace(/\\\\n/g, '\\n'),\r\n      }),\r\n    });\r\n  } catch (error) {\r\n    console.error('Firebase admin initialization error', error);\r\n  }\r\n}\r\n\r\n// Add explicit type annotations using the types from the admin namespace\r\nexport const adminTernSecureAuth: admin.auth.Auth = admin.auth();\r\nexport const adminTernSecureDb: admin.firestore.Firestore = admin.firestore();\r\nexport const TernSecureTenantManager: admin.auth.TenantManager = admin.auth().tenantManager();*/}"],"mappings":";AAAA;AAqBgG;","names":[]}

package/dist/cjs/utils/allNextProviderProps.js

@@ -33,6 +33,8 @@ const allNextProviderPropsWithEnv = (nextProps) => {
     proxyUrl: propsProxyUrl,
     environment: propsEnvironment,
     requiresVerification: propsRequiresVerification,
+    isTernSecureDev: propsIsTernSecureDev,
+    enableServiceWorker: propsEnableServiceWorker,
     loadingComponent: propsLoadingComponent,
     ...baseProps
   } = nextProps;
@@ -45,7 +47,10 @@ const allNextProviderPropsWithEnv = (nextProps) => {
     signInUrl: process.env.NEXT_PUBLIC_SIGN_IN_URL,
     signUpUrl: process.env.NEXT_PUBLIC_SIGN_UP_URL,
     signInForceRedirectUrl: process.env.NEXT_PUBLIC_SIGN_IN_FORCE_REDIRECT_URL,
-    signUpForceRedirectUrl: process.env.NEXT_PUBLIC_SIGN_UP_FORCE_REDIRECT_URL
+    signUpForceRedirectUrl: process.env.NEXT_PUBLIC_SIGN_UP_FORCE_REDIRECT_URL,
+    projectIdAdmin: process.env.FIREBASE_PROJECT_ID,
+    clientEmail: process.env.FIREBASE_CLIENT_EMAIL,
+    privateKey: process.env.FIREBASE_PRIVATE_KEY
   };
   const ternSecureConfig = {
     apiKey: process.env.NEXT_PUBLIC_FIREBASE_API_KEY || "",
@@ -79,8 +84,9 @@ const allNextProviderPropsWithEnv = (nextProps) => {
     // Set properties explicitly taken from TernSecureNextProps (props version)
     // These are part of the TernSecureProviderProps interface.
     requiresVerification: propsRequiresVerification,
+    isTernSecureDev: propsIsTernSecureDev,
+    enableServiceWorker: propsEnableServiceWorker,
     loadingComponent: propsLoadingComponent,
-    ...propsRequiresVerification !== void 0 && { requireverification: propsRequiresVerification },
     //TernSecure: baseProps.Instance,
     initialState: baseProps.initialState,
     bypassApiKey: baseProps.bypassApiKey,

package/dist/cjs/utils/allNextProviderProps.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/utils/allNextProviderProps.ts"],"sourcesContent":["import type { TernSecureNextProps } from \"../types\";\nimport type { \n  TernSecureProviderProps, \n  IsomorphicTernSecureOptions \n} from \"@tern-secure/react\";\n\n// Helper type for the return value, as children are handled by the consuming component\ntype NextProviderProcessedProps = Omit<TernSecureProviderProps, 'children'>;\n\nexport const allNextProviderPropsWithEnv = (\n  nextProps: Omit<TernSecureNextProps, 'children'>\n): NextProviderProcessedProps => {\n  const {\n    signInUrl,\n    signUpUrl,\n    signInForceRedirectUrl: propsSignInForceRedirectUrl,\n    signUpForceRedirectUrl: propsSignUpForceRedirectUrl,\n    apiKey: propsApiKey,\n    projectId: propsProjectId,\n    customDomain: propsCustomDomain,\n    proxyUrl: propsProxyUrl,\n    environment: