@thinkingcat/auth-utils 1.0.47 → 1.0.49

package/dist/index.js

@@ -1,77 +1,4 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyToken = verifyToken;
-exports.extractRoleFromPayload = extractRoleFromPayload;
-exports.createNextAuthJWT = createNextAuthJWT;
-exports.encodeNextAuthToken = encodeNextAuthToken;
-exports.setCustomTokens = setCustomTokens;
-exports.setNextAuthToken = setNextAuthToken;
-exports.createRedirectHTML = createRedirectHTML;
-exports.createAuthResponse = createAuthResponse;
-exports.validateServiceSubscription = validateServiceSubscription;
-exports.refreshSSOToken = refreshSSOToken;
-exports.getRefreshTokenFromSSO = getRefreshTokenFromSSO;
-exports.verifyAndRefreshToken = verifyAndRefreshToken;
-exports.redirectToError = redirectToError;
-exports.clearAuthCookies = clearAuthCookies;
-exports.getEffectiveRole = getEffectiveRole;
-exports.requiresSubscription = requiresSubscription;
-exports.createNextAuthCookies = createNextAuthCookies;
-exports.createNextAuthBaseConfig = createNextAuthBaseConfig;
-exports.createInitialJWTToken = createInitialJWTToken;
-exports.createEmptySession = createEmptySession;
-exports.mapTokenToSession = mapTokenToSession;
-exports.handleJWTCallback = handleJWTCallback;
-exports.getJWTFromCustomTokenCookie = getJWTFromCustomTokenCookie;
-exports.checkLicenseKey = checkLicenseKey;
-exports.checkRoleAccess = checkRoleAccess;
-exports.redirectToSSOLogin = redirectToSSOLogin;
-exports.redirectToRoleDashboard = redirectToRoleDashboard;
-exports.isTokenExpired = isTokenExpired;
-exports.isValidToken = isValidToken;
-exports.hasRole = hasRole;
-exports.hasAnyRole = hasAnyRole;
-exports.isPublicPath = isPublicPath;
-exports.isApiPath = isApiPath;
-exports.isProtectedApiPath = isProtectedApiPath;
-exports.checkAuthentication = checkAuthentication;
-exports.verifyAndRefreshTokenWithNextAuth = verifyAndRefreshTokenWithNextAuth;
-exports.createMiddlewareConfig = createMiddlewareConfig;
-exports.handleMiddleware = handleMiddleware;
-const jose_1 = require("jose");
+import { jwtVerify, EncryptJWT } from 'jose';
 // ============================================================================
 // UTILITY FUNCTIONS
 // ============================================================================
@@ -102,7 +29,7 @@ async function createHashSHA256(data) {
  * Edge Runtime 호환을 위해 next/server를 동적 import
  */
 async function getNextServer() {
-    return await Promise.resolve().then(() => __importStar(require('next/server')));
+    return await import('next/server');
 }
 /**
  * NextAuth 세션 토큰 쿠키를 삭제하는 헬퍼 함수
@@ -129,10 +56,10 @@ function clearAllAuthCookies(response, cookiePrefix, isProduction) {
  * @param secret JWT 서명에 사용할 secret key
  * @returns 검증된 payload 또는 null
  */
-async function verifyToken(accessToken, secret) {
+export async function verifyToken(accessToken, secret) {
     try {
         const secretBytes = new TextEncoder().encode(secret);
-        const { payload } = await (0, jose_1.jwtVerify)(accessToken, secretBytes);
+        const { payload } = await jwtVerify(accessToken, secretBytes);
         if (payload && typeof payload === 'object' && payload.email) {
             return { payload: payload };
         }
@@ -149,7 +76,7 @@ async function verifyToken(accessToken, secret) {
  * @param defaultRole 기본 역할 (기본값: 'ADMIN')
  * @returns 추출된 역할
  */
-function extractRoleFromPayload(payload, serviceId, defaultRole = 'ADMIN') {
+export function extractRoleFromPayload(payload, serviceId, defaultRole = 'ADMIN') {
     const services = payload.services || [];
     const service = services.find((s) => s.serviceId === serviceId);
     return service?.role || payload.role || defaultRole;
@@ -160,7 +87,7 @@ function extractRoleFromPayload(payload, serviceId, defaultRole = 'ADMIN') {
  * @param serviceId 서비스 ID (필수)
  * @returns NextAuth JWT 객체
  */
-function createNextAuthJWT(payload, serviceId) {
