naystack 1.7.20 → 1.7.24

package/dist/auth/email/token.d.ts

@@ -4,19 +4,17 @@ import { UserOutput } from '../types.js';
 /**
  * Generates a JWT access token for the user (2-hour expiry).
  * @param id - User id to encode in the JWT payload.
- * @param signingKey - Secret used to sign the token (typically `SIGNING_KEY` env var).
  * @returns Signed JWT string.
  * @category Auth
  */
-declare function generateAccessToken(id: number, signingKey: string): string;
+declare function generateAccessToken(id: number): string;
 /**
  * Generates a JWT refresh token for the user (no expiry — persisted in httpOnly cookie).
  * @param id - User id to encode in the JWT payload.
- * @param refreshKey - Secret used to sign the token (typically `REFRESH_KEY` env var).
  * @returns Signed JWT string.
  * @category Auth
  */
-declare function generateRefreshToken(id: number, refreshKey: string): string;
+declare function generateRefreshToken(id: number): string;
 /**
  * Builds a NextResponse with access/refresh tokens in the JSON body and sets the refresh cookie.
  *
@@ -24,15 +22,11 @@ declare function generateRefreshToken(id: number, refreshKey: string): string;
  * - If `refreshToken` is empty string, the cookie expires immediately (logout).
  * - If `refreshToken` is a valid string, the cookie is set for 1 year.
  *
- * @param accessToken - Optional access JWT to include in response body.
- * @param refreshToken - Optional refresh JWT to set as httpOnly cookie. Empty string clears the cookie.
+ * @param id - Optional user id.
  * @returns NextResponse with JSON body and Set-Cookie headers.
  * @category Auth
  */
-declare function getTokenizedResponse(accessToken?: string, refreshToken?: string): NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>;
+declare function getTokenizedResponse(id?: number): NextResponse<string | undefined>;
 /**
  * Decodes a refresh token and returns the user id from the JWT payload.
  * @param refreshToken - JWT refresh token string.

package/dist/auth/email/token.esm.js

@@ -59,17 +59,18 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = NextResponse.json(accessToken, {
     status: 200
   });
   if (!accessToken) {

package/dist/auth/google/get.cjs.js

@@ -88,13 +88,8 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
-    expiresIn: "2h"
-  });
-}
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 
 // src/auth/google/get.ts
@@ -170,18 +165,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
-          );
-          const refreshToken = generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = import_server2.NextResponse.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true

package/dist/auth/google/get.esm.js

@@ -64,13 +64,8 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
-    expiresIn: "2h"
-  });
-}
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 
 // src/auth/google/get.ts
@@ -146,18 +141,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
-          );
-          const refreshToken = generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = NextResponse2.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true

package/dist/auth/google/index.cjs.js

@@ -90,13 +90,8 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
-    expiresIn: "2h"
-  });
-}
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 
 // src/auth/google/get.ts
@@ -172,18 +167,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
-          );
-          const refreshToken = generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = import_server2.NextResponse.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true

package/dist/auth/google/index.esm.js

@@ -64,13 +64,8 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
-    expiresIn: "2h"
-  });
-}
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
 
 // src/auth/google/get.ts
@@ -146,18 +141,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
-          );
-          const refreshToken = generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = NextResponse2.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true

