@unidir/unidir-nextjs 1.0.7 → 1.0.9

package/dist/client.cjs

@@ -1,3 +1,3 @@
-"use client";
-"use strict";"use client";var c=Object.defineProperty;var k=Object.getOwnPropertyDescriptor;var w=Object.getOwnPropertyNames;var T=Object.prototype.hasOwnProperty;var v=(e,t)=>{for(var o in t)c(e,o,{get:t[o],enumerable:!0})},R=(e,t,o,i)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of w(t))!T.call(e,s)&&s!==o&&c(e,s,{get:()=>t[s],enumerable:!(i=k(t,s))||i.enumerable});return e};var h=e=>R(c({},"__esModule",{value:!0}),e);var _={};v(_,{UserProvider:()=>C,getDeviceId:()=>x,useUser:()=>S});module.exports=h(_);var n=require("react");var r=require("jose");async function a(e,t,o={}){let i=(0,r.createRemoteJWKSet)(new URL(t)),{payload:s}=await(0,r.jwtVerify)(e,i,{issuer:o.issuer,audience:o.audience});return s}var u=require("react/jsx-runtime"),l=(0,n.createContext)({user:null,isLoading:!0,config:null});function C({children:e,config:t}){let[o,i]=(0,n.useState)(null),[s,d]=(0,n.useState)(!0),[D,E]=(0,n.useState)(null),[L,P]=(0,n.useState)(null),[j,A]=(0,n.useState)(null),[J,W]=(0,n.useState)(null),[N,K]=(0,n.useState)(null),[O,Y]=(0,n.useState)(null);return(0,n.useEffect)(()=>{async function f(){try{let m=await(await fetch("/api/auth/me")).json(),{companyId:p,domainId:g,email:U,email_verified:y,name:I}=await a(m.id_token,t.jwks||"https://oauth.igoodworks.com/jwks.json",{issuer:t.issuer||"http://oauth.unidir.igoodworks.com/",audience:t.clientId});i({companyId:p,domainId:g,email:U,email_verified:y,name:I})}finally{d(!1)}}f()},[]),(0,u.jsx)(l.Provider,{value:{user:o,isLoading:s,config:t},children:e})}function x(){if(typeof window>"u")return"server-default";let e=localStorage.getItem("unidir_device_id");return e||(e=crypto.randomUUID(),localStorage.setItem("unidir_device_id",e)),e}var S=()=>(0,n.useContext)(l);0&&(module.exports={UserProvider,getDeviceId,useUser});
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});"use client";
+"use client";var _react = require('react');var _jose = require('jose');async function r(e,n,o={}){let s=_jose.createRemoteJWKSet.call(void 0, new URL(n)),{payload:i}=await _jose.jwtVerify.call(void 0, e,s,{issuer:o.issuer,audience:o.audience});return i}var _jsxruntime = require('react/jsx-runtime');var c=_react.createContext.call(void 0, {user:null,isLoading:!0,config:null});function Y({children:e,config:n}){let[o,s]=_react.useState.call(void 0, null),[i,a]=_react.useState.call(void 0, !0),[v,R]=_react.useState.call(void 0, null),[h,C]=_react.useState.call(void 0, null),[x,S]=_react.useState.call(void 0, null),[_,D]=_react.useState.call(void 0, null),[E,L]=_react.useState.call(void 0, null),[P,j]=_react.useState.call(void 0, null);return _react.useEffect.call(void 0, ()=>{async function l(){try{let u=await(await fetch("/api/auth/me")).json(),{companyId:d,domainId:f,email:m,email_verified:p,name:g}=await r(u.id_token,n.jwks||"https://oauth.igoodworks.com/jwks.json",{issuer:n.issuer||"http://oauth.unidir.igoodworks.com/",audience:n.clientId});s({companyId:d,domainId:f,email:m,email_verified:p,name:g})}finally{a(!1)}}l()},[]),_jsxruntime.jsx.call(void 0, c.Provider,{value:{user:o,isLoading:i,config:n},children:e})}function b(){if(typeof window>"u")return"server-default";let e=localStorage.getItem("unidir_device_id");return e||(e=crypto.randomUUID(),localStorage.setItem("unidir_device_id",e)),e}var V=()=>_react.useContext.call(void 0, c);exports.UserProvider = Y; exports.getDeviceId = b; exports.useUser = V;
 //# sourceMappingURL=client.cjs.map

package/dist/client.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/client.tsx","../src/jwks.ts"],"sourcesContent":["\"use client\";\r\nimport React, { createContext, useContext, useState, useEffect } from \"react\";\r\nimport { verifyAccessToken } from \"./jwks\";\r\nimport { JWTPayload } from \"jose\";\r\nimport { type UniDirConfig } from \"./types\";\r\n\r\nconst UserContext = createContext<{\r\n  user: any;\r\n  isLoading: boolean;\r\n  config: UniDirConfig | null;\r\n}>({ user: null, isLoading: true, config: null });\r\n\r\nexport function UserProvider({\r\n  children,\r\n  config,\r\n}: {\r\n  children: React.ReactNode;\r\n  config: UniDirConfig;\r\n}) {\r\n  const [user, setUser] = useState<JWTPayload | null>(null);\r\n  const [isLoading, setIsLoading] = useState(true);\r\n  const [token, setToken] = useState(null);\r\n  