+export function createNextAuthJWT(payload, serviceId) {
     const services = payload.services || [];
     const service = services.find((s) => s.serviceId === serviceId);
     const effectiveRole = service?.role || payload.role || 'ADMIN';
@@ -216,10 +143,10 @@ function createNextAuthJWT(payload, serviceId) {
  * @param maxAge 토큰 유효 기간 (초, 기본값: 30일)
  * @returns 인코딩된 세션 토큰
  */
-async function encodeNextAuthToken(jwt, secret, maxAge = 30 * 24 * 60 * 60) {
+export async function encodeNextAuthToken(jwt, secret, maxAge = 30 * 24 * 60 * 60) {
     // NextAuth의 encode() 함수를 우선적으로 사용 (가장 호환성 좋음)
     try {
-        const { encode } = await Promise.resolve().then(() => __importStar(require('next-auth/jwt')));
+        const { encode } = await import('next-auth/jwt');
         debugLog('encodeNextAuthToken', 'Using next-auth/jwt encode');
         const encoded = await encode({
             token: jwt,
@@ -244,7 +171,7 @@ async function encodeNextAuthToken(jwt, secret, maxAge = 30 * 24 * 60 * 60) {
         // EncryptJWT를 사용하여 JWE 토큰 생성
         // NextAuth는 'dir' 키 관리와 'A256GCM' 암호화를 사용
         try {
-            const token = await new jose_1.EncryptJWT(jwt)
+            const token = await new EncryptJWT(jwt)
                 .setProtectedHeader({
                 alg: 'dir', // Direct key agreement
                 enc: 'A256GCM' // AES-256-GCM encryption
@@ -262,7 +189,7 @@ async function encodeNextAuthToken(jwt, secret, maxAge = 30 * 24 * 60 * 60) {
         }
     }
 }
-function setCustomTokens(response, accessToken, optionsOrRefreshToken, options) {
+export function setCustomTokens(response, accessToken, optionsOrRefreshToken, options) {
     // 옵션 파라미터 처리: refreshToken과 options를 분리
     let refreshTokenValue;
     let cookiePrefix;
@@ -335,7 +262,7 @@ function setCustomTokens(response, accessToken, optionsOrRefreshToken, options)
  * @param options.isProduction 프로덕션 환경 여부 (기본값: false)
  * @param options.cookieDomain 쿠키 도메인 (선택)
  */
-function setNextAuthToken(response, sessionToken, options = {}) {
+export function setNextAuthToken(response, sessionToken, options = {}) {
     const { isProduction = false, cookieDomain, } = options;
     // createNextAuthCookies와 동일한 로직 사용
     const cookies = createNextAuthCookies({ isProduction, cookieDomain });
@@ -353,7 +280,7 @@ function setNextAuthToken(response, sessionToken, options = {}) {
  * @param text 표시할 텍스트 (필수)
  * @returns HTML 문자열
  */
-function createRedirectHTML(redirectPath, text) {
+export function createRedirectHTML(redirectPath, text) {
     return `
     <!DOCTYPE html>
     <html>
@@ -437,7 +364,7 @@ function createRedirectHTML(redirectPath, text) {
  * @param options.licenseKey 라이센스 키 (필수)
  * @returns NextResponse 객체 (리다이렉트 또는 JSON 응답)
  */
-async function createAuthResponse(accessToken, secret, options) {
+export async function createAuthResponse(accessToken, secret, options) {
     await checkLicenseKey(options.licenseKey);
     const { req, refreshToken, redirectPath, text, cookiePrefix, isProduction = false, cookieDomain, serviceId, } = options;
     // 1. 토큰 검증
@@ -515,7 +442,7 @@ async function createAuthResponse(accessToken, secret, options) {
  * @param ssoBaseURL SSO 서버 기본 URL (필수)
  * @returns 구독 유효성 결과
  */
-function validateServiceSubscription(services, serviceId, ssoBaseURL) {
+export function validateServiceSubscription(services, serviceId, ssoBaseURL) {
     const filteredServices = services.filter(service => service.serviceId === serviceId);
     if (filteredServices.length === 0) {
         return {
@@ -544,7 +471,7 @@ function validateServiceSubscription(services, serviceId, ssoBaseURL) {
  * @param options.authServiceKey 인증 서비스 키 (기본값: 환경 변수)
  * @returns SSO refresh token 응답
  */
-async function refreshSSOToken(refreshToken, options) {
+export async function refreshSSOToken(refreshToken, options) {