package/dist/auth/index.cjs.js

@@ -36,6 +36,7 @@ __export(auth_exports, {
   getContext: () => getContext,
   getRefreshToken: () => getRefreshToken,
   getRefreshedInstagramAccessToken: () => getRefreshedInstagramAccessToken,
+  getTokenizedResponse: () => getTokenizedResponse,
   setupEmailAuth: () => setupEmailAuth,
   setupGoogleAuth: () => setupGoogleAuth,
   setupInstagramAuth: () => setupInstagramAuth
@@ -50,7 +51,6 @@ var import_server = require("next/server");
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/utils/route.ts
 function getCorsHeaders(origin, allowedOrigins) {
@@ -58,7 +58,7 @@ function getCorsHeaders(origin, allowedOrigins) {
   return {
     "Access-Control-Allow-Origin": origin,
     "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-    "Access-Control-Allow-Headers": `Content-Type, Authorization, ${REFRESH_HEADER_NAME}`,
+    "Access-Control-Allow-Headers": `Content-Type, Authorization`,
     "Access-Control-Allow-Credentials": "true"
   };
 }
@@ -147,17 +147,18 @@ function getEnv(key, skipCheck) {
 }
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server2.NextResponse.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = import_server2.NextResponse.json(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -298,12 +299,12 @@ var getDeleteRoute = (options) => async (req) => {
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }
-  return getTokenizedResponse(void 0, "");
+  return getTokenizedResponse();
 };
 
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
-  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || req.headers.get(REFRESH_HEADER_NAME) || void 0;
+  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || void 0;
   const userID = getUserIdFromRefreshToken(refresh);
   if (userID) {
     if (options.onRefresh) {
@@ -311,7 +312,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
+      userID
     );
   }
   return getTokenizedResponse();
@@ -326,11 +327,7 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-        generateRefreshToken(
-          existingUser.id,
-          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
-        )
+        existingUser.id
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -345,8 +342,7 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      newUser.id
     );
   }
   return getTokenizedResponse();
@@ -364,8 +360,7 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      user.id
     );
   }
   return handleError(403, "Invalid password", options.onError);
@@ -426,8 +421,8 @@ function AuthFetch() {
     }
   );
 }
-function AuthWrapper({ children, getRefreshToken: getRefreshToken2, onTokenUpdate, skipInitialFetch }) {
-  return /* @__PURE__ */ import_react3.default.createElement(import_react3.default.Fragment, null, /* @__PURE__ */ import_react3.default.createElement(import_client2.AuthWrapper, { skipInitialFetch: true, getRefreshToken: getRefreshToken2, onTokenUpdate }, !skipInitialFetch && /* @__PURE__ */ import_react3.default.createElement(AuthFetch, null), children));
+function AuthWrapper({ children, skipInitialFetch }) {
+  return /* @__PURE__ */ import_react3.default.createElement(import_react3.default.Fragment, null, /* @__PURE__ */ import_react3.default.createElement(import_client2.AuthWrapper, { skipInitialFetch: true }, !skipInitialFetch && /* @__PURE__ */ import_react3.default.createElement(AuthFetch, null), children));
 }
 
 // src/auth/email/index.ts
@@ -529,18 +524,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
-          );
-          const refreshToken = generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = import_server6.NextResponse.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true
@@ -686,6 +674,7 @@ async function getRefreshToken() {
   getContext,
   getRefreshToken,
   getRefreshedInstagramAccessToken,
+  getTokenizedResponse,
   setupEmailAuth,
   setupGoogleAuth,
   setupInstagramAuth

package/dist/auth/index.d.mts

@@ -3,7 +3,7 @@ export { SetupGoogleAuthOptions, setupGoogleAuth } from './google/index.mjs';
 export { SetupInstagramAuthOptions, setupInstagramAuth } from './instagram/index.mjs';
 export { getRefreshToken } from './utils/token.mjs';
 export { AuthFetch, AuthWrapper } from './email/next.mjs';
-export { checkAuthStatus } from './email/token.mjs';
+export { checkAuthStatus, getTokenizedResponse } from './email/token.mjs';
 export { getContext } from './email/utils.mjs';
 export { getRefreshedInstagramAccessToken } from './instagram/utils.mjs';
 import 'next/server';