const [accessToken, setAccessToken] = useState(null);\r\n  const [refreshToken, setRefreshToken] = useState(null);\r\n  const [idToken, setIdToken] = useState(null);\r\n  const [client, setClient] = useState(null);\r\n  const [expiresIn, setExpiresIn] = useState(null);\r\n\r\n  //   useEffect(() => {\r\n  //     fetch(\"/api/auth/me\")\r\n  //       .then((res) => res.json())\r\n  //       .then((data) => {\r\n  //         if (data) {\r\n  //           setUser(data.client);\r\n  //           setToken(data);\r\n  //           setAccessToken(data.access_token);\r\n  //           setRefreshToken(data.refresh_token);\r\n  //           const idTokenAll = await jwtVerify(\r\n  //             data.id_token,\r\n  //             config.jwks || \"https://oauth.biocloud.pro/jwks.json\"\r\n  //           );\r\n  //           setIdToken(data.id_token);\r\n  //           setClient(data.client);\r\n  //           setExpiresIn(data.expres_in);\r\n  //         }\r\n  //       })\r\n  //       .catch(() => setUser(null));\r\n  //   }, []);\r\n  useEffect(() => {\r\n    async function loadUser() {\r\n      try {\r\n        const res = await fetch(\"/api/auth/me\");\r\n        const data = await res.json();\r\n        //setUser(data.user);\r\n        const { companyId, domainId, email, email_verified, name } =\r\n          await verifyAccessToken(\r\n            data.id_token,\r\n            config.jwks || \"https://oauth.igoodworks.com/jwks.json\",\r\n            {\r\n              issuer: config.issuer || \"http://oauth.unidir.igoodworks.com/\",\r\n              audience: config.clientId,\r\n            }\r\n          );\r\n        setUser({ companyId, domainId, email, email_verified, name });\r\n      } finally {\r\n        setIsLoading(false);\r\n      }\r\n    }\r\n    loadUser();\r\n  }, []);\r\n  return (\r\n    <UserContext.Provider\r\n      value={{\r\n        user,\r\n        isLoading,\r\n        config,\r\n        // token,\r\n        // expiresIn,\r\n        // accessToken,\r\n        // refreshToken,\r\n        // client,\r\n        // idToken,\r\n      }}\r\n    >\r\n      {children}\r\n    </UserContext.Provider>\r\n  );\r\n}\r\n\r\nexport function getDeviceId(): string {\r\n  if (typeof window === \"undefined\") return \"server-default\";\r\n\r\n  let id = localStorage.getItem(\"unidir_device_id\");\r\n  if (!id) {\r\n    id = crypto.randomUUID();\r\n    localStorage.setItem(\"unidir_device_id\", id);\r\n  }\r\n  return id;\r\n}\r\n\r\nexport const useUser = () => useContext(UserContext);\r\n","import { jwtVerify, createRemoteJWKSet } from \"jose\";\r\n\r\n// Replace with your IdP issuer and audience\r\nconst ISSUER = \"https://YOUR_ISSUER/\";\r\nconst AUDIENCE = \"YOUR_CLIENT_ID\";\r\n\r\nexport async function verifyAccessToken(\r\n  token: string,\r\n  jwksUrl: string,\r\n  options: Record<string, any> = {}\r\n) {\r\n  const JWKS = createRemoteJWKSet(new URL(jwksUrl));\r\n  const { payload } = await jwtVerify(token, JWKS, {\r\n    issuer: options.issuer,\r\n    audience: options.audience,\r\n  });\r\n  // Optionally apply custom claims checks here (e.g., roles, scopes)\r\n  return payload;\r\n}\r\n"],"mappings":";sbAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,kBAAAE,EAAA,gBAAAC,EAAA,YAAAC,IAAA,eAAAC,EAAAL,GACA,IAAAM,EAAsE,iBCDtE,IAAAC,EAA8C,gBAM9C,eAAsBC,EACpBC,EACAC,EACAC,EAA+B,CAAC,EAChC,CACA,IAAMC,KAAO,sBAAmB,IAAI,IAAIF,CAAO,CAAC,EAC1C,CAAE,QAAAG,CAAQ,EAAI,QAAM,aAAUJ,EAAOG,EAAM,CAC/C,OAAQD,EAAQ,OAChB,SAAUA,EAAQ,QACpB,CAAC,EAED,OAAOE,CACT,CDqDI,IAAAC,EAAA,6BAjEEC,KAAc,iBAIjB,CAAE,KAAM,KAAM,UAAW,GAAM,OAAQ,IAAK,CAAC,EAEzC,SAASC,EAAa,CAC3B,SAAAC,EACA,OAAAC,CACF,EAGG,CACD,GAAM,CAACC,EAAMC,CAAO,KAAI,YAA4B,IAAI,EAClD,CAACC,EAAWC,CAAY,KAAI,YAAS,EAAI,EACzC,CAACC,EAAOC,CAAQ,KAAI,YAAS,IAAI,EACjC,CAACC,EAAaC,CAAc,KAAI,YAAS,IAAI,EAC7C,CAACC,EAAcC,CAAe,KAAI,YAAS,IAAI,EAC/C,CAACC,EAASC,CAAU,KAAI,YAAS,IAAI,EACrC,CAACC,EAAQC,CAAS,KAAI,YAAS,IAAI,EACnC,CAACC,EAAWC,CAAY,KAAI,YAAS,IAAI,EAsB/C,sBAAU,IAAM,CACd,eAAeC,GAAW,CACxB,GAAI,CAEF,IAAMC,EAAO,MADD,MAAM,MAAM,cAAc,GACf,KAAK,EAEtB,CAAE,UAAAC,EAAW,SAAAC,EAAU,MAAAC,EAAO,eAAAC,EAAgB,KAAAC,CAAK,EACvD,MAAMC,EACJN,EAAK,SACLlB,EAAO,MAAQ,yCACf,CACE,OAAQA,EAAO,QAAU,sCACzB,SAAUA,EAAO,QACnB,CACF,EACFE,EAAQ,CAAE,UAAAiB,EAAW,SAAAC,EAAU,MAAAC,EAAO,eAAAC,EAAgB,KAAAC,CAAK,CAAC,CAC9D,QAAE,CACAnB,EAAa,EAAK,CACpB,CACF,CACAa,EAAS,CACX,EAAG,CAAC,CAAC,KAEH,OAACpB,EAAY,SAAZ,CACC,MAAO,CACL,KAAAI,EACA,UAAAE,EACA,OAAAH,CAOF,EAEC,SAAAD,EACH,CAEJ,CAEO,SAAS0B,GAAsB,CACpC,GAAI,OAAO,OAAW,IAAa,MAAO,iBAE1C,IAAIC,EAAK,aAAa,QAAQ,kBAAkB,EAChD,OAAKA,IACHA,EAAK,OAAO,WAAW,EACvB,aAAa,QAAQ,mBAAoBA,CAAE,GAEtCA,CACT,CAEO,IAAMC,EAAU,OAAM,cAAW9B,CAAW","names":["client_exports","__export","UserProvider","getDeviceId","useUser","__toCommonJS","import_react","import_jose","verifyAccessToken","token","jwksUrl","options","JWKS","payload","import_jsx_runtime","UserContext","UserProvider","children","config","user","setUser","isLoading","setIsLoading","token","setToken","accessToken","setAccessToken","refreshToken","setRefreshToken","idToken","setIdToken","client","setClient","expiresIn","setExpiresIn","loadUser","data","companyId","domainId","email","email_verified","name","verifyAccessToken","getDeviceId","id","useUser"]}
+{"version":3,"sources":["c:\\0.iGoodWorks\\gw-unidir-npm\\unidir-nextjs\\dist\\client.cjs"],"names":[],"mappings":"AAAA,qFAAY;AACZ,YAAY,CAAC,8BAAkF,4BAAyD,MAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,sCAAC,IAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,6BAAC,CAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,+CAAuC,IAAK,CAAC,CAAC,kCAAC,CAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAAC,IAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAAC,IAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAAC,IAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAAC,IAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAAC,IAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAAC,IAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAAC,IAAK,CAAC,CAAC,OAAO,8BAAC,CAAE,CAAC,EAAE,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,qCAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,+BAAC,CAAE,CAAC,CAAC,uEAAuD","file":"C:\\0.iGoodWorks\\gw-unidir-npm\\unidir-nextjs\\dist\\client.cjs","sourcesContent":[null]}

package/dist/server.cjs

@@ -1,3 +1,3 @@
-"use client";
-"use strict";var D=Object.create;var g=Object.defineProperty;var R=Object.getOwnPropertyDescriptor;var I=Object.getOwnPropertyNames;var b=Object.getPrototypeOf,N=Object.prototype.hasOwnProperty;var O=(e,n)=>{for(var r in n)g(e,r,{get:n[r],enumerable:!0})},w=(e,n,r,d)=>{if(n&&typeof n=="object"||typeof n=="function")for(let t of I(n))!N.call(e,t)&&t!==r&&g(e,t,{get:()=>n[t],enumerable:!(d=R(n,t))||d.enumerable});return e};var j=(e,n,r)=>(r=e!=null?D(b(e)):{},w(n||!e||!e.__esModule?g(r,"default",{value:e,enumerable:!0}):r,e)),E=e=>w(g({},"__esModule",{value:!0}),e);var H={};O(H,{initUniDir:()=>$});module.exports=E(H);var U=require("cookie");var m=require("jose"),v=e=>new TextEncoder().encode(e.padEnd(32,"0").slice(0,32));async function x(e,n){return new m.EncryptJWT(e).setProtectedHeader({alg:"dir",enc:"A256GCM"}).setIssuedAt().setExpirationTime("24h").encrypt(v(n))}async function _(e,n){try{let{payload:r}=await(0,m.jwtDecrypt)(e,v(n));return r}catch{return null}}var a=require("next/server"),A=require("next/navigation");function k(){let e=new Uint8Array(32);return crypto.getRandomValues(e),btoa(String.fromCharCode(...e)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}async function P(e){let r=new TextEncoder().encode(e),d=await crypto.subtle.digest("SHA-256",r);return btoa(String.fromCharCode(...new Uint8Array(d))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}var C=require("react/jsx-runtime"),L={login:"login",loginPath:"/api/auth/login",logout:"logout",callback:"callback",me:"me"};function $(e,n){let r={...L,...n},d=async t=>{let o=t.headers.get("cookie")||"",i=(0,U.parse)(o).unidir_session;return i?await _(i,e.secret):null};return{handleAuth:()=>async t=>{let o=t.nextUrl.pathname.split("/").pop(),i=t.nextUrl.searchParams.get("device_id")||e.deviceId||"unknown-device";if(o===r.login){let s=t.nextUrl.searchParams.get("returnTo")||"/",u=k(),f=await P(u),c=new URL(`${e.domain}/authorize`);c.searchParams.set("client_id",e.clientId),c.searchParams.set("response_type","code"),c.searchParams.set("redirect_uri",e.redirectUri),c.searchParams.set("scope","openid profile email"),c.searchParams.set("code_challenge",f),c.searchParams.set("code_challenge_method","S256"),i&&c.searchParams.set("device_id",i);let l=a.NextResponse.redirect(c.toString());return