@workos-inc/authkit-nextjs 0.17.2 → 1.0.1

package/src/session.ts

@@ -9,14 +9,22 @@ import { getCookieOptions } from './cookie.js';
 import { workos } from './workos.js';
 import { WORKOS_CLIENT_ID, WORKOS_COOKIE_PASSWORD, WORKOS_COOKIE_NAME, WORKOS_REDIRECT_URI } from './env-variables.js';
 import { getAuthorizationUrl } from './get-authorization-url.js';
-import { AccessToken, AuthkitMiddlewareAuth, NoUserInfo, Session, UserInfo } from './interfaces.js';
+import {
+  AccessToken,
+  AuthkitMiddlewareAuth,
+  AuthkitOptions,
+  AuthkitResponse,
+  CookieOptions,
+  NoUserInfo,
+  Session,
+  UserInfo,
+} from './interfaces.js';
 
 import { parse, tokensToRegexp } from 'path-to-regexp';
 import { redirectWithFallback } from './utils.js';
 
 const sessionHeaderName = 'x-workos-session';
 const middlewareHeaderName = 'x-workos-middleware';
-const redirectUriHeaderName = 'x-redirect-uri';
 const signUpPathsHeaderName = 'x-sign-up-paths';
 
 const JWKS = createRemoteJWKSet(new URL(workos.userManagement.getJwksUrl(WORKOS_CLIENT_ID)));
@@ -28,7 +36,7 @@ async function encryptSession(session: Session) {
   });
 }
 
-async function updateSession(
+async function updateSessionMiddleware(
   request: NextRequest,
   debug: boolean,
   middlewareAuth: AuthkitMiddlewareAuth,
@@ -45,34 +53,14 @@ async function updateSession(
     );
   }
 
-  const session = await getSessionFromCookie();
-  const newRequestHeaders = new Headers(request.headers);
-
-  // We store the current request url in a custom header, so we can always have access to it
-  // This is because on hard navigations we don't have access to `next-url` but need to get the current
-  // `pathname` to be able to return the users where they came from before sign-in
-  newRequestHeaders.set('x-url', request.url);
-
-  // Record that the request was routed through the middleware so we can check later for DX purposes
-  newRequestHeaders.set(middlewareHeaderName, 'true');
-
-  // Record the sign up paths so we can use it later
-  if (signUpPaths.length > 0) {
-    newRequestHeaders.set(signUpPathsHeaderName, signUpPaths.join(','));
-  }
-
   let url;
 
-  // If the redirect URI is set, store it in the headers so we can use it later
   if (redirectUri) {
-    newRequestHeaders.set(redirectUriHeaderName, redirectUri);
     url = new URL(redirectUri);
   } else {
     url = new URL(WORKOS_REDIRECT_URI);
   }
 
-  newRequestHeaders.delete(sessionHeaderName);
-
   if (
     middlewareAuth.enabled &&
     url.pathname === request.nextUrl.pathname &&
@@ -94,54 +82,111 @@ async function updateSession(
     return pathRegex.exec(request.nextUrl.pathname);
   });
 
+  const { session, headers, authorizationUrl } = await updateSession(request, {
+    debug,
+    redirectUri,
+    screenHint: getScreenHint(signUpPaths, request.nextUrl.pathname),
+  });
+
   // If the user is logged out and this path isn't on the allowlist for logged out paths, redirect to AuthKit.
-  if (middlewareAuth.enabled && matchedPaths.length === 0 && !session) {
-    if (debug) console.log(`Unauthenticated user on protected route ${request.url}, redirecting to AuthKit`);
+  if (middlewareAuth.enabled && matchedPaths.length === 0 && !session.user) {
+    if (debug) {
+      console.log(`Unauthenticated user on protected route ${request.url}, redirecting to AuthKit`);
+    }
 
-    const redirectTo = await getAuthorizationUrl({
-      returnPathname: getReturnPathname(request.url),
-      redirectUri: redirectUri,
-      screenHint: getScreenHint(signUpPaths, request.nextUrl.pathname),
-    });
+    return redirectWithFallback(authorizationUrl as string, headers);
+  }
 
