cloudflare-next-intl 0.10.20 → 0.10.22

package/README.md

@@ -516,7 +516,7 @@ Features include:
 - `createForgotPasswordAction(locale, actionCodeSettings?)`: Accepts optional Firebase `AuthActionCodeSettings` (e.g. `url` redirect link).
 - `sendVerificationEmail(actionCodeSettings?)` on `useAuthUser()`: Custom action email settings when resending email verification.
 - `followSameOriginContinueUrl`: Automatically forwards emailed action links with `continueUrl` to the specified path (or external URL) directly from `intlMiddleware` (default `true`; set `false` on `firebaseAuth` config to disable). If `continueUrl` points to home root (`/`), it resolves to `actionLinkPath` (if set) or the mode target path (e.g. `/reset-password`).
-- `appCheck`: Firebase App Check integration supporting reCAPTCHA Enterprise (`recaptchaEnterpriseSiteKey`) and reCAPTCHA v3 (`recaptchaV3SiteKey`). For reCAPTCHA v3, defaults to a `CustomProvider` using an explicit `render=explicit` script tag to avoid iframe/webworker CDN integrity issues in private windows (`useExplicitRecaptchaScript: false` to opt out). When `appCheck` is configured, `getFirebaseAuthClient()` waits for App Check to initialize before returning, so every request made through its `auth` (sign-in included) carries an `X-Firebase-AppCheck` header and passes App Check enforcement. The trade-off: App Check (and, with token auto-refresh on, the reCAPTCHA script) now starts on the first `getFirebaseAuthClient()` call instead of the first token mint. If App Check initialization fails, the client is still returned, just without App Check. Supports server-side token minting via service accounts.
+- `appCheck`: Firebase App Check integration supporting reCAPTCHA Enterprise (`recaptchaEnterpriseSiteKey`) and reCAPTCHA v3 (`recaptchaV3SiteKey`). For reCAPTCHA v3, defaults to a `CustomProvider` using an explicit `render=explicit` script tag to avoid iframe/webworker CDN integrity issues in private windows (`useExplicitRecaptchaScript: false` to opt out). When `appCheck` is configured, `getFirebaseAuthClient()` initializes App Check before it creates `auth`, so every request made through `auth` carries an `X-Firebase-AppCheck` header and passes App Check enforcement. That includes the `accounts:lookup` call Firebase makes on page load to restore a signed-in user, as well as sign-in. The trade-off: App Check (and, with token auto-refresh on, the reCAPTCHA script) now starts on the first `getFirebaseAuthClient()` call instead of the first token mint. If App Check initialization fails, the client is still returned, just without App Check. Supports server-side token minting via service accounts.
 - `resolveOptionalAuthUser()` (`cloudflare-next-intl/resolveOptionalAuthUser`): best-effort variant of `getAuthUser()` for callers that want to *attach* the current user when one happens to be known — error/telemetry reporting, analytics, logging — without failing or changing behavior when no request/session context is available. Swallows every failure and resolves `{ user: null }` instead of throwing. Use `getAuthUser()` (not this) whenever your own output actually depends on who's signed in — `checkDynamicPages` (below) treats `getAuthUser()`/`useAuthUser()`/`withUserDb()` as page-blocking dynamic-API signals but does not follow into this helper, so it's also the way to read "whoever's signed in, if anyone" from a page or a module it imports without forcing that page dynamic.
 - `resolveErrorReportingUser(useAuthUser?)` (same subpath): gated form of `resolveOptionalAuthUser()` for an `onError` sink — pass `ErrorHandlingParams.useAuthUser` straight through. Defaults to `false`: when not `true`, resolves `{ user: null }` immediately without calling `getAuthUser()` at all, so a page reached only through your `onError` sink's default path stays static-eligible. A specific `reportError({ ..., useAuthUser: true })` call site opts in per-call when it actually wants the user on that report.
 

package/dist/src/client/components/client_provider.d.ts

@@ -3,11 +3,8 @@ import type { SerializedAuthUser } from "../../firebase_auth/types.js";
 import type { CookieConsentAnalyticsConfig, AutoAnalyticsEventsConfig } from "../../types/types.js";
 import type { CookieConsentDialogProps } from "../../cookie_consent/client/components/cookie_consent_dialog.js";
 import type { PrivacyPolicyUpdateDialogProps } from "../../cookie_consent/client/components/privacy_policy_update_dialog.js";
-interface LocaleContextType {
-    language: string;
-    messages: TranslationObject;
-}
-export declare const LocaleContext: import("react").Context<LocaleContextType | undefined>;
+import { LocaleContext } from "./locale_provider.js";
+export { LocaleContext };
 export default function LocationzationClientProvider({ language, messages, initialAuthUser, skipAuthProvider, analyticsConfig, autoAnalyticsEventsConfig, requiresConsent, autoWireDialogs, dialogProps, updateDialogProps, children }: {
     language: string;
     messages: TranslationObject;
@@ -21,4 +18,3 @@ export default function LocationzationClientProvider({ language, messages, initi
     updateDialogProps?: PrivacyPolicyUpdateDialogProps;
     children: React.ReactNode;
 }): Component;
-export {};

