naystack 1.5.31 → 1.5.33

package/dist/auth/email/index.cjs.js

@@ -36,7 +36,10 @@ __export(email_exports, {
   getEmailAuthRoutes: () => getEmailAuthRoutes
 });
 module.exports = __toCommonJS(email_exports);
-var import_server4 = require("next/server");
+var import_server5 = require("next/server");
+
+// src/utils/route.ts
+var import_server = require("next/server");
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
@@ -62,9 +65,15 @@ function withCors(handler, allowedOrigins) {
         allowedOrigins
       );
       if (corsHeaders) {
+        const newResponse = new import_server.NextResponse(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: new Headers(response.headers)
+        });
         Object.entries(corsHeaders).forEach(([key, value]) => {
-          response.headers.set(key, value);
+          newResponse.headers.set(key, value);
         });
+        return newResponse;
       }
       return response;
     });
@@ -76,7 +85,7 @@ var import_bcryptjs = require("bcryptjs");
 var import_jsonwebtoken = require("jsonwebtoken");
 var import_headers = require("next/headers");
 var import_navigation = require("next/navigation");
-var import_server = require("next/server");
+var import_server2 = require("next/server");
 
 // src/env.ts
 var getEnvValue = (key) => {
@@ -138,7 +147,7 @@ function generateRefreshToken(id, refreshKey) {
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
-  const response = import_server.NextResponse.json(body, {
+  const response = import_server2.NextResponse.json(body, {
     status: 200
   });
   if (!accessToken) {
@@ -185,11 +194,11 @@ async function checkAuthStatus(redirectUnauthorizedURL) {
 var import_jsonwebtoken2 = require("jsonwebtoken");
 
 // src/auth/utils/errors.ts
-var import_server2 = require("next/server");
+var import_server3 = require("next/server");
 function handleError(status, message, onError) {
   const res = onError?.({ status, message });
   if (res) return res;
-  return new import_server2.NextResponse(message, { status });
+  return new import_server3.NextResponse(message, { status });
 }
 
 // src/auth/email/utils.ts
@@ -410,7 +419,7 @@ function getEmailAuthRoutes(options) {
           req.headers.get("origin"),
           allowedOrigins
         );
-        return new import_server4.NextResponse(null, {
+        return new import_server5.NextResponse(null, {
           status: 204,
           headers: corsHeaders ?? void 0
         });

package/dist/auth/email/index.esm.js

@@ -1,5 +1,8 @@
 // src/auth/email/index.ts
-import { NextResponse as NextResponse3 } from "next/server";
+import { NextResponse as NextResponse4 } from "next/server";
+
+// src/utils/route.ts
+import { NextResponse } from "next/server";
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
@@ -25,9 +28,15 @@ function withCors(handler, allowedOrigins) {
         allowedOrigins
       );
       if (corsHeaders) {
+        const newResponse = new NextResponse(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: new Headers(response.headers)
+        });
         Object.entries(corsHeaders).forEach(([key, value]) => {
-          response.headers.set(key, value);
+          newResponse.headers.set(key, value);
         });
+        return newResponse;
       }
       return response;
     });
@@ -39,7 +48,7 @@ import { compare } from "bcryptjs";
 import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
 import { cookies } from "next/headers";
 import { redirect } from "next/navigation";
-import { NextResponse } from "next/server";
+import { NextResponse as NextResponse2 } from "next/server";
 
 // src/env.ts
 var getEnvValue = (key) => {
@@ -101,7 +110,7 @@ function generateRefreshToken(id, refreshKey) {
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
-  const response = NextResponse.json(body, {
+  const response = NextResponse2.json(body, {
     status: 200
   });
   if (!accessToken) {
@@ -148,11 +157,11 @@ async function checkAuthStatus(redirectUnauthorizedURL) {
 import { verify as verify2 } from "jsonwebtoken";
 
 // src/auth/utils/errors.ts
-import { NextResponse as NextResponse2 } from "next/server";
+import { NextResponse as NextResponse3 } from "next/server";
 function handleError(status, message, onError) {
   const res = onError?.({ status, message });
   if (res) return res;
-  return new NextResponse2(message, { status });
+  return new NextResponse3(message, { status });
 }
 