     const { ssoBaseURL, authServiceKey } = options;
     if (!authServiceKey) {
         throw new Error('AUTH_SERVICE_SECRET_KEY not configured');
@@ -568,7 +495,7 @@ async function refreshSSOToken(refreshToken, options) {
  * @param options.authServiceKey 인증 서비스 키 (기본값: 환경 변수)
  * @returns refresh token 또는 null
  */
-async function getRefreshTokenFromSSO(userId, accessToken, options) {
+export async function getRefreshTokenFromSSO(userId, accessToken, options) {
     const { ssoBaseURL, authServiceKey } = options;
     if (!authServiceKey) {
         return null;
@@ -598,7 +525,7 @@ async function getRefreshTokenFromSSO(userId, accessToken, options) {
 // ============================================================================
 // TOKEN REFRESH & VERIFICATION FUNCTIONS
 // ============================================================================
-async function verifyAndRefreshToken(req, secret, options) {
+export async function verifyAndRefreshToken(req, secret, options) {
     const { cookiePrefix, serviceId, isProduction, cookieDomain, text, ssoBaseURL, authServiceKey, forceRefresh = false, } = options;
     // 1. access_token 쿠키 확인
     // forceRefresh가 true이면 access token이 있어도 refresh를 시도
@@ -607,7 +534,7 @@ async function verifyAndRefreshToken(req, secret, options) {
     if (accessToken && !forceRefresh) {
         try {
             const secretBytes = new TextEncoder().encode(secret);
-            const { payload } = await (0, jose_1.jwtVerify)(accessToken, secretBytes);
+            const { payload } = await jwtVerify(accessToken, secretBytes);
             if (payload && typeof payload === 'object' && payload.email) {
                 return { isValid: true, payload: payload };
             }
@@ -644,7 +571,7 @@ async function verifyAndRefreshToken(req, secret, options) {
                     let payload;
                     try {
                         const secretBytes = new TextEncoder().encode(secret);
-                        const { payload: tokenPayload } = await (0, jose_1.jwtVerify)(refreshResult.accessToken, secretBytes);
+                        const { payload: tokenPayload } = await jwtVerify(refreshResult.accessToken, secretBytes);
                         if (tokenPayload && typeof tokenPayload === 'object' && tokenPayload.email) {
                             payload = tokenPayload;
                         }
@@ -732,7 +659,7 @@ async function verifyAndRefreshToken(req, secret, options) {
  * @param errorPath 에러 페이지 경로 (기본값: '/error')
  * @returns NextResponse 리다이렉트 응답
  */
-async function redirectToError(req, code, message, errorPath = '/error') {
+export async function redirectToError(req, code, message, errorPath = '/error') {
     const url = new URL(errorPath, req.url);
     url.searchParams.set('code', code);
     url.searchParams.set('message', message);
@@ -745,7 +672,7 @@ async function redirectToError(req, code, message, errorPath = '/error') {
  * @param cookiePrefix 쿠키 이름 접두사 (필수)
  * @returns NextResponse 객체
  */
-function clearAuthCookies(response, cookiePrefix) {
+export function clearAuthCookies(response, cookiePrefix) {
     response.cookies.delete(`${cookiePrefix}_access_token`);
     response.cookies.delete(`${cookiePrefix}_refresh_token`);
     return response;
@@ -756,7 +683,7 @@ function clearAuthCookies(response, cookiePrefix) {
  * @param serviceId 서비스 ID (필수)
  * @returns 추출된 역할 또는 undefined
  */
-function getEffectiveRole(token, serviceId) {
+export function getEffectiveRole(token, serviceId) {
     if (!token)
         return undefined;
     // token이 이미 JWT 객체인 경우 role을 직접 사용
@@ -776,7 +703,7 @@ function getEffectiveRole(token, serviceId) {
  * @param systemAdminRole 시스템 관리자 역할 (기본값: 'SYSTEM_ADMIN')
  * @returns 구독이 필요한지 여부
  */
-function requiresSubscription(pathname, role, subscriptionRequiredPaths, systemAdminRole = 'SYSTEM_ADMIN') {