propsEnvironment,\n    requiresVerification: propsRequiresVerification,\n    loadingComponent: propsLoadingComponent,\n    ...baseProps \n  } = nextProps;\n\n  const envConfig = {\n    apiKey: process.env.NEXT_PUBLIC_TERN_API_KEY,\n    projectId: process.env.NEXT_PUBLIC_TERN_PROJECT_ID,\n    customDomain: process.env.NEXT_PUBLIC_TERN_CUSTOM_DOMAIN,\n    proxyUrl: process.env.NEXT_PUBLIC_TERN_PROXY_URL,\n    environment: process.env.NEXT_PUBLIC_TERN_ENVIRONMENT,\n    signInUrl: process.env.NEXT_PUBLIC_SIGN_IN_URL,\n    signUpUrl: process.env.NEXT_PUBLIC_SIGN_UP_URL,\n    signInForceRedirectUrl: process.env.NEXT_PUBLIC_SIGN_IN_FORCE_REDIRECT_URL,\n    signUpForceRedirectUrl: process.env.NEXT_PUBLIC_SIGN_UP_FORCE_REDIRECT_URL,\n  };\n\n  const ternSecureConfig = {\n    apiKey: process.env.NEXT_PUBLIC_FIREBASE_API_KEY || '',\n    authDomain: process.env.NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN || '',\n    appName: process.env.NEXT_PUBLIC_FIREBASE_APP_NAME || '',\n    projectId: process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID || '',\n    storageBucket: process.env.NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET || '',\n    messagingSenderId: process.env.NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID || '',\n    appId: process.env.NEXT_PUBLIC_FIREBASE_APP_ID || '',\n    measurementId: process.env.NEXT_PUBLIC_FIREBASE_MEASUREMENTID\n  };\n\n  // Merge config values: props take precedence over environment variables\n  const finalApiKey = propsApiKey ?? envConfig.apiKey;\n  const finalProjectId = propsProjectId ?? envConfig.projectId;\n  const finalCustomDomain = propsCustomDomain ?? envConfig.customDomain;\n  const finalProxyUrl = propsProxyUrl ?? envConfig.proxyUrl;\n  const finalEnvironment = propsEnvironment ?? envConfig.environment;\n  const finalSignInUrl = signInUrl ?? envConfig.signInUrl;\n  const finalSignUpUrl = signUpUrl ?? envConfig.signUpUrl;\n  const finalSignInForceRedirectUrl = propsSignInForceRedirectUrl ?? envConfig.signInForceRedirectUrl;\n  const finalSignUpForceRedirectUrl = propsSignUpForceRedirectUrl ?? envConfig.signUpForceRedirectUrl\n\n  // Construct the result, ensuring it conforms to NextProviderProcessedProps\n  // (Omit<TernSecureProviderProps, 'children'>)\n  const result: NextProviderProcessedProps = {\n    ...(baseProps as Omit<TernSecureProviderProps, 'children' | keyof IsomorphicTernSecureOptions | 'requiresVerification' | 'loadingComponent'>),\n    \n    // Set the merged/prioritized instance configuration properties\n    apiKey: finalApiKey,\n    projectId: finalProjectId,\n    customDomain: finalCustomDomain,\n    proxyUrl: finalProxyUrl,\n    environment: finalEnvironment,\n\n    // Set the Firebase configuration properties\n    ternSecureConfig,\n    \n    // Set properties explicitly taken from TernSecureNextProps (props version)\n    // These are part of the TernSecureProviderProps interface.\n    requiresVerification: propsRequiresVerification,\n    loadingComponent: propsLoadingComponent,\n    ...(propsRequiresVerification !