@tern-secure/nextjs 5.2.0-canary.v20250919134427 → 5.2.0-canary.v20251002175916

package/dist/esm/app-router/admin/sessionHandlers.js

@@ -1,133 +1,106 @@
-import { clearSessionCookie, createSessionCookie } from "@tern-secure/backend/admin";
+import { clearSessionCookie } from "@tern-secure/backend/admin";
 import { ternDecodeJwtUnguarded } from "@tern-secure/backend/jwt";
 import { cookies } from "next/headers";
 import { NextCookieStore } from "../../utils/NextCookieAdapter";
+import { createValidators } from "./fnValidators";
+import { refreshCookieWithIdToken } from "./request";
 import { createApiErrorResponse, HttpResponseHelper, SessionResponseHelper } from "./responses";
-import { CsrfValidator, RequestValidator } from "./validators";
-class SessionGetHandler {
-  static async handle(subEndpoint, _config) {
-    switch (subEndpoint) {
-      case "verify":
-        return this.handleVerify();
-      default:
-        return HttpResponseHelper.createNotFoundResponse();
-    }
+async function sessionEndpointHandler(context, options) {
+  const { subEndpoint, method } = context;
+  const validators = createValidators(context);
+  const {
+    validateSubEndpoint,
+    validateSecurity,
+    validateSessionRequest,
+    validateCsrfToken,
+    validateIdToken
+  } = validators;
+  if (!subEndpoint) {
+    return createApiErrorResponse("SUB_ENDPOINT_REQUIRED", "Session sub-endpoint required", 400);
   }
-  static async handleVerify() {
-    try {
-      const cookieStore = await cookies();
-      const sessionCookie = cookieStore.get("_session_cookie")?.value;
-      if (!sessionCookie) {
-        return SessionResponseHelper.createUnauthorizedResponse();
-      }
-      const { data: decodedSession, errors } = ternDecodeJwtUnguarded(sessionCookie);
-      if (errors) {
+  const sessionsConfig = options.endpoints?.sessions;
+  const subEndpointConfig = sessionsConfig?.subEndpoints?.[subEndpoint];
+  validateSubEndpoint(subEndpoint, subEndpointConfig);
+  if (subEndpointConfig?.security) {
+    await validateSecurity(subEndpointConfig.security);
+  }
+  const SessionGetHandler = async (subEndpoint2) => {
+    const handleSessionVerify = async () => {
+      try {
+        const cookieStore = await cookies();
+        const sessionCookie = cookieStore.get("_session_cookie")?.value;
+        if (!sessionCookie) {
+          return SessionResponseHelper.createUnauthorizedResponse();
+        }
+        const { data: decodedSession, errors } = ternDecodeJwtUnguarded(sessionCookie);
+        if (errors) {
+          return SessionResponseHelper.createUnauthorizedResponse();
+        }
+        return SessionResponseHelper.createVerificationResponse(decodedSession);
+      } catch (error) {
         return SessionResponseHelper.createUnauthorizedResponse();
       }
-      return SessionResponseHelper.createVerificationResponse(decodedSession);
-    } catch (error) {
-      return SessionResponseHelper.createUnauthorizedResponse();
+    };
+    switch (subEndpoint2) {
+      case "verify":
+        return handleSessionVerify();
+      default:
+        return HttpResponseHelper.createNotFoundResponse();
     }
-  }
-}
-class SessionPostHandler {
-  static async handle(request, subEndpoint, _config) {
+  };
+  const SessionPostHandler = async (subEndpoint2) => {
     const cookieStore = new NextCookieStore();
-    const { idToken, csrfToken, error } = await RequestValidator.validateSessionRequest(request);
+    const { idToken, csrfToken, error } = await validateSessionRequest();
     if (error) return error;
     const csrfCookieValue = await cookieStore.get("_session_terncf");
-    const csrfValidationError = CsrfValidator.validate(csrfToken || "", csrfCookieValue.value);
-    if (csrfValidationError) return csrfValidationError;
-    const options = {
-      tenantId: _config.tenantId
+    validateCsrfToken(csrfToken || "", csrfCookieValue.value);
+    const handleCreateSession = async (cookieStore2, idToken2) => {
+      try {
+        const res = await refreshCookieWithIdToken(idToken2, cookieStore2, options);
+        return SessionResponseHelper.createSessionCreationResponse(res);
+      } catch (error2) {
+        return createApiErrorResponse("SESSION_CREATION_FAILED", "Session creation failed", 500);
+      }
     };
-    switch (subEndpoint) {
-      case "createsession":
-        return this.handleCreateSession(options, idToken, cookieStore);
+    const handleRefreshSession = async (cookieStore2, idToken2) => {
+      try {
+        const decodedSession = ternDecodeJwtUnguarded(idToken2);
+        if (decodedSession.errors) {
+          return createApiErrorResponse("INVALID_SESSION", "Invalid session for refresh", 401);
+        }
+        const refreshRes = await refreshCookieWithIdToken(idToken2, cookieStore2, options);
+        return SessionResponseHelper.createRefreshResponse(refreshRes);
+      } catch (error2) {
+        return createApiErrorResponse("REFRESH_FAILED", "Session refresh failed", 500);
+      }
+    };
+    const handleRevokeSession = async (cookieStore2) => {
+      const res = await clearSessionCookie(cookieStore2);
+      return SessionResponseHelper.createRevokeResponse(res);
+    };
+    switch (subEndpoint2) {
+      case "createsession": {
+        validateIdToken(idToken);
+        return handleCreateSession(cookieStore, idToken);
+      }
       case "refresh":
-        return this.handleRefreshSession(cookieStore);
+        return handleRefreshSession(cookieStore, idToken);
       case "revoke":
-        return this.handleRevokeSession(cookieStore);
+        return handleRevokeSession(cookieStore);
       default:
         return HttpResponseHelper.createSubEndpointNotSupportedResponse();
     }
-  }
-  static async handleCreateSession(options, idToken, cookieStore) {
-    const validationError = RequestValidator.validateIdToken(idToken);
-    if (validationError) return validationError;
-    if (!idToken) {
-      return createApiErrorResponse("ID_TOKEN_REQUIRED", "ID token is required", 400);
-    }
-    try {
-      const res = await createSessionCookie(idToken, cookieStore, options);
-      return SessionResponseHelper.createSessionCreationResponse(res);
-    } catch (error) {
-      return createApiErrorResponse("SESSION_CREATION_FAILED", "Session creation failed", 500);
-    }
-  }
-  static async handleRefreshSession(cookieStore) {
-    const currentSessionCookie = await cookieStore.get("__session");
-    if (!currentSessionCookie) {
-      return createApiErrorResponse("NO_SESSION", "No session to refresh", 401);
-    }
-    try {
-      const decodedSession = ternDecodeJwtUnguarded(currentSessionCookie.value || "");
-      if (decodedSession.errors) {
-        return createApiErrorResponse("INVALID_SESSION", "Invalid session for refresh", 401);
-      }
-      const refreshRes = await createSessionCookie(
-        decodedSession.data?.payload?.sub || "",
-        cookieStore
-      );
-      return SessionResponseHelper.createRefreshResponse(refreshRes);
-    } catch (error) {
-      return createApiErrorResponse("REFRESH_FAILED", "Session refresh failed", 500);