+export function requiresSubscription(pathname, role, subscriptionRequiredPaths, systemAdminRole = 'SYSTEM_ADMIN') {
     // 시스템 관리자는 구독 확인 제외
     if (role === systemAdminRole) {
         return false;
@@ -798,7 +725,7 @@ const VALID_LICENSE_KEY_HASHES = new Set([
  * @param options.cookieDomain 쿠키 도메인 (선택)
  * @returns NextAuth 쿠키 설정 객체
  */
-function createNextAuthCookies(options) {
+export function createNextAuthCookies(options) {
     const { isProduction = false, cookieDomain } = options;
     const isSecure = isProduction;
     // cookieDomain이 설정되어 있으면 같은 도메인/서브도메인 간 쿠키 공유를 위해 'lax' 사용
@@ -850,7 +777,7 @@ function createNextAuthCookies(options) {
  * @param options.jwtMaxAge JWT 최대 유지 시간 (초, 기본값: 30일)
  * @returns NextAuth 기본 설정 객체
  */
-function createNextAuthBaseConfig(options) {
+export function createNextAuthBaseConfig(options) {
     const { secret, isProduction = false, cookieDomain, signInPath = '/login', errorPath = '/login', nextAuthUrl, sessionMaxAge = 30 * 24 * 60 * 60, // 30일
     jwtMaxAge = 30 * 24 * 60 * 60, // 30일
      } = options;
@@ -879,7 +806,7 @@ function createNextAuthBaseConfig(options) {
  * @param account 계정 정보
  * @returns 업데이트된 JWT 토큰
  */
-function createInitialJWTToken(token, user, account) {
+export function createInitialJWTToken(token, user, account) {
     return {
         ...token,
         id: user.id,
@@ -902,7 +829,7 @@ function createInitialJWTToken(token, user, account) {
  * @param session 기존 세션
  * @returns 빈 세션 객체
  */
-function createEmptySession(session) {
+export function createEmptySession(session) {
     return {
         ...session,
         user: {
@@ -920,7 +847,7 @@ function createEmptySession(session) {
  * @param token JWT 토큰
  * @returns 업데이트된 세션
  */
-function mapTokenToSession(session, token) {
+export function mapTokenToSession(session, token) {
     if (!session.user) {
         return session;
     }
@@ -952,7 +879,7 @@ function mapTokenToSession(session, token) {
  * @param options.debug 디버깅 로그 출력 여부 (기본값: false)
  * @returns 업데이트된 JWT 토큰
  */
-async function handleJWTCallback(token, user, account, options) {
+export async function handleJWTCallback(token, user, account, options) {
     const { secret, licenseKey, serviceId, cookieName, debug = false, ssoBaseURL, authServiceKey, } = options || {};
     // 디버깅 로그
     if (debug) {
@@ -1063,10 +990,10 @@ async function handleJWTCallback(token, user, account, options) {
  * @param licenseKey 라이센스 키 (필수)
  * @returns NextAuth JWT 객체 또는 null
  */
-async function getJWTFromCustomTokenCookie(cookieName, secret, serviceId, licenseKey) {
+export async function getJWTFromCustomTokenCookie(cookieName, secret, serviceId, licenseKey) {
     debugLog('getJWTFromCustomTokenCookie', `Reading cookie: ${cookieName}`);
     try {
-        const { cookies } = await Promise.resolve().then(() => __importStar(require('next/headers')));
+        const { cookies } = await import('next/headers');
         const cookieStore = await cookies();
         const accessToken = cookieStore.get(cookieName)?.value;
         if (!accessToken) {
@@ -1103,7 +1030,7 @@ async function getJWTFromCustomTokenCookie(cookieName, secret, serviceId, licens
 // ============================================================================
 // LICENSE & AUTHORIZATION FUNCTIONS
 // ============================================================================
-async function checkLicenseKey(licenseKey) {
+export async function checkLicenseKey(licenseKey) {
     if (!licenseKey || licenseKey.length < 10) {
         throw new Error('License key is required');
     }
@@ -1112,7 +1039,7 @@ async function checkLicenseKey(licenseKey) {
         throw new Error('Invalid license key');
     }
 }
-function checkRoleAccess(pathname, role, roleConfig) {
+export function checkRoleAccess(pathname, role, roleConfig) {
     // 각 역할 설정을 확인