package/dist/src/client/components/client_provider.js

@@ -1,14 +1,15 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { setLocaleCache, setMessageForLocaleCache } from "../../general/cache_variables.js";
-import { createContext, useEffect, useMemo, Suspense } from "react";
+import { useEffect, useMemo, Suspense } from "react";
 import dynamic from "next/dynamic.js";
 import useLazyWrappingProvider from "./use_lazy_wrapping_provider.js";
 import config from "@intl-config";
 import installConsoleErrorOverride from "../../error_handling/install_console_error_override.js";
 import installGlobalErrorOverride from "../../error_handling/install_global_error_override.js";
 import AuthUserPendingProvider from "../../firebase_auth/client/auth_user_pending_provider.js";
-export const LocaleContext = createContext(undefined);
+import { LocaleContext } from "./locale_provider.js";
+export { LocaleContext };
 const loadAuthUserProvider = () => import("../../firebase_auth/client/auth_user_provider.js");
 const AutoFirebasePerformanceEvents = dynamic(() => import("../../firebase_auth/client/components/auto_firebase_performance_events.js"));
 const loadCookieConsentProvider = () => import("../../cookie_consent/client/cookie_consent_provider.js");

package/dist/src/client/components/locale_provider.d.ts

@@ -0,0 +1,13 @@
+import { type ReactNode } from "react";
+import type { TranslationObject } from "../../types/types.js";
+interface LocaleContextType {
+    language: string;
+    messages: TranslationObject;
+}
+export declare const LocaleContext: import("react").Context<LocaleContextType | undefined>;
+export default function LocaleProvider({ language, messages, children }: {
+    language: string;
+    messages: TranslationObject;
+    children: ReactNode;
+}): React.JSX.Element;
+export {};

package/dist/src/client/components/locale_provider.js

@@ -0,0 +1,8 @@
+"use client";
+import { jsx as _jsx } from "react/jsx-runtime";
+import { createContext, useMemo } from "react";
+export const LocaleContext = createContext(undefined);
+export default function LocaleProvider({ language, messages, children }) {
+    const value = useMemo(() => ({ language, messages }), [language, messages]);
+    return _jsx(LocaleContext.Provider, { value: value, children: children });
+}

package/dist/src/firebase_auth/client/auth_user_provider.js

@@ -49,11 +49,13 @@ async function writeAppCheckTokenCookie(appCheckTokenCookieName, maxAge) {
         console.error('AuthUserProvider: App Check token cookie sync failed', e);
     }
 }
-async function clearSession(sessionCookieName, refreshTokenCookieName, emailVerifiedHintCookieName, appCheckTokenCookieName, refreshTokenMaxAge) {
+async function clearSession(sessionCookieName, refreshTokenCookieName, emailVerifiedHintCookieName, appCheckTokenCookieName, refreshTokenMaxAge, clearServerCookies = true) {
     clearSessionCookie(sessionCookieName);
     clearRefreshTokenCookie(refreshTokenCookieName);
     clearAppCheckTokenCookie(appCheckTokenCookieName);
     writeEmailVerifiedHintCookie(emailVerifiedHintCookieName, false, refreshTokenMaxAge);
+    if (!clearServerCookies)
+        return;
     try {
         await clearSessionAction();
     }
@@ -98,6 +100,9 @@ export default function AuthUserProvider({ initialUser = null, children }) {
     const signInCallbackFired = useRef(initialUser !== null);
     const signOutCallbackFired = useRef(initialUser === null);
     const emailVerifiedRef = useRef(initialUser?.emailVerified ?? false);
+    const isAuthPageRef = useRef(isAuthPage);
+    isAuthPageRef.current = isAuthPage;
+    const initialSignedIn = initialUser !== null;
     const deferAuthSubscribe = initialUser === null && isWhiteListed && !isAuthPage && typeof window !== 'undefined';
     useEffect(() => {
         const { user, loading } = state;
@@ -131,7 +136,7 @@ export default function AuthUserProvider({ initialUser = null, children }) {
                         await writeSession(user, sessionCookieName, maxAge, refreshTokenCookieName, refreshTokenMaxAge, emailVerifiedHintCookieName, appCheckTokenCookieName, appCheckTokenMaxAge);
                     }
                     else {
-                        await clearSession(sessionCookieName, refreshTokenCookieName, emailVerifiedHintCookieName, appCheckTokenCookieName, refreshTokenMaxAge);
+                        await clearSession(sessionCookieName, refreshTokenCookieName, emailVerifiedHintCookieName, appCheckTokenCookieName, refreshTokenMaxAge, previous ?? (initialSignedIn || isAuthPageRef.current));
                     }
                 }
                 catch (e) {
@@ -211,7 +216,7 @@ export default function AuthUserProvider({ initialUser = null, children }) {
                 clearTimeout(timeoutHandle);
             unsubscribe?.();
         };
-    }, [deferAuthSubscribe, router, isAuthPage, isWhiteListed, maxAge, sessionCookieName, refreshTokenMaxAge, refreshTokenCookieName, emailVerifiedHintCookieName, appCheckTokenCookieName, appCheckTokenMaxAge, fa]);
+    }, [initialSignedIn, deferAuthSubscribe, router, isAuthPage, isWhiteListed, maxAge, sessionCookieName, refreshTokenMaxAge, refreshTokenCookieName, emailVerifiedHintCookieName, appCheckTokenCookieName, appCheckTokenMaxAge, fa]);
     const reloadUser = useCallback(async () => {
         const { auth } = await getFirebaseAuthClient();
         const user = auth.currentUser;