== undefined && { requireverification: propsRequiresVerification }),\n\n    //TernSecure: baseProps.Instance,\n    initialState: baseProps.initialState,\n    bypassApiKey: baseProps.bypassApiKey,\n    initialSession: baseProps.initialSession,\n    defaultAppearance: baseProps.defaultAppearance,\n    signInUrl: finalSignInUrl,\n    signUpUrl: finalSignUpUrl,\n    signInForceRedirectUrl: finalSignInForceRedirectUrl,\n    signUpForceRedirectUrl: finalSignUpForceRedirectUrl,\n    mode: baseProps.mode,\n    onAuthStateChanged: baseProps.onAuthStateChanged,\n    onError: baseProps.onError,\n  };\n\n  // Clean up undefined keys that might have resulted from spreading if not present in baseProps\n  // and also not set by merged values (e.g. if env var is also undefined)\n  Object.keys(result).forEach(key => {\n    if (result[key as keyof NextProviderProcessedProps] === undefined) {\n      delete result[key as keyof NextProviderProcessedProps];\n    }\n  });\n\n  return result;\n};"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AASO,MAAM,8BAA8B,CACzC,cAC+B;AAC/B,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,wBAAwB;AAAA,IACxB,wBAAwB;AAAA,IACxB,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,cAAc;AAAA,IACd,UAAU;AAAA,IACV,aAAa;AAAA,IACb,sBAAsB;AAAA,IACtB,kBAAkB;AAAA,IAClB,GAAG;AAAA,EACL,IAAI;AAEJ,QAAM,YAAY;AAAA,IAChB,QAAQ,QAAQ,IAAI;AAAA,IACpB,WAAW,QAAQ,IAAI;AAAA,IACvB,cAAc,QAAQ,IAAI;AAAA,IAC1B,UAAU,QAAQ,IAAI;AAAA,IACtB,aAAa,QAAQ,IAAI;AAAA,IACzB,WAAW,QAAQ,IAAI;AAAA,IACvB,WAAW,QAAQ,IAAI;AAAA,IACvB,wBAAwB,QAAQ,IAAI;AAAA,IACpC,wBAAwB,QAAQ,IAAI;AAAA,EACtC;AAEA,QAAM,mBAAmB;AAAA,IACvB,QAAQ,QAAQ,IAAI,gCAAgC;AAAA,IACpD,YAAY,QAAQ,IAAI,oCAAoC;AAAA,IAC5D,SAAS,QAAQ,IAAI,iCAAiC;AAAA,IACtD,WAAW,QAAQ,IAAI,mCAAmC;AAAA,IAC1D,eAAe,QAAQ,IAAI,uCAAuC;AAAA,IAClE,mBAAmB,QAAQ,IAAI,4CAA4C;AAAA,IAC3E,OAAO,QAAQ,IAAI,+BAA+B;AAAA,IAClD,eAAe,QAAQ,IAAI;AAAA,EAC7B;AAGA,QAAM,cAAc,eAAe,UAAU;AAC7C,QAAM,iBAAiB,kBAAkB,UAAU;AACnD,QAAM,oBAAoB,qBAAqB,UAAU;AACzD,QAAM,gBAAgB,iBAAiB,UAAU;AACjD,QAAM,mBAAmB,oBAAoB,UAAU;AACvD,QAAM,iBAAiB,aAAa,UAAU;AAC9C,QAAM,iBAAiB,aAAa,UAAU;AAC9C,QAAM,8BAA8B,+BAA+B,UAAU;AAC7E,QAAM,8BAA8B,+BAA+B,UAAU;AAI7E,QAAM,SAAqC;AAAA,IACzC,GAAI;AAAA;AAAA,IAGJ,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,cAAc;AAAA,IACd,UAAU;AAAA,IACV,aAAa;AAAA;AAAA,IAGb;AAAA;AAAA;AAAA,IAIA,sBAAsB;AAAA,IACtB,kBAAkB;AAAA,IAClB,GAAI,8BAA8B,UAAa,EAAE,qBAAqB,0BAA0B;AAAA;AAAA,IAGhG,cAAc,UAAU;AAAA,IACxB,cAAc,UAAU;AAAA,IACxB,gBAAgB,UAAU;AAAA,IAC1B,mBAAmB,UAAU;AAAA,IAC7B,WAAW;AAAA,IACX,WAAW;AAAA,IACX,wBAAwB;AAAA,IACxB,wBAAwB;AAAA,IACxB,MAAM,UAAU;AAAA,IAChB,oBAAoB,UAAU;AAAA,IAC9B,SAAS,UAAU;AAAA,EACrB;AAIA,SAAO,KAAK,MAAM,EAAE,QAAQ,SAAO;AACjC,QAAI,OAAO,GAAuC,MAAM,QAAW;AACjE,aAAO,OAAO,GAAuC;AAAA,IACvD;AAAA,EACF,CAAC;AAED,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../src/utils/allNextProviderProps.ts"],"sourcesContent":["import type { TernSecureNextProps } from \"../types\";\nimport type { \n  TernSecureProviderProps, \n  IsomorphicTernSecureOptions \n} from \"@tern-secure/react\";\n\n// Helper type for the return value, as children are handled by the consuming component\ntype NextProviderProcessedProps = Omit<TernSecureProviderProps, 'children'>;\n\nexport const allNextProviderPropsWithEnv = (\n  nextProps: Omit<TernSecureNextProps, 'children'>\n): NextProviderProcessedProps => {\n  const {\n    signInUrl,\n    signUpUrl,\n    signInForceRedirectUrl: propsSignInForceRedirectUrl,\n    signUpForceRedirectUrl: propsSignUpForceRedirectUrl,\n    apiKey: propsApiKey,\n    projectId: propsProjectId,\n    customDomain: propsCustomDomain,\n    proxyUrl: propsProxyUrl,\n    environment: propsEnvironment,\n    requiresVerification: propsRequiresVerification,\n    isTernSecureDev: propsIsTernSecureDev,\n    enableServiceWorker: propsEnableServiceWorker,\n    loadingComponent: propsLoadingComponent,\n    ...baseProps \n  } = nextProps;\n\n  const envConfig = {\n    apiKey: process.env.NEXT_PUBLIC_TERN_API_KEY,\n    projectId: process.env.NEXT_PUBLIC_TERN_PROJECT_ID,\n    customDomain: process.env.NEXT_PUBLIC_TERN_CUSTOM_DOMAIN,\n    proxyUrl: process.env.NEXT_PUBLIC_TERN_PROXY_URL,\n    environment: process.env.NEXT_PUBLIC_TERN_ENVIRONMENT,\n    signInUrl: process.env.NEXT_PUBLIC_SIGN_IN_URL,\n    signUpUrl: process.env.NEXT_PUBLIC_SIGN_UP_URL,\n    signInForceRedirectUrl: process.env.NEXT_PUBLIC_SIGN_IN_FORCE_REDIRECT_URL,\n    signUpForceRedirectUrl: process.env.NEXT_PUBLIC_SIGN_UP_FORCE_REDIRECT_URL,\n    projectIdAdmin: process.env.FIREBASE_PROJECT_ID,\n    clientEmail: process.env.FIREBASE_CLIENT_EMAIL,\n    privateKey: process.env.FIREBASE_PRIVATE_KEY,\n  };\n\n  const ternSecureConfig = {\n    apiKey: process.env.NEXT_PUBLIC_FIREBASE_API_KEY || '',\n    authDomain: process.env.NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN || '',\n    appName: process.env.NEXT_PUBLIC_FIREBASE_APP_NAME || '',\n    projectId: process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID || '',\n    storageBucket: process.env.NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET || '',\n    messagingSenderId: process.env.NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID || '',\n    appId: process.env.NEXT_PUBLIC_FIREBASE_APP_ID || '',\n    measurementId: process.env.NEXT_PUBLIC_FIREBASE_MEASUREMENTID\n  };\n\n  // Merge config values: props take precedence over environment variables\n  const finalApiKey = propsApiKey ?? envConfig.apiKey;\n  const finalProjectId = propsProjectId ?? envConfig.projectId;\n  const finalCustomDomain = propsCustomDomain ?? envConfig.customDomain;\n  const finalProxyUrl = propsProxyUrl ?? envConfig.proxyUrl;\n  const finalEnvironment = propsEnvironment ?? envConfig.environment;\n  const finalSignInUrl = signInUrl ?? envConfig.signInUrl;\n  const finalSignUpUrl = signUpUrl ?? envConfig.signUpUrl;\n  const finalSignInForceRedirectUrl = propsSignInForceRedirectUrl ?? envConfig.signInForceRedirectUrl;\n  const finalSignUpForceRedirectUrl = propsSignUpForceRedirectUrl ?? envConfig.signUpForceRedirectUrl\n\n  // Construct the result, ensuring it conforms to NextProviderProcessedProps\n  // (Omit<TernSecureProviderProps, 'children'>)\n  const result: NextProviderProcessedProps = {\n    ...