cloudflare-next-intl 0.7.3 → 0.7.6

package/README.md

@@ -253,9 +253,11 @@ Set `firebaseAuth` on your `RoutingConfig` to enable — `IntlProvider` then
 auto-wires `AuthUserProvider` and server-side `getAuthUser` session validation.
 
 Features include:
+- `whiteListPaths`: Array of paths exempt from auth redirects (matches exact path or path-segment prefix, e.g. `/bonds` matches `/bonds/some-slug`).
+- `actionLinkPath`: Pinned route for handling Firebase action links (e.g. `/auth/action`), prioritized during cross-origin action link redirects.
 - `createForgotPasswordAction(locale, actionCodeSettings?)`: Accepts optional Firebase `AuthActionCodeSettings` (e.g. `url` redirect link).
 - `sendVerificationEmail(actionCodeSettings?)` on `useAuthUser()`: Custom action email settings when resending email verification.
-- `followSameOriginContinueUrl`: Automatically forwards emailed action links with `continueUrl` to the specified path (or external URL) directly from `intlMiddleware` (default `true`; set `false` on `firebaseAuth` config to disable).
+- `followSameOriginContinueUrl`: Automatically forwards emailed action links with `continueUrl` to the specified path (or external URL) directly from `intlMiddleware` (default `true`; set `false` on `firebaseAuth` config to disable). If `continueUrl` points to home root (`/`), it resolves to `actionLinkPath` (if set) or the mode target path (e.g. `/reset-password`).
 
 ```tsx
 import ThemeSwitcher from "cloudflare-next-intl/ThemeSwitcher";

package/dist/src/firebase_auth/middleware/update_session.js

@@ -261,7 +261,14 @@ export default async function updateSession(request, baseResponse, locale, rebui
                             }
                         }
                         else {
-                            // External continueUrl: redirect directly to the full external URL
+                            if (parsed.pathname === '/') {
+                                if (fa.actionLinkPath) {
+                                    parsed.pathname = fa.actionLinkPath;
+                                }
+                                else if (target) {
+                                    parsed.pathname = `${localePrefix}${target}`;
+                                }
+                            }
                             parsed.search = request.nextUrl.search;
                             return buildRedirect(baseResponse, parsed);
                         }

package/dist/src/firebase_auth/server/auth_user_server_provider.js

@@ -6,6 +6,7 @@ import config from '@intl-config';
 import requireFirebaseAuthConfig from '../require_config';
 import { getAuthenticatedAppForUser } from './firebase_server';
 import withRedirectQuery from '../preserve_redirect_query';
+import isWhitelisted from '../is_whitelisted';
 const AuthUserProvider = dynamic(() => import('../client/auth_user_provider'));
 /**
  * Resolves the signed-in user from the session cookie and performs the
@@ -29,7 +30,7 @@ export async function resolveAuthUserAndRedirect() {
     const requestHeaders = await headers();
     const path = requestHeaders.get('x-pathname') ?? '/';
     const isAuthPage = fa.isAuthPath(path);
-    const isWhiteListed = fa.whiteListPaths?.includes(path) ?? false;
+    const isWhiteListed = isWhitelisted(path, fa.whiteListPaths);
     // `x-pathname` is path-only, so the query string comes from `x-search`
     // (set alongside it by `intlMiddleware`) — `redirect()` takes a plain
     // string, not a URL.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudflare-next-intl",
-  "version": "0.7.3",
+  "version": "0.7.6",
   "description": "Optimized Next Intl Package Special for App Router and Cloudflare",
 
   "main": "dist/index.js",