 // src/auth/email/utils.ts
@@ -377,7 +386,7 @@ function getEmailAuthRoutes(options) {
           req.headers.get("origin"),
           allowedOrigins
         );
-        return new NextResponse3(null, {
+        return new NextResponse4(null, {
           status: 204,
           headers: corsHeaders ?? void 0
         });

package/dist/auth/index.cjs.js

@@ -42,7 +42,10 @@ __export(auth_exports, {
 module.exports = __toCommonJS(auth_exports);
 
 // src/auth/email/index.ts
-var import_server4 = require("next/server");
+var import_server5 = require("next/server");
+
+// src/utils/route.ts
+var import_server = require("next/server");
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
@@ -68,9 +71,15 @@ function withCors(handler, allowedOrigins) {
         allowedOrigins
       );
       if (corsHeaders) {
+        const newResponse = new import_server.NextResponse(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: new Headers(response.headers)
+        });
         Object.entries(corsHeaders).forEach(([key, value]) => {
-          response.headers.set(key, value);
+          newResponse.headers.set(key, value);
         });
+        return newResponse;
       }
       return response;
     });
@@ -82,7 +91,7 @@ var import_bcryptjs = require("bcryptjs");
 var import_jsonwebtoken = require("jsonwebtoken");
 var import_headers = require("next/headers");
 var import_navigation = require("next/navigation");
-var import_server = require("next/server");
+var import_server2 = require("next/server");
 
 // src/env.ts
 var getEnvValue = (key) => {
@@ -144,7 +153,7 @@ function generateRefreshToken(id, refreshKey) {
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
-  const response = import_server.NextResponse.json(body, {
+  const response = import_server2.NextResponse.json(body, {
     status: 200
   });
   if (!accessToken) {
@@ -203,11 +212,11 @@ async function checkAuthStatus(redirectUnauthorizedURL) {
 var import_jsonwebtoken2 = require("jsonwebtoken");
 
 // src/auth/utils/errors.ts
-var import_server2 = require("next/server");
+var import_server3 = require("next/server");
 function handleError(status, message, onError) {
   const res = onError?.({ status, message });
   if (res) return res;
-  return new import_server2.NextResponse(message, { status });
+  return new import_server3.NextResponse(message, { status });
 }
 
 // src/auth/email/utils.ts
@@ -428,7 +437,7 @@ function getEmailAuthRoutes(options) {
           req.headers.get("origin"),
           allowedOrigins
         );
-        return new import_server4.NextResponse(null, {
+        return new import_server5.NextResponse(null, {
           status: 204,
           headers: corsHeaders ?? void 0
         });
@@ -439,7 +448,7 @@ function getEmailAuthRoutes(options) {
 
 // src/auth/google/get.ts
 var import_googleapis = require("googleapis");
-var import_server6 = require("next/server");
+var import_server7 = require("next/server");
 var import_uuid = require("uuid");
 var getGoogleGetRoute = ({
   getUserIdFromEmail,
@@ -469,7 +478,7 @@ var getGoogleGetRoute = ({
         prompt: "consent",
         redirect_uri: url
       });
-      const res = import_server6.NextResponse.redirect(authorizationUrl);
+      const res = import_server7.NextResponse.redirect(authorizationUrl);
       res.cookies.set("state", state2, {
         httpOnly: true,
         secure: true
@@ -478,12 +487,12 @@ var getGoogleGetRoute = ({
     }
     const errorURL = errorRedirectURL || redirectURL;
     if (error) {
-      return import_server6.NextResponse.redirect(errorURL);
+      return import_server7.NextResponse.redirect(errorURL);
     }
     const state = req.nextUrl.searchParams.get("state") || void 0;
     if (code && state) {
       const localState = req.cookies.get("state")?.value;
-      if (localState !== state) return import_server6.NextResponse.redirect(errorURL);
+      if (localState !== state) return import_server7.NextResponse.redirect(errorURL);
       const { tokens } = await oauth2Client.getToken(code);
       oauth2Client.setCredentials(tokens);
       const userInfoRequest = await import_googleapis.google.oauth2({
@@ -495,7 +504,7 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const res = import_server6.NextResponse.redirect(redirectURL);
+          const res = import_server7.NextResponse.redirect(redirectURL);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
             generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */)),
@@ -513,7 +522,7 @@ var getGoogleGetRoute = ({
         }
       }
     }
-    return import_server6.NextResponse.redirect(errorURL);
+    return import_server7.NextResponse.redirect(errorURL);
   };
 };
 