(baseProps as Omit<TernSecureProviderProps, 'children' | keyof IsomorphicTernSecureOptions | 'requiresVerification' | 'loadingComponent'>),\n    \n    // Set the merged/prioritized instance configuration properties\n    apiKey: finalApiKey,\n    projectId: finalProjectId,\n    customDomain: finalCustomDomain,\n    proxyUrl: finalProxyUrl,\n    environment: finalEnvironment,\n\n    // Set the Firebase configuration properties\n    ternSecureConfig,\n    \n    // Set properties explicitly taken from TernSecureNextProps (props version)\n    // These are part of the TernSecureProviderProps interface.\n    requiresVerification: propsRequiresVerification,\n    isTernSecureDev: propsIsTernSecureDev,\n    enableServiceWorker: propsEnableServiceWorker,\n    loadingComponent: propsLoadingComponent,\n\n    //TernSecure: baseProps.Instance,\n    initialState: baseProps.initialState,\n    bypassApiKey: baseProps.bypassApiKey,\n    initialSession: baseProps.initialSession,\n    defaultAppearance: baseProps.defaultAppearance,\n    signInUrl: finalSignInUrl,\n    signUpUrl: finalSignUpUrl,\n    signInForceRedirectUrl: finalSignInForceRedirectUrl,\n    signUpForceRedirectUrl: finalSignUpForceRedirectUrl,\n    mode: baseProps.mode,\n    onAuthStateChanged: baseProps.onAuthStateChanged,\n    onError: baseProps.onError,\n  };\n\n  // Clean up undefined keys that might have resulted from spreading if not present in baseProps\n  // and also not set by merged values (e.g. if env var is also undefined)\n  Object.keys(result).forEach(key => {\n    if (result[key as keyof NextProviderProcessedProps] === undefined) {\n      delete result[key as keyof NextProviderProcessedProps];\n    }\n  });\n\n  return result;\n};"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AASO,MAAM,8BAA8B,CACzC,cAC+B;AAC/B,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,wBAAwB;AAAA,IACxB,wBAAwB;AAAA,IACxB,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,cAAc;AAAA,IACd,UAAU;AAAA,IACV,aAAa;AAAA,IACb,sBAAsB;AAAA,IACtB,iBAAiB;AAAA,IACjB,qBAAqB;AAAA,IACrB,kBAAkB;AAAA,IAClB,GAAG;AAAA,EACL,IAAI;AAEJ,QAAM,YAAY;AAAA,IAChB,QAAQ,QAAQ,IAAI;AAAA,IACpB,WAAW,QAAQ,IAAI;AAAA,IACvB,cAAc,QAAQ,IAAI;AAAA,IAC1B,UAAU,QAAQ,IAAI;AAAA,IACtB,aAAa,QAAQ,IAAI;AAAA,IACzB,WAAW,QAAQ,IAAI;AAAA,IACvB,WAAW,QAAQ,IAAI;AAAA,IACvB,wBAAwB,QAAQ,IAAI;AAAA,IACpC,wBAAwB,QAAQ,IAAI;AAAA,IACpC,gBAAgB,QAAQ,IAAI;AAAA,IAC5B,aAAa,QAAQ,IAAI;AAAA,IACzB,YAAY,QAAQ,IAAI;AAAA,EAC1B;AAEA,QAAM,mBAAmB;AAAA,IACvB,QAAQ,QAAQ,IAAI,gCAAgC;AAAA,IACpD,YAAY,QAAQ,IAAI,oCAAoC;AAAA,IAC5D,SAAS,QAAQ,IAAI,iCAAiC;AAAA,IACtD,WAAW,QAAQ,IAAI,mCAAmC;AAAA,IAC1D,eAAe,QAAQ,IAAI,uCAAuC;AAAA,IAClE,mBAAmB,QAAQ,IAAI,4CAA4C;AAAA,IAC3E,OAAO,QAAQ,IAAI,+BAA+B;AAAA,IAClD,eAAe,QAAQ,IAAI;AAAA,EAC7B;AAGA,QAAM,cAAc,eAAe,UAAU;AAC7C,QAAM,iBAAiB,kBAAkB,UAAU;AACnD,QAAM,oBAAoB,qBAAqB,UAAU;AACzD,QAAM,gBAAgB,iBAAiB,UAAU;AACjD,QAAM,mBAAmB,oBAAoB,UAAU;AACvD,QAAM,iBAAiB,aAAa,UAAU;AAC9C,QAAM,iBAAiB,aAAa,UAAU;AAC9C,QAAM,8BAA8B,+BAA+B,UAAU;AAC7E,QAAM,8BAA8B,+BAA+B,UAAU;AAI7E,QAAM,SAAqC;AAAA,IACzC,GAAI;AAAA;AAAA,IAGJ,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,cAAc;AAAA,IACd,UAAU;AAAA,IACV,aAAa;AAAA;AAAA,IAGb;AAAA;AAAA;AAAA,IAIA,sBAAsB;AAAA,IACtB,iBAAiB;AAAA,IACjB,qBAAqB;AAAA,IACrB,kBAAkB;AAAA;AAAA,IAGlB,cAAc,UAAU;AAAA,IACxB,cAAc,UAAU;AAAA,IACxB,gBAAgB,UAAU;AAAA,IAC1B,mBAAmB,UAAU;AAAA,IAC7B,WAAW;AAAA,IACX,WAAW;AAAA,IACX,wBAAwB;AAAA,IACxB,wBAAwB;AAAA,IACxB,MAAM,UAAU;AAAA,IAChB,oBAAoB,UAAU;AAAA,IAC9B,SAAS,UAAU;AAAA,EACrB;AAIA,SAAO,KAAK,MAAM,EAAE,QAAQ,SAAO;AACjC,QAAI,OAAO,GAAuC,MAAM,QAAW;AACjE,aAAO,OAAO,GAAuC;AAAA,IACvD;AAAA,EACF,CAAC;AAED,SAAO;AACT;","names":[]}