package/dist/src/firebase_auth/client/firebase_client.js

@@ -122,15 +122,10 @@ async function initializeFirebaseAppCheck(app, appCheckConfig) {
 }
 const APP_CHECK_TOKEN_TIMEOUT_MS = 10000;
 let appCheckInitPromise;
-async function ensureAppCheck() {
-    if (appCheckInitPromise)
-        return appCheckInitPromise;
+function initAppCheckFor(app) {
     const appCheckConfig = config.firebaseAuth?.appCheck;
     if (!appCheckConfig || typeof window === 'undefined')
-        return;
-    const { app } = await loadFirebaseAuthClient();
-    if (appCheckInitPromise)
-        return appCheckInitPromise;
+        return undefined;
     appCheckInitPromise = (async () => {
         try {
             cachedAppCheck = await initializeFirebaseAppCheck(app, appCheckConfig);
@@ -141,6 +136,9 @@ async function ensureAppCheck() {
     })();
     return appCheckInitPromise;
 }
+async function ensureAppCheck() {
+    await getFirebaseAuthClient();
+}
 export async function getAppCheckToken() {
     await ensureAppCheck().catch(() => undefined);
     if (!cachedAppCheck)
@@ -160,7 +158,7 @@ export async function getAppCheckToken() {
 }
 let cached;
 let cachedPromise;
-async function loadFirebaseAuthClient() {
+export async function getFirebaseAuthClient() {
     requireFirebaseAuthConfig(config.firebaseAuth);
     if (cached)
         return cached;
@@ -183,6 +181,7 @@ async function loadFirebaseAuthClient() {
                 measurementId: fa.measurementId,
             };
             const app = getApps().length ? getApp() : initializeApp(firebaseConfig);
+            await initAppCheckFor(app);
             if (perfModule) {
                 cachedPerformance = perfModule.initializePerformance(app, { instrumentationEnabled: false });
             }
@@ -204,11 +203,6 @@ async function loadFirebaseAuthClient() {
     }
     return cachedPromise;
 }
-export async function getFirebaseAuthClient() {
-    const client = await loadFirebaseAuthClient();
-    await ensureAppCheck().catch(() => undefined);
-    return client;
-}
 export function getFirebaseAuthClientSync() {
     return cached;
 }

package/dist/src/firebase_auth/middleware/update_session.js

@@ -283,7 +283,7 @@ export default async function updateSession(request, baseResponse, locale, rebui
     else if (unverifiedEmail) {
         response = buildRedirect(baseResponse, localeUrl(fa.verifyEmailPath), isPrefetch);
     }
-    else if (isAuthPage || (isVerifyEmailPage && decodeTokenOnce(token)?.email_verified === true)) {
+    else if (isVerifyEmailPage && decodeTokenOnce(token)?.email_verified === true) {
         response = buildRedirect(baseResponse, localeUrl(fa.homePath), isPrefetch);
     }
     else {

