naystack 1.7.19 → 1.7.21

package/dist/auth/email/index.cjs.js

@@ -33,6 +33,8 @@ __export(email_exports, {
   AuthFetch: () => AuthFetch,
   AuthWrapper: () => AuthWrapper,
   checkAuthStatus: () => checkAuthStatus,
+  generateAccessToken: () => generateAccessToken,
+  generateRefreshToken: () => generateRefreshToken,
   getContext: () => getContext,
   setupEmailAuth: () => setupEmailAuth
 });
@@ -141,13 +143,13 @@ function getEnv(key, skipCheck) {
 }
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
@@ -293,7 +295,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
+      generateAccessToken(userID)
     );
   }
   return getTokenizedResponse();
@@ -308,10 +310,9 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+        generateAccessToken(existingUser.id),
         generateRefreshToken(
-          existingUser.id,
-          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
+          existingUser.id
         )
       );
     }
@@ -327,8 +328,8 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(newUser.id),
+      generateRefreshToken(newUser.id)
     );
   }
   return getTokenizedResponse();
@@ -346,8 +347,8 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(user.id),
+      generateRefreshToken(user.id)
     );
   }
   return handleError(403, "Invalid password", options.onError);
@@ -439,6 +440,8 @@ function setupEmailAuth(options) {
   AuthFetch,
   AuthWrapper,
   checkAuthStatus,
+  generateAccessToken,
+  generateRefreshToken,
   getContext,
   setupEmailAuth
 });

package/dist/auth/email/index.d.mts

@@ -1,7 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { SetupEmailAuthOptions } from './types.mjs';
 export { AuthFetch, AuthWrapper } from './next.mjs';
-export { checkAuthStatus } from './token.mjs';
+export { checkAuthStatus, generateAccessToken, generateRefreshToken } from './token.mjs';
 export { getContext } from './utils.mjs';
 import '../types.mjs';
 import 'react';

package/dist/auth/email/index.d.ts

@@ -1,7 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { SetupEmailAuthOptions } from './types.js';
 export { AuthFetch, AuthWrapper } from './next.js';
-export { checkAuthStatus } from './token.js';
+export { checkAuthStatus, generateAccessToken, generateRefreshToken } from './token.js';
 export { getContext } from './utils.js';
 import '../types.js';
 import 'react';

package/dist/auth/email/index.esm.js

@@ -103,13 +103,13 @@ function getEnv(key, skipCheck) {
 }
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
@@ -255,7 +255,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
+      generateAccessToken(userID)
     );
   }
   return getTokenizedResponse();
@@ -270,10 +270,9 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+        generateAccessToken(existingUser.id),
         generateRefreshToken(
-          existingUser.id,
-          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
+          existingUser.id
         )
       );
     }
@@ -289,8 +288,8 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(newUser.id),
+      generateRefreshToken(newUser.id)
     );
   }
   return getTokenizedResponse();
@@ -308,8 +307,8 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(user.id),
+      generateRefreshToken(user.id)
     );
   }
   return handleError(403, "Invalid password", options.onError);
@@ -404,6 +403,8 @@ export {
   AuthFetch,
   AuthWrapper,
   checkAuthStatus,
+  generateAccessToken,
+  generateRefreshToken,
   getContext,
   setupEmailAuth
 };

package/dist/auth/email/routes/get.cjs.js

@@ -24,6 +24,17 @@ __export(get_exports, {
 });
 module.exports = __toCommonJS(get_exports);
 
+// src/auth/constants.ts
+var REFRESH_COOKIE_NAME = "refresh";
+var REFRESH_HEADER_NAME = "X-Refresh-Token";
+
+// src/auth/email/token.ts
+var import_bcryptjs = require("bcryptjs");
+var import_jsonwebtoken = require("jsonwebtoken");
+var import_headers = require("next/headers");
+var import_navigation = require("next/navigation");
+var import_server = require("next/server");
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -74,18 +85,9 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/constants.ts
-var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
-
 // src/auth/email/token.ts
-var import_bcryptjs = require("bcryptjs");
-var import_jsonwebtoken = require("jsonwebtoken");
-var import_headers = require("next/headers");
-var import_navigation = require("next/navigation");
-var import_server = require("next/server");
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
@@ -133,7 +135,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
+      generateAccessToken(userID)
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/get.esm.js

@@ -1,3 +1,14 @@
+// src/auth/constants.ts
+var REFRESH_COOKIE_NAME = "refresh";
+var REFRESH_HEADER_NAME = "X-Refresh-Token";
+
+// src/auth/email/token.ts
+import { compare } from "bcryptjs";
+import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
+import { cookies } from "next/headers";
+import { redirect } from "next/navigation";
+import { NextResponse } from "next/server";
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -48,18 +59,9 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/constants.ts
-var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
-
 // src/auth/email/token.ts
-import { compare } from "bcryptjs";
-import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
-import { cookies } from "next/headers";
-import { redirect } from "next/navigation";
-import { NextResponse } from "next/server";
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
@@ -107,7 +109,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
+      generateAccessToken(userID)
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/post.cjs.js