-    return redirectWithFallback(redirectTo);
+  // Record the sign up paths so we can use them later
+  if (signUpPaths.length > 0) {
+    headers.set(signUpPathsHeaderName, signUpPaths.join(','));
   }
 
-  // If no session, just continue
+  return NextResponse.next({
+    headers,
+  });
+}
+
+async function updateSession(
+  request: NextRequest,
+  options: AuthkitOptions = { debug: false },
+): Promise<AuthkitResponse> {
+  const session = await getSessionFromCookie(request);
+
+  const newRequestHeaders = new Headers(request.headers);
+
+  // Record that the request was routed through the middleware so we can check later for DX purposes
+  newRequestHeaders.set(middlewareHeaderName, 'true');
+
+  // We store the current request url in a custom header, so we can always have access to it
+  // This is because on hard navigations we don't have access to `next-url` but need to get the current
+  // `pathname` to be able to return the users where they came from before sign-in
+  newRequestHeaders.set('x-url', request.url);
+
+  newRequestHeaders.delete(sessionHeaderName);
+
   if (!session) {
-    return NextResponse.next({
-      request: { headers: newRequestHeaders },
-    });
+    if (options.debug) {
+      console.log('No session found from cookie');
+    }
+
+    return {
+      session: { user: null },
+      headers: newRequestHeaders,
+      authorizationUrl: await getAuthorizationUrl({
+        returnPathname: getReturnPathname(request.url),
+        redirectUri: options.redirectUri || WORKOS_REDIRECT_URI,
+        screenHint: options.screenHint,
+      }),
+    };
   }
 
   const hasValidSession = await verifyAccessToken(session.accessToken);
-  const cookieName = WORKOS_COOKIE_NAME || 'wos-session';
 
-  const nextCookies = await cookies();
+  const cookieName = WORKOS_COOKIE_NAME || 'wos-session';
 
   if (hasValidSession) {
-    if (debug) console.log('Session is valid');
-    // set the x-workos-session header according to the current cookie value
-    newRequestHeaders.set(sessionHeaderName, nextCookies.get(cookieName)!.value);
-    return NextResponse.next({
-      request: { headers: newRequestHeaders },
-    });
+    newRequestHeaders.set(sessionHeaderName, request.cookies.get(cookieName)!.value);
+
+    const {
+      sid: sessionId,
+      org_id: organizationId,
+      role,
+      permissions,
+      entitlements,
+    } = decodeJwt<AccessToken>(session.accessToken);
+
+    return {
+      session: {
+        sessionId,
+        user: session.user,
+        organizationId,
+        role,
+        permissions,
+        entitlements,
+        impersonator: session.impersonator,
+        accessToken: session.accessToken,
+      },
+      headers: newRequestHeaders,
+    };
   }
 
-  try {
-    if (debug) console.log(`Session invalid. Refreshing access token that ends in ${session.accessToken.slice(-10)}`);
+  if (options.debug) {
+    console.log(`Session invalid. Refreshing access token that ends in ${session.accessToken.slice(-10)}`);
+  }
 
-    const { org_id: organizationId } = decodeJwt<AccessToken>(session.accessToken);
+  try {
+    const { org_id: organizationIdFromAccessToken } = decodeJwt<AccessToken>(session.accessToken);
 
-    // If the session is invalid (i.e. the access token has expired) attempt to re-authenticate with the refresh token
     const { accessToken, refreshToken, user, impersonator } = await workos.userManagement.authenticateWithRefreshToken({
       clientId: WORKOS_CLIENT_ID,
       refreshToken: session.refreshToken,
-      organizationId,
+      organizationId: organizationIdFromAccessToken,
     });
 
-    if (debug) console.log(`Refresh successful. New access token ends in ${accessToken.slice(-10)}`);
-
+    if (options.debug) {
+      console.log('Session successfully refreshed');
+    }
     // Encrypt session with new access and refresh tokens
     const encryptedSession = await encryptSession({
       accessToken,
@@ -150,25 +195,47 @@ async function updateSession(
       impersonator,
     });
 