package/dist/src/server/components/server_provider.js

@@ -8,6 +8,7 @@ import config from "../../config/intl_config.js";
 import installConsoleErrorOverride from "../../error_handling/install_console_error_override.js";
 import reportError from "../../error_handling/report_error.js";
 const LocationzationClientProvider = dynamic(() => import("../../client/components/client_provider.js"));
+import LocaleProvider from "../../client/components/locale_provider.js";
 let authUserServerProviderModule;
 export default async function LocationzationProvider({ language, messages, staticSafe = true, children }) {
     if (!localesSet.has(language)) {
@@ -59,5 +60,5 @@ export default async function LocationzationProvider({ language, messages, stati
             }
         }
     }
-    return (_jsx(Suspense, { fallback: children, children: _jsx(LocationzationClientProvider, { language: language, messages: messagesValue, initialAuthUser: initialAuthUser, skipAuthProvider: !autoWireClientProvider, analyticsConfig: analyticsConfig, autoAnalyticsEventsConfig: config.cookieConsent?.autoAnalyticsEvents, requiresConsent: requiresConsent, autoWireDialogs: config.cookieConsent?.autoWireDialogs !== false, dialogProps: config.cookieConsent?.dialogProps, updateDialogProps: config.cookieConsent?.updateDialogProps, children: children }) }));
+    return (_jsx(LocaleProvider, { language: language, messages: messagesValue, children: _jsx(Suspense, { fallback: children, children: _jsx(LocationzationClientProvider, { language: language, messages: messagesValue, initialAuthUser: initialAuthUser, skipAuthProvider: !autoWireClientProvider, analyticsConfig: analyticsConfig, autoAnalyticsEventsConfig: config.cookieConsent?.autoAnalyticsEvents, requiresConsent: requiresConsent, autoWireDialogs: config.cookieConsent?.autoWireDialogs !== false, dialogProps: config.cookieConsent?.dialogProps, updateDialogProps: config.cookieConsent?.updateDialogProps, children: children }) }) }));
 }