-    }
-  }
-  static async handleRevokeSession(cookieStore) {
-    const res = await clearSessionCookie(cookieStore);
-    return SessionResponseHelper.createRevokeResponse(res);
-  }
-}
-class SessionEndpointHandler {
-  static async handle(request, method, subEndpoint, config) {
-    const sessionsConfig = config.endpoints.sessions;
-    if (!subEndpoint) {
-      return createApiErrorResponse("SUB_ENDPOINT_REQUIRED", "Session sub-endpoint required", 400);
-    }
-    const subEndpointConfig = sessionsConfig?.subEndpoints?.[subEndpoint];
-    const subEndpointValidation = this.validateSubEndpoint(subEndpoint, subEndpointConfig, method);
-    if (subEndpointValidation) return subEndpointValidation;
-    if (subEndpointConfig?.security) {
-      const { SecurityValidator } = await import("./validators.js");
-      const securityResult = await SecurityValidator.validate(request, subEndpointConfig.security);
-      if (securityResult) return securityResult;
-    }
-    switch (method) {
-      case "GET":
-        return SessionGetHandler.handle(subEndpoint, config);
-      case "POST":
-        return SessionPostHandler.handle(request, subEndpoint, config);
-      default:
-        return HttpResponseHelper.createMethodNotAllowedResponse();
-    }
-  }
-  static validateSubEndpoint(subEndpoint, subEndpointConfig, method) {
-    if (!subEndpoint) {
-      return createApiErrorResponse("SUB_ENDPOINT_REQUIRED", "Session sub-endpoint required", 400);
-    }
-    if (!subEndpointConfig || !subEndpointConfig.enabled) {
-      return createApiErrorResponse("ENDPOINT_NOT_FOUND", "Endpoint not found", 404);
-    }
-    if (!subEndpointConfig.methods?.includes(method)) {
-      return createApiErrorResponse("METHOD_NOT_ALLOWED", "Method not allowed", 405);
-    }
-    return null;
+  };
+  switch (method) {
+    case "GET":
+      return SessionGetHandler(subEndpoint);
+    case "POST":
+      return SessionPostHandler(subEndpoint);
+    default:
+      return HttpResponseHelper.createMethodNotAllowedResponse();
   }
 }
 export {
-  SessionEndpointHandler,
-  SessionGetHandler,
-  SessionPostHandler
+  sessionEndpointHandler
 };
 //# sourceMappingURL=sessionHandlers.js.map

package/dist/esm/app-router/admin/sessionHandlers.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/admin/sessionHandlers.ts"],"sourcesContent":["import type { RequestOptions } from '@tern-secure/backend';\nimport { clearSessionCookie, createSessionCookie } from '@tern-secure/backend/admin';\nimport { ternDecodeJwtUnguarded} from '@tern-secure/backend/jwt';\nimport { cookies } from 'next/headers';\n\nimport { NextCookieStore } from '../../utils/NextCookieAdapter';\nimport { createApiErrorResponse, HttpResponseHelper, SessionResponseHelper } from './responses';\nimport type {\n  SessionSubEndpoint,\n  TernSecureHandlerOptions,\n  TernSecureInternalHandlerConfig,\n} from './types';\nimport { CsrfValidator, RequestValidator } from './validators';\n\n/**\n * Session GET request handlers\n */\nexport class SessionGetHandler {\n  static async handle(\n    subEndpoint: SessionSubEndpoint,\n    _config: Required<TernSecureHandlerOptions>,\n  ): Promise<Response> {\n    switch (subEndpoint) {\n      case 'verify':\n        return this.handleVerify();\n      default:\n        return HttpResponseHelper.createNotFoundResponse();\n    }\n  }\n\n  private static async handleVerify(): Promise<Response> {\n    try {\n      const cookieStore = await cookies();\n      const sessionCookie = cookieStore.get('_session_cookie')?.value;\n      if (!sessionCookie) {\n        return SessionResponseHelper.createUnauthorizedResponse();\n      }\n\n      const { data: decodedSession, errors } = ternDecodeJwtUnguarded(sessionCookie);\n      if (errors) {\n        return SessionResponseHelper.createUnauthorizedResponse();\n      }\n\n      return SessionResponseHelper.createVerificationResponse(decodedSession);\n    } catch (error) {\n      return SessionResponseHelper.createUnauthorizedResponse();\n    }\n  }\n}\n\n/**\n * Session POST request handlers\n */\nexport class SessionPostHandler {\n  static async handle(\n    request: Request,\n    subEndpoint: SessionSubEndpoint,\n    _config: TernSecureInternalHandlerConfig,\n  ): Promise<Response> {\n    const cookieStore = new NextCookieStore();\n\n    const { idToken, csrfToken, error } = await RequestValidator.validateSessionRequest(request);\n    if (error) return error;\n\n    const csrfCookieValue = await cookieStore.get('_session_terncf');\n    const csrfValidationError = CsrfValidator.validate(csrfToken || '', csrfCookieValue.value);\n    if (csrfValidationError) return csrfValidationError;\n\n    const options = {\n      tenantId: _config.tenantId,\n    };\n\n    switch (subEndpoint) {\n      case 'createsession':\n        return this.handleCreateSession(options, idToken, cookieStore);\n      case 'refresh':\n        return this.handleRefreshSession(cookieStore);\n      case 'revoke':\n        return this.handleRevokeSession(cookieStore);\n      default:\n        return HttpResponseHelper.createSubEndpointNotSupportedResponse();\n    }\n  }\n\n  private static async handleCreateSession(\n    options: RequestOptions,\n    idToken: string | undefined,\n    cookieStore: NextCookieStore,\n  ): Promise<Response> {\n    const validationError = RequestValidator.validateIdToken(idToken);\n    if (validationError) return validationError;\n    if (!idToken) {\n      return createApiErrorResponse('ID_TOKEN_REQUIRED', 'ID token is required', 400);\n    }\n\n    try {\n      const res = await createSessionCookie(idToken, cookieStore, options);\n      return SessionResponseHelper.createSessionCreationResponse(res);\n    } catch (error) {\n      return createApiErrorResponse('SESSION_CREATION_FAILED', 'Session creation failed', 500);\n    }\n  }\n\n  private static async handleRefreshSession(\n    cookieStore: NextCookieStore,\n  ): Promise<Response> {\n    const currentSessionCookie = await cookieStore.get('__session');\n    if (!currentSessionCookie) {\n      return createApiErrorResponse('NO_SESSION', 'No session to refresh', 401);\n    }\n\n    try {\n      const decodedSession = ternDecodeJwtUnguarded(currentSessionCookie.value || '');\n      if (decodedSession.errors) {\n        return createApiErrorResponse('INVALID_SESSION', 'Invalid session for refresh', 401);\n      }\n\n      const refreshRes = await createSessionCookie(\n        decodedSession.data?.payload?.sub || '',\n        cookieStore,\n      );\n\n      return SessionResponseHelper.createRefreshResponse(refreshRes);\n    } catch (error) {\n      return createApiErrorResponse('REFRESH_FAILED', 'Session refresh failed', 500);\n    }\n  }\n\n  private static async handleRevokeSession(cookieStore: NextCookieStore): Promise<Response> {\n    const res = await clearSessionCookie(cookieStore);\n    return SessionResponseHelper.createRevokeResponse(res);\n  }\n}\n\n/**\n * Main session endpoint orchestrator\n */\nexport class SessionEndpointHandler {\n  static async handle(\n    request: Request,\n    method: string,\n    subEndpoint: SessionSubEndpoint | undefined,\n    config: Required<TernSecureHandlerOptions>,\n  ): Promise<Response> {\n    const sessionsConfig = config.endpoints.sessions;\n\n    if (!subEndpoint) {\n      return createApiErrorResponse('SUB_ENDPOINT_REQUIRED', 'Session sub-endpoint required', 400);\n    }\n\n    const subEndpointConfig = sessionsConfig?.subEndpoints?.