+    newRequestHeaders.append('Set-Cookie', `${cookieName}=${encryptedSession}; ${getCookieOptions(request.url, true)}`);
     newRequestHeaders.set(sessionHeaderName, encryptedSession);
 
-    const response = NextResponse.next({
-      request: { headers: newRequestHeaders },
-    });
-    // update the cookie
-    response.cookies.set(cookieName, encryptedSession, getCookieOptions(redirectUri));
-    return response;
+    const {
+      sid: sessionId,
+      org_id: organizationId,
+      role,
+      permissions,
+      entitlements,
+    } = decodeJwt<AccessToken>(accessToken);
+
+    return {
+      session: {
+        sessionId,
+        user,
+        organizationId,
+        role,
+        permissions,
+        entitlements,
+        impersonator,
+        accessToken,
+      },
+      headers: newRequestHeaders,
+    };
   } catch (e) {
-    if (debug) console.log('Failed to refresh. Deleting cookie and redirecting.', e);
+    if (options.debug) {
+      console.log('Failed to refresh. Deleting cookie.', e);
+    }
 
-    nextCookies.delete(cookieName);
-  }
+    // When we need to delete a cookie, return it as a header as you can't delete cookies from edge middleware
+    const deleteCookie = `${cookieName}=; Expires=${new Date(0).toUTCString()}; ${getCookieOptions(request.url, true, true)}`;
+    newRequestHeaders.append('Set-Cookie', deleteCookie);
 
-  // If we get here, the session is invalid and the user needs to sign in again.
-  // We redirect to the current URL which will trigger the middleware again.
-  // This is outside of the above block because you cannot redirect in Next.js
-  // from inside a try/catch block.
-  return redirectWithFallback(request.url);
+    return {
+      session: { user: null },
+      headers: newRequestHeaders,
+      authorizationUrl: await getAuthorizationUrl({
+        returnPathname: getReturnPathname(request.url),
+      }),
+    };
+  }
 }
 
 async function refreshSession(options: {
@@ -194,12 +261,21 @@ async function refreshSession({
 
   const { org_id: organizationIdFromAccessToken } = decodeJwt<AccessToken>(session.accessToken);
 
-  const { accessToken, refreshToken, user, impersonator } = await workos.userManagement.authenticateWithRefreshToken({
-    clientId: WORKOS_CLIENT_ID,
-    refreshToken: session.refreshToken,
-    organizationId: nextOrganizationId ?? organizationIdFromAccessToken,
-  });
+  let refreshResult;
 
+  try {
+    refreshResult = await workos.userManagement.authenticateWithRefreshToken({
+      clientId: WORKOS_CLIENT_ID,
+      refreshToken: session.refreshToken,
+      organizationId: nextOrganizationId ?? organizationIdFromAccessToken,
+    });
+  } catch (error) {
+    throw new Error(`Failed to refresh session: ${error instanceof Error ? error.message : String(error)}`, {
+      cause: error,
+    });
+  }
+
+  const { accessToken, refreshToken, user, impersonator } = refreshResult;
   // Encrypt session with new access and refresh tokens
   const encryptedSession = await encryptSession({
     accessToken,
@@ -214,7 +290,7 @@ async function refreshSession({
   const url = headersList.get('x-url');
 
   const nextCookies = await cookies();
-  nextCookies.set(cookieName, encryptedSession, getCookieOptions(url));
+  nextCookies.set(cookieName, encryptedSession, getCookieOptions(url) as CookieOptions);
 
   const {
     sid: sessionId,
@@ -273,9 +349,8 @@ async function redirectToSignIn() {
 }
 
 async function withAuth(options?: { ensureSignedIn: false }): Promise<UserInfo | NoUserInfo>;
-// @ts-expect-error - TS complains about the overload signature when we have more than 2 optional properties
 async function withAuth(options: { ensureSignedIn: true }): Promise<UserInfo>;
-async function withAuth({ ensureSignedIn = false } = {}) {
+async function withAuth({ ensureSignedIn = false } = {}): Promise<UserInfo | NoUserInfo> {
   const session = await getSessionFromHeader();
 
   if (!session) {
@@ -323,50 +398,24 @@ async function verifyAccessToken(accessToken: string) {
   }
 }
 
