naystack 1.7.21 → 1.7.25

package/dist/auth/email/routes/delete.cjs.js

@@ -85,9 +85,18 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server.NextResponse.json(body, {
+function generateAccessToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
+    expiresIn: "2h"
+  });
+}
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+}
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new import_server.NextResponse(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -155,7 +164,7 @@ var getDeleteRoute = (options) => async (req) => {
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }
-  return getTokenizedResponse(void 0, "");
+  return getTokenizedResponse();
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/auth/email/routes/delete.d.mts

@@ -8,9 +8,6 @@ import '../../types.mjs';
  * @param options - SetupEmailAuthOptions
  * @returns Async route handler
  */
-declare const getDeleteRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>>;
+declare const getDeleteRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<unknown>>;
 
 export { getDeleteRoute };

package/dist/auth/email/routes/delete.d.ts

@@ -8,9 +8,6 @@ import '../../types.js';
  * @param options - SetupEmailAuthOptions
  * @returns Async route handler
  */
-declare const getDeleteRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>>;
+declare const getDeleteRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<unknown>>;
 
 export { getDeleteRoute };

package/dist/auth/email/routes/delete.esm.js

@@ -59,9 +59,18 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse.json(body, {
+function generateAccessToken(id) {
+  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
+    expiresIn: "2h"
+  });
+}
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+}
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new NextResponse(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -129,7 +138,7 @@ var getDeleteRoute = (options) => async (req) => {
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }
-  return getTokenizedResponse(void 0, "");
+  return getTokenizedResponse();
 };
 export {
   getDeleteRoute

package/dist/auth/email/routes/get.cjs.js

@@ -26,7 +26,6 @@ module.exports = __toCommonJS(get_exports);
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/auth/email/token.ts
 var import_bcryptjs = require("bcryptjs");
@@ -91,9 +90,13 @@ function generateAccessToken(id) {
     expiresIn: "2h"
   });
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server.NextResponse.json(body, {
+function generateRefreshToken(id) {
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+}
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new import_server.NextResponse(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -127,7 +130,7 @@ function getUserIdFromRefreshToken(refreshToken) {
 
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
-  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || req.headers.get(REFRESH_HEADER_NAME) || void 0;
+  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || void 0;
   const userID = getUserIdFromRefreshToken(refresh);
   if (userID) {
     if (options.onRefresh) {
@@ -135,7 +138,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID)
+      userID
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/get.d.mts

@@ -8,9 +8,6 @@ import '../../types.mjs';
  * @param options - SetupEmailAuthOptions
  * @returns Async route handler
  */
-declare const getGetRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>>;
+declare const getGetRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<unknown>>;
 
 export { getGetRoute };

package/dist/auth/email/routes/get.d.ts

@@ -8,9 +8,6 @@ import '../../types.js';
  * @param options - SetupEmailAuthOptions
  * @returns Async route handler
  */
-declare const getGetRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>>;
+declare const getGetRoute: (options: SetupEmailAuthOptions) => (req: NextRequest) => Promise<next_server.NextResponse<unknown>>;
 
 export { getGetRoute };

package/dist/auth/email/routes/get.esm.js

@@ -1,6 +1,5 @@
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/auth/email/token.ts
 import { compare } from "bcryptjs";
@@ -65,9 +64,13 @@ function generateAccessToken(id) {
     expiresIn: "2h"
   });
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse.json(body, {
+function generateRefreshToken(id) {
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+}
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new NextResponse(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -101,7 +104,7 @@ function getUserIdFromRefreshToken(refreshToken) {
 
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
-  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || req.headers.get(REFRESH_HEADER_NAME) || void 0;
+  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || void 0;
   const userID = getUserIdFromRefreshToken(refresh);
   if (userID) {
     if (options.onRefresh) {
@@ -109,7 +112,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID)
+      userID
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/post.cjs.js