[subEndpoint];\n\n    const subEndpointValidation = this.validateSubEndpoint(subEndpoint, subEndpointConfig, method);\n    if (subEndpointValidation) return subEndpointValidation;\n\n    if (subEndpointConfig?.security) {\n      const { SecurityValidator } = await import('./validators.js');\n      const securityResult = await SecurityValidator.validate(request, subEndpointConfig.security);\n      if (securityResult) return securityResult;\n    }\n\n    switch (method) {\n      case 'GET':\n        return SessionGetHandler.handle(subEndpoint, config);\n      case 'POST':\n        return SessionPostHandler.handle(request, subEndpoint, config);\n      default:\n        return HttpResponseHelper.createMethodNotAllowedResponse();\n    }\n  }\n\n  private static validateSubEndpoint(\n    subEndpoint: SessionSubEndpoint | undefined,\n    subEndpointConfig: any,\n    method: string,\n  ): Response | null {\n    if (!subEndpoint) {\n      return createApiErrorResponse('SUB_ENDPOINT_REQUIRED', 'Session sub-endpoint required', 400);\n    }\n\n    if (!subEndpointConfig || !subEndpointConfig.enabled) {\n      return createApiErrorResponse('ENDPOINT_NOT_FOUND', 'Endpoint not found', 404);\n    }\n\n    if (!subEndpointConfig.methods?.includes(method as any)) {\n      return createApiErrorResponse('METHOD_NOT_ALLOWED', 'Method not allowed', 405);\n    }\n\n    return null;\n  }\n}\n"],"mappings":"AACA,SAAS,oBAAoB,2BAA2B;AACxD,SAAS,8BAA6B;AACtC,SAAS,eAAe;AAExB,SAAS,uBAAuB;AAChC,SAAS,wBAAwB,oBAAoB,6BAA6B;AAMlF,SAAS,eAAe,wBAAwB;AAKzC,MAAM,kBAAkB;AAAA,EAC7B,aAAa,OACX,aACA,SACmB;AACnB,YAAQ,aAAa;AAAA,MACnB,KAAK;AACH,eAAO,KAAK,aAAa;AAAA,MAC3B;AACE,eAAO,mBAAmB,uBAAuB;AAAA,IACrD;AAAA,EACF;AAAA,EAEA,aAAqB,eAAkC;AACrD,QAAI;AACF,YAAM,cAAc,MAAM,QAAQ;AAClC,YAAM,gBAAgB,YAAY,IAAI,iBAAiB,GAAG;AAC1D,UAAI,CAAC,eAAe;AAClB,eAAO,sBAAsB,2BAA2B;AAAA,MAC1D;AAEA,YAAM,EAAE,MAAM,gBAAgB,OAAO,IAAI,uBAAuB,aAAa;AAC7E,UAAI,QAAQ;AACV,eAAO,sBAAsB,2BAA2B;AAAA,MAC1D;AAEA,aAAO,sBAAsB,2BAA2B,cAAc;AAAA,IACxE,SAAS,OAAO;AACd,aAAO,sBAAsB,2BAA2B;AAAA,IAC1D;AAAA,EACF;AACF;AAKO,MAAM,mBAAmB;AAAA,EAC9B,aAAa,OACX,SACA,aACA,SACmB;AACnB,UAAM,cAAc,IAAI,gBAAgB;AAExC,UAAM,EAAE,SAAS,WAAW,MAAM,IAAI,MAAM,iBAAiB,uBAAuB,OAAO;AAC3F,QAAI,MAAO,QAAO;AAElB,UAAM,kBAAkB,MAAM,YAAY,IAAI,iBAAiB;AAC/D,UAAM,sBAAsB,cAAc,SAAS,aAAa,IAAI,gBAAgB,KAAK;AACzF,QAAI,oBAAqB,QAAO;AAEhC,UAAM,UAAU;AAAA,MACd,UAAU,QAAQ;AAAA,IACpB;AAEA,YAAQ,aAAa;AAAA,MACnB,KAAK;AACH,eAAO,KAAK,oBAAoB,SAAS,SAAS,WAAW;AAAA,MAC/D,KAAK;AACH,eAAO,KAAK,qBAAqB,WAAW;AAAA,MAC9C,KAAK;AACH,eAAO,KAAK,oBAAoB,WAAW;AAAA,MAC7C;AACE,eAAO,mBAAmB,sCAAsC;AAAA,IACpE;AAAA,EACF;AAAA,EAEA,aAAqB,oBACnB,SACA,SACA,aACmB;AACnB,UAAM,kBAAkB,iBAAiB,gBAAgB,OAAO;AAChE,QAAI,gBAAiB,QAAO;AAC5B,QAAI,CAAC,SAAS;AACZ,aAAO,uBAAuB,qBAAqB,wBAAwB,GAAG;AAAA,IAChF;AAEA,QAAI;AACF,YAAM,MAAM,MAAM,oBAAoB,SAAS,aAAa,OAAO;AACnE,aAAO,sBAAsB,8BAA8B,GAAG;AAAA,IAChE,SAAS,OAAO;AACd,aAAO,uBAAuB,2BAA2B,2BAA2B,GAAG;AAAA,IACzF;AAAA,EACF;AAAA,EAEA,aAAqB,qBACnB,aACmB;AACnB,UAAM,uBAAuB,MAAM,YAAY,IAAI,WAAW;AAC9D,QAAI,CAAC,sBAAsB;AACzB,aAAO,uBAAuB,cAAc,yBAAyB,GAAG;AAAA,IAC1E;AAEA,QAAI;AACF,YAAM,iBAAiB,uBAAuB,qBAAqB,SAAS,EAAE;AAC9E,UAAI,eAAe,QAAQ;AACzB,eAAO,uBAAuB,mBAAmB,+BAA+B,GAAG;AAAA,MACrF;AAEA,YAAM,aAAa,MAAM;AAAA,QACvB,eAAe,MAAM,SAAS,OAAO;AAAA,QACrC;AAAA,MACF;AAEA,aAAO,sBAAsB,sBAAsB,UAAU;AAAA,IAC/D,SAAS,OAAO;AACd,aAAO,uBAAuB,kBAAkB,0BAA0B,GAAG;AAAA,IAC/E;AAAA,EACF;AAAA,EAEA,aAAqB,oBAAoB,aAAiD;AACxF,UAAM,MAAM,MAAM,mBAAmB,WAAW;AAChD,WAAO,sBAAsB,qBAAqB,GAAG;AAAA,EACvD;AACF;AAKO,MAAM,uBAAuB;AAAA,EAClC,aAAa,OACX,SACA,QACA,aACA,QACmB;AACnB,UAAM,iBAAiB,OAAO,UAAU;AAExC,QAAI,CAAC,aAAa;AAChB,aAAO,uBAAuB,yBAAyB,iCAAiC,GAAG;AAAA,IAC7F;AAEA,UAAM,oBAAoB,gBAAgB,eAAe,WAAW;AAEpE,UAAM,wBAAwB,KAAK,oBAAoB,aAAa,mBAAmB,MAAM;AAC7F,QAAI,sBAAuB,QAAO;AAElC,QAAI,mBAAmB,UAAU;AAC/B,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,iBAAiB;AAC5D,YAAM,iBAAiB,MAAM,kBAAkB,SAAS,SAAS,kBAAkB,QAAQ;AAC3F,UAAI,eAAgB,QAAO;AAAA,IAC7B;AAEA,YAAQ,QAAQ;AAAA,MACd,KAAK;AACH,eAAO,kBAAkB,OAAO,aAAa,MAAM;AAAA,MACrD,KAAK;AACH,eAAO,mBAAmB,OAAO,SAAS,aAAa,MAAM;AAAA,MAC/D;AACE,eAAO,mBAAmB,+BAA+B;AAAA,IAC7D;AAAA,EACF;AAAA,EAEA,OAAe,oBACb,aACA,mBACA,QACiB;AACjB,QAAI,CAAC,aAAa;AAChB,aAAO,uBAAuB,yBAAyB,iCAAiC,GAAG;AAAA,IAC7F;AAEA,QAAI,CAAC,qBAAqB,CAAC,kBAAkB,SAAS;AACpD,aAAO,uBAAuB,sBAAsB,sBAAsB,GAAG;AAAA,IAC/E;AAEA,QAAI,CAAC,kBAAkB,SAAS,SAAS,MAAa,GAAG;AACvD,aAAO,uBAAuB,sBAAsB,sBAAsB,GAAG;AAAA,IAC/E;AAEA,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/app-router/admin/sessionHandlers.ts"],"sourcesContent":["import { clearSessionCookie } from '@tern-secure/backend/admin';\nimport { ternDecodeJwtUnguarded } from '@tern-secure/backend/jwt';\nimport { cookies } from 'next/headers';\n\nimport { NextCookieStore } from '../../utils/NextCookieAdapter';\nimport { type RequestProcessorContext } from './c-authenticateRequestProcessor';\nimport { createValidators } from './fnValidators';\nimport { refreshCookieWithIdToken } from './request';\nimport { createApiErrorResponse, HttpResponseHelper, SessionResponseHelper } from './responses';\nimport type { SessionSubEndpoint, TernSecureHandlerOptions } from './types';\n\nexport async function sessionEndpointHandler(\n  context: RequestProcessorContext,\n  options: TernSecureHandlerOptions,\n): Promise<Response> {\n  const { subEndpoint, method } = context;\n  \n  const validators = createValidators(context);\n\n  const {\n    validateSubEndpoint,\n    validateSecurity,\n    validateSessionRequest,\n    validateCsrfToken,\n    validateIdToken,\n  } = validators;\n\n  if (!subEndpoint) {\n    return createApiErrorResponse('SUB_ENDPOINT_REQUIRED', 'Session sub-endpoint required', 400);\n  }\n\n  const sessionsConfig = options.endpoints?.sessions;\n  const subEndpointConfig = sessionsConfig?.subEndpoints?.[subEndpoint];\n\n  validateSubEndpoint(subEndpoint, subEndpointConfig);\n\n  if (subEndpointConfig?.security) {\n    await validateSecurity(subEndpointConfig.security);\n  }\n\n  const SessionGetHandler = async (subEndpoint: SessionSubEndpoint): Promise<Response> => {\n    const handleSessionVerify = async (): Promise<Response> => {\n      try {\n        const cookieStore = await cookies();\n        const sessionCookie = cookieStore.get('_session_cookie')?.value;\n        if (!sessionCookie) {\n          return SessionResponseHelper.createUnauthorizedResponse();\n        }\n\n        const { data: decodedSession, errors } = ternDecodeJwtUnguarded(sessionCookie);\n        if (errors) {\n          return SessionResponseHelper.createUnauthorizedResponse();\n        }\n\n        return SessionResponseHelper.createVerificationResponse(decodedSession);\n      } catch (error) {\n        return SessionResponseHelper.createUnauthorizedResponse();\n      }\n    };\n\n    switch (subEndpoint) {\n      case 'verify':\n        return handleSessionVerify();\n      default:\n        return