naystack 1.7.20 → 1.7.24

package/dist/auth/email/next.esm.js

@@ -110,8 +110,8 @@ function AuthFetch() {
     }
   );
 }
-function AuthWrapper({ children, getRefreshToken, onTokenUpdate, skipInitialFetch }) {
-  return /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(AuthWrapperClient, { skipInitialFetch: true, getRefreshToken, onTokenUpdate }, !skipInitialFetch && /* @__PURE__ */ React2.createElement(AuthFetch, null), children));
+function AuthWrapper({ children, skipInitialFetch }) {
+  return /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(AuthWrapperClient, { skipInitialFetch: true }, !skipInitialFetch && /* @__PURE__ */ React2.createElement(AuthFetch, null), children));
 }
 export {
   AuthFetch,

package/dist/auth/email/routes/delete.cjs.js

@@ -85,9 +85,18 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server.NextResponse.json(body, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
+    expiresIn: "2h"
+  });
+}
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+}
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = import_server.NextResponse.json(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -155,7 +164,7 @@ var getDeleteRoute = (options) => async (req) => {
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }
-  return getTokenizedResponse(void 0, "");
+  return getTokenizedResponse();
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/auth/email/routes/delete.d.mts

@@ -8,9 +8,6 @@ import '../../types.mjs';
  * @param options - SetupEmailAuthOptions
  * @returns Async route handler
  */
-declare const getDeleteRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>>;
+declare const getDeleteRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<string | undefined>>;
 
 export { getDeleteRoute };

package/dist/auth/email/routes/delete.d.ts

@@ -8,9 +8,6 @@ import '../../types.js';
  * @param options - SetupEmailAuthOptions
  * @returns Async route handler
  */
-declare const getDeleteRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>>;
+declare const getDeleteRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<string | undefined>>;
 
 export { getDeleteRoute };

package/dist/auth/email/routes/delete.esm.js

@@ -59,9 +59,18 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse.json(body, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
+    expiresIn: "2h"
+  });
+}
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+}
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = NextResponse.json(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -129,7 +138,7 @@ var getDeleteRoute = (options) => async (req) => {
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }
-  return getTokenizedResponse(void 0, "");
+  return getTokenizedResponse();
 };
 export {
   getDeleteRoute

package/dist/auth/email/routes/get.cjs.js

@@ -24,6 +24,16 @@ __export(get_exports, {
 });
 module.exports = __toCommonJS(get_exports);
 
+// src/auth/constants.ts
+var REFRESH_COOKIE_NAME = "refresh";
+
+// src/auth/email/token.ts
+var import_bcryptjs = require("bcryptjs");
+var import_jsonwebtoken = require("jsonwebtoken");
+var import_headers = require("next/headers");
+var import_navigation = require("next/navigation");
+var import_server = require("next/server");
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -74,24 +84,19 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/constants.ts
-var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
-
 // src/auth/email/token.ts
-var import_bcryptjs = require("bcryptjs");
-var import_jsonwebtoken = require("jsonwebtoken");
-var import_headers = require("next/headers");
-var import_navigation = require("next/navigation");
-var import_server = require("next/server");
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server.NextResponse.json(body, {
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+}
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = import_server.NextResponse.json(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -125,7 +130,7 @@ function getUserIdFromRefreshToken(refreshToken) {
 
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
-  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || req.headers.get(REFRESH_HEADER_NAME) || void 0;
+  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || void 0;
   const userID = getUserIdFromRefreshToken(refresh);
   if (userID) {
     if (options.onRefresh) {
@@ -133,7 +138,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
+      userID
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/get.d.mts