     for (const [configRole, config] of Object.entries(roleConfig)) {
         const isPathMatch = config.paths.some(path => pathname.startsWith(path));
@@ -1138,7 +1065,7 @@ function checkRoleAccess(pathname, role, roleConfig) {
  * @param ssoBaseURL SSO 서버 기본 URL (필수)
  * @returns NextResponse 리다이렉트 응답
  */
-async function redirectToSSOLogin(req, serviceId, ssoBaseURL) {
+export async function redirectToSSOLogin(req, serviceId, ssoBaseURL) {
     const { NextResponse: NextResponseClass } = await getNextServer();
     return NextResponseClass.redirect(new URL(`${ssoBaseURL}/auth/login?serviceId=${serviceId}`, req.url));
 }
@@ -1150,7 +1077,7 @@ async function redirectToSSOLogin(req, serviceId, ssoBaseURL) {
  * @param defaultPath 기본 경로 (기본값: '/admin')
  * @returns NextResponse 리다이렉트 응답
  */
-async function redirectToRoleDashboard(req, role, rolePaths, defaultPath = '/admin') {
+export async function redirectToRoleDashboard(req, role, rolePaths, defaultPath = '/admin') {
     const redirectPath = rolePaths[role] || defaultPath;
     const { NextResponse: NextResponseClass } = await getNextServer();
     return NextResponseClass.redirect(new URL(redirectPath, req.url));
@@ -1163,7 +1090,7 @@ async function redirectToRoleDashboard(req, role, rolePaths, defaultPath = '/adm
  * @param token NextAuth JWT 객체
  * @returns 만료 여부
  */
-function isTokenExpired(token) {
+export function isTokenExpired(token) {
     if (!token)
         return true;
     if (token.exp && typeof token.exp === 'number' && token.exp < Math.floor(Date.now() / 1000)) {
@@ -1176,7 +1103,7 @@ function isTokenExpired(token) {
  * @param token NextAuth JWT 객체
  * @returns 유효성 여부
  */
-function isValidToken(token) {
+export function isValidToken(token) {
     if (!token)
         return false;
     if (isTokenExpired(token))
@@ -1192,7 +1119,7 @@ function isValidToken(token) {
  * @param serviceId 서비스 ID (필수)
  * @returns 역할 보유 여부
  */
-function hasRole(token, role, serviceId) {
+export function hasRole(token, role, serviceId) {
     if (!token)
         return false;
     const effectiveRole = getEffectiveRole(token, serviceId);
@@ -1205,7 +1132,7 @@ function hasRole(token, role, serviceId) {
  * @param serviceId 서비스 ID (필수)
  * @returns 역할 보유 여부
  */
-function hasAnyRole(token, roles, serviceId) {
+export function hasAnyRole(token, roles, serviceId) {
     if (!token)
         return false;
     const effectiveRole = getEffectiveRole(token, serviceId);
@@ -1220,7 +1147,7 @@ function hasAnyRole(token, roles, serviceId) {
  * @param publicPaths 공개 경로 배열
  * @returns 공개 경로 여부
  */
-function isPublicPath(pathname, publicPaths) {
+export function isPublicPath(pathname, publicPaths) {
     return publicPaths.some(path => pathname === path || pathname.startsWith(path));
 }
 /**
@@ -1228,7 +1155,7 @@ function isPublicPath(pathname, publicPaths) {
  * @param pathname 경로명
  * @returns API 경로 여부
  */
-function isApiPath(pathname) {
+export function isApiPath(pathname) {
     return pathname.startsWith('/api/');
 }
 /**
@@ -1237,7 +1164,7 @@ function isApiPath(pathname) {
  * @param exemptPaths 제외할 경로 배열
  * @returns 보호된 API 경로 여부
  */
-function isProtectedApiPath(pathname, exemptPaths = []) {
+export function isProtectedApiPath(pathname, exemptPaths = []) {
     if (!isApiPath(pathname))
         return false;
     return !exemptPaths.some(path => pathname.startsWith(path));
@@ -1252,7 +1179,7 @@ function isProtectedApiPath(pathname, exemptPaths = []) {
  * @param options 옵션
  * @returns 인증 결과
  */
-async function checkAuthentication(req, secret, options) {
+export async function checkAuthentication(req, secret, options) {
     const { cookiePrefix, serviceId, getNextAuthToken, } = options;
     let nextAuthToken = null;
     if (getNextAuthToken) {
@@ -1292,7 +1219,7 @@ async function checkAuthentication(req, secret, options) {
  * @param options 옵션
  * @returns 인증 결과
  */