HttpResponseHelper.createNotFoundResponse();\n    }\n  };\n\n  const SessionPostHandler = async (subEndpoint: SessionSubEndpoint): Promise<Response> => {\n    const cookieStore = new NextCookieStore();\n\n    const { idToken, csrfToken, error } = await validateSessionRequest();\n    if (error) return error;\n\n    const csrfCookieValue = await cookieStore.get('_session_terncf');\n    validateCsrfToken(csrfToken || '', csrfCookieValue.value);\n\n    const handleCreateSession = async (\n      cookieStore: NextCookieStore,\n      idToken: string,\n    ): Promise<Response> => {\n      try {\n        const res = await refreshCookieWithIdToken(idToken, cookieStore, options);\n        return SessionResponseHelper.createSessionCreationResponse(res);\n      } catch (error) {\n        return createApiErrorResponse('SESSION_CREATION_FAILED', 'Session creation failed', 500);\n      }\n    };\n\n    const handleRefreshSession = async (\n      cookieStore: NextCookieStore,\n      idToken: string,\n    ): Promise<Response> => {\n      try {\n        const decodedSession = ternDecodeJwtUnguarded(idToken);\n        if (decodedSession.errors) {\n          return createApiErrorResponse('INVALID_SESSION', 'Invalid session for refresh', 401);\n        }\n\n        const refreshRes = await refreshCookieWithIdToken(idToken, cookieStore, options);\n        return SessionResponseHelper.createRefreshResponse(refreshRes);\n      } catch (error) {\n        return createApiErrorResponse('REFRESH_FAILED', 'Session refresh failed', 500);\n      }\n    };\n\n    const handleRevokeSession = async (cookieStore: NextCookieStore): Promise<Response> => {\n      const res = await clearSessionCookie(cookieStore);\n      return SessionResponseHelper.createRevokeResponse(res);\n    };\n\n    switch (subEndpoint) {\n      case 'createsession': {\n        validateIdToken(idToken);\n        //eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n        return handleCreateSession(cookieStore, idToken!);\n      }\n\n      case 'refresh':\n        //eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n        return handleRefreshSession(cookieStore, idToken!);\n\n      case 'revoke':\n        return handleRevokeSession(cookieStore);\n\n      default:\n        return HttpResponseHelper.createSubEndpointNotSupportedResponse();\n    }\n  };\n\n  switch (method) {\n    case 'GET':\n      return SessionGetHandler(subEndpoint);\n\n    case 'POST':\n      return SessionPostHandler(subEndpoint);\n\n    default:\n      return HttpResponseHelper.createMethodNotAllowedResponse();\n  }\n}\n"],"mappings":"AAAA,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,eAAe;AAExB,SAAS,uBAAuB;AAEhC,SAAS,wBAAwB;AACjC,SAAS,gCAAgC;AACzC,SAAS,wBAAwB,oBAAoB,6BAA6B;AAGlF,eAAsB,uBACpB,SACA,SACmB;AACnB,QAAM,EAAE,aAAa,OAAO,IAAI;AAEhC,QAAM,aAAa,iBAAiB,OAAO;AAE3C,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,MAAI,CAAC,aAAa;AAChB,WAAO,uBAAuB,yBAAyB,iCAAiC,GAAG;AAAA,EAC7F;AAEA,QAAM,iBAAiB,QAAQ,WAAW;AAC1C,QAAM,oBAAoB,gBAAgB,eAAe,WAAW;AAEpE,sBAAoB,aAAa,iBAAiB;AAElD,MAAI,mBAAmB,UAAU;AAC/B,UAAM,iBAAiB,kBAAkB,QAAQ;AAAA,EACnD;AAEA,QAAM,oBAAoB,OAAOA,iBAAuD;AACtF,UAAM,sBAAsB,YAA+B;AACzD,UAAI;AACF,cAAM,cAAc,MAAM,QAAQ;AAClC,cAAM,gBAAgB,YAAY,IAAI,iBAAiB,GAAG;AAC1D,YAAI,CAAC,eAAe;AAClB,iBAAO,sBAAsB,2BAA2B;AAAA,QAC1D;AAEA,cAAM,EAAE,MAAM,gBAAgB,OAAO,IAAI,uBAAuB,aAAa;AAC7E,YAAI,QAAQ;AACV,iBAAO,sBAAsB,2BAA2B;AAAA,QAC1D;AAEA,eAAO,sBAAsB,2BAA2B,cAAc;AAAA,MACxE,SAAS,OAAO;AACd,eAAO,sBAAsB,2BAA2B;AAAA,MAC1D;AAAA,IACF;AAEA,YAAQA,cAAa;AAAA,MACnB,KAAK;AACH,eAAO,oBAAoB;AAAA,MAC7B;AACE,eAAO,mBAAmB,uBAAuB;AAAA,IACrD;AAAA,EACF;AAEA,QAAM,qBAAqB,OAAOA,iBAAuD;AACvF,UAAM,cAAc,IAAI,gBAAgB;AAExC,UAAM,EAAE,SAAS,WAAW,MAAM,IAAI,MAAM,uBAAuB;AACnE,QAAI,MAAO,QAAO;AAElB,UAAM,kBAAkB,MAAM,YAAY,IAAI,iBAAiB;AAC/D,sBAAkB,aAAa,IAAI,gBAAgB,KAAK;AAExD,UAAM,sBAAsB,OAC1BC,cACAC,aACsB;AACtB,UAAI;AACF,cAAM,MAAM,MAAM,yBAAyBA,UAASD,cAAa,OAAO;AACxE,eAAO,sBAAsB,8BAA8B,GAAG;AAAA,MAChE,SAASE,QAAO;AACd,eAAO,uBAAuB,2BAA2B,2BAA2B,GAAG;AAAA,MACzF;AAAA,IACF;AAEA,UAAM,uBAAuB,OAC3BF,cACAC,aACsB;AACtB,UAAI;AACF,cAAM,iBAAiB,uBAAuBA,QAAO;AACrD,YAAI,eAAe,QAAQ;AACzB,iBAAO,uBAAuB,mBAAmB,+BAA+B,GAAG;AAAA,QACrF;AAEA,cAAM,aAAa,MAAM,yBAAyBA,UAASD,cAAa,OAAO;AAC/E,eAAO,sBAAsB,sBAAsB,UAAU;AAAA,MAC/D,SAASE,QAAO;AACd,eAAO,uBAAuB,kBAAkB,0BAA0B,GAAG;AAAA,MAC/E;AAAA,IACF;AAEA,UAAM,sBAAsB,OAAOF,iBAAoD;AACrF,YAAM,MAAM,MAAM,mBAAmBA,YAAW;AAChD,aAAO,sBAAsB,qBAAqB,GAAG;AAAA,IACvD;AAEA,YAAQD,cAAa;AAAA,MACnB,KAAK,iBAAiB;AACpB,wBAAgB,OAAO;AAEvB,eAAO,oBAAoB,aAAa,OAAQ;AAAA,MAClD;AAAA,MAEA,KAAK;AAEH,eAAO,qBAAqB,aAAa,OAAQ;AAAA,MAEnD,KAAK;AACH,eAAO,oBAAoB,WAAW;AAAA,MAExC;AACE,eAAO,mBAAmB,sCAAsC;AAAA,IACpE;AAAA,EACF;AAEA,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO,kBAAkB,WAAW;AAAA,IAEtC,KAAK;AACH,aAAO,mBAAmB,WAAW;AAAA,IAEvC;AACE,aAAO,mBAAmB,+BAA+B;AAAA,EAC7D;AACF;","names":["subEndpoint","cookieStore","idToken","error"]}

package/dist/esm/app-router/admin/ternsecureNextjsHandler.js

@@ -1,49 +1,36 @@
+import { createTernSecureRequest } from "@tern-secure/backend";
+import { createRequestProcessor } from "./c-authenticateRequestProcessor";
 import { TENANT_ID } from "./constants";
 import { EndpointRouter } from "./endpointRouter";
-import { createRequestContext } from "./fnValidators";
-import { RequestContextBuilder, ValidationPipeline } from "./handlerUtils";
+import { createValidators } from "./fnValidators";
 import { createApiErrorResponse } from "./responses";
 import { DEFAULT_HANDLER_OPTIONS } from "./types";
 import { ConfigUtils } from "./utils";
-class HandlerConfigFactory {
-  static create(options) {
-    const baseConfig = ConfigUtils.mergeWithDefaults(
-      DEFAULT_HANDLER_OPTIONS,
-      options
-    );
-    return {
-      ...baseConfig,
-      tenantId: TENANT_ID
-    };
-  }
+function createHandlerConfig(options) {
+  const baseConfig = ConfigUtils.mergeWithDefaults(
+    DEFAULT_HANDLER_OPTIONS,
+    options
+  );
+  return {
+    ...baseConfig,
+    tenantId: TENANT_ID
+  };
 }
-class TernSecureRequestHandler {
-  config;
-  constructor(config) {
-    this.config = config;
-  }
-  async handle(request) {
-    const handlerContext = RequestContextBuilder.create(request);
-    const validationContext = createRequestContext(request);
+function createTernSecureNextJsHandler(options) {
+  const config = createHandlerConfig(options);
+  const handler = async (request) => {
     try {
-      const validationResult = await this.executeValidation(validationContext);
-      if (validationResult) {
-        return validationResult;
+      const context = createRequestProcessor(createTernSecureRequest(request), options);
+      const { validateSecurity } = createValidators(context);
+      await validateSecurity(options.security || {});
+      if (!context.endpoint) {
+        return createApiErrorResponse("ENDPOINT_REQUIRED", "Endpoint is required", 400);
       }
-      return await EndpointRouter.route(handlerContext, this.config);
+      return await EndpointRouter.route(context, config);
     } catch (error) {
       return createApiErrorResponse("INTERNAL_SERVER_ERROR", "Internal server error", 500);
     }
-  }
-  async executeValidation(validationContext) {