-async function getSessionFromCookie(response?: NextResponse) {
+async function getSessionFromCookie(request?: NextRequest) {
   const cookieName = WORKOS_COOKIE_NAME || 'wos-session';
-  const nextCookies = await cookies();
-  const cookie = response ? response.cookies.get(cookieName) : nextCookies.get(cookieName);
+  let cookie;
+
+  if (request) {
+    cookie = request.cookies.get(cookieName);
+  } else {
+    const nextCookies = await cookies();
+    cookie = nextCookies.get(cookieName);
+  }
 
   if (cookie) {
-    return unsealData<Session>(cookie.value ?? cookie, {
+    return unsealData<Session>(cookie.value, {
       password: WORKOS_COOKIE_PASSWORD,
     });
   }
 }
 
-/**
- * Retrieves the session from the cookie. Meant for use in the middleware, for client side use `withAuth` instead.
- *
- * @returns UserInfo | NoUserInfo
- */
-async function getSession(response?: NextResponse) {
-  const session = await getSessionFromCookie(response);
-
-  if (!session) return { user: null };
-
-  if (await verifyAccessToken(session.accessToken)) {
-    const {
-      sid: sessionId,
-      org_id: organizationId,
-      role,
-      permissions,
-      entitlements,
-    } = decodeJwt<AccessToken>(session.accessToken);
-
-    return {
-      sessionId,
-      user: session.user,
-      organizationId,
-      role,
-      permissions,
-      entitlements,
-      impersonator: session.impersonator,
-      accessToken: session.accessToken,
-    };
-  }
-}
-
 async function getSessionFromHeader(): Promise<Session | undefined> {
   const headersList = await headers();
   const hasMiddleware = Boolean(headersList.get(middlewareHeaderName));
@@ -374,7 +423,7 @@ async function getSessionFromHeader(): Promise<Session | undefined> {
   if (!hasMiddleware) {
     const url = headersList.get('x-url');
     throw new Error(
-      `You are calling 'withAuth' on ${url} that isn’t covered by the AuthKit middleware. Make sure it is running on all paths you are calling 'withAuth' from by updating your middleware config in 'middleware.(js|ts)'.`,
+      `You are calling 'withAuth' on ${url ?? 'a route'} that isn’t covered by the AuthKit middleware. Make sure it is running on all paths you are calling 'withAuth' from by updating your middleware config in 'middleware.(js|ts)'.`,
     );
   }
 
@@ -401,4 +450,4 @@ function getScreenHint(signUpPaths: string[] | undefined, pathname: string) {
   return screenHintPaths.length > 0 ? 'sign-up' : 'sign-in';
 }
 
-export { encryptSession, withAuth, refreshSession, terminateSession, updateSession, getSession };
+export { encryptSession, withAuth, refreshSession, terminateSession, updateSessionMiddleware, updateSession };

package/src/utils.ts

@@ -1,11 +1,14 @@
 import { NextResponse } from 'next/server';
 
-export function redirectWithFallback(redirectUri: string) {
+export function redirectWithFallback(redirectUri: string, headers?: Headers) {
+  const newHeaders = headers ? new Headers(headers) : new Headers();
+  newHeaders.set('Location', redirectUri);
+
   // Fall back to standard Response if NextResponse is not available.
   // This is to support Next.js 13.
   return NextResponse?.redirect
-    ? NextResponse.redirect(redirectUri)
-    : new Response(null, { status: 307, headers: { Location: redirectUri } });
+    ? NextResponse.redirect(redirectUri, { headers })
+    : new Response(null, { status: 307, headers: newHeaders });
 }
 
 export function errorResponseWithFallback(errorBody: { error: { message: string; description: string } }) {

package/src/workos.ts

@@ -1,7 +1,7 @@
 import { WorkOS } from '@workos-inc/node';
 import { WORKOS_API_HOSTNAME, WORKOS_API_KEY, WORKOS_API_HTTPS, WORKOS_API_PORT } from './env-variables.js';
 