@@ -25,6 +25,21 @@ __export(post_exports, {
 module.exports = __toCommonJS(post_exports);
 var import_bcryptjs2 = require("bcryptjs");
 
+// src/auth/utils/errors.ts
+var import_server = require("next/server");
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new import_server.NextResponse(message, { status });
+}
+
+// src/auth/email/token.ts
+var import_bcryptjs = require("bcryptjs");
+var import_jsonwebtoken = require("jsonwebtoken");
+var import_headers = require("next/headers");
+var import_navigation = require("next/navigation");
+var import_server2 = require("next/server");
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -75,32 +90,17 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/utils/errors.ts
-var import_server = require("next/server");
-function handleError(status, message, onError) {
-  const res = onError?.({ status, message });
-  if (res) return res;
-  return new import_server.NextResponse(message, { status });
-}
-
-// src/auth/email/token.ts
-var import_bcryptjs = require("bcryptjs");
-var import_jsonwebtoken = require("jsonwebtoken");
-var import_headers = require("next/headers");
-var import_navigation = require("next/navigation");
-var import_server2 = require("next/server");
-
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
@@ -184,10 +184,9 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+        generateAccessToken(existingUser.id),
         generateRefreshToken(
-          existingUser.id,
-          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
+          existingUser.id
         )
       );
     }
@@ -203,8 +202,8 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(newUser.id),
+      generateRefreshToken(newUser.id)
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/post.esm.js

@@ -1,6 +1,21 @@
 // src/auth/email/routes/post.ts
 import { hash } from "bcryptjs";
 
+// src/auth/utils/errors.ts
+import { NextResponse } from "next/server";
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new NextResponse(message, { status });
+}
+
+// src/auth/email/token.ts
+import { compare } from "bcryptjs";
+import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
+import { cookies } from "next/headers";
+import { redirect } from "next/navigation";
+import { NextResponse as NextResponse2 } from "next/server";
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -51,32 +66,17 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/utils/errors.ts
-import { NextResponse } from "next/server";
-function handleError(status, message, onError) {
-  const res = onError?.({ status, message });
-  if (res) return res;
-  return new NextResponse(message, { status });
-}
-
-// src/auth/email/token.ts
-import { compare } from "bcryptjs";
-import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
-import { cookies } from "next/headers";
-import { redirect } from "next/navigation";
-import { NextResponse as NextResponse2 } from "next/server";
-
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
@@ -160,10 +160,9 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+        generateAccessToken(existingUser.id),
         generateRefreshToken(
-          existingUser.id,
-          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
+          existingUser.id
         )
       );
     }
@@ -179,8 +178,8 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(newUser.id),
+      generateRefreshToken(newUser.id)
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/put.cjs.js

@@ -24,6 +24,21 @@ __export(put_exports, {
 });
 module.exports = __toCommonJS(put_exports);
 
+// src/auth/utils/errors.ts
+var import_server = require("next/server");
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new import_server.NextResponse(message, { status });
+}
+
+// src/auth/email/token.ts
+var import_bcryptjs = require("bcryptjs");
+var import_jsonwebtoken = require("jsonwebtoken");
+var import_headers = require("next/headers");
+var import_navigation = require("next/navigation");
+var import_server2 = require("next/server");
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -74,32 +89,17 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/utils/errors.ts
-var import_server = require("next/server");
-function handleError(status, message, onError) {
-  const res = onError?.({ status, message });
-  if (res) return res;
-  return new import_server.NextResponse(message, { status });
-}
-
-// src/auth/email/token.ts
-var import_bcryptjs = require("bcryptjs");
-var import_jsonwebtoken = require("jsonwebtoken");
-var import_headers = require("next/headers");
-var import_navigation = require("next/navigation");
-var import_server2 = require("next/server");
-
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
@@ -187,8 +187,8 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(user.id),
+      generateRefreshToken(user.id)
     );
   }
   return handleError(403, "Invalid password", options.onError);

package/dist/auth/email/routes/put.esm.js

@@ -1,3 +1,18 @@
+// src/auth/utils/errors.ts
+import { NextResponse } from "next/server";
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new NextResponse(message, { status });
+}
+
+// src/auth/email/token.ts
+import { compare } from "bcryptjs";
+import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
+import { cookies } from "next/headers";
+import { redirect } from "next/navigation";
+import { NextResponse as NextResponse2 } from "next/server";
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -48,32 +63,17 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/utils/errors.ts
-import { NextResponse } from "next/server";
-function handleError(status, message, onError) {
-  const res = onError?.({ status, message });
-  if (res) return res;
-  return new NextResponse(message, { status });
-}
-
-// src/auth/email/token.ts
-import { compare } from "bcryptjs";
-import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
-import { cookies } from "next/headers";
-import { redirect } from "next/navigation";
-import { NextResponse as NextResponse2 } from "next/server";
-
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
@@ -161,8 +161,8 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(user.id),
+      generateRefreshToken(user.id)
     );
   }
   return handleError(403, "Invalid password", options.onError);