package/dist/cjs/utils/tern-ui-script.js

@@ -41,7 +41,8 @@ function TernUIScript({
   customDomain,
   proxyUrl,
   version,
-  nonce
+  nonce,
+  router = "app"
 }) {
   const effectiveDomain = isDevelopment ? devDomain : customDomain;
   console.log("[TernSecure] TernUIScript: Using effective domain:", effectiveDomain);
@@ -53,7 +54,8 @@ function TernUIScript({
     customDomain: effectiveDomain,
     proxyUrl,
     version,
-    nonce
+    nonce,
+    router
   };
   const scriptUrl = (0, import_react.ternUIgetScriptUrl)(scriptOptions);
   const scriptAttributes = (0, import_react.constructScriptAttributes)(scriptOptions);

package/dist/cjs/utils/tern-ui-script.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/utils/tern-ui-script.tsx"],"sourcesContent":["import Script from 'next/script'\nimport { ternUIgetScriptUrl, constructScriptAttributes } from '@tern-secure/react'\nimport type { TernSecureNextProps } from '../types'\n\nconst isDevelopment = process.env.NODE_ENV === 'development';\nconst localPort = process.env.TERN_UI_PORT || '4000';\n\ntype TernUIScriptProps = Pick<TernSecureNextProps, 'customDomain' | 'proxyUrl'> & {\n    version?: string;\n    nonce?: string;\n}\n\nconst devDomain = isDevelopment \n    ? `http://localhost:${localPort || process.env.NEXT_PUBLIC_TERN_UI_PORT || '4000'}`\n    : undefined\n\n\nexport function TernUIScript({\n    customDomain,\n    proxyUrl,\n    version,\n    nonce,\n}: TernUIScriptProps) {\n    const effectiveDomain = isDevelopment ? devDomain : customDomain\n    console.log('[TernSecure] TernUIScript: Using effective domain:', effectiveDomain);\n\n    if (!effectiveDomain) {\n        console.warn('[TernSecure] TernUIScript: No custom domain or proxy URL provided. The script will not be loaded.');\n        return null;\n    }\n\n    const scriptOptions = {\n        customDomain: effectiveDomain,\n        proxyUrl,\n        version,\n        nonce,\n    };\n\n    const scriptUrl = ternUIgetScriptUrl(scriptOptions);\n    const scriptAttributes = constructScriptAttributes(scriptOptions);\n\n    return (\n        <Script\n          src={scriptUrl}\n          data-ternui-script\n          async\n          nonce={nonce}\n          strategy={undefined}\n            {...scriptAttributes}\n          //crossOrigin= {undefined}\n        />\n    )\n}"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA0CQ;AA1CR,oBAAmB;AACnB,mBAA8D;AAG9D,MAAM,gBAAgB,QAAQ,IAAI,aAAa;AAC/C,MAAM,YAAY,QAAQ,IAAI,gBAAgB;AAO9C,MAAM,YAAY,gBACZ,oBAAoB,aAAa,QAAQ,IAAI,4BAA4B,MAAM,KAC/E;AAGC,SAAS,aAAa;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,GAAsB;AAClB,QAAM,kBAAkB,gBAAgB,YAAY;AACpD,UAAQ,IAAI,sDAAsD,eAAe;AAEjF,MAAI,CAAC,iBAAiB;AAClB,YAAQ,KAAK,mGAAmG;AAChH,WAAO;AAAA,EACX;AAEA,QAAM,gBAAgB;AAAA,IAClB,cAAc;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AAEA,QAAM,gBAAY,iCAAmB,aAAa;AAClD,QAAM,uBAAmB,wCAA0B,aAAa;AAEhE,SACI;AAAA,IAAC,cAAAA;AAAA,IAAA;AAAA,MACC,KAAK;AAAA,MACL,sBAAkB;AAAA,MAClB,OAAK;AAAA,MACL;AAAA,MACA,UAAU;AAAA,MACP,GAAG;AAAA;AAAA,EAER;AAER;","names":["Script"]}
