@zitadel/sdk-nuxt 0.1.0-alpha.17 → 0.1.0-alpha.18

package/dist/{chunk-AQZKZRKQ.js → chunk-MJ3RLEU6.js}

@@ -96,7 +96,7 @@ async function proxyRequest(event, authUrl, proxyPath, url, proxyTimeoutMs) {
   const rawBody = hasBody ? await readRawBody(event, false) : void 0;
   const body = rawBody != null ? new Uint8Array(rawBody) : void 0;
   const upstreamHeaders = buildUpstreamHeaders(event);
-  if (!upstreamHeaders.has("authorization")) {
+  if (requiresProjectSecret(method, suffix) && !upstreamHeaders.has("authorization")) {
     const config = useRuntimeConfig();
     const projectSecret = config.nextgen?.projectSecret;
     if (projectSecret) {
@@ -130,6 +130,9 @@ async function proxyRequest(event, authUrl, proxyPath, url, proxyTimeoutMs) {
   }
   return response.body;
 }
+function requiresProjectSecret(method, pathname) {
+  return method.toUpperCase() === "POST" && pathname === "/sessions/exchange";
+}
 var DECODER = new TextDecoder();
 function isJwtShaped(token) {
   const parts = token.split(".");
@@ -193,13 +196,14 @@ async function handleAuth(event, opts) {
     };
     return;
   }
+  let liveAnonymousSession = false;
   if (!payload && cookieToken && !isJwtShaped(cookieToken)) {
     const opaqueResult = await validateOpaqueSessionToken(cookieToken, url, opaqueTokenTimeoutMs);
-    if (opaqueResult) {
+    if (opaqueResult?.userId) {
       event.context.nextgenAuth = {
         isAuthenticated: true,
         session: {
-          userId: opaqueResult.userId ?? "unknown",
+          userId: opaqueResult.userId,
           email: null,
           name: null,
           token: cookieToken
@@ -207,11 +211,14 @@ async function handleAuth(event, opts) {
       };
       return;
     }
+    liveAnonymousSession = opaqueResult !== null;
   }
   event.context.nextgenAuth = { isAuthenticated: false, session: null };
-  for (const name of Object.keys(parseCookies(event))) {
-    if (name.startsWith("__nextgen")) {
-      deleteCookie(event, name);
+  if (!liveAnonymousSession) {
+    for (const name of Object.keys(parseCookies(event))) {
+      if (name.startsWith("__nextgen")) {
+        deleteCookie(event, name);
+      }
     }
   }
   if (matchesRoutes(pathname, protectedRoutes)) {

package/dist/index.d.ts

@@ -1,8 +1,7 @@
-export { ZitadelLogin, ZitadelLogout } from '@zitadel/components';
+export { ZitadelLogin, ZitadelLogout, businessLocales } from '@zitadel/components';
 export { createNextgenMiddleware, getAuth } from './runtime/server/middleware.js';
 import { ZitadelProject } from '@zitadel/api/config';
-export { ClientAuthResult } from './runtime/types.js';
-export { AuthResult, NextgenMiddlewareOptions } from '@zitadel/sdk-core/middleware';
+export { AuthResult, ClientAuthResult, NextgenMiddlewareOptions } from '@zitadel/sdk-core/middleware';
 import 'h3';
 
 /**

package/dist/index.js

@@ -2,10 +2,11 @@ import "./chunk-ZNXAFGLP.js";
 import {
   createNextgenMiddleware,
   getAuth
-} from "./chunk-AQZKZRKQ.js";
+} from "./chunk-MJ3RLEU6.js";
 
 // src/index.ts
 import { ZitadelLogin, ZitadelLogout } from "@zitadel/components";
+import { businessLocales } from "@zitadel/components";
 