@@ -102,9 +102,10 @@ function generateAccessToken(id) {
 function generateRefreshToken(id) {
   return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server2.NextResponse.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new import_server2.NextResponse(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -184,10 +185,7 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id),
-        generateRefreshToken(
-          existingUser.id
-        )
+        existingUser.id
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -202,8 +200,7 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id),
-      generateRefreshToken(newUser.id)
+      newUser.id
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/post.esm.js

@@ -78,9 +78,10 @@ function generateAccessToken(id) {
 function generateRefreshToken(id) {
   return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse2.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new NextResponse2(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -160,10 +161,7 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id),
-        generateRefreshToken(
-          existingUser.id
-        )
+        existingUser.id
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -178,8 +176,7 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id),
-      generateRefreshToken(newUser.id)
+      newUser.id
     );
   }
   return getTokenizedResponse();

package/dist/auth/email/routes/put.cjs.js

@@ -101,9 +101,10 @@ function generateAccessToken(id) {
 function generateRefreshToken(id) {
   return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server2.NextResponse.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new import_server2.NextResponse(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -187,8 +188,7 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id),
-      generateRefreshToken(user.id)
+      user.id
     );
   }
   return handleError(403, "Invalid password", options.onError);

package/dist/auth/email/routes/put.esm.js

@@ -75,9 +75,10 @@ function generateAccessToken(id) {
 function generateRefreshToken(id) {
   return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse2.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new NextResponse2(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -161,8 +162,7 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id),
-      generateRefreshToken(user.id)
+      user.id
     );
   }
   return handleError(403, "Invalid password", options.onError);

package/dist/auth/email/token.cjs.js

@@ -97,9 +97,10 @@ function generateAccessToken(id) {
 function generateRefreshToken(id) {
   return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server.NextResponse.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new import_server.NextResponse(accessToken, {
     status: 200
   });
   if (!accessToken) {

package/dist/auth/email/token.d.mts

@@ -22,15 +22,11 @@ declare function generateRefreshToken(id: number): string;
  * - If `refreshToken` is empty string, the cookie expires immediately (logout).
  * - If `refreshToken` is a valid string, the cookie is set for 1 year.
  *
- * @param accessToken - Optional access JWT to include in response body.
- * @param refreshToken - Optional refresh JWT to set as httpOnly cookie. Empty string clears the cookie.
+ * @param id - Optional user id.
  * @returns NextResponse with JSON body and Set-Cookie headers.
  * @category Auth
  */
-declare function getTokenizedResponse(accessToken?: string, refreshToken?: string): NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>;
+declare function getTokenizedResponse(id?: number): NextResponse<unknown>;
 /**
  * Decodes a refresh token and returns the user id from the JWT payload.
  * @param refreshToken - JWT refresh token string.

package/dist/auth/email/token.d.ts

@@ -22,15 +22,11 @@ declare function generateRefreshToken(id: number): string;
  * - If `refreshToken` is empty string, the cookie expires immediately (logout).
  * - If `refreshToken` is a valid string, the cookie is set for 1 year.
  *
- * @param accessToken - Optional access JWT to include in response body.
- * @param refreshToken - Optional refresh JWT to set as httpOnly cookie. Empty string clears the cookie.
+ * @param id - Optional user id.
  * @returns NextResponse with JSON body and Set-Cookie headers.
  * @category Auth
  */
-declare function getTokenizedResponse(accessToken?: string, refreshToken?: string): NextResponse<{
-    accessToken: string | undefined;
-    refreshToken: string | undefined;
-}>;
+declare function getTokenizedResponse(id?: number): NextResponse<unknown>;
 /**
  * Decodes a refresh token and returns the user id from the JWT payload.
  * @param refreshToken - JWT refresh token string.