-    const validationPipeline = new ValidationPipeline(this.config, validationContext);
-    return validationPipeline.execute();
-  }
-}
-function createTernSecureNextJsHandler(options) {
-  const config = HandlerConfigFactory.create(options);
-  const requestHandler = new TernSecureRequestHandler(config);
-  const handler = async (request) => await requestHandler.handle(request);
+  };
   return {
     GET: handler,
     POST: handler

package/dist/esm/app-router/admin/ternsecureNextjsHandler.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/admin/ternsecureNextjsHandler.ts"],"sourcesContent":["\nimport { TENANT_ID } from './constants';\nimport { EndpointRouter } from './endpointRouter';\nimport { createRequestContext } from './fnValidators';\nimport { RequestContextBuilder, ValidationPipeline } from './handlerUtils';\nimport { createApiErrorResponse } from './responses';\nimport type { TernSecureHandlerOptions, TernSecureInternalHandlerConfig } from './types';\nimport { DEFAULT_HANDLER_OPTIONS } from './types';\nimport { ConfigUtils } from './utils';\n\nclass HandlerConfigFactory {\n  static create(options?: TernSecureHandlerOptions): TernSecureInternalHandlerConfig {\n    const baseConfig: Required<TernSecureHandlerOptions> = ConfigUtils.mergeWithDefaults(\n      DEFAULT_HANDLER_OPTIONS,\n      options,\n    );\n\n    return {\n      ...baseConfig,\n      tenantId: TENANT_ID,\n    };\n  }\n}\n\nclass TernSecureRequestHandler {\n  private readonly config: TernSecureInternalHandlerConfig;\n\n  constructor(config: TernSecureInternalHandlerConfig) {\n    this.config = config;\n  }\n\n  async handle(request: Request): Promise<Response> {\n    const handlerContext = RequestContextBuilder.create(request);\n    const validationContext = createRequestContext(request);\n\n    try {\n      const validationResult = await this.executeValidation(validationContext);\n      if (validationResult) {\n        return validationResult;\n      }\n\n      return await EndpointRouter.route(handlerContext, this.config);\n    } catch (error) {\n      return createApiErrorResponse('INTERNAL_SERVER_ERROR', 'Internal server error', 500);\n    }\n  }\n\n  private async executeValidation(validationContext: any): Promise<Response | null> {\n    const validationPipeline = new ValidationPipeline(this.config, validationContext);\n    return validationPipeline.execute();\n  }\n}\n\nexport function createTernSecureNextJsHandler(options: TernSecureHandlerOptions) {\n  const config = HandlerConfigFactory.create(options);\n  const requestHandler = new TernSecureRequestHandler(config);\n\n  const handler = async (request: Request) => await requestHandler.handle(request);\n\n  //const handler = async (request: Request): Promise<Response> => {\n  //  const context = await createRequestProcessor(createTernSecureRequest(request), options);\n  //  const { validateCors, validateSecurity } = createValidators(context);\n  //  await validateCors(options.cors || '');\n  //  await validateSecurity(options.security || {});\n  //};\n\n  return {\n    GET: handler,\n    POST: handler,\n  } as const;\n}\n"],"mappings":"AACA,SAAS,iBAAiB;AAC1B,SAAS,sBAAsB;AAC/B,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,8BAA8B;AAEvC,SAAS,+BAA+B;AACxC,SAAS,mBAAmB;AAE5B,MAAM,qBAAqB;AAAA,EACzB,OAAO,OAAO,SAAqE;AACjF,UAAM,aAAiD,YAAY;AAAA,MACjE;AAAA,MACA;AAAA,IACF;AAEA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,UAAU;AAAA,IACZ;AAAA,EACF;AACF;AAEA,MAAM,yBAAyB;AAAA,EACZ;AAAA,EAEjB,YAAY,QAAyC;AACnD,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,MAAM,OAAO,SAAqC;AAChD,UAAM,iBAAiB,sBAAsB,OAAO,OAAO;AAC3D,UAAM,oBAAoB,qBAAqB,OAAO;AAEtD,QAAI;AACF,YAAM,mBAAmB,MAAM,KAAK,kBAAkB,iBAAiB;AACvE,UAAI,kBAAkB;AACpB,eAAO;AAAA,MACT;AAEA,aAAO,MAAM,eAAe,MAAM,gBAAgB,KAAK,MAAM;AAAA,IAC/D,SAAS,OAAO;AACd,aAAO,uBAAuB,yBAAyB,yBAAyB,GAAG;AAAA,IACrF;AAAA,EACF;AAAA,EAEA,MAAc,kBAAkB,mBAAkD;AAChF,UAAM,qBAAqB,IAAI,mBAAmB,KAAK,QAAQ,iBAAiB;AAChF,WAAO,mBAAmB,QAAQ;AAAA,EACpC;AACF;AAEO,SAAS,8BAA8B,SAAmC;AAC/E,QAAM,SAAS,qBAAqB,OAAO,OAAO;AAClD,QAAM,iBAAiB,IAAI,yBAAyB,MAAM;AAE1D,QAAM,UAAU,OAAO,YAAqB,MAAM,eAAe,OAAO,OAAO;AAS/E,SAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/app-router/admin/ternsecureNextjsHandler.ts"],"sourcesContent":["import { createTernSecureRequest } from '@tern-secure/backend';\n\nimport { createRequestProcessor } from './c-authenticateRequestProcessor';\nimport { TENANT_ID } from './constants';\nimport { EndpointRouter } from './endpointRouter';\nimport { createValidators } from './fnValidators';\nimport { createApiErrorResponse } from './responses';\nimport type { TernSecureHandlerOptions } from './types';\nimport { DEFAULT_HANDLER_OPTIONS } from './types';\nimport { ConfigUtils } from './utils';\n\nfunction createHandlerConfig(options?: TernSecureHandlerOptions): TernSecureHandlerOptions {\n  const baseConfig: Required<TernSecureHandlerOptions> = ConfigUtils.mergeWithDefaults(\n    DEFAULT_HANDLER_OPTIONS,\n    options,\n  );\n\n  return {\n    ...baseConfig,\n    tenantId: TENANT_ID,\n  };\n}\n\nexport function createTernSecureNextJsHandler(options: TernSecureHandlerOptions) {\n  const config = createHandlerConfig(options);\n\n  const handler = async (request: Request): Promise<Response> => {\n    try {\n      const context = createRequestProcessor(createTernSecureRequest(request), options);\n\n      const { validateSecurity } = createValidators(context);\n      await validateSecurity(options.security || {});\n\n      if (!context.endpoint) {\n        return createApiErrorResponse('ENDPOINT_REQUIRED', 'Endpoint is required', 400);\n      }\n\n      return await EndpointRouter.route(context, config);\n    } catch (error) {\n      return createApiErrorResponse('INTERNAL_SERVER_ERROR', 'Internal server error', 500);\n    }\n  };\n\n  return {\n    GET: handler,\n    POST: handler,\n  } as const;\n}\n"],"mappings":"AAAA,SAAS,+BAA+B;AAExC,SAAS,8BAA8B;AACvC,SAAS,iBAAiB;AAC1B,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC,SAAS,8BAA8B;AAEvC,SAAS,+BAA+B;AACxC,SAAS,mBAAmB;AAE5B,SAAS,oBAAoB,SAA8D;AACzF,QAAM,aAAiD,YAAY;AAAA,IACjE;AAAA,IACA;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,UAAU;AAAA,EACZ;AACF;AAEO,SAAS,8BAA8B,SAAmC;AAC/E,QAAM,SAAS,oBAAoB,OAAO;AAE1C,QAAM,UAAU,OAAO,YAAwC;AAC7D,QAAI;AACF,YAAM,UAAU,uBAAuB,wBAAwB,OAAO,GAAG,OAAO;AAEhF,YAAM,EAAE,iBAAiB,IAAI,iBAAiB,OAAO;AACrD,YAAM,iBAAiB,QAAQ,YAAY,CAAC,CAAC;AAE7C,UAAI,CAAC,QAAQ,UAAU;AACrB,eAAO,uBAAuB,qBAAqB,wBAAwB,GAAG;AAAA,MAChF;AAEA,aAAO,MAAM,eAAe,MAAM,SAAS,MAAM;AAAA,IACnD,SAAS,OAAO;AACd,aAAO,uBAAuB,yBAAyB,yBAAyB,GAAG;AAAA,IACrF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;","names":[]}

package/dist/esm/app-router/admin/types.js

@@ -7,12 +7,43 @@ const DEFAULT_CORS_OPTIONS = {
   // 24 hours
 };
 const DEFAULT_COOKIE_OPTIONS = {
-  name: "__session",
+  //namePrefix: '__session',
   path: "/",
   httpOnly: true,
-  sameSite: "lax",
-  maxAge: 3600 * 24 * 7
-  // 7 days
+  sameSite: "lax"
+  //session: {
+  //  maxAge: 3600 * 24 * 7, // Default: 1 week (consumer can set 5 mins to 2 weeks)
+  //},
+};
+const FIXED_TOKEN_CONFIGS = {
+  id: {
+    path: "/",
+    httpOnly: true,
+    sameSite: "lax",
