cloudflare-next-intl 0.6.19 → 0.6.20

package/dist/src/firebase_auth/client/auth_user_provider.js

@@ -9,6 +9,7 @@ import { getFirebaseAuthClient, getFirebaseAuthModule } from './firebase_client'
 import { setAuthUserCache } from './auth_user_cache';
 import { defaultEmailVerifiedHintCookieName, defaultRefreshTokenCookieName, defaultSessionCookieName } from '../middleware/update_session';
 import decodeJwtPayload from '../decode_jwt_payload';
+import isWhitelisted from '../is_whitelisted';
 import setCookie from '../../client/functions/set_cookie';
 import getCookie from '../../client/functions/get_cookie';
 import clearSessionAction from '../server/clear_session_action';
@@ -87,7 +88,7 @@ export default function AuthUserProvider({ initialUser = null, children }) {
     const router = useRouter();
     const pathname = usePathname();
     const isAuthPage = fa.isAuthPath(pathname);
-    const isWhiteListed = fa.whiteListPaths?.includes(pathname) ?? false;
+    const isWhiteListed = isWhitelisted(pathname, fa.whiteListPaths);
     const maxAge = fa.sessionCookieMaxAge ?? 60 * 60 * 24 * 5;
     const sessionCookieName = fa.sessionCookieName ?? defaultSessionCookieName;
     const refreshTokenMaxAge = fa.refreshTokenCookieMaxAge ?? 60 * 60 * 24 * 365;

package/dist/src/firebase_auth/is_whitelisted.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Whether `path` is exempt from auth redirects under `whiteListPaths`.
+ * Matches an entry exactly, OR as a path-segment prefix (`/bonds` also
+ * covers `/bonds/some-slug`, but NOT `/bonds-extra`) — a plain
+ * `startsWith` would let a differently-named sibling route slip through
+ * whenever one route's name happens to prefix another's.
+ */
+export default function isWhitelisted(path: string, whiteListPaths: readonly string[] | undefined): boolean;

package/dist/src/firebase_auth/is_whitelisted.js

@@ -0,0 +1,12 @@
+/**
+ * Whether `path` is exempt from auth redirects under `whiteListPaths`.
+ * Matches an entry exactly, OR as a path-segment prefix (`/bonds` also
+ * covers `/bonds/some-slug`, but NOT `/bonds-extra`) — a plain
+ * `startsWith` would let a differently-named sibling route slip through
+ * whenever one route's name happens to prefix another's.
+ */
+export default function isWhitelisted(path, whiteListPaths) {
+    if (!whiteListPaths)
+        return false;
+    return whiteListPaths.some((entry) => path === entry || path.startsWith(`${entry}/`));
+}

package/dist/src/firebase_auth/middleware/update_session.js

@@ -1,6 +1,7 @@
 import { NextResponse } from 'next/server';
 import config from '@intl-config';
 import decodeJwtPayload from '../decode_jwt_payload';
+import isWhitelisted from '../is_whitelisted';
 export const defaultSessionCookieName = '__fa_session__';
 export const defaultRefreshTokenCookieName = '__fa_refresh_token__';
 // Non-httpOnly: written by AuthUserProvider (client) every time it observes
@@ -219,7 +220,7 @@ export default async function updateSession(request, baseResponse, locale) {
             }
         }
     }
-    const isWhiteListed = fa.whiteListPaths?.includes(path) ?? false;
+    const isWhiteListed = isWhitelisted(path, fa.whiteListPaths);
     if (isWhiteListed)
         return baseResponse;
     const isAuthPage = fa.isAuthPath(path);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudflare-next-intl",
-  "version": "0.6.19",
+  "version": "0.6.20",
   "description": "Optimized Next Intl Package Special for App Router and Cloudflare",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",