-async function verifyAndRefreshTokenWithNextAuth(req, nextAuthToken, secret, options) {
+export async function verifyAndRefreshTokenWithNextAuth(req, nextAuthToken, secret, options) {
     const { cookiePrefix, isProduction } = options;
     // NextAuth 세션 토큰 쿠키 확인
     const nextAuthSessionTokenCookieName = isProduction
@@ -1315,7 +1242,7 @@ async function verifyAndRefreshTokenWithNextAuth(req, nextAuthToken, secret, opt
     if (accessToken) {
         try {
             const secretBytes = new TextEncoder().encode(secret);
-            const { payload } = await (0, jose_1.jwtVerify)(accessToken, secretBytes);
+            const { payload } = await jwtVerify(accessToken, secretBytes);
             if (payload && typeof payload === 'object' && payload.email) {
                 hasValidAccessToken = true;
             }
@@ -1341,7 +1268,7 @@ async function verifyAndRefreshTokenWithNextAuth(req, nextAuthToken, secret, opt
         if (accessToken) {
             try {
                 const secretBytes = new TextEncoder().encode(secret);
-                const result = await (0, jose_1.jwtVerify)(accessToken, secretBytes);
+                const result = await jwtVerify(accessToken, secretBytes);
                 payload = result.payload;
             }
             catch {
@@ -1380,7 +1307,7 @@ async function verifyAndRefreshTokenWithNextAuth(req, nextAuthToken, secret, opt
         if (accessToken && hasValidAccessToken) {
             try {
                 const secretBytes = new TextEncoder().encode(secret);
-                const result = await (0, jose_1.jwtVerify)(accessToken, secretBytes);
+                const result = await jwtVerify(accessToken, secretBytes);
                 payload = result.payload;
             }
             catch {
@@ -1405,7 +1332,7 @@ async function verifyAndRefreshTokenWithNextAuth(req, nextAuthToken, secret, opt
  * @param defaults 기본 설정값 (선택사항, 제공하지 않으면 최소 기본값 사용)
  * @returns 미들웨어 설정 객체
  */
-function createMiddlewareConfig(config, defaults) {
+export function createMiddlewareConfig(config, defaults) {
     // 기본값 설정
     const defaultPublicPaths = defaults?.publicPaths || [
         '/robots.txt',
@@ -1471,7 +1398,7 @@ function createMiddlewareConfig(config, defaults) {
  * @param options 미들웨어 실행 옵션 (secret 필수)
  * @returns NextResponse 또는 null (다음 미들웨어로 진행)
  */
-async function handleMiddleware(req, config, options) {
+export async function handleMiddleware(req, config, options) {
     // Edge Runtime 호환을 위해 next/server를 한 번만 import
     const { NextResponse: NextResponseClass } = await getNextServer();
     try {
@@ -1491,7 +1418,7 @@ async function handleMiddleware(req, config, options) {
         }
         else {
             try {
-                const { getToken } = await Promise.resolve().then(() => __importStar(require('next-auth/jwt')));
+                const { getToken } = await import('next-auth/jwt');
                 token = await getToken({ req, secret });
                 debugLog('handleMiddleware', 'getToken result:', { hasToken: !!token });
             }
@@ -1664,7 +1591,7 @@ async function handleMiddleware(req, config, options) {
             }
             else {
                 try {
-                    const { getToken } = await Promise.resolve().then(() => __importStar(require('next-auth/jwt')));
+                    const { getToken } = await import('next-auth/jwt');
                     finalToken = await getToken({ req, secret });
                 }
                 catch {

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@thinkingcat/auth-utils",
-  "version": "1.0.47",
+  "version": "1.0.49",
   "description": "Authentication utilities for ThinkingCat SSO services with conditional logging",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
+      "edge-light": "./dist/index.js",
       "default": "./dist/index.js"
     }
   },