-export const VERSION = '0.17.2';
+export const VERSION = '1.0.1';
 
 const options = {
   apiHostname: WORKOS_API_HOSTNAME,

package/dist/esm/authkit-provider.js

@@ -1,52 +0,0 @@
-'use client';
-import * as React from 'react';
-import { checkSessionAction } from './actions.js';
-export const AuthKitProvider = ({ children, onSessionExpired }) => {
-    React.useEffect(() => {
-        // Return early if the session expired checks are disabled.
-        if (onSessionExpired === false) {
-            return;
-        }
-        let visibilityChangedCalled = false;
-        const handleVisibilityChange = async () => {
-            if (visibilityChangedCalled) {
-                return;
-            }
-            // In the case where we're using middleware auth mode, a user that has signed out in a different tab
-            // will run into an issue if they attempt to hit a server action in the original tab.
-            // This will force a refresh of the page in that case, which will redirect them to the sign-in page.
-            if (document.visibilityState === 'visible') {
-                visibilityChangedCalled = true;
-                try {
-                    const hasSession = await checkSessionAction();
-                    if (!hasSession) {
-                        throw new Error('Session expired');
-                    }
-                }
-                catch (error) {
-                    // 'Failed to fetch' is the error we are looking for if the action fails
-                    // If any other error happens, for other reasons, we should not reload the page
-                    if (error instanceof Error && error.message.includes('Failed to fetch')) {
-                        if (onSessionExpired) {
-                            onSessionExpired();
-                        }
-                        else {
-                            window.location.reload();
-                        }
-                    }
-                }
-                finally {
-                    visibilityChangedCalled = false;
-                }
-            }
-        };
-        window.addEventListener('visibilitychange', handleVisibilityChange);
-        window.addEventListener('focus', handleVisibilityChange);
-        return () => {
-            window.removeEventListener('focus', handleVisibilityChange);
-            window.removeEventListener('visibilitychange', handleVisibilityChange);
-        };
-    }, [onSessionExpired]);
-    return React.createElement(React.Fragment, null, children);
-};
-//# sourceMappingURL=authkit-provider.js.map

package/dist/esm/authkit-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authkit-provider.js","sourceRoot":"","sources":["../../src/authkit-provider.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAWlD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAwB,EAAE,EAAE;IACtF,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,2DAA2D;QAC3D,IAAI,gBAAgB,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,uBAAuB,GAAG,KAAK,CAAC;QAEpC,MAAM,sBAAsB,GAAG,KAAK,IAAI,EAAE;YACxC,IAAI,uBAAuB,EAAE,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,oGAAoG;YACpG,qFAAqF;YACrF,oGAAoG;YACpG,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC3C,uBAAuB,GAAG,IAAI,CAAC;gBAE/B,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,MAAM,kBAAkB,EAAE,CAAC;oBAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,wEAAwE;oBACxE,+EAA+E;oBAC/E,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;wBACxE,IAAI,gBAAgB,EAAE,CAAC;4BACrB,gBAAgB,EAAE,CAAC;wBACrB,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;wBAC3B,CAAC;oBACH,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,uBAAuB,GAAG,KAAK,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;QACpE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAEzD,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;YAC5D,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;QACzE,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEvB,OAAO,0CAAG,QAAQ,CAAI,CAAC;AACzB,CAAC,CAAC"}