@@ -525,7 +534,7 @@ function initGoogleAuth(props) {
 }
 
 // src/auth/instagram/route.ts
-var import_server8 = require("next/server");
+var import_server9 = require("next/server");
 
 // src/auth/instagram/utils.ts
 async function getRefreshedInstagramAccessToken(token) {
@@ -587,7 +596,7 @@ var getInstagramUser = (token, id, fields) => {
 };
 
 // src/socials/meta-webhook.ts
-var import_server7 = require("next/server");
+var import_server8 = require("next/server");
 
 // src/auth/instagram/route.ts
 var getInstagramRoute = ({
@@ -595,7 +604,7 @@ var getInstagramRoute = ({
   errorRedirectURL,
   onUser
 }) => {
-  const handleError2 = (message) => import_server8.NextResponse.redirect(`${errorRedirectURL}?error=${message}`);
+  const handleError2 = (message) => import_server9.NextResponse.redirect(`${errorRedirectURL}?error=${message}`);
   return async (req) => {
     const accessCode = req.nextUrl.searchParams.get("code");
     const error = req.nextUrl.searchParams.get("error");
@@ -619,7 +628,7 @@ var getInstagramRoute = ({
       instagramData.accessToken
     );
     if (errorMessage) return handleError2(errorMessage);
-    return import_server8.NextResponse.redirect(redirectURL);
+    return import_server9.NextResponse.redirect(redirectURL);
   };
 };
 

package/dist/auth/index.esm.js

@@ -1,5 +1,8 @@
 // src/auth/email/index.ts
-import { NextResponse as NextResponse3 } from "next/server";
+import { NextResponse as NextResponse4 } from "next/server";
+
+// src/utils/route.ts
+import { NextResponse } from "next/server";
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
@@ -25,9 +28,15 @@ function withCors(handler, allowedOrigins) {
         allowedOrigins
       );
       if (corsHeaders) {
+        const newResponse = new NextResponse(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: new Headers(response.headers)
+        });
         Object.entries(corsHeaders).forEach(([key, value]) => {
-          response.headers.set(key, value);
+          newResponse.headers.set(key, value);
         });
+        return newResponse;
       }
       return response;
     });
@@ -39,7 +48,7 @@ import { compare } from "bcryptjs";
 import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
 import { cookies } from "next/headers";
 import { redirect } from "next/navigation";
-import { NextResponse } from "next/server";
+import { NextResponse as NextResponse2 } from "next/server";
 
 // src/env.ts
 var getEnvValue = (key) => {
@@ -101,7 +110,7 @@ function generateRefreshToken(id, refreshKey) {
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
-  const response = NextResponse.json(body, {
+  const response = NextResponse2.json(body, {
     status: 200
   });
   if (!accessToken) {
@@ -160,11 +169,11 @@ async function checkAuthStatus(redirectUnauthorizedURL) {
 import { verify as verify2 } from "jsonwebtoken";
 
 // src/auth/utils/errors.ts
-import { NextResponse as NextResponse2 } from "next/server";
+import { NextResponse as NextResponse3 } from "next/server";
 function handleError(status, message, onError) {
   const res = onError?.({ status, message });
   if (res) return res;
-  return new NextResponse2(message, { status });
+  return new NextResponse3(message, { status });
 }
 
 // src/auth/email/utils.ts
@@ -389,7 +398,7 @@ function getEmailAuthRoutes(options) {
           req.headers.get("origin"),
           allowedOrigins
         );
-        return new NextResponse3(null, {
+        return new NextResponse4(null, {
           status: 204,
           headers: corsHeaders ?? void 0
         });
@@ -400,7 +409,7 @@ function getEmailAuthRoutes(options) {
 