package/dist/auth/email/token.cjs.js

@@ -89,13 +89,13 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };

package/dist/auth/email/token.d.mts

@@ -4,19 +4,17 @@ import { UserOutput } from '../types.mjs';
 /**
  * Generates a JWT access token for the user (2-hour expiry).
  * @param id - User id to encode in the JWT payload.
- * @param signingKey - Secret used to sign the token (typically `SIGNING_KEY` env var).
  * @returns Signed JWT string.
  * @category Auth
  */
-declare function generateAccessToken(id: number, signingKey: string): string;
+declare function generateAccessToken(id: number): string;
 /**
  * Generates a JWT refresh token for the user (no expiry — persisted in httpOnly cookie).
  * @param id - User id to encode in the JWT payload.
- * @param refreshKey - Secret used to sign the token (typically `REFRESH_KEY` env var).
  * @returns Signed JWT string.
  * @category Auth
  */
-declare function generateRefreshToken(id: number, refreshKey: string): string;
+declare function generateRefreshToken(id: number): string;
 /**
  * Builds a NextResponse with access/refresh tokens in the JSON body and sets the refresh cookie.
  *

package/dist/auth/email/token.d.ts

@@ -4,19 +4,17 @@ import { UserOutput } from '../types.js';
 /**
  * Generates a JWT access token for the user (2-hour expiry).
  * @param id - User id to encode in the JWT payload.
- * @param signingKey - Secret used to sign the token (typically `SIGNING_KEY` env var).
  * @returns Signed JWT string.
  * @category Auth
  */
-declare function generateAccessToken(id: number, signingKey: string): string;
+declare function generateAccessToken(id: number): string;
 /**
  * Generates a JWT refresh token for the user (no expiry — persisted in httpOnly cookie).
  * @param id - User id to encode in the JWT payload.
- * @param refreshKey - Secret used to sign the token (typically `REFRESH_KEY` env var).
  * @returns Signed JWT string.
  * @category Auth
  */
-declare function generateRefreshToken(id: number, refreshKey: string): string;
+declare function generateRefreshToken(id: number): string;
 /**
  * Builds a NextResponse with access/refresh tokens in the JSON body and sets the refresh cookie.
  *

package/dist/auth/email/token.esm.js

@@ -59,13 +59,13 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };

package/dist/auth/google/get.cjs.js

@@ -88,13 +88,13 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 
 // src/auth/google/get.ts
@@ -171,15 +171,16 @@ var getGoogleGetRoute = ({
         const id = await getUserIdFromEmail(user, data);
         if (id) {
           const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
+            id
           );
+          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
           targetUrl.searchParams.set("accessToken", accessToken);
+          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = import_server2.NextResponse.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */)),
+            refreshToken,
             {
               httpOnly: true,
               secure: true

package/dist/auth/google/get.esm.js

@@ -64,13 +64,13 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 
 // src/auth/google/get.ts
@@ -147,15 +147,16 @@ var getGoogleGetRoute = ({
         const id = await getUserIdFromEmail(user, data);
         if (id) {
           const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
+            id
           );
+          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
           targetUrl.searchParams.set("accessToken", accessToken);
+          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = NextResponse2.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */)),
+            refreshToken,
             {
               httpOnly: true,
               secure: true

package/dist/auth/google/index.cjs.js

@@ -90,13 +90,13 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 
 // src/auth/google/get.ts
@@ -173,15 +173,16 @@ var getGoogleGetRoute = ({
         const id = await getUserIdFromEmail(user, data);
         if (id) {
           const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
+            id
           );
+          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
           targetUrl.searchParams.set("accessToken", accessToken);
+          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = import_server2.NextResponse.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */)),
+            refreshToken,
             {
               httpOnly: true,
               secure: true

package/dist/auth/google/index.esm.js

@@ -64,13 +64,13 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 
 // src/auth/google/get.ts
@@ -147,15 +147,16 @@ var getGoogleGetRoute = ({
         const id = await getUserIdFromEmail(user, data);
         if (id) {
           const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
+            id
           );
+          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
           targetUrl.searchParams.set("accessToken", accessToken);
+          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = NextResponse2.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */)),
+            refreshToken,
             {
               httpOnly: true,
               secure: true