package/dist/auth/index.d.ts

@@ -3,7 +3,7 @@ export { SetupGoogleAuthOptions, setupGoogleAuth } from './google/index.js';
 export { SetupInstagramAuthOptions, setupInstagramAuth } from './instagram/index.js';
 export { getRefreshToken } from './utils/token.js';
 export { AuthFetch, AuthWrapper } from './email/next.js';
-export { checkAuthStatus } from './email/token.js';
+export { checkAuthStatus, getTokenizedResponse } from './email/token.js';
 export { getContext } from './email/utils.js';
 export { getRefreshedInstagramAccessToken } from './instagram/utils.js';
 import 'next/server';

package/dist/auth/index.esm.js

@@ -6,7 +6,6 @@ import { NextResponse } from "next/server";
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/utils/route.ts
 function getCorsHeaders(origin, allowedOrigins) {
@@ -14,7 +13,7 @@ function getCorsHeaders(origin, allowedOrigins) {
   return {
     "Access-Control-Allow-Origin": origin,
     "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-    "Access-Control-Allow-Headers": `Content-Type, Authorization, ${REFRESH_HEADER_NAME}`,
+    "Access-Control-Allow-Headers": `Content-Type, Authorization`,
     "Access-Control-Allow-Credentials": "true"
   };
 }
@@ -103,17 +102,18 @@ function getEnv(key, skipCheck) {
 }
 
 // src/auth/email/token.ts
-function generateAccessToken(id, signingKey) {
-  return sign({ id }, signingKey, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
     expiresIn: "2h"
   });
 }
-function generateRefreshToken(id, refreshKey) {
-  return sign({ id }, refreshKey);
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse2.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = NextResponse2.json(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -254,12 +254,12 @@ var getDeleteRoute = (options) => async (req) => {
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }
-  return getTokenizedResponse(void 0, "");
+  return getTokenizedResponse();
 };
 
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
-  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || req.headers.get(REFRESH_HEADER_NAME) || void 0;
+  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || void 0;
   const userID = getUserIdFromRefreshToken(refresh);
   if (userID) {
     if (options.onRefresh) {
@@ -267,7 +267,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID, getEnv("SIGNING_KEY" /* SIGNING_KEY */))
+      userID
     );
   }
   return getTokenizedResponse();
@@ -282,11 +282,7 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-        generateRefreshToken(
-          existingUser.id,
-          getEnv("REFRESH_KEY" /* REFRESH_KEY */)
-        )
+        existingUser.id
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -301,8 +297,7 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(newUser.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      newUser.id
     );
   }
   return getTokenizedResponse();
@@ -320,8 +315,7 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id, getEnv("SIGNING_KEY" /* SIGNING_KEY */)),
-      generateRefreshToken(user.id, getEnv("REFRESH_KEY" /* REFRESH_KEY */))
+      user.id
     );
   }
   return handleError(403, "Invalid password", options.onError);
@@ -386,8 +380,8 @@ function AuthFetch() {
     }
   );
 }
-function AuthWrapper({ children, getRefreshToken: getRefreshToken2, onTokenUpdate, skipInitialFetch }) {
-  return /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(AuthWrapperClient, { skipInitialFetch: true, getRefreshToken: getRefreshToken2, onTokenUpdate }, !skipInitialFetch && /* @__PURE__ */ React2.createElement(AuthFetch, null), children));
+function AuthWrapper({ children, skipInitialFetch }) {
+  return /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(AuthWrapperClient, { skipInitialFetch: true }, !skipInitialFetch && /* @__PURE__ */ React2.createElement(AuthFetch, null), children));
 }
 