package/dist/auth/email/token.esm.js

@@ -67,9 +67,10 @@ function generateAccessToken(id) {
 function generateRefreshToken(id) {
   return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = NextResponse.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new NextResponse(accessToken, {
     status: 200
   });
   if (!accessToken) {

package/dist/auth/google/get.cjs.js

@@ -88,11 +88,6 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id) {
-  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
-    expiresIn: "2h"
-  });
-}
 function generateRefreshToken(id) {
   return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
@@ -170,17 +165,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id
-          );
-          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = import_server2.NextResponse.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true

package/dist/auth/google/get.esm.js

@@ -64,11 +64,6 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id) {
-  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
-    expiresIn: "2h"
-  });
-}
 function generateRefreshToken(id) {
   return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
@@ -146,17 +141,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id
-          );
-          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = NextResponse2.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true

package/dist/auth/google/index.cjs.js

@@ -90,11 +90,6 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id) {
-  return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
-    expiresIn: "2h"
-  });
-}
 function generateRefreshToken(id) {
   return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
@@ -172,17 +167,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id
-          );
-          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = import_server2.NextResponse.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true

package/dist/auth/google/index.esm.js

@@ -64,11 +64,6 @@ function getEnv(key, skipCheck) {
 var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
-function generateAccessToken(id) {
-  return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
-    expiresIn: "2h"
-  });
-}
 function generateRefreshToken(id) {
   return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
@@ -146,17 +141,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id
-          );
-          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = NextResponse2.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true

package/dist/auth/index.cjs.js

@@ -33,11 +33,10 @@ __export(auth_exports, {
   AuthFetch: () => AuthFetch,
   AuthWrapper: () => AuthWrapper,
   checkAuthStatus: () => checkAuthStatus,
-  generateAccessToken: () => generateAccessToken,
-  generateRefreshToken: () => generateRefreshToken,
   getContext: () => getContext,
   getRefreshToken: () => getRefreshToken,
   getRefreshedInstagramAccessToken: () => getRefreshedInstagramAccessToken,
+  getTokenizedResponse: () => getTokenizedResponse,
   setupEmailAuth: () => setupEmailAuth,
   setupGoogleAuth: () => setupGoogleAuth,
   setupInstagramAuth: () => setupInstagramAuth
@@ -52,7 +51,6 @@ var import_server = require("next/server");
 
 // src/auth/constants.ts
 var REFRESH_COOKIE_NAME = "refresh";
-var REFRESH_HEADER_NAME = "X-Refresh-Token";
 
 // src/utils/route.ts
 function getCorsHeaders(origin, allowedOrigins) {
@@ -60,7 +58,7 @@ function getCorsHeaders(origin, allowedOrigins) {
   return {
     "Access-Control-Allow-Origin": origin,
     "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-    "Access-Control-Allow-Headers": `Content-Type, Authorization, ${REFRESH_HEADER_NAME}`,
+    "Access-Control-Allow-Headers": `Content-Type, Authorization`,
     "Access-Control-Allow-Credentials": "true"
   };
 }
@@ -157,9 +155,10 @@ function generateAccessToken(id) {
 function generateRefreshToken(id) {
   return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
 }
-function getTokenizedResponse(accessToken, refreshToken) {
-  const body = { accessToken, refreshToken };
-  const response = import_server2.NextResponse.json(body, {
+function getTokenizedResponse(id) {
+  const accessToken = id ? generateAccessToken(id) : void 0;
+  const refreshToken = id ? generateRefreshToken(id) : void 0;
+  const response = new import_server2.NextResponse(accessToken, {
     status: 200
   });
   if (!accessToken) {
@@ -300,12 +299,12 @@ var getDeleteRoute = (options) => async (req) => {
     const body = await req.json();
     await options.onLogout?.(ctx.userId, body);
   }
-  return getTokenizedResponse(void 0, "");
+  return getTokenizedResponse();
 };
 