l.cookies.set("unidir_pkce_verifier",u,{httpOnly:!0,secure:!0,sameSite:"lax",maxAge:300}),l.cookies.set("unidir_device_id",i,{httpOnly:!0,secure:!0,maxAge:600}),l.cookies.set("unidir_return_to",s,{httpOnly:!0,maxAge:300}),l}if(o===r.me){let s=await d(t);return s?a.NextResponse.json(s):new a.NextResponse(JSON.stringify({user:null}),{status:401})}if(o===r.logout){let s=a.NextResponse.redirect(new URL("/",t.url));return s.cookies.delete("unidir_session"),s}if(o==="callback"){let s=t.nextUrl.searchParams.get("code"),u=t.cookies.get("unidir_pkce_verifier")?.value;if(!s||!u)return new a.NextResponse("Missing code or verifier",{status:400});let c=t.cookies.get("unidir_device_id")?.value||i,h=await(await fetch(`${e.domain}/token`,{method:"POST",headers:{"Content-Type":"application/json","x-device-id":c},body:JSON.stringify({grant_type:"authorization_code",client_id:e.clientId,client_secret:e.clientSecret,code:s,code_verifier:u,redirect_uri:e.redirectUri,device_id:c})})).json();if(h.error)return a.NextResponse.json(h,{status:400});let S=await x(h,e.secret),T=t.cookies.get("unidir_return_to")?.value||"/",y=a.NextResponse.redirect(new URL(T,t.url));return y.cookies.delete("unidir_pkce_verifier"),y.cookies.set("unidir_session",S,{httpOnly:!0,secure:!0,sameSite:"lax",maxAge:3600*24}),y}return new a.NextResponse("Not Found",{status:404})},getSession:d,withPageAuthRequired:t=>async o=>{let{headers:p}=await import("next/headers"),i=await d({headers:await p()});return i||(0,A.redirect)(r.loginPath),(0,C.jsx)(t,{...o,user:i})},withMiddlewareAuth:()=>async t=>{let o=t.cookies.get("unidir_session")?.value;if(!(o?await _(o,e.secret):null)){let{pathname:i,search:s}=t.nextUrl,u=new URL(r.loginPath,t.url);return u.searchParams.set("returnTo",`${i}${s}`),a.NextResponse.redirect(u)}return a.NextResponse.next()}}}0&&(module.exports={initUniDir});
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }"use client";
+var _cookie = require('cookie');var _jose = require('jose');var _=e=>new TextEncoder().encode(e.padEnd(32,"0").slice(0,32));async function f(e,d){return new (0, _jose.EncryptJWT)(e).setProtectedHeader({alg:"dir",enc:"A256GCM"}).setIssuedAt().setExpirationTime("24h").encrypt(_(d))}async function h(e,d){try{let{payload:o}=await _jose.jwtDecrypt.call(void 0, e,_(d));return o}catch (e2){return null}}var _server = require('next/server');var _navigation = require('next/navigation');function w(){let e=new Uint8Array(32);return crypto.getRandomValues(e),btoa(String.fromCharCode(...e)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}async function v(e){let o=new TextEncoder().encode(e),u=await crypto.subtle.digest("SHA-256",o);return btoa(String.fromCharCode(...new Uint8Array(u))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}var _jsxruntime = require('react/jsx-runtime');var S={login:"login",loginPath:"/api/auth/login",logout:"logout",callback:"callback",me:"me"};function $(e,d){let o={...S,...d},u=async t=>{let i=t.headers.get("cookie")||"",r=_cookie.parse.call(void 0, i).unidir_session;return r?await h(r,e.secret):null};return{handleAuth:()=>async t=>{let i=t.nextUrl.pathname.split("/").pop(),r=t.nextUrl.searchParams.get("device_id")||e.deviceId||"unknown-device";if(i===o.login){let n=t.nextUrl.searchParams.get("returnTo")||"/",a=w(),y=await v(a),s=new URL(`${e.domain}/authorize`);s.searchParams.set("client_id",e.clientId),s.searchParams.set("response_type","code"),s.searchParams.set("redirect_uri",e.redirectUri),s.searchParams.set("scope","openid profile email"),s.searchParams.set("code_challenge",y),s.searchParams.set("code_challenge_method","S256"),r&&s.searchParams.set("device_id",r);let l=_server.NextResponse.redirect(s.toString());return l.cookies.set("unidir_pkce_verifier",a,{httpOnly:!0,secure:!0,sameSite:"lax",maxAge:300}),l.cookies.set("unidir_device_id",r,{httpOnly:!0,secure:!0,maxAge:600}),l.cookies.set("unidir_return_to",n,{httpOnly:!0,maxAge:300}),l}if(i===o.me){let n=await u(t);return n?