 // src/auth/google/get.ts
 import { google } from "googleapis";
-import { NextResponse as NextResponse4 } from "next/server";
+import { NextResponse as NextResponse5 } from "next/server";
 import { v4 } from "uuid";
 var getGoogleGetRoute = ({
   getUserIdFromEmail,
@@ -430,7 +439,7 @@ var getGoogleGetRoute = ({
         prompt: "consent",
         redirect_uri: url
       });
-      const res = NextResponse4.redirect(authorizationUrl);
+      const res = NextResponse5.redirect(authorizationUrl);
       res.cookies.set("state", state2, {
         httpOnly: true,
         secure: true
@@ -439,12 +448,12 @@ var getGoogleGetRoute = ({
     }
     const errorURL = errorRedirectURL || redirectURL;
     if (error) {
-      return NextResponse4.redirect(errorURL);
+      return NextResponse5.redirect(errorURL);
     }
     const state = req.nextUrl.searchParams.get("state") || void 0;
     if (code && state) {
       const localState = req.cookies.get("state")?.value;
-      if (localState !== state) return NextResponse4.redirect(errorURL);
+      if (localState !== state) return NextResponse5.redirect(errorURL);
       const { tokens } = await oauth2Client.getToken(code);
       oauth2Client.setCredentials(tokens);
       const userInfoRequest = await google.oauth2({
@@ -456,7 +465,7 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const res = NextResponse4.redirect(redirectURL);
+          const res = NextResponse5.redirect(redirectURL);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
             generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */)),
@@ -474,7 +483,7 @@ var getGoogleGetRoute = ({
         }
       }
     }
-    return NextResponse4.redirect(errorURL);
+    return NextResponse5.redirect(errorURL);
   };
 };
 
@@ -486,7 +495,7 @@ function initGoogleAuth(props) {
 }
 
 // src/auth/instagram/route.ts
-import { NextResponse as NextResponse6 } from "next/server";
+import { NextResponse as NextResponse7 } from "next/server";
 
 // src/auth/instagram/utils.ts
 async function getRefreshedInstagramAccessToken(token) {
@@ -548,7 +557,7 @@ var getInstagramUser = (token, id, fields) => {
 };
 
 // src/socials/meta-webhook.ts
-import { NextResponse as NextResponse5 } from "next/server";
+import { NextResponse as NextResponse6 } from "next/server";
 
 // src/auth/instagram/route.ts
 var getInstagramRoute = ({
@@ -556,7 +565,7 @@ var getInstagramRoute = ({
   errorRedirectURL,
   onUser
 }) => {
-  const handleError2 = (message) => NextResponse6.redirect(`${errorRedirectURL}?error=${message}`);
+  const handleError2 = (message) => NextResponse7.redirect(`${errorRedirectURL}?error=${message}`);
   return async (req) => {
     const accessCode = req.nextUrl.searchParams.get("code");
     const error = req.nextUrl.searchParams.get("error");
@@ -580,7 +589,7 @@ var getInstagramRoute = ({
       instagramData.accessToken
     );
     if (errorMessage) return handleError2(errorMessage);
-    return NextResponse6.redirect(redirectURL);
+    return NextResponse7.redirect(redirectURL);
   };
 };
 

package/dist/graphql/index.cjs.js

@@ -571,10 +571,10 @@ function GQLError(status, message) {
 
 // src/graphql/init.ts
 var import_reflect_metadata = require("reflect-metadata");
-var import_server3 = require("@apollo/server");
+var import_server4 = require("@apollo/server");
 var import_default = require("@apollo/server/plugin/landingPage/default");
 var import_next = require("@as-integrations/next");
-var import_server4 = require("next/server");
+var import_server5 = require("next/server");
 var import_type_graphql = require("type-graphql");
 
 // src/env.ts
@@ -626,6 +626,9 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
+// src/utils/route.ts
+var import_server = require("next/server");
+
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 var REFRESH_HEADER_NAME = "X-Refresh-Token";
@@ -650,9 +653,15 @@ function withCors(handler, allowedOrigins) {
         allowedOrigins
       );
       if (corsHeaders) {
+        const newResponse = new import_server.NextResponse(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: new Headers(response.headers)
+        });
         Object.entries(corsHeaders).forEach(([key, value]) => {
-          response.headers.set(key, value);
+          newResponse.headers.set(key, value);
         });
+        return newResponse;
       }
       return response;
     });
@@ -667,7 +676,7 @@ var import_bcryptjs = require("bcryptjs");
 var import_jsonwebtoken = require("jsonwebtoken");
 var import_headers = require("next/headers");
 var import_navigation = require("next/navigation");
-var import_server = require("next/server");
+var import_server2 = require("next/server");
 function getUserIdFromRefreshToken(refreshToken) {
   if (refreshToken)
     try {
@@ -682,7 +691,7 @@ function getUserIdFromRefreshToken(refreshToken) {
 }
 