@@ -8,9 +8,6 @@ import '../../types.mjs';
  * @param options - SetupEmailAuthOptions
  * @returns Async route handler
  */
-declare const getGetRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>>;
+declare const getGetRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<string | undefined>>;
 
 export { getGetRoute };

package/dist/auth/email/routes/get.d.ts

@@ -8,9 +8,6 @@ import '../../types.js';
  * @param options - SetupEmailAuthOptions
  * @returns Async route handler
  */
-declare const getGetRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>>;
+declare const getGetRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<string | undefined>>;
 
 export { getGetRoute };

package/dist/auth/email/routes/get.esm.js

@@ -1,3 +1,13 @@
+// src/auth/constants.ts
+var REFRESH_COOKIE_NAME = "refresh";
+
+// src/auth/email/token.ts
+import { compare } from "bcryptjs";
+import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
+import { cookies } from "next/headers";
+import { redirect } from "next/navigation";
+import { NextResponse } from "next/server";
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -48,24 +58,19 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/constants.ts
-var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
-
 // src/auth/email/token.ts
-import { compare } from "bcryptjs";
-import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
-import { cookies } from "next/headers";
-import { redirect } from "next/navigation";
-import { NextResponse } from "next/server";
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse.json(body, {
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+}
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = NextResponse.json(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -99,7 +104,7 @@ function getUserIdFromRefreshToken(refreshToken) {
 
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
-  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || req.headers.get(REFRESH_HEADER_NAME) || void 0;
+  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || void 0;
   const userID = getUserIdFromRefreshToken(refresh);
   if (userID) {
     if (options.onRefresh) {
@@ -107,7 +112,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
+      userID
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/post.cjs.js

@@ -25,6 +25,21 @@ __export(post_exports, {
 module.exports = __toCommonJS(post_exports);
 var import_bcryptjs2 = require("bcryptjs");
 
+// src/auth/utils/errors.ts
+var import_server = require("next/server");
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new import_server.NextResponse(message, { status });
+}
+
+// src/auth/email/token.ts
+var import_bcryptjs = require("bcryptjs");
+var import_jsonwebtoken = require("jsonwebtoken");
+var import_headers = require("next/headers");
+var import_navigation = require("next/navigation");
+var import_server2 = require("next/server");
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -75,36 +90,22 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/utils/errors.ts
-var import_server = require("next/server");
-function handleError(status, message, onError) {
-  const res = onError?.({ status, message });
-  if (res) return res;
-  return new import_server.NextResponse(message, { status });
-}
-
-// src/auth/email/token.ts
-var import_bcryptjs = require("bcryptjs");
-var import_jsonwebtoken = require("jsonwebtoken");
-var import_headers = require("next/headers");
-var import_navigation = require("next/navigation");
-var import_server2 = require("next/server");
-
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server2.NextResponse.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = import_server2.NextResponse.json(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -184,11 +185,7 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-        generateRefreshToken(
-          existingUser.id,
-          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
-        )
+        existingUser.id
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -203,8 +200,7 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      newUser.id
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/post.esm.js

@@ -1,6 +1,21 @@
 // src/auth/email/routes/post.ts
 import { hash } from "bcryptjs";
 
+// src/auth/utils/errors.ts
+import { NextResponse } from "next/server";
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new NextResponse(message, { status });
+}
+
+// src/auth/email/token.ts
+import { compare } from "bcryptjs";
+import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
+import { cookies } from "next/headers";
+import { redirect } from "next/navigation";
+import { NextResponse as NextResponse2 } from "next/server";
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -51,36 +66,22 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/utils/errors.ts
-import { NextResponse } from "next/server";
-function handleError(status, message, onError) {
-  const res = onError?.({ status, message });
-  if (res) return res;
-  return new NextResponse(message, { status });
-}
-
-// src/auth/email/token.ts
-import { compare } from "bcryptjs";
-import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
-import { cookies } from "next/headers";
-import { redirect } from "next/navigation";
-import { NextResponse as NextResponse2 } from "next/server";
-
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse2.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = NextResponse2.json(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -160,11 +161,7 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-        generateRefreshToken(
-          existingUser.id,
-          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
-        )
+        existingUser.id
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -179,8 +176,7 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      newUser.id
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/put.cjs.js

@@ -24,6 +24,21 @@ __export(put_exports, {
 });
 module.exports = __toCommonJS(put_exports);
 