_server.NextResponse.json(n):new (0, _server.NextResponse)(JSON.stringify({user:null}),{status:401})}if(i===o.logout){let n=_server.NextResponse.redirect(new URL("/",t.url));return n.cookies.delete("unidir_session"),n}if(i==="callback"){let n=t.nextUrl.searchParams.get("code"),a=_optionalChain([t, 'access', _2 => _2.cookies, 'access', _3 => _3.get, 'call', _4 => _4("unidir_pkce_verifier"), 'optionalAccess', _5 => _5.value]);if(!n||!a)return new (0, _server.NextResponse)("Missing code or verifier",{status:400});let s=_optionalChain([t, 'access', _6 => _6.cookies, 'access', _7 => _7.get, 'call', _8 => _8("unidir_device_id"), 'optionalAccess', _9 => _9.value])||r,g=await(await fetch(`${e.domain}/token`,{method:"POST",headers:{"Content-Type":"application/json","x-device-id":s},body:JSON.stringify({grant_type:"authorization_code",client_id:e.clientId,client_secret:e.clientSecret,code:n,code_verifier:a,redirect_uri:e.redirectUri,device_id:s})})).json();if(g.error)return _server.NextResponse.json(g,{status:400});let x=await f(g,e.secret),k=_optionalChain([t, 'access', _10 => _10.cookies, 'access', _11 => _11.get, 'call', _12 => _12("unidir_return_to"), 'optionalAccess', _13 => _13.value])||"/",m=_server.NextResponse.redirect(new URL(k,t.url));return m.cookies.delete("unidir_pkce_verifier"),m.cookies.set("unidir_session",x,{httpOnly:!0,secure:!0,sameSite:"lax",maxAge:3600*24}),m}return new (0, _server.NextResponse)("Not Found",{status:404})},getSession:u,withPageAuthRequired:t=>async i=>{let{headers:p}=await Promise.resolve().then(() => _interopRequireWildcard(require("next/headers"))),r=await u({headers:await p()});return r||_navigation.redirect.call(void 0, o.loginPath),_jsxruntime.jsx.call(void 0, t,{...i,user:r})},withMiddlewareAuth:()=>async t=>{let i=_optionalChain([t, 'access', _14 => _14.cookies, 'access', _15 => _15.get, 'call', _16 => _16("unidir_session"), 'optionalAccess', _17 => _17.value]);if(!(i?await h(i,e.secret):null)){let{pathname:r,search:n}=t.nextUrl,a=new URL(o.loginPath,t.url);return a.searchParams.set("returnTo",`${r}${n}`),_server.NextResponse.redirect(a)}return _server.NextResponse.next()}}}exports.initUniDir = $;
 //# sourceMappingURL=server.cjs.map

package/dist/server.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.tsx","../src/session.ts","../src/pkce.ts"],"sourcesContent":["import { parse } from \"cookie\";\r\nimport { encrypt, decrypt } from \"./session\";\r\nimport { NextRequest, NextResponse } from \"next/server\";\r\nimport { redirect } from \"next/navigation\";\r\nimport { generateCodeVerifier, generateCodeChallenge } from \"./pkce\";\r\nimport { type UniDirConfig, type UniDirAction } from \"./types\";\r\n\r\nconst defaultActions: UniDirAction = {\r\n  login: \"login\",\r\n  loginPath: \"/api/auth/login\",\r\n  logout: \"logout\",\r\n  callback: \"callback\",\r\n  me: \"me\",\r\n};\r\n\r\nexport function initUniDir(config: UniDirConfig, actions?: UniDirAction) {\r\n  const uniDirActions = { ...defaultActions, ...actions };\r\n\r\n  const getSession = async (req: Request | NextRequest) => {\r\n    const cookieHeader = req.headers.get(\"cookie\") || \"\";\r\n    const cookies = parse(cookieHeader);\r\n    const sessionToken = cookies[\"unidir_session\"];\r\n    if (!sessionToken) return null;\r\n    return await decrypt(sessionToken, config.secret);\r\n  };\r\n\r\n  return {\r\n    handleAuth: () => async (req: NextRequest) => {\r\n      const action = req.nextUrl.pathname.split(\"/\").pop();\r\n      // Capture the deviceId from the query param sent by the LoginButton\r\n      const queryDeviceId = req.nextUrl.searchParams.get(\"device_id\");\r\n      const effectiveDeviceId =\r\n        queryDeviceId || config.deviceId || \"unknown-device\";\r\n      //const deviceId = req.headers.get(\"x-device-id\");\r\n\r\n      if (action === uniDirActions.login) {\r\n        const returnTo = req.nextUrl.searchParams.get(\"returnTo\") || \"/\";\r\n        const verifier = generateCodeVerifier();\r\n        const challenge = await generateCodeChallenge(verifier);\r\n\r\n        const url = new URL(`${config.domain}/authorize`);\r\n        url.searchParams.set(\"client_id\", config.clientId);\r\n        url.searchParams.set(\"response_type\", \"code\");\r\n        url.searchParams.set(\"redirect_uri\", config.redirectUri);\r\n        url.searchParams.set(\"scope\", \"openid profile email\");\r\n        url.searchParams.set(\"code_challenge\", challenge);\r\n        url.searchParams.set(\"code_challenge_method\", \"S256\");\r\n        if (effectiveDeviceId) {\r\n          url.searchParams.set(\"device_id\", effectiveDeviceId);\r\n        }\r\n        const response = NextResponse.redirect(url.toString());\r\n\r\n        // Store verifier in a short-lived, secure cookie\r\n        response.cookies.set(\"unidir_pkce_verifier\", verifier, {\r\n          httpOnly: