@thinkingcat/auth-utils 1.0.40 → 1.0.41

package/dist/index.js

@@ -460,9 +460,33 @@ async function createAuthResponse(accessToken, secret, options) {
     const response = redirectPath
         ? NextResponseClass.redirect(new URL(redirectPath, req.url), { status: 302 })
         : NextResponseClass.json({ success: true, message: text || 'Authentication successful' }, { status: 200 });
-    // 4. 처음 로그인 시에는 NextAuth 쿠키를 생성하지 않음
-    // Edge Runtime에서 생성한 NextAuth 쿠키는 Node.js Runtime에서 디코드 실패
-    // 대신 커스텀 토큰만 설정하고, handleJWTCallback이 이를 읽어서 세션 생성
+    // 4. NextAuth 세션 쿠키 생성 (Edge Runtime에서도 작동하도록 encodeNextAuthToken 사용)
+    try {
+        const nextAuthToken = await encodeNextAuthToken(jwt, secret);
+        const nextAuthCookieName = isProduction
+            ? '__Secure-next-auth.session-token'
+            : 'next-auth.session-token';
+        const cookieOptions = {
+            httpOnly: true,
+            secure: isProduction,
+            sameSite: isProduction ? 'none' : 'lax',
+            path: '/',
+            maxAge: 30 * 24 * 60 * 60, // 30일
+        };
+        if (cookieDomain) {
+            cookieOptions.domain = cookieDomain;
+        }
+        response.cookies.set(nextAuthCookieName, nextAuthToken, cookieOptions);
+        debugLog('createAuthResponse', 'NextAuth session cookie set:', {
+            name: nextAuthCookieName,
+            valueLength: nextAuthToken.length,
+            hasRefreshToken: !!refreshToken,
+        });
+    }
+    catch (error) {
+        debugError('createAuthResponse', 'Failed to set NextAuth cookie:', error);
+        // NextAuth 쿠키 실패해도 커스텀 토큰으로는 작동 가능
+    }
     // 5. 커스텀 토큰 쿠키 설정
     if (refreshToken) {
         setCustomTokens(response, accessToken, refreshToken, {
@@ -1534,12 +1558,35 @@ async function handleMiddleware(req, config, options) {
                     const tokenRole = extractRoleFromPayload(payload, serviceId, defaultRole);
                     debugLog('handleMiddleware', `Extracted role: ${tokenRole}`);
                     // 3. Refresh token 가져오기 (서버 간 통신)
-                    const userId = payload.sub || payload.userId || '';
+                    const userId = payload.id || payload.sub || payload.userId || '';
                     const ssoBaseURL = options.ssoBaseURL;
                     const authServiceKey = options.authServiceKey;
-                    const refreshToken = authServiceKey
-                        ? await getRefreshTokenFromSSO(userId, tokenParam, { ssoBaseURL, authServiceKey }) || ''
-                        : '';
+                    debugLog('handleMiddleware', 'Getting refresh token from SSO:', {
+                        userId,
+                        hasSSO: !!ssoBaseURL,
+                        hasAuthKey: !!authServiceKey,
+                    });
+                    let refreshToken = '';
+                    if (authServiceKey && userId) {
+                        try {
+                            const refreshTokenResult = await getRefreshTokenFromSSO(userId, tokenParam, { ssoBaseURL, authServiceKey });
+                            refreshToken = refreshTokenResult || '';
+                            debugLog('handleMiddleware', 'Refresh token result:', {
+                                hasRefreshToken: !!refreshToken,
+                                length: refreshToken.length,
+                            });
+                        }
+                        catch (error) {
+                            debugError('handleMiddleware', 'Failed to get refresh token:', error);
+                            // refresh token이 없어도 access token으로는 로그인 가능
+                        }
+                    }
+                    else {
+                        debugLog('handleMiddleware', 'Skipping refresh token fetch:', {
+                            hasUserId: !!userId,
+                            hasAuthKey: !!authServiceKey,
+                        });
+                    }
                     // 4. 자체 토큰 생성 및 쿠키 설정
                     const redirectPath = config.rolePaths[tokenRole] || config.rolePaths[defaultRole] || '/admin';
                     debugLog('handleMiddleware', `Creating auth response, redirect to: ${redirectPath}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkingcat/auth-utils",
-  "version": "1.0.40",
+  "version": "1.0.41",
   "description": "Authentication utilities for ThinkingCat SSO services with conditional logging",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",