cloudflare-next-intl 0.7.5 → 0.7.7

package/README.md

@@ -253,9 +253,11 @@ Set `firebaseAuth` on your `RoutingConfig` to enable — `IntlProvider` then
 auto-wires `AuthUserProvider` and server-side `getAuthUser` session validation.
 
 Features include:
+- `whiteListPaths`: Array of paths exempt from auth redirects (matches exact path or path-segment prefix, e.g. `/bonds` matches `/bonds/some-slug`).
+- `actionLinkPath`: Pinned route for handling Firebase action links (e.g. `/auth/action`), prioritized during cross-origin action link redirects.
 - `createForgotPasswordAction(locale, actionCodeSettings?)`: Accepts optional Firebase `AuthActionCodeSettings` (e.g. `url` redirect link).
 - `sendVerificationEmail(actionCodeSettings?)` on `useAuthUser()`: Custom action email settings when resending email verification.
-- `followSameOriginContinueUrl`: Automatically forwards emailed action links with `continueUrl` to the specified path (or external URL) directly from `intlMiddleware` (default `true`; set `false` on `firebaseAuth` config to disable). If `continueUrl` points to home root (`/`), it resolves to the mode target path (e.g. `/reset-password`).
+- `followSameOriginContinueUrl`: Automatically forwards emailed action links with `continueUrl` to the specified path (or external URL) directly from `intlMiddleware` (default `true`; set `false` on `firebaseAuth` config to disable). If `continueUrl` points to home root (`/`), it resolves to `actionLinkPath` (if set) or the mode target path (e.g. `/reset-password`).
 
 ```tsx
 import ThemeSwitcher from "cloudflare-next-intl/ThemeSwitcher";

package/dist/src/firebase_auth/client/auth_user_provider.js

@@ -327,9 +327,15 @@ export default function AuthUserProvider({ initialUser = null, children }) {
         }
         finally {
             await clearSession(sessionCookieName, refreshTokenCookieName, emailVerifiedHintCookieName, appCheckTokenCookieName, refreshTokenMaxAge);
-            router.push(fa.redirectAuthPath);
+            // Whitelisted paths opt out of every other auth redirect in this
+            // provider (see the effect above), so an explicit `logout()` from
+            // one must not bounce either — a page like a delete-account flow
+            // signs the user out as a STEP and still needs to render its own
+            // result afterwards.
+            if (!isWhiteListed)
+                router.push(fa.redirectAuthPath);
         }
         // eslint-disable-next-line react-hooks/exhaustive-deps
-    }, [fa.redirectAuthPath, sessionCookieName, refreshTokenCookieName, emailVerifiedHintCookieName, appCheckTokenCookieName]);
+    }, [fa.redirectAuthPath, sessionCookieName, refreshTokenCookieName, emailVerifiedHintCookieName, appCheckTokenCookieName, isWhiteListed]);
     return _jsx(AuthUserContext.Provider, { value: { ...state, reloadUser, sendVerificationEmail, logout }, children: children });
 }

package/dist/src/firebase_auth/server/auth_user_server_provider.js

@@ -6,6 +6,7 @@ import config from '@intl-config';
 import requireFirebaseAuthConfig from '../require_config';
 import { getAuthenticatedAppForUser } from './firebase_server';
 import withRedirectQuery from '../preserve_redirect_query';
+import isWhitelisted from '../is_whitelisted';
 const AuthUserProvider = dynamic(() => import('../client/auth_user_provider'));
 /**
  * Resolves the signed-in user from the session cookie and performs the
@@ -29,7 +30,7 @@ export async function resolveAuthUserAndRedirect() {
     const requestHeaders = await headers();
     const path = requestHeaders.get('x-pathname') ?? '/';
     const isAuthPage = fa.isAuthPath(path);
-    const isWhiteListed = fa.whiteListPaths?.includes(path) ?? false;
+    const isWhiteListed = isWhitelisted(path, fa.whiteListPaths);
     // `x-pathname` is path-only, so the query string comes from `x-search`
     // (set alongside it by `intlMiddleware`) — `redirect()` takes a plain
     // string, not a URL.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudflare-next-intl",
-  "version": "0.7.5",
+  "version": "0.7.7",
   "description": "Optimized Next Intl Package Special for App Router and Cloudflare",
 
   "main": "dist/index.js",