true,\r\n          secure: true,\r\n          sameSite: \"lax\",\r\n          maxAge: 60 * 5, // 5 minutes\r\n        });\r\n        response.cookies.set(\"unidir_device_id\", effectiveDeviceId, {\r\n          httpOnly: true,\r\n          secure: true,\r\n          maxAge: 60 * 10, // 10 minutes\r\n        });\r\n        response.cookies.set(\"unidir_return_to\", returnTo, {\r\n          httpOnly: true,\r\n          maxAge: 60 * 5,\r\n        });\r\n        return response;\r\n      }\r\n      // Profile Handler (for useUser hook)\r\n      if (action === uniDirActions.me) {\r\n        const session = await getSession(req);\r\n        if (!session)\r\n          return new NextResponse(JSON.stringify({ user: null }), {\r\n            status: 401,\r\n          });\r\n        return NextResponse.json(session);\r\n      }\r\n\r\n      // Logout Handler\r\n      if (action === uniDirActions.logout) {\r\n        const response = NextResponse.redirect(new URL(\"/\", req.url));\r\n        response.cookies.delete(\"unidir_session\");\r\n        return response;\r\n      }\r\n      if (action === \"callback\") {\r\n        const code = req.nextUrl.searchParams.get(\"code\");\r\n        const verifier = req.cookies.get(\"unidir_pkce_verifier\")?.value;\r\n\r\n        if (!code || !verifier) {\r\n          return new NextResponse(\"Missing code or verifier\", { status: 400 });\r\n        }\r\n\r\n        const storedDeviceId = req.cookies.get(\"unidir_device_id\")?.value;\r\n        const deviceIdToUse = storedDeviceId || effectiveDeviceId;\r\n\r\n        const res = await fetch(`${config.domain}/token`, {\r\n          method: \"POST\",\r\n          headers: {\r\n            \"Content-Type\": \"application/json\",\r\n            \"x-device-id\": deviceIdToUse, // Added to header\r\n          },\r\n          body: JSON.stringify({\r\n            grant_type: \"authorization_code\",\r\n            client_id: config.clientId,\r\n            client_secret: config.clientSecret,\r\n            code,\r\n            code_verifier: verifier, // Pass the verifier back\r\n            redirect_uri: config.redirectUri,\r\n            device_id: deviceIdToUse,\r\n          }),\r\n        });\r\n\r\n        const tokens = await res.json();\r\n        if (tokens.error) return NextResponse.json(tokens, { status: 400 });\r\n\r\n        const encryptedSession = await encrypt(tokens, config.secret);\r\n        // const response = NextResponse.redirect(new URL(\"/\", req.url));\r\n        const returnTo = req.cookies.get(\"unidir_return_to\")?.value || \"/\";\r\n        const response = NextResponse.redirect(new URL(returnTo, req.url));\r\n\r\n        // Clean up PKCE cookie and set session\r\n        response.cookies.delete(\"unidir_pkce_verifier\");\r\n        response.cookies.set(\"unidir_session\", encryptedSession, {\r\n          httpOnly: true,\r\n          secure: true,\r\n          sameSite: \"lax\",\r\n          maxAge: 60 * 60 * 24,\r\n        });\r\n\r\n        return response;\r\n      }\r\n\r\n      return new NextResponse(\"Not Found\", { status: 404 });\r\n    },\r\n\r\n    getSession,\r\n\r\n    withPageAuthRequired: <P extends object>(\r\n      Component: React.ComponentType<P>\r\n    ) => {\r\n      return async (props: P) => {\r\n        // Import headers dynamically to avoid issues in non-server environments\r\n        const { headers } = await import(\"next/headers\");\r\n        const session = await getSession({ headers: await headers() } as any);\r\n\r\n        if (!session) {\r\n          redirect(uniDirActions.loginPath);\r\n        }\r\n\r\n        // Return the component as JSX\r\n        return <Component {...props} user={session} />;\r\n      };\r\n    },\r\n\r\n    withMiddlewareAuth: () => {\r\n      return async (req: NextRequest) => {\r\n        const sessionToken = req.cookies.get(\"unidir_session\")?.value;\r\n        const session = sessionToken\r\n          ? await decrypt(sessionToken, config.secret)\r\n          : null;\r\n\r\n        if (!session) {\r\n          // Redirect to login but save the current URL to return back later\r\n          const { pathname, search } = req.nextUrl;\r\n          const url = new URL(uniDirActions.loginPath, req.url);\r\n          url.searchParams.set(\"returnTo\", `${pathname}${search}`);\r\n          return NextResponse.redirect(url);\r\n        }\r\n\r\n        return NextResponse.next();\r\n      };\r\n    },\r\n  };\r\n}\r\n","import { EncryptJWT, jwtDecrypt } from \"jose\";\r\n\r\nconst getSecretKey = (secret: string) =>\r\n  new TextEncoder().encode(secret.padEnd(32, \"0\").slice(0, 32));\r\n\r\nexport async function encrypt(payload: any, secret: string) {\r\n  return new EncryptJWT(payload)\r\n    .setProtectedHeader({ alg: \"dir\", enc: \"A256GCM\" })\r\n    .setIssuedAt()\r\n    .setExpirationTime(\"24h\")\r\n    .encrypt(getSecretKey(secret));\r\n}\r\n\r\nexport async function decrypt(token: string, secret: string) {\r\n  try {\r\n    const { payload } = await jwtDecrypt(token, getSecretKey(secret));\r\n    return payload;\r\n  } catch (e) {\r\n    return null;\r\n  }\r\n}\r\n","export function generateCodeVerifier(): string {\r\n  const array = new Uint8Array(32);\r\n  crypto.getRandomValues(array);\r\n  return btoa(String.fromCharCode(...array))\r\n    .replace(/\\+/g, \"-\")\r\n    .replace(/\\//g, \"_\")\r\n    .replace(/=/g, \"\");\r\n}\r\n\r\nexport async function generateCodeChallenge(verifier: string): Promise<string> {\r\n  const encoder = new TextEncoder();\r\n  const data = encoder.encode(verifier);\r\n  const digest = await crypto.subtle.digest(\"SHA-256\", data);\r\n  return btoa(String.fromCharCode(...new Uint8Array(digest)))\r\n    .replace(/\\+/g, \"-\")\r\n    .replace(/\\//g, \"_\")\r\n    .replace(/=/g, \"\");\r\n}\r\n"],"mappings":";0jBAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,gBAAAE,IAAA,eAAAC,EAAAH,GAAA,IAAAI,EAAsB,kBCAtB,IAAAC,EAAuC,gBAEjCC,EAAgBC,GACpB,IAAI,YAAY,EAAE,OAAOA,EAAO,OAAO,GAAI,GAAG,EAAE,MAAM,EAAG,EAAE,CAAC,EAE9D,eAAsBC,EAAQC,EAAcF,EAAgB,CAC1D,OAAO,IAAI,aAAWE,CAAO,EAC1B,mBAAmB,CAAE,IAAK,MAAO,IAAK,SAAU,CAAC,EACjD,YAAY,EACZ,kBAAkB,KAAK,EACvB,QAAQH,EAAaC,CAAM,CAAC,CACjC,CAEA,eAAsBG,EAAQC,EAAeJ,EAAgB,CAC3D,GAAI,CACF,GAAM,CAAE,QAAAE,CAAQ,EAAI,QAAM,cAAWE,EAAOL,EAAaC,CAAM,CAAC,EAChE,OAAOE,CACT,MAAY,CACV,OAAO,IACT,CACF,CDlBA,IAAAG,EAA0C,uBAC1CC,EAAyB,2BEHlB,SAASC,GAA+B,CAC7C,IAAMC,EAAQ,IAAI,WAAW,EAAE,EAC/B,cAAO,gBAAgBA,CAAK,EACrB,KAAK,OAAO,aAAa,GAAGA,CAAK,CAAC,EACtC,QAAQ,MAAO,GAAG,EAClB,QAAQ,MAAO,GAAG,EAClB,QAAQ,KAAM,EAAE,CACrB,CAEA,eAAsBC,EAAsBC,EAAmC,CAE7E,IAAMC,EADU,IAAI,YAAY,EACX,OAAOD,CAAQ,EAC9BE,EAAS,MAAM,OAAO,OAAO,OAAO,UAAWD,CAAI,EACzD,OAAO,KAAK,OAAO,aAAa,GAAG,IAAI,WAAWC,CAAM,CAAC,CAAC,EACvD,QAAQ,MAAO,GAAG,EAClB,QAAQ,MAAO,GAAG,EAClB,QAAQ,KAAM,EAAE,CACrB,CFuIe,IAAAC,EAAA,6BAjJTC,EAA+B,CACnC,MAAO,QACP,UAAW,kBACX,OAAQ,SACR,SAAU,WACV,GAAI,IACN,EAEO,SAASC,EAAWC,EAAsBC,EAAwB,CACvE,IAAMC,EAAgB,CAAE,GAAGJ,EAAgB,GAAGG,CAAQ,EAEhDE,EAAa,MAAOC,GAA+B,CACvD,IAAMC,EAAeD,EAAI,QAAQ,IAAI,QAAQ,GAAK,GAE5CE,KADU,SAAMD,CAAY,EACL,eAC7B,OAAKC,EACE,MAAMC,EAAQD,EAAcN,EAAO,MAAM,EADtB,IAE5B,EAEA,MAAO,CACL,WAAY,IAAM,MAAOI,GAAqB,CAC5C,IAAMI,EAASJ,EAAI,QAAQ,SAAS,MAAM,GAAG,EAAE,IAAI,EAG7CK,EADgBL,EAAI,QAAQ,aAAa,IAAI,WAAW,GAE3CJ,EAAO,UAAY,iBAGtC,GAAIQ,IAAWN,EAAc,MAAO,CAClC,IAAMQ,EAAWN,EAAI,QAAQ,aAAa,IAAI,UAAU,GAAK,IACvDO,EAAWC,EAAqB,EAChCC,EAAY,MAAMC,EAAsBH,CAAQ,EAEhDI,EAAM,IAAI,IAAI,GAAGf,EAAO,MAAM,YAAY,EAChDe,EAAI,aAAa,IAAI,YAAaf,EAAO,QAAQ,EACjDe,EAAI,aAAa,IAAI,gBAAiB,MAAM,EAC5CA,EAAI,aAAa,IAAI,eAAgBf,EAAO,WAAW,EACvDe,EAAI,aAAa,IAAI,QAAS,sBAAsB,EACpDA,EAAI,aAAa,IAAI,iBAAkBF,CAAS,EAChDE,EAAI,aAAa,IAAI,wBAAyB,MAAM,EAChDN,GACFM,EAAI,aAAa,IAAI,YAAaN,CAAiB,EAErD,IAAMO,EAAW,eAAa,SAASD,EAAI,SAAS,CAAC,EAGrD,OAAAC,EAAS,QAAQ,IAAI,uBAAwBL,EAAU,CACrD,SAAU,GACV,OAAQ,GACR,SAAU,MACV,OAAQ,GACV,CAAC,EACDK,EAAS,QAAQ,IAAI,mBAAoBP,EAAmB,CAC1D,SAAU,GACV,OAAQ,GACR,OAAQ,GACV,CAAC,EACDO,EAAS,QAAQ,IAAI,mBAAoBN,EAAU,CACjD,SAAU,GACV,OAAQ,GACV,CAAC,EACMM,CACT,CAEA,GAAIR,IAAWN,EAAc,GAAI,CAC/B,IAAMe,EAAU,MAAMd,EAAWC,CAAG,EACpC,OAAKa,EAIE,eAAa,KAAKA,CAAO,EAHvB,IAAI,eAAa,KAAK,UAAU,CAAE,KAAM,IAAK,CAAC,EAAG,CACtD,OAAQ,GACV,CAAC,CAEL,CAGA,GAAIT,IAAWN,EAAc,OAAQ,CACnC,IAAMc,EAAW,eAAa,SAAS,IAAI,IAAI,IAAKZ,EAAI,GAAG,CAAC,EAC5D,OAAAY,EAAS,QAAQ,OAAO,gBAAgB,EACjCA,CACT,CACA,GAAIR,IAAW,WAAY,CACzB,IAAMU,EAAOd,EAAI,QAAQ,aAAa,IAAI,MAAM,EAC1CO,EAAWP,EAAI,QAAQ,IAAI,sBAAsB,GAAG,MAE1D,GAAI,CAACc,GAAQ,CAACP,EACZ,OAAO,IAAI,eAAa,2BAA4B,CAAE,OAAQ,GAAI,CAAC,EAIrE,IAAMQ,EADiBf,EAAI,QAAQ,IAAI,kBAAkB,GAAG,OACpBK,EAmBlCW,EAAS,MAjBH,MAAM,MAAM,GAAGpB,EAAO,MAAM,SAAU,CAChD,OAAQ,OACR,QAAS,CACP,eAAgB,mBAChB,cAAemB,CACjB,EACA,KAAM,KAAK,UAAU,CACnB,WAAY,qBACZ,UAAWnB,EAAO,SAClB,cAAeA,EAAO,aACtB,KAAAkB,EACA,cAAeP,EACf,aAAcX,EAAO,YACrB,UAAWmB,CACb,CAAC,CACH,CAAC,GAEwB