naystack 1.4.16 → 1.4.20

package/dist/auth/email/client.cjs.js

@@ -41,6 +41,15 @@ __export(client_exports, {
 });
 module.exports = __toCommonJS(client_exports);
 var import_react = __toESM(require("react"));
+
+// src/env.ts
+function getEnv(key, skipCheck) {
+  const value = process.env[key];
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
+// src/auth/email/client.tsx
 var TokenContext = (0, import_react.createContext)({
   token: null,
   setToken: () => null
@@ -48,7 +57,7 @@ var TokenContext = (0, import_react.createContext)({
 var AuthWrapper = ({ children }) => {
   const [token, setToken] = (0, import_react.useState)(null);
   (0, import_react.useEffect)(() => {
-    fetch(process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT, {
+    fetch(getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */), {
       credentials: "include"
     }).then((res) => res.json()).then((data) => setToken(data.accessToken));
   }, []);
@@ -66,11 +75,14 @@ function useSignUp() {
   const setToken = useSetToken();
   return (0, import_react.useCallback)(
     async (data) => {
-      const res = await fetch(process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT, {
-        method: "POST",
-        body: JSON.stringify(data),
-        credentials: "include"
-      });
+      const res = await fetch(
+        getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
+        {
+          method: "POST",
+          body: JSON.stringify(data),
+          credentials: "include"
+        }
+      );
       if (res.ok) {
         const data2 = await res.json();
         setToken(data2.accessToken);
@@ -85,11 +97,14 @@ function useLogin() {
   const setToken = useSetToken();
   return (0, import_react.useCallback)(
     async (data) => {
-      const res = await fetch(process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT, {
-        method: "PUT",
-        body: JSON.stringify(data),
-        credentials: "include"
-      });
+      const res = await fetch(
+        getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
+        {
+          method: "PUT",
+          body: JSON.stringify(data),
+          credentials: "include"
+        }
+      );
       if (res.ok) {
         const data2 = await res.json();
         setToken(data2.accessToken);
@@ -105,7 +120,7 @@ function useLogout() {
   return (0, import_react.useCallback)(
     async (data) => {
       setToken(null);
-      await fetch(process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT, {
+      await fetch(getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */), {
         method: "DELETE",
         credentials: "include",
         body: JSON.stringify(data)

package/dist/auth/email/client.esm.js

@@ -8,6 +8,15 @@ import React, {
   useEffect,
   useState
 } from "react";
+
+// src/env.ts
+function getEnv(key, skipCheck) {
+  const value = process.env[key];
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
+// src/auth/email/client.tsx
 var TokenContext = createContext({
   token: null,
   setToken: () => null
@@ -15,7 +24,7 @@ var TokenContext = createContext({
 var AuthWrapper = ({ children }) => {
   const [token, setToken] = useState(null);
   useEffect(() => {
-    fetch(process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT, {
+    fetch(getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */), {
       credentials: "include"
     }).then((res) => res.json()).then((data) => setToken(data.accessToken));
   }, []);
@@ -33,11 +42,14 @@ function useSignUp() {
   const setToken = useSetToken();
   return useCallback(
     async (data) => {
-      const res = await fetch(process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT, {
-        method: "POST",
-        body: JSON.stringify(data),
-        credentials: "include"
-      });
+      const res = await fetch(
+        getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
+        {
+          method: "POST",
+          body: JSON.stringify(data),
+          credentials: "include"
+        }
+      );
       if (res.ok) {
         const data2 = await res.json();
         setToken(data2.accessToken);
@@ -52,11 +64,14 @@ function useLogin() {
   const setToken = useSetToken();
   return useCallback(
     async (data) => {
-      const res = await fetch(process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT, {
-        method: "PUT",
-        body: JSON.stringify(data),
-        credentials: "include"
-      });
+      const res = await fetch(
+        getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
+        {
+          method: "PUT",
+          body: JSON.stringify(data),
+          credentials: "include"
+        }
+      );
       if (res.ok) {
         const data2 = await res.json();
         setToken(data2.accessToken);
@@ -72,7 +87,7 @@ function useLogout() {
   return useCallback(
     async (data) => {
       setToken(null);
-      await fetch(process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT, {
+      await fetch(getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */), {
         method: "DELETE",
         credentials: "include",
         body: JSON.stringify(data)

package/dist/auth/email/index.cjs.js

@@ -35,6 +35,13 @@ var import_headers = require("next/headers");
 var import_navigation = require("next/navigation");
 var import_server = require("next/server");
 