package/dist/esm/button.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"button.js","sourceRoot":"","sources":["../../src/button.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAA8D,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE;IACnH,OAAO,CACL,gCACE,GAAG,EAAE,YAAY,EACjB,IAAI,EAAC,QAAQ,KACT,KAAK,EACT,KAAK,EAAE;YACL,OAAO,EAAE,aAAa;YACtB,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;YACxB,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,SAAS;YAElB,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,SAAS;YACnB,YAAY,EAAE,6CAA6C;YAC3D,MAAM,EAAE,MAAM;YACd,eAAe,EAAE,aAAa;YAC9B,KAAK,EAAE,OAAO;YAEd,GAAG,KAAK,CAAC,KAAK;SACf,GACD,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC;AAE9B,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/esm/impersonation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"impersonation.js","sourceRoot":"","sources":["../../src/impersonation.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAMnD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAE,IAAI,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAsB;IACnF,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;IAEhE,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE/B,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExG,OAAO,CACL,gCACM,KAAK,oCACsB,EAAE,EACjC,KAAK,EAAE;YACL,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE,CAAC;YACV,eAAe,EAAE,MAAM;YACvB,QAAQ,EAAE,IAAI;YAEd,2DAA2D;YAC3D,gBAAgB,EAAE,GAAG;YACrB,QAAQ,EAAE,4DAA4D;YACtE,UAAU,EAAE,uDAAuD;YACnE,QAAQ,EAAE,4CAA4C;YACtD,SAAS,EAAE,mDAAmD;YAC9D,SAAS,EAAE,+CAA+C;YAE1D,GAAG,KAAK,CAAC,KAAK;SACf;QAED,6BACE,KAAK,EAAE;gBACL,iBAAiB,EAAE,yFAAyF;gBAC5G,UAAU,EAAE,UAAU;gBACtB,OAAO,EAAE,iCAAiC;gBAC1C,cAAc,EAAE,gCAAgC;gBAChD,WAAW,EAAE;;;MAGjB;gBACI,YAAY,EAAE,yCAAyC;aACxD,GACD;QAEF,6BACE,KAAK,EAAE;gBACL,OAAO,EAAE,MAAM;gBACf,cAAc,EAAE,QAAQ;gBAExB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,CAAC;gBACP,KAAK,EAAE,CAAC;gBACR,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;gBAC7C,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;gBAEnD,UAAU,EACR,wIAAwI;gBAC1I,QAAQ,EAAE,gCAAgC;gBAC1C,UAAU,EAAE,KAAK;aAClB;YAED,8BACE,QAAQ,EAAE,mBAAmB,EAC7B,KAAK,EAAE;oBACL,OAAO,EAAE,MAAM;oBACf,UAAU,EAAE,UAAU;oBACtB,WAAW,EAAE,aAAa;oBAC1B,YAAY,EAAE,aAAa;oBAE3B,QAAQ,EAAE,UAAU;oBACpB,UAAU,EAAE,uBAAuB;oBACnC,WAAW,EAAE,uBAAuB;oBAEpC,aAAa,EAAE,MAAM;oBACrB,eAAe,EAAE,eAAe;oBAChC,WAAW,EAAE,OAAO;oBACpB,WAAW,EAAE,cAAc;oBAC3B,eAAe,EAAE,cAAc;oBAC/B,gBAAgB,EAAE,cAAc;oBAEhC,UAAU,EAAE,yCAAyC;oBACrD,SAAS,EAAE,iEAAiE;oBAC5E,OAAO,EAAE,+BAA+B;oBACxC,MAAM,EAAE,+BAA+B;oBAEvC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI;wBACpB,UAAU,EAAE,CAAC;wBACb,aAAa,EAAE,aAAa;wBAC5B,cAAc,EAAE,CAAC;wBACjB,iBAAiB,EAAE,cAAc;wBACjC,sBAAsB,EAAE,aAAa;wBACrC,uBAAuB,EAAE,aAAa;qBACvC,CAAC;oBAEF,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI;wBACvB,UAAU,EAAE,aAAa;wBACzB,aAAa,EAAE,CAAC;wBAChB,cAAc,EAAE,cAAc;wBAC9B,iBAAiB,EAAE,CAAC;wBACpB,mBAAmB,EAAE,aAAa;wBAClC,oBAAoB,EAAE,aAAa;qBACpC,CAAC;iBACH;gBAED,2BAAG,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE;;oBACxE,+BAAI,IAAI,CAAC,KAAK,CAAK;oBAAC,GAAG;oBAC5C,YAAY,KAAK,IAAI,IAAI,CACxB;;wBACa,+BAAI,YAAY,CAAC,IAAI,CAAK;wCACpC,CACJ,CACC;gBACJ,oBAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE,WAAW,EAAE,aAAa,EAAE,WAEvF;gBACT,oBAAC,YAAY,IAAC,cAAc,EAAC,GAAG,IAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAgB,CACvE;YAEP,6BACE,KAAK,EAAE;oBACL,OAAO,EAAE,aAAa;oBAEtB,QAAQ,EAAE,OAAO;oBACjB,KAAK,EAAE,aAAa;oBAEpB,aAAa,EAAE,MAAM;oBACrB,eAAe,EAAE,eAAe;oBAChC,MAAM,EAAE,iCAAiC;oBACzC,YAAY,EAAE,aAAa;oBAE3B,UAAU,EAAE,yCAAyC;oBACrD,SAAS,EAAE,gEAAgE;oBAC3E,OAAO,EAAE,qBAAqB;oBAC9B,MAAM,EAAE,qBAAqB;oBAE7B,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;oBAC7C,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;iBACpD;gBAED,oBAAC,YAAY,IAAC,cAAc,EAAC,GAAG,IAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAgB,CACxE,CACF,CACF,CACP,CAAC;AACJ,CAAC"}