 // src/auth/email/index.ts
@@ -489,18 +483,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id,
-            getEnv("SIGNING_KEY" /* SIGNING_KEY */)
-          );
-          const refreshToken = generateRefreshToken(id, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = NextResponse5.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true
@@ -645,6 +632,7 @@ export {
   getContext,
   getRefreshToken,
   getRefreshedInstagramAccessToken,
+  getTokenizedResponse,
   setupEmailAuth,
   setupGoogleAuth,
   setupInstagramAuth

package/dist/graphql/index.cjs.js

@@ -634,7 +634,6 @@ var import_server = require("next/server");
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/utils/route.ts
 function getCorsHeaders(origin, allowedOrigins) {
@@ -642,7 +641,7 @@ function getCorsHeaders(origin, allowedOrigins) {
   return {
     "Access-Control-Allow-Origin": origin,
     "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-    "Access-Control-Allow-Headers": `Content-Type, Authorization, ${REFRESH_HEADER_NAME}`,
+    "Access-Control-Allow-Headers": `Content-Type, Authorization`,
     "Access-Control-Allow-Credentials": "true"
   };
 }

package/dist/graphql/index.esm.js

@@ -619,7 +619,6 @@ import { NextResponse } from "next/server";
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/utils/route.ts
 function getCorsHeaders(origin, allowedOrigins) {
@@ -627,7 +626,7 @@ function getCorsHeaders(origin, allowedOrigins) {
   return {
     "Access-Control-Allow-Origin": origin,
     "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-    "Access-Control-Allow-Headers": `Content-Type, Authorization, ${REFRESH_HEADER_NAME}`,
+    "Access-Control-Allow-Headers": `Content-Type, Authorization`,
     "Access-Control-Allow-Credentials": "true"
   };
 }

package/dist/graphql/init.cjs.js

@@ -85,7 +85,6 @@ var import_server = require("next/server");
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/utils/route.ts
 function getCorsHeaders(origin, allowedOrigins) {
@@ -93,7 +92,7 @@ function getCorsHeaders(origin, allowedOrigins) {
   return {
     "Access-Control-Allow-Origin": origin,
     "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-    "Access-Control-Allow-Headers": `Content-Type, Authorization, ${REFRESH_HEADER_NAME}`,
+    "Access-Control-Allow-Headers": `Content-Type, Authorization`,
     "Access-Control-Allow-Credentials": "true"
   };
 }

package/dist/graphql/init.esm.js

@@ -66,7 +66,6 @@ import { NextResponse } from "next/server";
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/utils/route.ts
 function getCorsHeaders(origin, allowedOrigins) {
@@ -74,7 +73,7 @@ function getCorsHeaders(origin, allowedOrigins) {
   return {
     "Access-Control-Allow-Origin": origin,
     "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-    "Access-Control-Allow-Headers": `Content-Type, Authorization, ${REFRESH_HEADER_NAME}`,
+    "Access-Control-Allow-Headers": `Content-Type, Authorization`,
     "Access-Control-Allow-Credentials": "true"
   };
 }

package/dist/utils/route.cjs.js

@@ -28,7 +28,6 @@ var import_server = require("next/server");
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/utils/route.ts
 function getCorsHeaders(origin, allowedOrigins) {
@@ -36,7 +35,7 @@ function getCorsHeaders(origin, allowedOrigins) {
   return {
     "Access-Control-Allow-Origin": origin,
     "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-    "Access-Control-Allow-Headers": `Content-Type, Authorization, ${REFRESH_HEADER_NAME}`,
+    "Access-Control-Allow-Headers": `Content-Type, Authorization`,
     "Access-Control-Allow-Credentials": "true"
   };
 }

package/dist/utils/route.esm.js

@@ -3,7 +3,6 @@ import { NextResponse } from "next/server";
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/utils/route.ts
 function getCorsHeaders(origin, allowedOrigins) {
@@ -11,7 +10,7 @@ function getCorsHeaders(origin, allowedOrigins) {
   return {
     "Access-Control-Allow-Origin": origin,
     "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-    "Access-Control-Allow-Headers": `Content-Type, Authorization, ${REFRESH_HEADER_NAME}`,
+    "Access-Control-Allow-Headers": `Content-Type, Authorization`,
     "Access-Control-Allow-Credentials": "true"
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "naystack",
-  "version": "1.7.20",
+  "version": "1.7.24",
   "description": "A stack built with Next + GraphQL + S3 + Auth",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",