+{"version":3,"sources":["../../../src/utils/tern-ui-script.tsx"],"sourcesContent":["import Script from 'next/script'\nimport { ternUIgetScriptUrl, constructScriptAttributes } from '@tern-secure/react'\nimport type { TernSecureNextProps } from '../types'\n\nconst isDevelopment = process.env.NODE_ENV === 'development';\nconst localPort = process.env.TERN_UI_PORT || '4000';\n\ntype TernUIScriptProps = Pick<TernSecureNextProps, 'customDomain' | 'proxyUrl'> & {\n    version?: string;\n    nonce?: string;\n    router: 'app' | 'pages';\n}\n\nconst devDomain = isDevelopment \n    ? `http://localhost:${localPort || process.env.NEXT_PUBLIC_TERN_UI_PORT || '4000'}`\n    : undefined\n\n\nexport function TernUIScript({\n    customDomain,\n    proxyUrl,\n    version,\n    nonce,\n    router = 'app'\n}: TernUIScriptProps) {\n    const effectiveDomain = isDevelopment ? devDomain : customDomain\n    console.log('[TernSecure] TernUIScript: Using effective domain:', effectiveDomain);\n\n    if (!effectiveDomain) {\n        console.warn('[TernSecure] TernUIScript: No custom domain or proxy URL provided. The script will not be loaded.');\n        return null;\n    }\n\n    const scriptOptions = {\n        customDomain: effectiveDomain,\n        proxyUrl,\n        version,\n        nonce,\n        router\n    };\n\n    const scriptUrl = ternUIgetScriptUrl(scriptOptions);\n    const scriptAttributes = constructScriptAttributes(scriptOptions);\n\n    return (\n        <Script\n          src={scriptUrl}\n          data-ternui-script\n          async\n          nonce={nonce}\n          strategy={undefined}\n            {...scriptAttributes}\n          //crossOrigin= {undefined}\n        />\n    )\n}"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA6CQ;AA7CR,oBAAmB;AACnB,mBAA8D;AAG9D,MAAM,gBAAgB,QAAQ,IAAI,aAAa;AAC/C,MAAM,YAAY,QAAQ,IAAI,gBAAgB;AAQ9C,MAAM,YAAY,gBACZ,oBAAoB,aAAa,QAAQ,IAAI,4BAA4B,MAAM,KAC/E;AAGC,SAAS,aAAa;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS;AACb,GAAsB;AAClB,QAAM,kBAAkB,gBAAgB,YAAY;AACpD,UAAQ,IAAI,sDAAsD,eAAe;AAEjF,MAAI,CAAC,iBAAiB;AAClB,YAAQ,KAAK,mGAAmG;AAChH,WAAO;AAAA,EACX;AAEA,QAAM,gBAAgB;AAAA,IAClB,cAAc;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AAEA,QAAM,gBAAY,iCAAmB,aAAa;AAClD,QAAM,uBAAmB,wCAA0B,aAAa;AAEhE,SACI;AAAA,IAAC,cAAAA;AAAA,IAAA;AAAA,MACC,KAAK;AAAA,MACL,sBAAkB;AAAA,MAClB,OAAK;AAAA,MACL;AAAA,MACA,UAAU;AAAA,MACP,GAAG;AAAA;AAAA,EAER;AAER;","names":["Script"]}

package/dist/cjs/utils/ternsecure-sw.js

@@ -0,0 +1,54 @@
+"use strict";
+"use client";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var ternsecure_sw_exports = {};
+__export(ternsecure_sw_exports, {
+  TernUIServiceWorker: () => TernUIServiceWorker
+});
+module.exports = __toCommonJS(ternsecure_sw_exports);
+var import_react = require("react");
+var import_serviceWorker = require("@tern-secure/shared/serviceWorker");
+const TernUIServiceWorker = ({
+  ternSecureConfig,
+  baseUrl = window.location.origin
+}) => {
+  (0, import_react.useEffect)(() => {
+    const registerServiceWorker = async () => {
+      if (!ternSecureConfig) {
+        console.warn("[TernSecure] Service worker registration skipped: config not provided");