package/dist/esm/min-max-button.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"min-max-button.js","sourceRoot":"","sources":["../../src/min-max-button.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAOrC,MAAM,UAAU,YAAY,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAqB;IAC1E,OAAO,CACL,oBAAC,MAAM,IACL,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,kCAAkC,CAAuB,CAAC;YAC9F,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;QAC5D,CAAC,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAEtC,QAAQ,CACF,CACV,CAAC;AACJ,CAAC"}

package/dist/esm/types/authkit-provider.d.ts

@@ -1,11 +0,0 @@
-import * as React from 'react';
-interface AuthKitProviderProps {
-    children: React.ReactNode;
-    /**
-     * Customize what happens when a session is expired. By default,the entire page will be reloaded.
-     * You can also pass this as `false` to disable the expired session checks.
-     */
-    onSessionExpired?: false | (() => void);
-}
-export declare const AuthKitProvider: ({ children, onSessionExpired }: AuthKitProviderProps) => React.JSX.Element;
-export {};

package/src/authkit-provider.tsx

@@ -1,66 +0,0 @@
-'use client';
-
-import * as React from 'react';
-import { checkSessionAction } from './actions.js';
-
-interface AuthKitProviderProps {
-  children: React.ReactNode;
-  /**
-   * Customize what happens when a session is expired. By default,the entire page will be reloaded.
-   * You can also pass this as `false` to disable the expired session checks.
-   */
-  onSessionExpired?: false | (() => void);
-}
-
-export const AuthKitProvider = ({ children, onSessionExpired }: AuthKitProviderProps) => {
-  React.useEffect(() => {
-    // Return early if the session expired checks are disabled.
-    if (onSessionExpired === false) {
-      return;
-    }
-
-    let visibilityChangedCalled = false;
-
-    const handleVisibilityChange = async () => {
-      if (visibilityChangedCalled) {
-        return;
-      }
-
-      // In the case where we're using middleware auth mode, a user that has signed out in a different tab
-      // will run into an issue if they attempt to hit a server action in the original tab.
-      // This will force a refresh of the page in that case, which will redirect them to the sign-in page.
-      if (document.visibilityState === 'visible') {
-        visibilityChangedCalled = true;
-
-        try {
-          const hasSession = await checkSessionAction();
-          if (!hasSession) {
-            throw new Error('Session expired');
-          }
-        } catch (error) {
-          // 'Failed to fetch' is the error we are looking for if the action fails
-          // If any other error happens, for other reasons, we should not reload the page
-          if (error instanceof Error && error.message.includes('Failed to fetch')) {
-            if (onSessionExpired) {
-              onSessionExpired();
-            } else {
-              window.location.reload();
-            }
-          }
-        } finally {
-          visibilityChangedCalled = false;
-        }
-      }
-    };
-
-    window.addEventListener('visibilitychange', handleVisibilityChange);
-    window.addEventListener('focus', handleVisibilityChange);
-
-    return () => {
-      window.removeEventListener('focus', handleVisibilityChange);
-      window.removeEventListener('visibilitychange', handleVisibilityChange);
-    };
-  }, [onSessionExpired]);
-
-  return <>{children}</>;
-};