@thinkingcat/auth-utils 2.0.3 → 2.0.4

package/dist/middleware/handler.js

@@ -71,11 +71,14 @@ async function handleMiddleware(req, config, options) {
                 (0, logger_js_1.debugLog)('handleMiddleware', 'getToken failed', error);
             }
         }
-        // Refresh token 체크 - 없으면 모든 인증 쿠키 초기화
+        const effectiveRole = (0, roles_js_1.getEffectiveRole)(token, serviceId);
+        // Relaxed Cookie Cleanup - 어떠한 인증 토큰도 없을 때만 잔여 쿠키 정리
         const refreshTokenCookieName = `${cookiePrefix}_refresh_token`;
         const refreshTokenCookie = req.cookies.get(refreshTokenCookieName);
-        if (!refreshTokenCookie && req.cookies.getAll().length > 0) {
-            (0, logger_js_1.debugLog)('handleMiddleware', `No refresh token found (${refreshTokenCookieName}), clearing all auth cookies`);
+        // 공개 경로 및 루트(/)의 토큰 처리 경로는 제외
+        const isPublicPath = config.publicPaths.some((path) => pathname === path || pathname.startsWith(path));
+        const isAuthFlow = pathname === '/' && req.nextUrl.searchParams.has('token');
+        if (!isPublicPath && !isAuthFlow && !token && !refreshTokenCookie) {
             // 인증 관련 쿠키 패턴
             const authCookiePatterns = [
                 /^next-auth\./,
@@ -85,27 +88,31 @@ async function handleMiddleware(req, config, options) {
                 /^auth-token$/,
                 /^__Secure-auth-token$/,
             ];
-            // 응답 생성하여 쿠키 삭제
-            const response = NextResponseClass.next();
-            // 모든 쿠키 확인하고 인증 관련 쿠키 삭제
-            req.cookies.getAll().forEach((cookie) => {
-                const isAuthCookie = authCookiePatterns.some((pattern) => pattern.test(cookie.name));
-                if (isAuthCookie) {
-                    (0, logger_js_1.debugLog)('handleMiddleware', `Deleting stale cookie: ${cookie.name}`);
-                    response.cookies.delete(cookie.name);
-                    // 추가로 만료된 쿠키로 설정
-                    response.cookies.set(cookie.name, '', {
-                        expires: new Date(0),
-                        path: '/',
-                        secure: isProduction,
-                        httpOnly: true,
-                        sameSite: 'lax',
-                    });
-                }
-            });
-            (0, logger_js_1.debugLog)('handleMiddleware', 'Stale auth cookies cleared');
+            const hasAuthCookies = req.cookies.getAll().some((cookie) => authCookiePatterns.some((pattern) => pattern.test(cookie.name)));
+            if (hasAuthCookies) {
+                (0, logger_js_1.debugLog)('handleMiddleware', `Inconsistent state detected (no session, no refresh token, but auth cookies exist). Cleaning up.`);
+                const ssoBaseURL = options.ssoBaseURL;
+                const response = await (0, redirect_js_1.redirectToSSOLogin)(req, serviceId, ssoBaseURL);
+                // 모든 쿠키 확인하고 인증 관련 쿠키 삭제
+                req.cookies.getAll().forEach((cookie) => {
+                    const isAuthCookie = authCookiePatterns.some((pattern) => pattern.test(cookie.name));
+                    if (isAuthCookie) {
+                        (0, logger_js_1.debugLog)('handleMiddleware', `Deleting stale cookie: ${cookie.name}`);
+                        response.cookies.delete(cookie.name);
+                        // 추가로 만료된 쿠키로 설정 (확실한 삭제 보장)
+                        response.cookies.set(cookie.name, '', {
+                            expires: new Date(0),
+                            path: '/',
+                            secure: isProduction,
+                            httpOnly: true,
+                            sameSite: isProduction ? 'none' : 'lax',
+                            ...(cookieDomain && { domain: cookieDomain }),
+                        });
+                    }
+                });
+                return response;
+            }
         }
-        const effectiveRole = (0, roles_js_1.getEffectiveRole)(token, serviceId);
         // 1. API 요청 처리
         if (pathname.startsWith('/api/')) {
             if (config.authApiPaths.includes(pathname)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkingcat/auth-utils",
-  "version": "2.0.3",
+  "version": "2.0.4",
   "description": "Authentication utilities for ThinkingCat SSO services with conditional logging",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",