+// src/env.ts
+function getEnv(key, skipCheck) {
+  const value = process.env[key];
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
@@ -107,12 +114,13 @@ async function massageRequest(req, options) {
     return {
       error: handleError(400, "Missing password", options.onError)
     };
-  if (options.turnstileKey) {
+  const turnstileKey = getEnv("TURNSTILE_KEY" /* TURNSTILE_KEY */, true);
+  if (turnstileKey) {
     if (!data.captchaToken)
       return {
         error: handleError(400, "Missing captchaToken", options.onError)
       };
-    if (!await verifyCaptcha(data.captchaToken, options.turnstileKey))
+    if (!await verifyCaptcha(data.captchaToken, turnstileKey))
       return {
         error: handleError(400, "Invalid captcha", options.onError)
       };
@@ -145,17 +153,20 @@ async function verifyCaptcha(token, secret) {
   }
   return false;
 }
-var getContext = (keys, req) => {
+var getContext = (req) => {
   const bearer = req.headers.get("authorization");
   if (!bearer) {
     const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value;
-    const userId = getUserIdFromRefreshToken(keys.refresh, refresh);
+    const userId = getUserIdFromRefreshToken(
+      getEnv("REFRESH_KEY" /* REFRESH_KEY */),
+      refresh
+    );
     if (userId) return { userId, isRefreshID: true };
     return { userId: null };
   }
   const token = bearer.slice(7);
   try {
-    const res = (0, import_jsonwebtoken2.verify)(token, keys.signing);
+    const res = (0, import_jsonwebtoken2.verify)(token, getEnv("SIGNING_KEY" /* SIGNING_KEY */));
     if (typeof res === "string") {
       return { userId: null };
     }
@@ -170,7 +181,7 @@ var getContext = (keys, req) => {
 // src/auth/email/routes/delete.ts
 var getDeleteRoute = (options) => async (req) => {
   if (options.onLogout) {
-    const ctx = await getContext(options.keys, req);
+    const ctx = await getContext(req);
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }
@@ -180,14 +191,17 @@ var getDeleteRoute = (options) => async (req) => {
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
   const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value;
-  const userID = getUserIdFromRefreshToken(options.keys.refresh, refresh);
+  const userID = getUserIdFromRefreshToken(
+    getEnv("REFRESH_KEY" /* REFRESH_KEY */),
+    refresh
+  );
   if (userID) {
     if (options.onRefresh) {
       const body = await req.json();
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, options.keys.signing)
+      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
     );
   }
   return getTokenizedResponse();
@@ -202,8 +216,11 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, options.keys.signing),
-        generateRefreshToken(existingUser.id, options.keys.refresh)
+        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+        generateRefreshToken(
+          existingUser.id,
+          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
+        )
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -218,8 +235,8 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, options.keys.signing),
-      generateRefreshToken(newUser.id, options.keys.refresh)
+      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
     );
   }
   return getTokenizedResponse();
@@ -237,8 +254,8 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, options.keys.signing),
-      generateRefreshToken(user.id, options.keys.refresh)
+      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
     );
   }
   return handleError(403, "Invalid password", options.onError);
@@ -251,7 +268,7 @@ function getEmailAuthRoutes(options) {
     POST: getPostRoute(options),
     PUT: getPutRoute(options),
     DELETE: getDeleteRoute(options),
-    getContext: (req) => getContext(options.keys, req)
+    getContext
   };
 }
 // Annotate the CommonJS export names for ESM import in node:

package/dist/auth/email/index.esm.js

@@ -8,6 +8,13 @@ import { cookies } from "next/headers";
 import { redirect } from "next/navigation";
 import { NextResponse } from "next/server";
 