+    maxAge: 3600
+    // 1 hour
+  },
+  refresh: {
+    path: "/",
+    httpOnly: true,
+    sameSite: "lax",
+    maxAge: 3600 * 24 * 30
+    // 30 days (changes when user events occur)
+  },
+  signature: {
+    path: "/",
+    httpOnly: true,
+    sameSite: "lax",
+    maxAge: 3600 * 24 * 7
+    // 1 week (as needed)
+  },
+  custom: {
+    path: "/",
+    httpOnly: true,
+    sameSite: "lax",
+    maxAge: 3600 * 24 * 7
+    // 1 week (as needed)
+  }
 };
 const DEFAULT_SECURITY_OPTIONS = {
   requireCSRF: true,
@@ -82,16 +113,60 @@ const DEFAULT_HANDLER_OPTIONS = {
   endpoints: {
     sessions: DEFAULT_SESSIONS_CONFIG
   },
+  tenantId: "",
+  enableCustomToken: false,
   debug: false,
   environment: "production",
   basePath: "/api/auth"
 };
+class CookieUtils {
+  static getCookieName(namePrefix, tokenType) {
+    return `${namePrefix}.${tokenType}`;
+  }
+  static getCookieNames(namePrefix) {
+    return {
+      session: this.getCookieName(namePrefix, "session"),
+      id: this.getCookieName(namePrefix, "id"),
+      refresh: this.getCookieName(namePrefix, "refresh"),
+      signature: this.getCookieName(namePrefix, "signature"),
+      custom: this.getCookieName(namePrefix, "custom")
+    };
+  }
+  static getSessionConfig(cookieOptions) {
+    const sessionConfig = cookieOptions.session || {};
+    const defaultSession = DEFAULT_COOKIE_OPTIONS.session || {};
+    return {
+      domain: sessionConfig.domain ?? cookieOptions.domain,
+      path: sessionConfig.path ?? cookieOptions.path ?? "/",
+      httpOnly: sessionConfig.httpOnly ?? cookieOptions.httpOnly ?? true,
+      sameSite: sessionConfig.sameSite ?? cookieOptions.sameSite ?? "lax",
+      maxAge: sessionConfig.maxAge ?? defaultSession.maxAge ?? 3600 * 24 * 7
+    };
+  }
+  static getFixedTokenConfig(cookieOptions, tokenType) {
+    const fixedConfig = FIXED_TOKEN_CONFIGS[tokenType];
+    return {
+      domain: cookieOptions.domain,
+      path: fixedConfig.path,
+      httpOnly: fixedConfig.httpOnly,
+      sameSite: fixedConfig.sameSite,
+      maxAge: fixedConfig.maxAge
+    };
+  }
+  static validateSessionMaxAge(maxAge) {
+    const minAge = 300;
+    const maxAgeLimit = 3600 * 24 * 14;
+    return maxAge >= minAge && maxAge <= maxAgeLimit;
+  }
+}
 export {
+  CookieUtils,
   DEFAULT_COOKIE_OPTIONS,
   DEFAULT_CORS_OPTIONS,
   DEFAULT_ENDPOINT_CONFIG,
   DEFAULT_HANDLER_OPTIONS,
   DEFAULT_SECURITY_OPTIONS,
-  DEFAULT_SESSIONS_CONFIG
+  DEFAULT_SESSIONS_CONFIG,
+  FIXED_TOKEN_CONFIGS
 };
 //# sourceMappingURL=types.js.map

package/dist/esm/app-router/admin/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/app-router/admin/types.ts"],"sourcesContent":["import { type NextResponse } from 'next/server';\n\nexport interface CorsOptions {\n  allowedOrigins: string[] | '*';\n  allowedMethods?: string[];\n  allowedHeaders?: string[];\n  allowCredentials?: boolean;\n  maxAge?: number;\n  skipSameOrigin?: boolean;\n}\n\nexport interface CookieOptions {\n  name?: string;\n  domain?: string;\n  path?: string;\n  httpOnly?: boolean;\n  sameSite?: 'strict' | 'lax' | 'none';\n  maxAge?: number;\n}\n\nexport interface RateLimitOptions {\n  windowMs?: number;\n  maxRequests?: number;\n  skipSuccessful?: boolean;\n  skipFailedRequests?: boolean;\n}\n\nexport interface SecurityOptions {\n  requireCSRF?: boolean;\n  allowedReferers?: string[];\n  requiredHeaders?: Record<string, string>;\n  ipWhitelist?: string[];\n  userAgent?: {\n    block?: string[];\n    allow?: string[];\n  };\n}\n\nexport interface EndpointConfig {\n  enabled: boolean;\n  methods: ('GET' | 'POST' | 'PUT' | 'DELETE')[];\n  requireAuth?: boolean;\n  rateLimit?: RateLimitOptions;\n  security?: SecurityOptions;\n  cors?: Partial<CorsOptions>;\n}\n\nexport interface SessionEndpointConfig extends EndpointConfig {\n  subEndpoints?: {\n    [K in SessionSubEndpoint]?: Partial<EndpointConfig>;\n  };\n}\n\nexport interface TernSecureHandlerOptions {\n  cors?: CorsOptions;\n  cookies?: CookieOptions;\n  rateLimit?: RateLimitOptions;\n  security?: SecurityOptions;\n  endpoints?: {\n    sessions?: SessionEndpointConfig;\n  };\n\n  debug?: boolean;\n  environment?: 'development' | 'production' | 'test';\n  basePath?: string;\n}\n\n/**\n * Define an internal config type that extends the public options\n * with server-side only values like tenantId.\n */\nexport type TernSecureInternalHandlerConfig = Required<TernSecureHandlerOptions> & {\n  tenantId?: string;\n};\n\nexport type AuthEndpoint = 'sessions' | 'users';\nexport type SessionSubEndpoint = 'verify' | 'createsession' | 'refresh' | 'revoke';\n\nexport const DEFAULT_CORS_OPTIONS: CorsOptions = {\n  allowedOrigins: [],\n  allowedMethods: ['GET', 'POST'],\n  allowedHeaders: ['Content-Type', 'Authorization', 'X-Requested-With'],\n  allowCredentials: true,\n  maxAge: 86400, // 24 hours\n};\n\nexport const DEFAULT_COOKIE_OPTIONS: CookieOptions = {\n  name: '__session',\n  path: '/',\n  httpOnly: true,\n  sameSite: 'lax',\n  maxAge: 3600 * 24 * 7, // 7 days\n};\n\nexport const DEFAULT_SECURITY_OPTIONS: SecurityOptions = {\n  requireCSRF: true,\n  allowedReferers: [],\n  requiredHeaders: {},\n  ipWhitelist: [],\n  userAgent: {\n    block: [],\n    allow: [],\n  },\n};\n\nexport const DEFAULT_ENDPOINT_CONFIG: EndpointConfig = {\n  enabled: true,\n  methods: ['GET', 'POST'],\n  requireAuth: false,\n  security: DEFAULT_SECURITY_OPTIONS,\n};\n\nexport const DEFAULT_SESSIONS_CONFIG: SessionEndpointConfig = {\n  ...DEFAULT_ENDPOINT_CONFIG,\n  subEndpoints: {\n    verify: {\n      enabled: true,\n      methods: ['GET'],\n      requireAuth: false,\n      security: {\n        requireCSRF: true,\n        allowedReferers: [],\n      },\n    },\n    createsession: {\n      enabled: true,\n      methods: ['POST'],\n      requireAuth: false,\n      security: {\n        requireCSRF: true,\n      },\n    },\n    refresh: {\n      enabled: true,\n      methods: ['POST'],\n      requireAuth: true,\n      security: {\n        requireCSRF: true,\n      },\n    },\n    revoke: {\n      enabled: true,\n      methods: ['POST'],\n      requireAuth: true,\n      security: {\n        requireCSRF: true,\n      },\n    },\n  },\n};\n\nexport const DEFAULT_HANDLER_OPTIONS: Required<TernSecureHandlerOptions> & {\n  endpoints: Required<NonNullable<TernSecureHandlerOptions['endpoints']>>;\n} = {\n  cors: DEFAULT_CORS_OPTIONS,\n  cookies: DEFAULT_COOKIE_OPTIONS,\n  rateLimit: {\n    windowMs: 15 * 60 * 1000, // 15 minutes\n    maxRequests: 100,\n    skipSuccessful: false,\n    skipFailedRequests: false,\n  },\n  security: DEFAULT_SECURITY_OPTIONS,\n  endpoints: {\n    sessions: DEFAULT_SESSIONS_CONFIG,\n  },\n  debug: false,\n  environment: 'production',\n  basePath: '/api/auth',\n};\n\n\nexport interface ValidationResult {\n  error?: NextResponse;\n  data?: any;\n}\n\nexport interface ValidationConfig {\n  cors?: CorsOptions;\n  security?: SecurityOptions;\n  endpoint?: {\n    name: AuthEndpoint;\n    config: EndpointConfig;\n  };\n  subEndpoint?: {\n    name: SessionSubEndpoint;\n    config: EndpointConfig;\n  };\n  requireIdToken?: boolean;\n  requireCsrfToken?: boolean;\n}\n\nexport interface ComprehensiveValidationResult {\n  isValid: boolean;\n  error?: Response;\n  corsResponse?: Response;\n  sessionData?: {\n    body: any;\n    idToken?: string;\n    csrfToken?: string;\n  };\n}\n"],"mappings":"AA8EO,MAAM,uBAAoC;AAAA,EAC/C,gBAAgB,CAAC;AAAA,EACjB,gBAAgB,CAAC,OAAO,MAAM;AAAA,EAC9B,gBAAgB,CAAC,gBAAgB,iBAAiB,kBAAkB;AAAA,EACpE,kBAAkB;AAAA,EAClB,QAAQ;AAAA;AACV;AAEO,MAAM,yBAAwC;AAAA,EACnD,MAAM;AAAA,EACN,MAAM;AAAA,EACN,UAAU;AAAA,EACV,UAAU;AAAA,EACV,QAAQ,OAAO,KAAK;AAAA;AACtB;AAEO,MAAM,2BAA4C;AAAA,EACvD,aAAa;AAAA,EACb,iBAAiB,CAAC;AAAA,EAClB,iBAAiB,CAAC;AAAA,EAClB,aAAa,CAAC;AAAA,EACd,WAAW;AAAA,IACT,OAAO,CAAC;AAAA,IACR,OAAO,CAAC;AAAA,EACV;AACF;AAEO,MAAM,0BAA0C;AAAA,EACrD,SAAS;AAAA,EACT,SAAS,CAAC,OAAO,MAAM;AAAA,EACvB,aAAa;AAAA,EACb,UAAU;AACZ;AAEO,MAAM,0BAAiD;AAAA,EAC5D,GAAG;AAAA,EACH,cAAc;AAAA,IACZ,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,SAAS,CAAC,KAAK;AAAA,MACf,aAAa;AAAA,MACb,UAAU;AAAA,QACR,aAAa;AAAA,QACb,iBAAiB,CAAC;AAAA,MACpB;AAAA,IACF;AAAA,IACA,eAAe;AAAA,MACb,SAAS;AAAA,MACT,SAAS,CAAC,MAAM;AAAA,MAChB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,SAAS;AAAA,MACT,SAAS,CAAC,MAAM;AAAA,MAChB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,SAAS,CAAC,MAAM;AAAA,MAChB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,aAAa;AAAA,MACf;AAAA,IACF;AAAA,EACF;AACF;AAEO,MAAM,0BAET;AAAA,EACF,MAAM;AAAA,EACN,SAAS;AAAA,EACT,WAAW;AAAA,IACT,UAAU,KAAK,KAAK;AAAA;AAAA,IACpB,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,oBAAoB;AAAA,EACtB;AAAA,EACA,UAAU;AAAA,EACV,WAAW;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA,OAAO;AAAA,EACP,aAAa;AAAA,EACb,UAAU;AACZ;","names":[]}
+{"version":3,"sources":["../../../../src/app-router/admin/types.ts"],"sourcesContent":["import type {\n  AuthEndpoint,\n  CookieOpts as CookieOptions,\n  CorsOptions,\n  EndpointConfig,\n  SecurityOptions,\n  SessionEndpointConfig,\n  SessionSubEndpoint,\n  TernSecureHandlerOptions,\n  TokenCookieConfig,\n} from '@tern-secure/types';\nimport { type NextResponse } from 'next/server';\n\nexport const DEFAULT_CORS_OPTIONS: CorsOptions = {\n  allowedOrigins: [],\n  allowedMethods: ['GET', 'POST'],\n  allowedHeaders: ['Content-Type', 'Authorization', 'X-Requested-With'],\n  allowCredentials: true,\n  maxAge: 86400, // 24 hours\n};\n\nexport const DEFAULT_COOKIE_OPTIONS: CookieOptions = {\n  //namePrefix: '__session',\n  path: '/',\n  httpOnly: true,\n  sameSite: 'lax',\n  //session: {\n  //  maxAge: 3600 * 24 * 7, // Default: 1 week (consumer can set 5 mins to 2 weeks)\n  //},\n};\n\nexport const FIXED_TOKEN_CONFIGS = {\n  id: {\n    path: '/',\n    httpOnly: true,\n    sameSite: 'lax' as const,\n    maxAge: 3600, // 1 hour\n  },\n  refresh: {\n    path: '/',\n    httpOnly: true,\n    sameSite: 'lax' as const,\n    maxAge: 3600 * 24 * 30, // 30 days (changes when user events occur)\n  },\n  signature: {\n    path: '/',\n    httpOnly: true,\n    sameSite: 'lax' as const,\n    maxAge: 3600 * 24 * 7, // 1 week (as needed)\n  },\n  custom: {\n    path: '/',\n    httpOnly: true,\n    sameSite: 'lax' as const,\n    maxAge: 3600 * 24 * 7, // 1 week (as needed)\n  },\n} as const;\n\nexport const DEFAULT_SECURITY_OPTIONS: SecurityOptions = {\n  requireCSRF: true,\n  allowedReferers: [],\n  requiredHeaders: {},\n  ipWhitelist: [],\n  userAgent: {\n    block: [],\n    allow: [],\n  },\n};\n\nexport const DEFAULT_ENDPOINT_CONFIG: EndpointConfig = {\n  enabled: true,\n  methods: ['GET', 'POST'],\n  requireAuth: false,\n  security: DEFAULT_SECURITY_OPTIONS,\n};\n\nexport const DEFAULT_SESSIONS_CONFIG: SessionEndpointConfig = {\n  ...DEFAULT_ENDPOINT_CONFIG,\n  subEndpoints: {\n    verify: {\n      enabled: true,\n      methods: ['GET'],\n      requireAuth: false,\n      security: {\n        requireCSRF: true,\n        allowedReferers: [],\n      },\n    },\n    createsession: {\n      enabled: true,\n      methods: ['POST'],\n      requireAuth: false,\n      security: {\n        requireCSRF: true,\n      },\n    },\n    refresh: {\n      enabled: true,\n      methods: ['POST'],\n      requireAuth: true,\n      security: {\n        requireCSRF: true,\n      },\n    },\n    revoke: {\n      enabled: true,\n      methods: ['POST'],\n      requireAuth: true,\n      security: {\n        requireCSRF: true,\n      },\n    },\n  },\n};\n\nexport const DEFAULT_HANDLER_OPTIONS: Required<TernSecureHandlerOptions> & {\n  endpoints: Required<NonNullable<TernSecureHandlerOptions['endpoints']>>;\n} = {\n  cors: DEFAULT_CORS_OPTIONS,\n  cookies: DEFAULT_COOKIE_OPTIONS,\n  rateLimit: {\n    windowMs: 15 * 60 * 1000, // 15 minutes\n    maxRequests: 100,\n    skipSuccessful: false,\n    skipFailedRequests: false,\n  },\n  security: DEFAULT_SECURITY_OPTIONS,\n  endpoints: {\n    sessions: DEFAULT_SESSIONS_CONFIG,\n  },\n  tenantId: '',\n  enableCustomToken: false,\n  debug: false,\n  environment: 'production',\n  basePath: '/api/auth',\n};\n\nexport interface ValidationResult {\n  error?: NextResponse;\n  data?: any;\n}\n\nexport interface ValidationConfig {\n  cors?: CorsOptions;\n  security?: SecurityOptions;\n  endpoint?: {\n    name: AuthEndpoint;\n    config: EndpointConfig;\n  };\n  subEndpoint?: {\n    name: SessionSubEndpoint;\n    config: EndpointConfig;\n  };\n  requireIdToken?: boolean;\n  requireCsrfToken?: boolean;\n}\n\nexport interface ComprehensiveValidationResult {\n  isValid: boolean;\n  error?: Response;\n  corsResponse?: Response;\n  sessionData?: {\n    body: any;\n    idToken?: string;\n    csrfToken?: string;\n  };\n}\n\nexport type suffix = 'session' | 'id' | 'refresh' | 'signature' | 'custom';\n\nexport class CookieUtils {\n  static getCookieName(namePrefix: string, tokenType: suffix): string {\n    return `${namePrefix}.${tokenType}`;\n  }\n\n  static getCookieNames(namePrefix: string) {\n    return {\n      session: this.getCookieName(namePrefix, 'session'),\n      id: this.getCookieName(namePrefix, 'id'),\n      refresh: this.getCookieName(namePrefix, 'refresh'),\n      signature: this.getCookieName(namePrefix, 'signature'),\n      custom: this.getCookieName(namePrefix, 'custom'),\n    };\n  }\n\n  static getSessionConfig(cookieOptions: CookieOptions): TokenCookieConfig {\n    const sessionConfig = cookieOptions.session || {};\n    const defaultSession = DEFAULT_COOKIE_OPTIONS.session || {};\n\n    return {\n      domain: sessionConfig.domain ?? cookieOptions.domain,\n      path: sessionConfig.path ?? cookieOptions.path ?? '/',\n      httpOnly: sessionConfig.httpOnly ?? cookieOptions.httpOnly ?? true,\n      sameSite: sessionConfig.sameSite ?? cookieOptions.sameSite ?? 'lax',\n      maxAge: sessionConfig.maxAge ?? defaultSession.maxAge ?? 