@tidecloak/create-nextjs 0.14.40-staging → 0.14.42-staging

package/README.md

@@ -52,7 +52,7 @@ my-app/
 │   │   └── page.jsx                <- Example page guarded server-side by proxy.js
 │   ├── tide_dpop/
 │   │   └── [...path]/
-│   │       └── route.js            <- Serves tide_dpop_auth.html, only needed if you turn on useDPoP
+│   │       └── route.js            <- Serves tide_dpop_auth.html, only needed if you turn on dpopConfig
 │   ├── layout.jsx                  <- Root layout
 │   ├── page.jsx                    <- Login page
 │   └── provider.jsx                <- Wraps the app in TideCloakProvider
@@ -62,7 +62,7 @@ my-app/
 │   └── tcinit.sh                   <- Provisions the realm and writes tidecloak.json (npm run init)
 ├── public/
 │   ├── silent-check-sso.html       <- Silent SSO check page
-│   └── tide_dpop_auth.html         <- DPoP helper page (only used with useDPoP)
+│   └── tide_dpop_auth.html         <- DPoP helper page (only used with dpopConfig)
 ├── tidecloak.json                  <- Your TideCloak adapter config (a {} placeholder until init runs)
 ├── proxy.js                        <- Verifies the token server-side before protected pages load
 ├── jsconfig.json
@@ -175,7 +175,7 @@ function Header() {
 | `getValueFromToken(key)`              | `(key: string) => any`                       | Read a custom claim from the access token.                              |
 | `getValueFromIdToken(key)`            | `(key: string) => any`                       | Read a custom claim from the ID token.                                  |
 | `hasRealmRole(role)`                  | `(role: string) => boolean`                  | Check a realm-level role.                                               |
-| `hasClientRole(role, client?)`        | `(role: string, client?: string) => boolean` | Check a client-level role; defaults to your app’s client ID if omitted. |
+| `hasClientRole(role)`                 | `(role: string) => boolean`                  | Check a client-level role on your app’s client.                        |
 | `doEncrypt(data, policy?)` / `doDecrypt(data, policy?)` | `(data: any, policy?: Uint8Array) => Promise<any>` | Encrypt or decrypt payloads, optionally under a signed decryption policy. |
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tidecloak/create-nextjs",
-  "version": "0.14.40-staging",
+  "version": "0.14.42-staging",
   "type": "module",
   "description": "Scaffold a TideCloak-ready Next.js app with optional IAM setup and working auth - start building instantly with a live example",
   "bin": {

package/template-js-app/app/api/protected/route.js

@@ -4,8 +4,8 @@ import tcConfig from '../../../tidecloak.json'
 
 const ALLOWED_ROLE = 'offline_access'
 
-// Accepts plain Bearer tokens only. If you turn on useDPoP, call this with
-// secureFetch and extend it to accept the DPoP scheme and validate the proof server-side.
+// Accepts plain Bearer tokens only. If you turn on dpopConfig, call this with
+// the SDK's `fetch` and extend it to accept the DPoP scheme and validate the proof server-side.
 export async function GET(request) {
   const authHeader = request.headers.get('authorization')
   if (!authHeader?.startsWith('Bearer ')) {

package/template-js-app/app/tide_dpop/[...path]/route.js

@@ -3,7 +3,7 @@ import path from "path"
 
 // Tide DPoP resource-server endpoint.
 //
-// DPoP is opt-in. This route is only used when you pass `useDPoP` in the
+// DPoP is opt-in. This route is only used when you pass `dpopConfig` in the
 // provider config; without it nothing requests this page and you can delete it.
 // With DPoP on, the SDK loads this page from your own origin at:
 //   /tide_dpop/iss/<issuer-hex>/aud/<client-hex>/tide_dpop_auth.html

package/template-js-app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-app",
-  "version": "0.14.40-staging",
+  "version": "0.14.42-staging",
   "private": true,
   "scripts": {
     "dev": "next dev",
@@ -12,7 +12,7 @@
     "next": "16.x",
     "react": "19.x",
     "react-dom": "19.x",
-    "@tidecloak/nextjs": "0.14.40-staging"
+    "@tidecloak/nextjs": "0.14.42-staging"
   },
   "overrides": {
     "postcss": "^8.5.25",

package/template-ts-app/app/api/protected/route.ts

@@ -4,8 +4,8 @@ import tcConfig from '../../../tidecloak.json'
 
 const ALLOWED_ROLE = 'offline_access'
 
-// Accepts plain Bearer tokens only. If you turn on useDPoP, call this with
-// secureFetch and extend it to accept the DPoP scheme and validate the proof server-side.
+// Accepts plain Bearer tokens only. If you turn on dpopConfig, call this with
+// the SDK's `fetch` and extend it to accept the DPoP scheme and validate the proof server-side.
 export async function GET(request: NextRequest): Promise<NextResponse> {
   const authHeader = request.headers.get('authorization')
   if (!authHeader?.startsWith('Bearer ')) {

package/template-ts-app/app/tide_dpop/[...path]/route.ts

@@ -3,7 +3,7 @@ import path from "path"
 
 // Tide DPoP resource-server endpoint.
 //
-// DPoP is opt-in. This route is only used when you pass `useDPoP` in the
+// DPoP is opt-in. This route is only used when you pass `dpopConfig` in the
 // provider config; without it nothing requests this page and you can delete it.
 // With DPoP on, the SDK loads this page from your own origin at:
 //   /tide_dpop/iss/<issuer-hex>/aud/<client-hex>/tide_dpop_auth.html

package/template-ts-app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-app",
-  "version": "0.14.40-staging",
+  "version": "0.14.42-staging",
   "private": true,
   "scripts": {
     "dev": "next dev",
@@ -12,7 +12,7 @@
     "next": "16.x",
     "react": "19.x",
     "react-dom": "19.x",
-    "@tidecloak/nextjs": "0.14.40-staging"
+    "@tidecloak/nextjs": "0.14.42-staging"
   },
   "overrides": {
     "postcss": "^8.5.25",