 // src/runtime/composables/useZitadelProject.ts
 import { getZitadelConfig } from "@zitadel/api/config";
@@ -15,6 +16,7 @@ function useZitadelProject() {
 export {
   ZitadelLogin,
   ZitadelLogout,
+  businessLocales,
   createNextgenMiddleware,
   getAuth,
   useZitadelProject

package/dist/module.js

@@ -48,7 +48,7 @@ var module_default = defineNuxtModule({
       // Server-only — never exposed to the client. Override at deploy time via
       // `NUXT_NEXTGEN_PROJECT_SECRET`. Left undefined when the env var (and
       // `.env.local`) provide no value, so the middleware surfaces a missing
-      // bearer instead of silently sending an empty one.
+      // exchange bearer instead of silently sending an empty one.
       projectSecret: loadProjectSecret(nuxt.options.rootDir)
     };
     nuxt.options.runtimeConfig.public.zitadelProxyPath = options.proxyPath ?? "/__nextgen";

package/dist/runtime/server/handler.js

@@ -1,6 +1,6 @@
 import {
   createNextgenMiddleware
-} from "../../chunk-AQZKZRKQ.js";
+} from "../../chunk-MJ3RLEU6.js";
 
 // src/runtime/server/handler.ts
 import { useRuntimeConfig } from "#imports";

package/dist/runtime/server/middleware.js

@@ -1,7 +1,7 @@
 import {
   createNextgenMiddleware,
   getAuth
-} from "../../chunk-AQZKZRKQ.js";
+} from "../../chunk-MJ3RLEU6.js";
 export {
   createNextgenMiddleware,
   getAuth

package/dist/runtime/types.d.ts

@@ -1,37 +1 @@
-import { UnauthState } from '@zitadel/sdk-core/middleware';
-export { AuthResult, AuthState, NextgenMiddlewareOptions, NextgenSession, UnauthState } from '@zitadel/sdk-core/middleware';
-
-/**
- * Re-exports shared SDK types from `@zitadel/sdk-core`.
- *
- * These types are defined once in sdk-core and shared by both sdk-next
- * and sdk-nuxt.
- */
-
-/**
- * The client-safe session exposed to Vue components via {@link useAuth}.
- * Identical to {@link NextgenSession} but omits `token` — the raw JWT must
- * not be serialised into the Nuxt SSR payload where third-party scripts can
- * read it.
- */
-type ClientSession = {
-    /** The user's unique identifier (`sub` claim). */
-    userId: string;
-    /** The user's email address, or `null` if not present in the token. */
-    email: string | null;
-    /** The user's display name, or `null` if not present in the token. */
-    name: string | null;
-};
-/** Client-safe auth state when the user is signed in. */
-type ClientAuthState = {
-    isAuthenticated: true;
-    session: ClientSession;
-};
-/**
- * Union of all possible auth states returned by {@link useAuth}.
- * Token is intentionally absent — use {@link getAuth} server-side when the
- * raw JWT is needed.
- */
-type ClientAuthResult = ClientAuthState | UnauthState;
-
-export type { ClientAuthResult, ClientAuthState, ClientSession };
+export { AuthResult, AuthState, ClientAuthResult, ClientAuthState, ClientSession, NextgenMiddlewareOptions, NextgenSession, UnauthState } from '@zitadel/sdk-core/middleware';

package/dist/server.js

@@ -2,7 +2,7 @@ import "./chunk-ZNXAFGLP.js";
 import {
   createNextgenMiddleware,
   getAuth
-} from "./chunk-AQZKZRKQ.js";
+} from "./chunk-MJ3RLEU6.js";
 export {
   createNextgenMiddleware,
   getAuth

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zitadel/sdk-nuxt",
-  "version": "0.1.0-alpha.17",
+  "version": "0.1.0-alpha.18",
   "description": "Nuxt proxy middleware and helpers for the pre-release Zitadel preview.",
   "homepage": "https://github.com/zitadel/nextgen/tree/main/packages/sdk-nuxt#readme",
   "bugs": {
@@ -33,9 +33,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@zitadel/api": "0.1.0-alpha.17",
-    "@zitadel/sdk-core": "0.1.0-alpha.17",
-    "@zitadel/components": "0.1.0-alpha.17"
+    "@zitadel/components": "0.1.0-alpha.18",
+    "@zitadel/sdk-core": "0.1.0-alpha.18",
+    "@zitadel/api": "0.1.0-alpha.18"
   },
   "peerDependencies": {
     "h3": ">=1",