 // src/auth/utils/errors.ts
-var import_server2 = require("next/server");
+var import_server3 = require("next/server");
 
 // src/auth/email/utils.ts
 var getContext = (req) => {
@@ -720,7 +729,7 @@ async function initGraphQLServer({
     authChecker: authChecker || (({ context }) => !!context.userId),
     resolvers
   });
-  const server = new import_server3.ApolloServer({
+  const server = new import_server4.ApolloServer({
     typeDefs,
     resolvers: builtResolvers,
     plugins: [
@@ -742,10 +751,18 @@ async function initGraphQLServer({
   return {
     GET: withCors((request) => handler(request), allowedOrigins),
     POST: withCors((request) => handler(request), allowedOrigins),
-    OPTIONS: withCors(
-      (_request) => Promise.resolve(new import_server4.NextResponse(null, { status: 204 })),
-      allowedOrigins
-    )
+    ...allowedOrigins?.length ? {
+      OPTIONS: (req) => {
+        const corsHeaders = getCorsHeaders(
+          req.headers.get("origin"),
+          allowedOrigins
+        );
+        return new import_server5.NextResponse(null, {
+          status: 204,
+          headers: corsHeaders ?? void 0
+        });
+      }
+    } : {}
   };
 }
 

package/dist/graphql/index.esm.js

@@ -559,7 +559,7 @@ import {
   ApolloServerPluginLandingPageProductionDefault
 } from "@apollo/server/plugin/landingPage/default";
 import { startServerAndCreateNextHandler } from "@as-integrations/next";
-import { NextResponse as NextResponse3 } from "next/server";
+import { NextResponse as NextResponse4 } from "next/server";
 import {
   buildTypeDefsAndResolvers
 } from "type-graphql";
@@ -613,6 +613,9 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
+// src/utils/route.ts
+import { NextResponse } from "next/server";
+
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 var REFRESH_HEADER_NAME = "X-Refresh-Token";
@@ -637,9 +640,15 @@ function withCors(handler, allowedOrigins) {
         allowedOrigins
       );
       if (corsHeaders) {
+        const newResponse = new NextResponse(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: new Headers(response.headers)
+        });
         Object.entries(corsHeaders).forEach(([key, value]) => {
-          response.headers.set(key, value);
+          newResponse.headers.set(key, value);
         });
+        return newResponse;
       }
       return response;
     });
@@ -654,7 +663,7 @@ import { compare } from "bcryptjs";
 import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
 import { cookies } from "next/headers";
 import { redirect } from "next/navigation";
-import { NextResponse } from "next/server";
+import { NextResponse as NextResponse2 } from "next/server";
 function getUserIdFromRefreshToken(refreshToken) {
   if (refreshToken)
     try {
@@ -669,7 +678,7 @@ function getUserIdFromRefreshToken(refreshToken) {
 }
 
 // src/auth/utils/errors.ts
-import { NextResponse as NextResponse2 } from "next/server";
+import { NextResponse as NextResponse3 } from "next/server";
 
 // src/auth/email/utils.ts
 var getContext = (req) => {
@@ -729,10 +738,18 @@ async function initGraphQLServer({
   return {
     GET: withCors((request) => handler(request), allowedOrigins),
     POST: withCors((request) => handler(request), allowedOrigins),
-    OPTIONS: withCors(
-      (_request) => Promise.resolve(new NextResponse3(null, { status: 204 })),
-      allowedOrigins
-    )
+    ...allowedOrigins?.length ? {
+      OPTIONS: (req) => {
+        const corsHeaders = getCorsHeaders(
+          req.headers.get("origin"),
+          allowedOrigins
+        );
+        return new NextResponse4(null, {
+          status: 204,
+          headers: corsHeaders ?? void 0
+        });
+      }
+    } : {}
   };
 }
 

package/dist/graphql/init.cjs.js

@@ -24,10 +24,10 @@ __export(init_exports, {
 });
 module.exports = __toCommonJS(init_exports);
 var import_reflect_metadata = require("reflect-metadata");
-var import_server3 = require("@apollo/server");
+var import_server4 = require("@apollo/server");
 var import_default = require("@apollo/server/plugin/landingPage/default");
 var import_next = require("@as-integrations/next");
-var import_server4 = require("next/server");
+var import_server5 = require("next/server");
 var import_type_graphql = require("type-graphql");
 