package/dist/auth/index.cjs.js

@@ -33,6 +33,8 @@ __export(auth_exports, {
   AuthFetch: () => AuthFetch,
   AuthWrapper: () => AuthWrapper,
   checkAuthStatus: () => checkAuthStatus,
+  generateAccessToken: () => generateAccessToken,
+  generateRefreshToken: () => generateRefreshToken,
   getContext: () => getContext,
   getRefreshToken: () => getRefreshToken,
   getRefreshedInstagramAccessToken: () => getRefreshedInstagramAccessToken,
@@ -147,13 +149,13 @@ function getEnv(key, skipCheck) {
 }
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
@@ -311,7 +313,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
+      generateAccessToken(userID)
     );
   }
   return getTokenizedResponse();
@@ -326,10 +328,9 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+        generateAccessToken(existingUser.id),
         generateRefreshToken(
-          existingUser.id,
-          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
+          existingUser.id
         )
       );
     }
@@ -345,8 +346,8 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(newUser.id),
+      generateRefreshToken(newUser.id)
     );
   }
   return getTokenizedResponse();
@@ -364,8 +365,8 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(user.id),
+      generateRefreshToken(user.id)
     );
   }
   return handleError(403, "Invalid password", options.onError);
@@ -530,15 +531,16 @@ var getGoogleGetRoute = ({
         const id = await getUserIdFromEmail(user, data);
         if (id) {
           const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
+            id
           );
+          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
           targetUrl.searchParams.set("accessToken", accessToken);
+          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = import_server6.NextResponse.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */)),
+            refreshToken,
             {
               httpOnly: true,
               secure: true
@@ -681,6 +683,8 @@ async function getRefreshToken() {
   AuthFetch,
   AuthWrapper,
   checkAuthStatus,
+  generateAccessToken,
+  generateRefreshToken,
   getContext,
   getRefreshToken,
   getRefreshedInstagramAccessToken,

package/dist/auth/index.d.mts

@@ -3,7 +3,7 @@ export { SetupGoogleAuthOptions, setupGoogleAuth } from './google/index.mjs';
 export { SetupInstagramAuthOptions, setupInstagramAuth } from './instagram/index.mjs';
 export { getRefreshToken } from './utils/token.mjs';
 export { AuthFetch, AuthWrapper } from './email/next.mjs';
-export { checkAuthStatus } from './email/token.mjs';
+export { checkAuthStatus, generateAccessToken, generateRefreshToken } from './email/token.mjs';
 export { getContext } from './email/utils.mjs';
 export { getRefreshedInstagramAccessToken } from './instagram/utils.mjs';
 import 'next/server';

package/dist/auth/index.d.ts

@@ -3,7 +3,7 @@ export { SetupGoogleAuthOptions, setupGoogleAuth } from './google/index.js';
 export { SetupInstagramAuthOptions, setupInstagramAuth } from './instagram/index.js';
 export { getRefreshToken } from './utils/token.js';
 export { AuthFetch, AuthWrapper } from './email/next.js';
-export { checkAuthStatus } from './email/token.js';
+export { checkAuthStatus, generateAccessToken, generateRefreshToken } from './email/token.js';
 export { getContext } from './email/utils.js';
 export { getRefreshedInstagramAccessToken } from './instagram/utils.js';
 import 'next/server';

package/dist/auth/index.esm.js

@@ -103,13 +103,13 @@ function getEnv(key, skipCheck) {
 }
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 function getTokenizedResponse(accessToken, refreshToken) {
   const body = { accessToken, refreshToken };
@@ -267,7 +267,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
+      generateAccessToken(userID)
     );
   }
   return getTokenizedResponse();
@@ -282,10 +282,9 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
+        generateAccessToken(existingUser.id),
         generateRefreshToken(
-          existingUser.id,
-          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
+          existingUser.id
         )
       );
     }
@@ -301,8 +300,8 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(newUser.id),
+      generateRefreshToken(newUser.id)
     );
   }
   return getTokenizedResponse();
@@ -320,8 +319,8 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      generateAccessToken(user.id),
+      generateRefreshToken(user.id)
     );
   }
   return handleError(403, "Invalid password", options.onError);
@@ -490,15 +489,16 @@ var getGoogleGetRoute = ({
         const id = await getUserIdFromEmail(user, data);
         if (id) {
           const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
+            id
           );
+          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
           targetUrl.searchParams.set("accessToken", accessToken);
+          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = NextResponse5.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */)),
+            refreshToken,
             {
               httpOnly: true,
               secure: true
@@ -640,6 +640,8 @@ export {
   AuthFetch,
   AuthWrapper,
   checkAuthStatus,
+  generateAccessToken,
+  generateRefreshToken,
   getContext,
   getRefreshToken,
   getRefreshedInstagramAccessToken,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "naystack",
-  "version": "1.7.19",
+  "version": "1.7.21",
   "description": "A stack built with Next + GraphQL + S3 + Auth",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",