+// src/env.ts
+function getEnv(key, skipCheck) {
+  const value = process.env[key];
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
@@ -80,12 +87,13 @@ async function massageRequest(req, options) {
     return {
       error: handleError(400, "Missing password", options.onError)
     };
-  if (options.turnstileKey) {
+  const turnstileKey = getEnv("TURNSTILE_KEY" /* TURNSTILE_KEY */, true);
+  if (turnstileKey) {
     if (!data.captchaToken)
       return {
         error: handleError(400, "Missing captchaToken", options.onError)
       };
-    if (!await verifyCaptcha(data.captchaToken, options.turnstileKey))
+    if (!await verifyCaptcha(data.captchaToken, turnstileKey))
       return {
         error: handleError(400, "Invalid captcha", options.onError)
       };
@@ -118,17 +126,20 @@ async function verifyCaptcha(token, secret) {
   }
   return false;
 }
-var getContext = (keys, req) => {
+var getContext = (req) => {
   const bearer = req.headers.get("authorization");
   if (!bearer) {
     const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value;
-    const userId = getUserIdFromRefreshToken(keys.refresh, refresh);
+    const userId = getUserIdFromRefreshToken(
+      getEnv("REFRESH_KEY" /* REFRESH_KEY */),
+      refresh
+    );
     if (userId) return { userId, isRefreshID: true };
     return { userId: null };
   }
   const token = bearer.slice(7);
   try {
-    const res = verify2(token, keys.signing);
+    const res = verify2(token, getEnv("SIGNING_KEY" /* SIGNING_KEY */));
     if (typeof res === "string") {
       return { userId: null };
     }
@@ -143,7 +154,7 @@ var getContext = (keys, req) => {
 // src/auth/email/routes/delete.ts
 var getDeleteRoute = (options) => async (req) => {
   if (options.onLogout) {
-    const ctx = await getContext(options.keys, req);
+    const ctx = await getContext(req);
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }
@@ -153,14 +164,17 @@ var getDeleteRoute = (options) => async (req) => {
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
   const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value;
-  const userID = getUserIdFromRefreshToken(options.keys.refresh, refresh);
+  const userID = getUserIdFromRefreshToken(
+    getEnv("REFRESH_KEY" /* REFRESH_KEY */),
+    refresh
+  );
   if (userID) {
     if (options.onRefresh) {
       const body = await req.json();
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, options.keys.signing)
+      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
     );
   }
   return getTokenizedResponse();
@@ -175,8 +189,11 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, options.keys.signing),
-        generateRefreshToken(existingUser.id, options.keys.refresh)
+        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+        generateRefreshToken(
+          existingUser.id,
+          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
+        )
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -191,8 +208,8 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, options.keys.signing),
-      generateRefreshToken(newUser.id, options.keys.refresh)
+      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
     );
   }
   return getTokenizedResponse();
@@ -210,8 +227,8 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, options.keys.signing),
-      generateRefreshToken(user.id, options.keys.refresh)
+      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
     );
   }
   return handleError(403, "Invalid password", options.onError);
@@ -224,7 +241,7 @@ function getEmailAuthRoutes(options) {
     POST: getPostRoute(options),
     PUT: getPutRoute(options),
     DELETE: getDeleteRoute(options),
-    getContext: (req) => getContext(options.keys, req)
+    getContext
   };
 }
 export {

package/dist/auth/email/routes/delete.cjs.js

@@ -31,6 +31,13 @@ var import_headers = require("next/headers");
 var import_navigation = require("next/navigation");
 var import_server = require("next/server");
 
+// src/env.ts
+function getEnv(key, skipCheck) {
+  const value = process.env[key];
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
@@ -76,17 +83,20 @@ var import_jsonwebtoken2 = require("jsonwebtoken");
 var import_server2 = require("next/server");
 
 // src/auth/email/utils.ts
-var getContext = (keys, req) => {
+var getContext = (req) => {
   const bearer = req.headers.get("authorization");
   if (!bearer) {
     const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value;
-    const userId = getUserIdFromRefreshToken(keys.refresh, refresh);
+    const userId = getUserIdFromRefreshToken(
+      getEnv("REFRESH_KEY" /* REFRESH_KEY */),
+      refresh
+    );
     if (userId) return { userId, isRefreshID: true };
     return { userId: null };
   }
   const token = bearer.slice(7);
   try {
-    const res = (0, import_jsonwebtoken2.verify)(token, keys.signing);
+    const res = (0, import_jsonwebtoken2.verify)(token, getEnv("SIGNING_KEY" /* SIGNING_KEY */));
     if (typeof res === "string") {
       return { userId: null };
     }
@@ -101,7 +111,7 @@ var getContext = (keys, req) => {
 // src/auth/email/routes/delete.ts
 var getDeleteRoute = (options) => async (req) => {
   if (options.onLogout) {
-    const ctx = await getContext(options.keys, req);
+    const ctx = await getContext(req);
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }

package/dist/auth/email/routes/delete.esm.js

@@ -5,6 +5,13 @@ import { cookies } from "next/headers";
 import { redirect } from "next/navigation";
 import { NextResponse } from "next/server";
 
+// src/env.ts
+function getEnv(key, skipCheck) {
+  const value = process.env[key];
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
@@ -50,17 +57,20 @@ import { verify as verify2 } from "jsonwebtoken";
 import { NextResponse as NextResponse2 } from "next/server";
 
 // src/auth/email/utils.ts
-var getContext = (keys, req) => {
+var getContext = (req) => {
   const bearer = req.headers.get("authorization");
   if (!bearer) {
     const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value;
-    const userId = getUserIdFromRefreshToken(keys.refresh, refresh);
+    const userId = getUserIdFromRefreshToken(
+      getEnv("REFRESH_KEY" /* REFRESH_KEY */),
+      refresh
+    );
     if (userId) return { userId, isRefreshID: true };
     return { userId: null };
   }
   const token = bearer.slice(7);
   try {
-    const res = verify2(token, keys.signing);
+    const res = verify2(token, getEnv("SIGNING_KEY" /* SIGNING_KEY */));
     if (typeof res === "string") {
       return { userId: null };
     }
@@ -75,7 +85,7 @@ var getContext = (keys, req) => {
 // src/auth/email/routes/delete.ts
 var getDeleteRoute = (options) => async (req) => {
   if (options.onLogout) {
-    const ctx = await getContext(options.keys, req);
+    const ctx = await getContext(req);
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }

package/dist/auth/email/routes/get.cjs.js

@@ -24,6 +24,13 @@ __export(get_exports, {
 });
 module.exports = __toCommonJS(get_exports);
 