 // src/env.ts
@@ -79,6 +79,9 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
+// src/utils/route.ts
+var import_server = require("next/server");
+
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 var REFRESH_HEADER_NAME = "X-Refresh-Token";
@@ -103,9 +106,15 @@ function withCors(handler, allowedOrigins) {
         allowedOrigins
       );
       if (corsHeaders) {
+        const newResponse = new import_server.NextResponse(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: new Headers(response.headers)
+        });
         Object.entries(corsHeaders).forEach(([key, value]) => {
-          response.headers.set(key, value);
+          newResponse.headers.set(key, value);
         });
+        return newResponse;
       }
       return response;
     });
@@ -120,7 +129,7 @@ var import_bcryptjs = require("bcryptjs");
 var import_jsonwebtoken = require("jsonwebtoken");
 var import_headers = require("next/headers");
 var import_navigation = require("next/navigation");
-var import_server = require("next/server");
+var import_server2 = require("next/server");
 function getUserIdFromRefreshToken(refreshToken) {
   if (refreshToken)
     try {
@@ -135,7 +144,7 @@ function getUserIdFromRefreshToken(refreshToken) {
 }
 
 // src/auth/utils/errors.ts
-var import_server2 = require("next/server");
+var import_server3 = require("next/server");
 
 // src/auth/email/utils.ts
 var getContext = (req) => {
@@ -173,7 +182,7 @@ async function initGraphQLServer({
     authChecker: authChecker || (({ context }) => !!context.userId),
     resolvers
   });
-  const server = new import_server3.ApolloServer({
+  const server = new import_server4.ApolloServer({
     typeDefs,
     resolvers: builtResolvers,
     plugins: [
@@ -195,10 +204,18 @@ async function initGraphQLServer({
   return {
     GET: withCors((request) => handler(request), allowedOrigins),
     POST: withCors((request) => handler(request), allowedOrigins),
-    OPTIONS: withCors(
-      (_request) => Promise.resolve(new import_server4.NextResponse(null, { status: 204 })),
-      allowedOrigins
-    )
+    ...allowedOrigins?.length ? {
+      OPTIONS: (req) => {
+        const corsHeaders = getCorsHeaders(
+          req.headers.get("origin"),
+          allowedOrigins
+        );
+        return new import_server5.NextResponse(null, {
+          status: 204,
+          headers: corsHeaders ?? void 0
+        });
+      }
+    } : {}
   };
 }
 // Annotate the CommonJS export names for ESM import in node:

package/dist/graphql/init.d.mts

@@ -42,9 +42,9 @@ declare function initGraphQLServer({ authChecker, resolvers, plugins, getContext
     getContext?: (req: NextRequest) => Promise<any> | any;
     allowedOrigins?: string[];
 }): Promise<{
+    OPTIONS?: ((req: NextRequest) => NextResponse<unknown>) | undefined;
     GET: (request: NextRequest) => Promise<Response>;
     POST: (request: NextRequest) => Promise<Response>;
-    OPTIONS: (_request: NextRequest) => Promise<NextResponse<unknown>>;
 }>;
 
 export { initGraphQLServer };

package/dist/graphql/init.d.ts

@@ -42,9 +42,9 @@ declare function initGraphQLServer({ authChecker, resolvers, plugins, getContext
     getContext?: (req: NextRequest) => Promise<any> | any;
     allowedOrigins?: string[];
 }): Promise<{
+    OPTIONS?: ((req: NextRequest) => NextResponse<unknown>) | undefined;
     GET: (request: NextRequest) => Promise<Response>;
     POST: (request: NextRequest) => Promise<Response>;
-    OPTIONS: (_request: NextRequest) => Promise<NextResponse<unknown>>;
 }>;
 