 // src/auth/email/routes/get.ts
 var getGetRoute = (options) => async (req) => {
-  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || req.headers.get(REFRESH_HEADER_NAME) || void 0;
+  const refresh = req.cookies.get(REFRESH_COOKIE_NAME)?.value || void 0;
   const userID = getUserIdFromRefreshToken(refresh);
   if (userID) {
     if (options.onRefresh) {
@@ -313,7 +312,7 @@ var getGetRoute = (options) => async (req) => {
       await options.onRefresh?.(userID, body);
     }
     return getTokenizedResponse(
-      generateAccessToken(userID)
+      userID
     );
   }
   return getTokenizedResponse();
@@ -328,10 +327,7 @@ var getPostRoute = (options) => async (req) => {
   if (existingUser) {
     if (await verifyUser(existingUser, data.password)) {
       return getTokenizedResponse(
-        generateAccessToken(existingUser.id),
-        generateRefreshToken(
-          existingUser.id
-        )
+        existingUser.id
       );
     }
     return handleError(400, "A user already exists", options.onError);
@@ -346,8 +342,7 @@ var getPostRoute = (options) => async (req) => {
       await options.onSignUp?.(newUser.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(newUser.id),
-      generateRefreshToken(newUser.id)
+      newUser.id
     );
   }
   return getTokenizedResponse();
@@ -365,8 +360,7 @@ var getPutRoute = (options) => async (req) => {
       await options.onLogin?.(user.id, data);
     }
     return getTokenizedResponse(
-      generateAccessToken(user.id),
-      generateRefreshToken(user.id)
+      user.id
     );
   }
   return handleError(403, "Invalid password", options.onError);
@@ -427,8 +421,8 @@ function AuthFetch() {
     }
   );
 }
-function AuthWrapper({ children, getRefreshToken: getRefreshToken2, onTokenUpdate, skipInitialFetch }) {
-  return /* @__PURE__ */ import_react3.default.createElement(import_react3.default.Fragment, null, /* @__PURE__ */ import_react3.default.createElement(import_client2.AuthWrapper, { skipInitialFetch: true, getRefreshToken: getRefreshToken2, onTokenUpdate }, !skipInitialFetch && /* @__PURE__ */ import_react3.default.createElement(AuthFetch, null), children));
+function AuthWrapper({ children, skipInitialFetch }) {
+  return /* @__PURE__ */ import_react3.default.createElement(import_react3.default.Fragment, null, /* @__PURE__ */ import_react3.default.createElement(import_client2.AuthWrapper, { skipInitialFetch: true }, !skipInitialFetch && /* @__PURE__ */ import_react3.default.createElement(AuthFetch, null), children));
 }
 
 // src/auth/email/index.ts
@@ -530,17 +524,11 @@ var getGoogleGetRoute = ({
         const { data } = JSON.parse(localState);
         const id = await getUserIdFromEmail(user, data);
         if (id) {
-          const accessToken = generateAccessToken(
-            id
-          );
-          const refreshToken = generateRefreshToken(id);
           const targetUrl = new URL(finalRedirectURL, req.nextUrl.origin);
-          targetUrl.searchParams.set("accessToken", accessToken);
-          targetUrl.searchParams.set("refreshToken", refreshToken);
           const res = import_server6.NextResponse.redirect(targetUrl);
           res.cookies.set(
             REFRESH_COOKIE_NAME,
-            refreshToken,
+            generateRefreshToken(id),
             {
               httpOnly: true,
               secure: true
@@ -683,11 +671,10 @@ async function getRefreshToken() {
   AuthFetch,
   AuthWrapper,
   checkAuthStatus,
-  generateAccessToken,
-  generateRefreshToken,
   getContext,
   getRefreshToken,
   getRefreshedInstagramAccessToken,
+  getTokenizedResponse,
   setupEmailAuth,
   setupGoogleAuth,
   setupInstagramAuth

package/dist/auth/index.d.mts

@@ -3,7 +3,7 @@ export { SetupGoogleAuthOptions, setupGoogleAuth } from './google/index.mjs';
 export { SetupInstagramAuthOptions, setupInstagramAuth } from './instagram/index.mjs';
 export { getRefreshToken } from './utils/token.mjs';
 export { AuthFetch, AuthWrapper } from './email/next.mjs';
-export { checkAuthStatus, generateAccessToken, generateRefreshToken } from './email/token.mjs';
+export { checkAuthStatus, getTokenizedResponse } from './email/token.mjs';
 export { getContext } from './email/utils.mjs';
 export { getRefreshedInstagramAccessToken } from './instagram/utils.mjs';
 import 'next/server';