,KAAK,EAC9B,GAAIC,EAAO,MAAO,OAAO,eAAa,KAAKA,EAAQ,CAAE,OAAQ,GAAI,CAAC,EAElE,IAAMC,EAAmB,MAAMC,EAAQF,EAAQpB,EAAO,MAAM,EAEtDU,EAAWN,EAAI,QAAQ,IAAI,kBAAkB,GAAG,OAAS,IACzDY,EAAW,eAAa,SAAS,IAAI,IAAIN,EAAUN,EAAI,GAAG,CAAC,EAGjE,OAAAY,EAAS,QAAQ,OAAO,sBAAsB,EAC9CA,EAAS,QAAQ,IAAI,iBAAkBK,EAAkB,CACvD,SAAU,GACV,OAAQ,GACR,SAAU,MACV,OAAQ,KAAU,EACpB,CAAC,EAEML,CACT,CAEA,OAAO,IAAI,eAAa,YAAa,CAAE,OAAQ,GAAI,CAAC,CACtD,EAEA,WAAAb,EAEA,qBACEoB,GAEO,MAAOC,GAAa,CAEzB,GAAM,CAAE,QAAAC,CAAQ,EAAI,KAAM,QAAO,cAAc,EACzCR,EAAU,MAAMd,EAAW,CAAE,QAAS,MAAMsB,EAAQ,CAAE,CAAQ,EAEpE,OAAKR,MACH,YAASf,EAAc,SAAS,KAI3B,OAACqB,EAAA,CAAW,GAAGC,EAAO,KAAMP,EAAS,CAC9C,EAGF,mBAAoB,IACX,MAAOb,GAAqB,CACjC,IAAME,EAAeF,EAAI,QAAQ,IAAI,gBAAgB,GAAG,MAKxD,GAAI,EAJYE,EACZ,MAAMC,EAAQD,EAAcN,EAAO,MAAM,EACzC,MAEU,CAEZ,GAAM,CAAE,SAAA0B,EAAU,OAAAC,CAAO,EAAIvB,EAAI,QAC3BW,EAAM,IAAI,IAAIb,EAAc,UAAWE,EAAI,GAAG,EACpD,OAAAW,EAAI,aAAa,IAAI,WAAY,GAAGW,CAAQ,GAAGC,CAAM,EAAE,EAChD,eAAa,SAASZ,CAAG,CAClC,CAEA,OAAO,eAAa,KAAK,CAC3B,CAEJ,CACF","names":["server_exports","__export","initUniDir","__toCommonJS","import_cookie","import_jose","getSecretKey","secret","encrypt","payload","decrypt","token","import_server","import_navigation","generateCodeVerifier","array","generateCodeChallenge","verifier","data","digest","import_jsx_runtime","defaultActions","initUniDir","config","actions","uniDirActions","getSession","req","cookieHeader","sessionToken","decrypt","action","effectiveDeviceId","returnTo","verifier","generateCodeVerifier","challenge","generateCodeChallenge","url","response","session","code","deviceIdToUse","tokens","encryptedSession","encrypt","Component","props","headers","pathname","search"]}
+{"version":3,"sources":["c:\\0.iGoodWorks\\gw-unidir-npm\\unidir-nextjs\\dist\\server.cjs"],"names":[],"mappings":"AAAA,22BAAY;AACZ,gCAA8B,4BAAkD,IAAK,CAAC,CAAC,CAAC,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,qBAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,8BAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAK,CAAC,OAAO,IAAI,CAAC,CAAC,qCAA0C,6CAA2C,SAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,+CAAuC,IAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,2BAAC,CAAE,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAA","file":"C:\\0.iGoodWorks\\gw-unidir-npm\\unidir-nextjs\\dist\\server.cjs","sourcesContent":[null]}

package/dist/types.cjs

@@ -1,3 +1,2 @@
-"use client";
-"use strict";var e=Object.defineProperty;var s=Object.getOwnPropertyDescriptor;var c=Object.getOwnPropertyNames;var o=Object.prototype.hasOwnProperty;var l=(r,i,g,n)=>{if(i&&typeof i=="object"||typeof i=="function")for(let t of c(i))!o.call(r,t)&&t!==g&&e(r,t,{get:()=>i[t],enumerable:!(n=s(i,t))||n.enumerable});return r};var a=r=>l(e({},"__esModule",{value:!0}),r);var d={};module.exports=a(d);
+"use strict";"use client";
 //# sourceMappingURL=types.cjs.map

package/dist/types.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types.ts"],"sourcesContent":["export interface UniDirConfig {\r\n  domain: string;\r\n  clientId: string;\r\n  clientSecret: string;\r\n  secret: string;\r\n  redirectUri: string;\r\n  logoutRedirectUri?: string;\r\n  deviceId?: string;\r\n  scope?: string;\r\n  audience?: string;\r\n  jwks?: string;\r\n  issuer?: string;\r\n}\r\n\r\nexport interface UniDirAction {\r\n  login: string;\r\n  loginPath: string;\r\n  logout: string;\r\n  callback: string;\r\n  me: string;\r\n}\r\n"],"mappings":";+WAAA,IAAAA,EAAA,kBAAAC,EAAAD","names":["types_exports","__toCommonJS"]}
+{"version":3,"sources":["c:\\0.iGoodWorks\\gw-unidir-npm\\unidir-nextjs\\dist\\types.cjs"],"names":[],"mappings":"AAAA,yBAAY","file":"C:\\0.iGoodWorks\\gw-unidir-npm\\unidir-nextjs\\dist\\types.cjs"}

package/package.json

@@ -1,10 +1,7 @@
 {
   "name": "@unidir/unidir-nextjs",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "type": "module",
-  "main": "./dist/index.cjs",
-  "module": "./dist/index.mjs",
-  "types": "./dist/index.d.ts",
   "files": [
     "dist"
   ],
@@ -14,12 +11,12 @@
   "exports": {
     "./server": {
       "types": "./dist/server.d.ts",
-      "import": "./dist/server.js",
+      "import": "./dist/server.mjs",
       "require": "./dist/server.cjs"
     },
     "./client": {
       "types": "./dist/client.d.ts",
-      "import": "./dist/client.js",
+      "import": "./dist/client.mjs",
       "require": "./dist/client.cjs"
     },
     "./types": {