package/dist/src/vite/vinext_route_wiring_fix.js

@@ -80,7 +80,7 @@ export function missingRequiredSymbols(code, patchName) {
     return REQUIRED_SYMBOLS[patchName].filter((symbol) => !code.includes(symbol));
 }
 function warnIncompatible(filePath, patchName, code) {
-    console.warn(`[cfni:vinext-route-wiring-fix] ${filePath} no longer exposes ${missingRequiredSymbols(code, patchName).join(", ")} — this vinext version may have changed; the ${patchName} fix was NOT applied.`);
+    console.warn(`cfni:vinext-route-wiring-fix: ${filePath} no longer exposes ${missingRequiredSymbols(code, patchName).join(", ")} — this vinext version may have changed; the ${patchName} fix was NOT applied.`);
 }
 export function isAppPageRouteWiringAlreadyFixed(code, options = {}) {
     const hasBuggyPrefetch = code.includes("firstNestedEntry") &&
@@ -611,7 +611,7 @@ export function syncPatchVinextOnDisk(root = process.cwd(), options = {}) {
                     changed = true;
                 }
                 else {
-                    console.warn(`[cfni:vinext-route-wiring-fix] ${wiringPath} does not match the expected shape for patchAppPageRouteWiring — this vinext version may have changed; the route-wiring fix was NOT applied.`);
+                    console.warn(`cfni:vinext-route-wiring-fix: ${wiringPath} does not match the expected shape for patchAppPageRouteWiring — this vinext version may have changed; the route-wiring fix was NOT applied.`);
                 }
             }
         }
@@ -632,7 +632,7 @@ export function syncPatchVinextOnDisk(root = process.cwd(), options = {}) {
                     changed = true;
                 }
                 else {
-                    console.warn(`[cfni:vinext-route-wiring-fix] ${matchingPath} does not match the expected shape for patchRouteMatching — this vinext version may have changed; the route-matching fix was NOT applied.`);
+                    console.warn(`cfni:vinext-route-wiring-fix: ${matchingPath} does not match the expected shape for patchRouteMatching — this vinext version may have changed; the route-matching fix was NOT applied.`);
                 }
             }
         }
@@ -653,7 +653,7 @@ export function syncPatchVinextOnDisk(root = process.cwd(), options = {}) {
                     changed = true;
                 }
                 else {
-                    console.warn(`[cfni:vinext-route-wiring-fix] ${optimisticPath} does not match the expected shape for patchOptimisticRouting — this vinext version may have changed; the optimistic-routing fix was NOT applied.`);
+                    console.warn(`cfni:vinext-route-wiring-fix: ${optimisticPath} does not match the expected shape for patchOptimisticRouting — this vinext version may have changed; the optimistic-routing fix was NOT applied.`);
                 }
             }
         }
@@ -674,7 +674,7 @@ export function syncPatchVinextOnDisk(root = process.cwd(), options = {}) {
                     changed = true;
                 }
                 else {
-                    console.warn(`[cfni:vinext-route-wiring-fix] ${browserEntryPath} does not match the expected shape for patchPrefetchLearning — this vinext version may have changed; the prefetch-learning fix was NOT applied.`);
+                    console.warn(`cfni:vinext-route-wiring-fix: ${browserEntryPath} does not match the expected shape for patchPrefetchLearning — this vinext version may have changed; the prefetch-learning fix was NOT applied.`);
                 }
             }
         }
@@ -695,7 +695,7 @@ export function syncPatchVinextOnDisk(root = process.cwd(), options = {}) {
                     changed = true;
                 }
                 else {
-                    console.warn(`[cfni:vinext-route-wiring-fix] ${probePath} does not match the expected shape for patchAppPageProbe — this vinext version may have changed; the suspense-probe fix was NOT applied.`);
+                    console.warn(`cfni:vinext-route-wiring-fix: ${probePath} does not match the expected shape for patchAppPageProbe — this vinext version may have changed; the suspense-probe fix was NOT applied.`);
                 }
             }
         }
@@ -713,7 +713,7 @@ export function syncPatchVinextOnDisk(root = process.cwd(), options = {}) {
                     changed = true;
                 }
                 else {
-                    console.warn(`[cfni:vinext-route-wiring-fix] ${renderDependencyPath} does not match the expected shape for patchRenderDependency — this vinext version may have changed; the render-dependency fix was NOT applied.`);
+                    console.warn(`cfni:vinext-route-wiring-fix: ${renderDependencyPath} does not match the expected shape for patchRenderDependency — this vinext version may have changed; the render-dependency fix was NOT applied.`);
                 }
             }
         }
@@ -732,7 +732,7 @@ export function syncPatchVinextOnDisk(root = process.cwd(), options = {}) {
                     changed = true;
                 }
                 else {
-                    console.warn(`[cfni:vinext-route-wiring-fix] ${optimisticLearningTimeoutPath} does not match the expected shape for patchOptimisticLearningTimeout — this vinext version may have changed; the optimistic-learning-timeout fix was NOT applied.`);
+                    console.warn(`cfni:vinext-route-wiring-fix: ${optimisticLearningTimeoutPath} does not match the expected shape for patchOptimisticLearningTimeout — this vinext version may have changed; the optimistic-learning-timeout fix was NOT applied.`);
                 }
             }
         }
@@ -750,7 +750,7 @@ export function syncPatchVinextOnDisk(root = process.cwd(), options = {}) {
                     changed = true;
                 }
                 else {
-                    console.warn(`[cfni:vinext-route-wiring-fix] ${pageInvokerSuspensionReleasePath} does not match the expected shape for patchPageInvokerSuspensionRelease — this vinext version may have changed; the page-invoker-suspension-release fix was NOT applied.`);
+                    console.warn(`cfni:vinext-route-wiring-fix: ${pageInvokerSuspensionReleasePath} does not match the expected shape for patchPageInvokerSuspensionRelease — this vinext version may have changed; the page-invoker-suspension-release fix was NOT applied.`);
                 }
             }
         }
@@ -768,7 +768,7 @@ export function syncPatchVinextOnDisk(root = process.cwd(), options = {}) {
                     changed = true;
                 }
                 else {
-                    console.warn(`[cfni:vinext-route-wiring-fix] ${navControllerPath} does not match the expected shape for patchRefreshDeferralNavController — this vinext version may have changed; the refresh-deferral fix was NOT applied.`);
+                    console.warn(`cfni:vinext-route-wiring-fix: ${navControllerPath} does not match the expected shape for patchRefreshDeferralNavController — this vinext version may have changed; the refresh-deferral fix was NOT applied.`);
                 }
             }
             const entryPath = resolveVinextBrowserEntryPath(root);
@@ -860,7 +860,7 @@ export function vinextRouteWiringFixPlugin(options = {}) {
             if (changed || isVinextOptimizeDepsCacheStale(root, cacheDir)) {
                 const busted = bustVinextOptimizeDepsCache(cacheDir);
                 if (busted) {
-                    console.log("[cfni:vinext-route-wiring-fix] patched vinext on disk and cleared its stale Vite optimizeDeps cache — dependencies will re-bundle on next request.");
+                    console.log("cfni:vinext-route-wiring-fix: patched vinext on disk and cleared its stale Vite optimizeDeps cache — dependencies will re-bundle on next request.");
                 }
             }
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudflare-next-intl",
-  "version": "0.10.20",
+  "version": "0.10.22",
   "description": "Optimized Next Intl Package Special for App Router and Cloudflare",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",