+// src/auth/utils/errors.ts
+var import_server = require("next/server");
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new import_server.NextResponse(message, { status });
+}
+
+// src/auth/email/token.ts
+var import_bcryptjs = require("bcryptjs");
+var import_jsonwebtoken = require("jsonwebtoken");
+var import_headers = require("next/headers");
+var import_navigation = require("next/navigation");
+var import_server2 = require("next/server");
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -74,36 +89,22 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/utils/errors.ts
-var import_server = require("next/server");
-function handleError(status, message, onError) {
-  const res = onError?.({ status, message });
-  if (res) return res;
-  return new import_server.NextResponse(message, { status });
-}
-
-// src/auth/email/token.ts
-var import_bcryptjs = require("bcryptjs");
-var import_jsonwebtoken = require("jsonwebtoken");
-var import_headers = require("next/headers");
-var import_navigation = require("next/navigation");
-var import_server2 = require("next/server");
-
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server2.NextResponse.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = import_server2.NextResponse.json(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -187,8 +188,7 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      user.id
     );
   }
   return handleError(403, "Invalid password", options.onError);

package/dist/auth/email/routes/put.esm.js

@@ -1,3 +1,18 @@
+// src/auth/utils/errors.ts
+import { NextResponse } from "next/server";
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new NextResponse(message, { status });
+}
+
+// src/auth/email/token.ts
+import { compare } from "bcryptjs";
+import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
+import { cookies } from "next/headers";
+import { redirect } from "next/navigation";
+import { NextResponse as NextResponse2 } from "next/server";
+
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -48,36 +63,22 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/utils/errors.ts
-import { NextResponse } from "next/server";
-function handleError(status, message, onError) {
-  const res = onError?.({ status, message });
-  if (res) return res;
-  return new NextResponse(message, { status });
-}
-
-// src/auth/email/token.ts
-import { compare } from "bcryptjs";
-import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
-import { cookies } from "next/headers";
-import { redirect } from "next/navigation";
-import { NextResponse as NextResponse2 } from "next/server";
-
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse2.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = NextResponse2.json(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -161,8 +162,7 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      user.id
     );
   }
   return handleError(403, "Invalid password", options.onError);

package/dist/auth/email/token.cjs.js

@@ -89,17 +89,18 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server.NextResponse.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = import_server.NextResponse.json(accessToken, {
     status: 200
   });
   if (!accessToken) {

package/dist/auth/email/token.d.mts

@@ -4,19 +4,17 @@ import { UserOutput } from '../types.mjs';
 /**
  * Generates a JWT access token for the user (2-hour expiry).
  * @param id - User id to encode in the JWT payload.
- * @param signingKey - Secret used to sign the token (typically `SIGNING_KEY` env var).
  * @returns Signed JWT string.
  * @category Auth
  */
-declare function generateAccessToken(id: number, signingKey: string): string;
+declare function generateAccessToken(id: number): string;
 /**
  * Generates a JWT refresh token for the user (no expiry — persisted in httpOnly cookie).
  * @param id - User id to encode in the JWT payload.
- * @param refreshKey - Secret used to sign the token (typically `REFRESH_KEY` env var).
  * @returns Signed JWT string.
  * @category Auth
  */
-declare function generateRefreshToken(id: number, refreshKey: string): string;
+declare function generateRefreshToken(id: number): string;
 /**
  * Builds a NextResponse with access/refresh tokens in the JSON body and sets the refresh cookie.
  *
@@ -24,15 +22,11 @@ declare function generateRefreshToken(id: number, refreshKey: string): string;
  * - If `refreshToken` is empty string, the cookie expires immediately (logout).
  * - If `refreshToken` is a valid string, the cookie is set for 1 year.
  *
- * @param accessToken - Optional access JWT to include in response body.
- * @param refreshToken - Optional refresh JWT to set as httpOnly cookie. Empty string clears the cookie.
+ * @param id - Optional user id.
  * @returns NextResponse with JSON body and Set-Cookie headers.
  * @category Auth
  */
-declare function getTokenizedResponse(accessToken?: string, refreshToken?: string): NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>;
+declare function getTokenizedResponse(id?: number): NextResponse<string | undefined>;
 /**
  * Decodes a refresh token and returns the user id from the JWT payload.
  * @param refreshToken - JWT refresh token string.