 export { initGraphQLServer };

package/dist/graphql/init.esm.js

@@ -6,7 +6,7 @@ import {
   ApolloServerPluginLandingPageProductionDefault
 } from "@apollo/server/plugin/landingPage/default";
 import { startServerAndCreateNextHandler } from "@as-integrations/next";
-import { NextResponse as NextResponse3 } from "next/server";
+import { NextResponse as NextResponse4 } from "next/server";
 import {
   buildTypeDefsAndResolvers
 } from "type-graphql";
@@ -60,6 +60,9 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
+// src/utils/route.ts
+import { NextResponse } from "next/server";
+
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 var REFRESH_HEADER_NAME = "X-Refresh-Token";
@@ -84,9 +87,15 @@ function withCors(handler, allowedOrigins) {
         allowedOrigins
       );
       if (corsHeaders) {
+        const newResponse = new NextResponse(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: new Headers(response.headers)
+        });
         Object.entries(corsHeaders).forEach(([key, value]) => {
-          response.headers.set(key, value);
+          newResponse.headers.set(key, value);
         });
+        return newResponse;
       }
       return response;
     });
@@ -101,7 +110,7 @@ import { compare } from "bcryptjs";
 import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
 import { cookies } from "next/headers";
 import { redirect } from "next/navigation";
-import { NextResponse } from "next/server";
+import { NextResponse as NextResponse2 } from "next/server";
 function getUserIdFromRefreshToken(refreshToken) {
   if (refreshToken)
     try {
@@ -116,7 +125,7 @@ function getUserIdFromRefreshToken(refreshToken) {
 }
 
 // src/auth/utils/errors.ts
-import { NextResponse as NextResponse2 } from "next/server";
+import { NextResponse as NextResponse3 } from "next/server";
 
 // src/auth/email/utils.ts
 var getContext = (req) => {
@@ -176,10 +185,18 @@ async function initGraphQLServer({
   return {
     GET: withCors((request) => handler(request), allowedOrigins),
     POST: withCors((request) => handler(request), allowedOrigins),
-    OPTIONS: withCors(
-      (_request) => Promise.resolve(new NextResponse3(null, { status: 204 })),
-      allowedOrigins
-    )
+    ...allowedOrigins?.length ? {
+      OPTIONS: (req) => {
+        const corsHeaders = getCorsHeaders(
+          req.headers.get("origin"),
+          allowedOrigins
+        );
+        return new NextResponse4(null, {
+          status: 204,
+          headers: corsHeaders ?? void 0
+        });
+      }
+    } : {}
   };
 }
 export {

package/dist/utils/route.cjs.js

@@ -24,6 +24,7 @@ __export(route_exports, {
   withCors: () => withCors
 });
 module.exports = __toCommonJS(route_exports);
+var import_server = require("next/server");
 
 // src/auth/constants.ts
 var REFRESH_HEADER_NAME = "X-Refresh-Token";
@@ -48,9 +49,15 @@ function withCors(handler, allowedOrigins) {
         allowedOrigins
       );
       if (corsHeaders) {
+        const newResponse = new import_server.NextResponse(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: new Headers(response.headers)
+        });
         Object.entries(corsHeaders).forEach(([key, value]) => {
-          response.headers.set(key, value);
+          newResponse.headers.set(key, value);
         });
+        return newResponse;
       }
       return response;
     });

package/dist/utils/route.esm.js

@@ -1,3 +1,6 @@
+// src/utils/route.ts
+import { NextResponse } from "next/server";
+
 // src/auth/constants.ts
 var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
@@ -21,9 +24,15 @@ function withCors(handler, allowedOrigins) {
         allowedOrigins
       );
       if (corsHeaders) {
+        const newResponse = new NextResponse(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: new Headers(response.headers)
+        });
         Object.entries(corsHeaders).forEach(([key, value]) => {
-          response.headers.set(key, value);
+          newResponse.headers.set(key, value);
         });
+        return newResponse;
       }
       return response;
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "naystack",
-  "version": "1.5.31",
+  "version": "1.5.33",
   "description": "A stack built with Next + GraphQL + S3 + Auth",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",