+        return;
+      }
+      try {
+        await (0, import_serviceWorker.reg)({
+          firebaseConfig: ternSecureConfig,
+          domain: baseUrl
+        });
+      } catch (error) {
+        console.error("[TernSecure] Service worker registration failed:", error);
+      }
+    };
+    registerServiceWorker();
+  }, [ternSecureConfig, baseUrl]);
+  return null;
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  TernUIServiceWorker
+});
+//# sourceMappingURL=ternsecure-sw.js.map

package/dist/cjs/utils/ternsecure-sw.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/utils/ternsecure-sw.ts"],"sourcesContent":["'use client';\n\nimport { useEffect } from 'react';\nimport type { TernSecureConfig } from '@tern-secure/types';\nimport { reg } from '@tern-secure/shared/serviceWorker';\n\ninterface TernUIServiceWorkerProps {\n    ternSecureConfig?: TernSecureConfig;\n    baseUrl?: string;\n}\n\nexport const TernUIServiceWorker: React.FC<TernUIServiceWorkerProps> = ({ \n    ternSecureConfig,\n    baseUrl = window.location.origin \n}) => {\n  useEffect(() => {\n    const registerServiceWorker = async () => {\n      if (!ternSecureConfig) {\n        console.warn('[TernSecure] Service worker registration skipped: config not provided');\n        return;\n      }\n\n      try {\n        await reg({\n          firebaseConfig: ternSecureConfig,\n          domain: baseUrl\n        });\n      } catch (error) {\n        console.error('[TernSecure] Service worker registration failed:', error);\n      }\n    };\n\n    registerServiceWorker();\n  }, [ternSecureConfig, baseUrl]);\n\n  return null;\n};"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,mBAA0B;AAE1B,2BAAoB;AAOb,MAAM,sBAA0D,CAAC;AAAA,EACpE;AAAA,EACA,UAAU,OAAO,SAAS;AAC9B,MAAM;AACJ,8BAAU,MAAM;AACd,UAAM,wBAAwB,YAAY;AACxC,UAAI,CAAC,kBAAkB;AACrB,gBAAQ,KAAK,uEAAuE;AACpF;AAAA,MACF;AAEA,UAAI;AACF,kBAAM,0BAAI;AAAA,UACR,gBAAgB;AAAA,UAChB,QAAQ;AAAA,QACV,CAAC;AAAA,MACH,SAAS,OAAO;AACd,gBAAQ,MAAM,oDAAoD,KAAK;AAAA,MACzE;AAAA,IACF;AAEA,0BAAsB;AAAA,EACxB,GAAG,CAAC,kBAAkB,OAAO,CAAC;AAE9B,SAAO;AACT;","names":[]}

package/dist/esm/app-router/admin/index.js

@@ -3,9 +3,11 @@ import {
   createSessionCookie,
   clearSessionCookie
 } from "@tern-secure/backend";
+import { createSessionHandler } from "./sessionHandler";
 export {
   clearSessionCookie,
   createSessionCookie,
+  createSessionHandler,
   verifyTernSessionCookie
 };
 //# sourceMappingURL=index.js.map

package/dist/esm/app-router/admin/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/admin/index.ts"],"sourcesContent":["export { \r\n    verifyTernSessionCookie, \r\n    createSessionCookie, \r\n    clearSessionCookie,\r\n} from '@tern-secure/backend'"],"mappings":"AAAA;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,OACG;","names":[]}
+{"version":3,"sources":["../../../../src/app-router/admin/index.ts"],"sourcesContent":["export { \r\n    verifyTernSessionCookie, \r\n    createSessionCookie, \r\n    clearSessionCookie,\r\n} from '@tern-secure/backend'\r\n\r\nexport { createSessionHandler } from './sessionHandler'"],"mappings":"AAAA;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAEP,SAAS,4BAA4B;","names":[]}