3600 * 24 * 7,\n    };\n  }\n\n  static getFixedTokenConfig(\n    cookieOptions: CookieOptions,\n    tokenType: Exclude<suffix, 'session'>,\n  ): TokenCookieConfig {\n    const fixedConfig = FIXED_TOKEN_CONFIGS[tokenType];\n\n    return {\n      domain: cookieOptions.domain,\n      path: fixedConfig.path,\n      httpOnly: fixedConfig.httpOnly,\n      sameSite: fixedConfig.sameSite,\n      maxAge: fixedConfig.maxAge,\n    };\n  }\n\n  static validateSessionMaxAge(maxAge: number): boolean {\n    const minAge = 300; // 5 minutes\n    const maxAgeLimit = 3600 * 24 * 14; // 2 weeks\n    return maxAge >= minAge && maxAge <= maxAgeLimit;\n  }\n}\n\nexport {\n  AuthEndpoint,\n  CookieOptions,\n  CorsOptions,\n  SecurityOptions,\n  SessionSubEndpoint,\n  EndpointConfig,\n  SessionEndpointConfig,\n  TernSecureHandlerOptions,\n};\n"],"mappings":"AAaO,MAAM,uBAAoC;AAAA,EAC/C,gBAAgB,CAAC;AAAA,EACjB,gBAAgB,CAAC,OAAO,MAAM;AAAA,EAC9B,gBAAgB,CAAC,gBAAgB,iBAAiB,kBAAkB;AAAA,EACpE,kBAAkB;AAAA,EAClB,QAAQ;AAAA;AACV;AAEO,MAAM,yBAAwC;AAAA;AAAA,EAEnD,MAAM;AAAA,EACN,UAAU;AAAA,EACV,UAAU;AAAA;AAAA;AAAA;AAIZ;AAEO,MAAM,sBAAsB;AAAA,EACjC,IAAI;AAAA,IACF,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU;AAAA,IACV,QAAQ;AAAA;AAAA,EACV;AAAA,EACA,SAAS;AAAA,IACP,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU;AAAA,IACV,QAAQ,OAAO,KAAK;AAAA;AAAA,EACtB;AAAA,EACA,WAAW;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU;AAAA,IACV,QAAQ,OAAO,KAAK;AAAA;AAAA,EACtB;AAAA,EACA,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU;AAAA,IACV,QAAQ,OAAO,KAAK;AAAA;AAAA,EACtB;AACF;AAEO,MAAM,2BAA4C;AAAA,EACvD,aAAa;AAAA,EACb,iBAAiB,CAAC;AAAA,EAClB,iBAAiB,CAAC;AAAA,EAClB,aAAa,CAAC;AAAA,EACd,WAAW;AAAA,IACT,OAAO,CAAC;AAAA,IACR,OAAO,CAAC;AAAA,EACV;AACF;AAEO,MAAM,0BAA0C;AAAA,EACrD,SAAS;AAAA,EACT,SAAS,CAAC,OAAO,MAAM;AAAA,EACvB,aAAa;AAAA,EACb,UAAU;AACZ;AAEO,MAAM,0BAAiD;AAAA,EAC5D,GAAG;AAAA,EACH,cAAc;AAAA,IACZ,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,SAAS,CAAC,KAAK;AAAA,MACf,aAAa;AAAA,MACb,UAAU;AAAA,QACR,aAAa;AAAA,QACb,iBAAiB,CAAC;AAAA,MACpB;AAAA,IACF;AAAA,IACA,eAAe;AAAA,MACb,SAAS;AAAA,MACT,SAAS,CAAC,MAAM;AAAA,MAChB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,SAAS;AAAA,MACT,SAAS,CAAC,MAAM;AAAA,MAChB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,SAAS,CAAC,MAAM;AAAA,MAChB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,aAAa;AAAA,MACf;AAAA,IACF;AAAA,EACF;AACF;AAEO,MAAM,0BAET;AAAA,EACF,MAAM;AAAA,EACN,SAAS;AAAA,EACT,WAAW;AAAA,IACT,UAAU,KAAK,KAAK;AAAA;AAAA,IACpB,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,oBAAoB;AAAA,EACtB;AAAA,EACA,UAAU;AAAA,EACV,WAAW;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA,UAAU;AAAA,EACV,mBAAmB;AAAA,EACnB,OAAO;AAAA,EACP,aAAa;AAAA,EACb,UAAU;AACZ;AAmCO,MAAM,YAAY;AAAA,EACvB,OAAO,cAAc,YAAoB,WAA2B;AAClE,WAAO,GAAG,UAAU,IAAI,SAAS;AAAA,EACnC;AAAA,EAEA,OAAO,eAAe,YAAoB;AACxC,WAAO;AAAA,MACL,SAAS,KAAK,cAAc,YAAY,SAAS;AAAA,MACjD,IAAI,KAAK,cAAc,YAAY,IAAI;AAAA,MACvC,SAAS,KAAK,cAAc,YAAY,SAAS;AAAA,MACjD,WAAW,KAAK,cAAc,YAAY,WAAW;AAAA,MACrD,QAAQ,KAAK,cAAc,YAAY,QAAQ;AAAA,IACjD;AAAA,EACF;AAAA,EAEA,OAAO,iBAAiB,eAAiD;AACvE,UAAM,gBAAgB,cAAc,WAAW,CAAC;AAChD,UAAM,iBAAiB,uBAAuB,WAAW,CAAC;AAE1D,WAAO;AAAA,MACL,QAAQ,cAAc,UAAU,cAAc;AAAA,MAC9C,MAAM,cAAc,QAAQ,cAAc,QAAQ;AAAA,MAClD,UAAU,cAAc,YAAY,cAAc,YAAY;AAAA,MAC9D,UAAU,cAAc,YAAY,cAAc,YAAY;AAAA,MAC9D,QAAQ,cAAc,UAAU,eAAe,UAAU,OAAO,KAAK;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,OAAO,oBACL,eACA,WACmB;AACnB,UAAM,cAAc,oBAAoB,SAAS;AAEjD,WAAO;AAAA,MACL,QAAQ,cAAc;AAAA,MACtB,MAAM,YAAY;AAAA,MAClB,UAAU,YAAY;AAAA,MACtB,UAAU,YAAY;AAAA,MACtB,QAAQ,YAAY;AAAA,IACtB;AAAA,EACF;AAAA,EAEA,OAAO,sBAAsB,QAAyB;AACpD,UAAM,SAAS;AACf,UAAM,cAAc,OAAO,KAAK;AAChC,WAAO,UAAU,UAAU,UAAU;AAAA,EACvC;AACF;","names":[]}

package/dist/esm/server/constant.js

@@ -1,8 +1,10 @@
-const API_URL = process.env.TERNSECURE_API_URL;
+const API_KEY = process.env.NEXT_PUBLIC_FIREBASE_API_KEY || "";
+const API_URL = process.env.TERNSECURE_API_URL || "";
 const API_VERSION = process.env.TERNSECURE_API_VERSION || "v1";
 const SIGN_IN_URL = process.env.NEXT_PUBLIC_SIGN_IN_URL || "";
 const SIGN_UP_URL = process.env.NEXT_PUBLIC_SIGN_UP_URL || "";
 export {
+  API_KEY,
   API_URL,
   API_VERSION,
   SIGN_IN_URL,

package/dist/esm/server/constant.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/server/constant.ts"],"sourcesContent":["\nexport const API_URL = process.env.TERNSECURE_API_URL\nexport const API_VERSION = process.env.TERNSECURE_API_VERSION || 'v1';\nexport const SIGN_IN_URL = process.env.NEXT_PUBLIC_SIGN_IN_URL || '';\nexport const SIGN_UP_URL = process.env.NEXT_PUBLIC_SIGN_UP_URL || '';"],"mappings":"AACO,MAAM,UAAU,QAAQ,IAAI;AAC5B,MAAM,cAAc,QAAQ,IAAI,0BAA0B;AAC1D,MAAM,cAAc,QAAQ,IAAI,2BAA2B;AAC3D,MAAM,cAAc,QAAQ,IAAI,2BAA2B;","names":[]}
+{"version":3,"sources":["../../../src/server/constant.ts"],"sourcesContent":["export const API_KEY = process.env.NEXT_PUBLIC_FIREBASE_API_KEY || '';\nexport const API_URL = process.env.TERNSECURE_API_URL || '';\nexport const API_VERSION = process.env.TERNSECURE_API_VERSION || 'v1';\nexport const SIGN_IN_URL = process.env.NEXT_PUBLIC_SIGN_IN_URL || '';\nexport const SIGN_UP_URL = process.env.NEXT_PUBLIC_SIGN_UP_URL || '';"],"mappings":"AAAO,MAAM,UAAU,QAAQ,IAAI,gCAAgC;AAC5D,MAAM,UAAU,QAAQ,IAAI,sBAAsB;AAClD,MAAM,cAAc,QAAQ,IAAI,0BAA0B;AAC1D,MAAM,cAAc,QAAQ,IAAI,2BAA2B;AAC3D,MAAM,cAAc,QAAQ,IAAI,2BAA2B;","names":[]}

package/dist/esm/server/ternSecureEdgeMiddleware.js

@@ -1,6 +1,5 @@
 import {
   constants,
-  createBackendInstanceClient,
   createTernSecureRequest,
   enableDebugLogging
 } from "@tern-secure/backend";
@@ -9,7 +8,7 @@ import { NextResponse } from "next/server";
 import { isRedirect, setHeader } from "../utils/response";
 import { serverRedirectWithAuth } from "../utils/serverRedirectAuth";
 import { createEdgeCompatibleLogger } from "../utils/withLogger";
-import { API_URL, API_VERSION, SIGN_IN_URL, SIGN_UP_URL } from "./constant";
+import { SIGN_IN_URL, SIGN_UP_URL } from "./constant";
 import {
   isNextjsNotFoundError,
   isNextjsRedirectError,
@@ -21,20 +20,8 @@ import {
 } from "./nextErrors";
 import { createProtect } from "./protect";
 import { createRedirect } from "./redirect";
+import { ternSecureBackendClient } from "./ternsecureClient";
 import { decorateRequest } from "./utils";
-const backendClientDefaultOptions = {
-  apiUrl: API_URL,
-  apiVersion: API_VERSION
-};
-const ternSecureBackendClient = async () => {
-  return createBackendClientWithOptions({});
-};
-const createBackendClientWithOptions = (options) => {
-  return createBackendInstanceClient({
-    ...backendClientDefaultOptions,
-    ...options
-  });
-};
 const ternSecureMiddleware = (...args) => {
   const [request, event] = parseRequestAndEvent(args);
   const [handler, params] = parseHandlerAndOptions(args);
@@ -90,17 +77,9 @@ const ternSecureMiddleware = (...args) => {
       decorateRequest(ternSecureRequest, handlerResult, requestStateClient);
       return handlerResult;
     };
-    const fireNextMiddleware = async (request2) => {
-      console.log("[TernSecureMiddleware] Firebase Request URL:", request2.url);
-      if (isFirebaseCookieRequest(request2)) {
-        const options = typeof params === "function" ? await params(request2) : params;
-        rewriteFirebaseRequest(options, request2);
-        return handleFirebaseAuthRequest(request2);
-      }
-    };
     const nextMiddleware = async (request2, event2) => {
       if (isFirebaseCookieRequest(request2)) {
-        return fireNextMiddleware(request2, event2);
+        return handleFirebaseAuthRequest(request2);
       }
       return withAuthNextMiddleware(request2, event2);
     };