@thinkingcat/auth-utils 1.0.25 → 1.0.27

package/dist/index.d.ts

@@ -130,11 +130,13 @@ export declare function encodeNextAuthToken(jwt: JWT, secret: string, maxAge?: n
 export declare function setCustomTokens(response: ResponseLike, accessToken: string, refreshToken: string, options?: {
     cookiePrefix?: string;
     isProduction?: boolean;
+    cookieDomain?: string;
 }): void;
 export declare function setCustomTokens(response: ResponseLike, accessToken: string, options?: {
     refreshToken?: string;
     cookiePrefix?: string;
     isProduction?: boolean;
+    cookieDomain?: string;
 }): void;
 /**
  * NextAuth 세션 토큰만 설정

package/dist/index.js

@@ -259,15 +259,17 @@ function setCustomTokens(response, accessToken, optionsOrRefreshToken, options)
     let refreshTokenValue;
     let cookiePrefix;
     let isProduction;
+    let cookieDomain;
     if (typeof optionsOrRefreshToken === 'string') {
         // 기존 방식: refreshToken이 문자열로 전달된 경우
         refreshTokenValue = optionsOrRefreshToken;
-        const { cookiePrefix: prefix, isProduction: prod = false, } = options || {};
+        const { cookiePrefix: prefix, isProduction: prod = false, cookieDomain: domain, } = options || {};
         if (!prefix) {
             throw new Error('cookiePrefix is required');
         }
         cookiePrefix = prefix;
         isProduction = prod;
+        cookieDomain = domain;
     }
     else {
         // 새로운 방식: options 객체로 전달된 경우
@@ -278,26 +280,42 @@ function setCustomTokens(response, accessToken, optionsOrRefreshToken, options)
         }
         cookiePrefix = opts.cookiePrefix;
         isProduction = opts.isProduction || false;
+        cookieDomain = opts.cookieDomain;
     }
-    // access_token 설정
-    const accessTokenName = `${cookiePrefix}_access_token`;
-    response.cookies.delete(accessTokenName);
-    response.cookies.set(accessTokenName, accessToken, {
+    // 쿠키 옵션 생성
+    const cookieOptions = {
         httpOnly: true,
         secure: isProduction,
         sameSite: isProduction ? 'none' : 'lax',
-        maxAge: 15 * 60, // 15분
         path: '/',
+        maxAge: 15 * 60, // access token: 15분
+    };
+    if (cookieDomain) {
+        cookieOptions.domain = cookieDomain;
+    }
+    // access_token 설정
+    const accessTokenName = `${cookiePrefix}_access_token`;
+    response.cookies.delete(accessTokenName);
+    response.cookies.set(accessTokenName, accessToken, cookieOptions);
+    debugLog('setCustomTokens', `Set ${accessTokenName} cookie:`, {
+        hasValue: !!accessToken,
+        maxAge: cookieOptions.maxAge,
+        domain: cookieOptions.domain,
+        secure: cookieOptions.secure,
+        sameSite: cookieOptions.sameSite,
     });
     // refresh_token 설정 (있는 경우)
     if (refreshTokenValue) {
         const refreshTokenName = `${cookiePrefix}_refresh_token`;
-        response.cookies.set(refreshTokenName, refreshTokenValue, {
-            httpOnly: true,
-            secure: isProduction,
-            sameSite: isProduction ? 'none' : 'lax',
-            maxAge: 30 * 24 * 60 * 60, // 30일
-            path: '/',
+        const refreshCookieOptions = {
+            ...cookieOptions,
+            maxAge: 30 * 24 * 60 * 60, // refresh token: 30일
+        };
+        response.cookies.set(refreshTokenName, refreshTokenValue, refreshCookieOptions);
+        debugLog('setCustomTokens', `Set ${refreshTokenName} cookie:`, {
+            hasValue: !!refreshTokenValue,
+            maxAge: refreshCookieOptions.maxAge,
+            domain: refreshCookieOptions.domain,
         });
     }
 }
@@ -468,12 +486,14 @@ async function createAuthResponse(accessToken, secret, options) {
         setCustomTokens(response, accessToken, refreshToken, {
             cookiePrefix,
             isProduction,
+            cookieDomain,
         });
     }
     else {
         setCustomTokens(response, accessToken, {
             cookiePrefix,
             isProduction,
+            cookieDomain,
         });
     }
     debugLog('createAuthResponse', 'Custom tokens set successfully');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkingcat/auth-utils",
-  "version": "1.0.25",
+  "version": "1.0.27",
   "description": "Authentication utilities for ThinkingCat SSO services with conditional logging",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",