+// src/env.ts
+function getEnv(key, skipCheck) {
+  const value = process.env[key];
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
@@ -75,14 +82,17 @@ function getUserIdFromRefreshToken(refreshKey, refreshToken) {
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
   const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value;
-  const userID = getUserIdFromRefreshToken(options.keys.refresh, refresh);
+  const userID = getUserIdFromRefreshToken(
+    getEnv("REFRESH_KEY" /* REFRESH_KEY */),
+    refresh
+  );
   if (userID) {
     if (options.onRefresh) {
       const body = await req.json();
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, options.keys.signing)
+      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/get.esm.js

@@ -1,3 +1,10 @@
+// src/env.ts
+function getEnv(key, skipCheck) {
+  const value = process.env[key];
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
@@ -49,14 +56,17 @@ function getUserIdFromRefreshToken(refreshKey, refreshToken) {
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
   const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value;
-  const userID = getUserIdFromRefreshToken(options.keys.refresh, refresh);
+  const userID = getUserIdFromRefreshToken(
+    getEnv("REFRESH_KEY" /* REFRESH_KEY */),
+    refresh
+  );
   if (userID) {
     if (options.onRefresh) {
       const body = await req.json();
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, options.keys.signing)
+      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/post.cjs.js

@@ -25,6 +25,13 @@ __export(post_exports, {
 module.exports = __toCommonJS(post_exports);
 var import_bcryptjs2 = require("bcryptjs");
 
+// src/env.ts
+function getEnv(key, skipCheck) {
+  const value = process.env[key];
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
 // src/auth/utils/errors.ts
 var import_server = require("next/server");
 function handleError(status, message, onError) {
@@ -86,12 +93,13 @@ async function massageRequest(req, options) {
     return {
       error: handleError(400, "Missing password", options.onError)
     };
-  if (options.turnstileKey) {
+  const turnstileKey = getEnv("TURNSTILE_KEY" /* TURNSTILE_KEY */, true);
+  if (turnstileKey) {
     if (!data.captchaToken)
       return {
         error: handleError(400, "Missing captchaToken", options.onError)
       };
-    if (!await verifyCaptcha(data.captchaToken, options.turnstileKey))
+    if (!await verifyCaptcha(data.captchaToken, turnstileKey))
       return {
         error: handleError(400, "Invalid captcha", options.onError)
       };
@@ -133,8 +141,11 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, options.keys.signing),
-        generateRefreshToken(existingUser.id, options.keys.refresh)
+        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+        generateRefreshToken(
+          existingUser.id,
+          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
+        )
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -149,8 +160,8 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, options.keys.signing),
-      generateRefreshToken(newUser.id, options.keys.refresh)
+      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/post.esm.js

@@ -1,6 +1,13 @@
 // src/auth/email/routes/post.ts
 import { hash } from "bcryptjs";
 
+// src/env.ts
+function getEnv(key, skipCheck) {
+  const value = process.env[key];
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
 // src/auth/utils/errors.ts
 import { NextResponse } from "next/server";
 function handleError(status, message, onError) {
@@ -62,12 +69,13 @@ async function massageRequest(req, options) {
     return {
       error: handleError(400, "Missing password", options.onError)
     };
-  if (options.turnstileKey) {
+  const turnstileKey = getEnv("TURNSTILE_KEY" /* TURNSTILE_KEY */, true);
+  if (turnstileKey) {
     if (!data.captchaToken)
       return {
         error: handleError(400, "Missing captchaToken", options.onError)
       };
-    if (!await verifyCaptcha(data.captchaToken, options.turnstileKey))
+    if (!await verifyCaptcha(data.captchaToken, turnstileKey))
       return {
         error: handleError(400, "Invalid captcha", options.onError)
       };
@@ -109,8 +117,11 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, options.keys.signing),
-        generateRefreshToken(existingUser.id, options.keys.refresh)
+        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+        generateRefreshToken(
+          existingUser.id,
+          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
+        )
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -125,8 +136,8 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, options.keys.signing),
-      generateRefreshToken(newUser.id, options.keys.refresh)
+      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
     );
   }
   return getTokenizedResponse();