cloudflare-next-intl 0.6.32 → 0.6.34

package/dist/src/error_handling/default_ignored_console_errors.js

@@ -24,8 +24,15 @@ export const defaultIgnoredConsoleErrors = [
     'auth/expired-action-code',
     'auth/invalid-action-code',
     'auth/user-token-expired',
+    // Logged by `initializeServerApp` itself (not thrown) when a session
+    // cookie's token is revoked/stale — `getAuthenticatedAppForUser` already
+    // handles it by refreshing and retrying, so it's noise, not a bug.
+    'auth/invalid-user-token',
+    'FirebaseServerApp could not login user with provided authIdToken',
     'The `punycode` module is deprecated. Please use a userland alternative instead.',
     'failed to pipe response',
+    "FirebaseServerApp authIdToken is invalid: the token has expired.",
+    "failed Error: Database is closing/hidden",
     'Failed to fetch RSC payload',
     ...(process.env.NODE_ENV === 'development'
         ? ['A DurableObjectNamespace in the config referenced the class "DOQueueHandler", but no such Durable Object class is exported from the worker. Please make sure the class name matches,']

package/dist/src/firebase_auth/middleware/update_session.js

@@ -302,6 +302,26 @@ export default async function updateSession(request, baseResponse, locale, rebui
     // the claim is still accurate. Only when the hint AGREES with the claim
     // is a refresh skipped, so a genuinely unverified user with an
     // established, agreeing hint doesn't pay a refresh on every request.
+    // On verifyEmailPath itself the branch above deliberately never runs, so
+    // a token minted before the user verified keeps the page pinned even
+    // after the client has confirmed verification and mirrored it into the
+    // hint cookie. Refresh once when the hint claims `true` against a stale
+    // `false` claim, so the redirect-home branch below can observe it.
+    if (isVerifyEmailPage && hasSession && !refreshedToken
+        && decodeJwtPayload(token)?.email_verified === false
+        && request.cookies.get(emailVerifiedHintCookieName)?.value === 'true') {
+        const refreshToken = request.cookies.get(refreshTokenCookieName)?.value;
+        if (refreshToken) {
+            const result = await refreshIdToken(fa.apiKey, refreshToken);
+            if (result.status === 'refreshed') {
+                refreshedToken = { idToken: result.idToken, refreshToken: result.refreshToken };
+                token = refreshedToken.idToken;
+            }
+            else if (result.status === 'invalid') {
+                clearInvalidSession = true;
+            }
+        }
+    }
     let unverifiedEmail = false;
     if (fa.verifyEmailPath && !isVerifyEmailPage && hasSession && decodeJwtPayload(token)?.email_verified === false) {
         const hint = request.cookies.get(emailVerifiedHintCookieName)?.value;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudflare-next-intl",
-  "version": "0.6.32",
+  "version": "0.6.34",
   "description": "Optimized Next Intl Package Special for App Router and Cloudflare",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",