naystack 1.8.19 → 1.9.0

package/dist/auth/instagram/route.esm.js

@@ -1,343 +0,0 @@
-// src/auth/instagram/route.ts
-import { NextResponse as NextResponse3 } from "next/server";
-
-// src/auth/email/token.ts
-import { compare } from "bcryptjs";
-import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
-import { cookies } from "next/headers";
-import { redirect } from "next/navigation";
-import { NextResponse } from "next/server";
-
-// src/env.ts
-var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
-var getEnvValue = (key) => {
-  switch (key) {
-    case "NEXT_PUBLIC_GRAPHQL_ENDPOINT" /* NEXT_PUBLIC_GRAPHQL_ENDPOINT */:
-      return process.env.NEXT_PUBLIC_GRAPHQL_ENDPOINT || EXTRA_ENV.GRAPHQL_ENDPOINT;
-    case "NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */:
-      return process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT || EXTRA_ENV.EMAIL_AUTH_ENDPOINT;
-    case "NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT" /* NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT */:
-      return process.env.NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT || EXTRA_ENV.GOOGLE_AUTH_ENDPOINT;
-    case "NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */:
-      return process.env.NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT || EXTRA_ENV.INSTAGRAM_AUTH_ENDPOINT;
-    case "NEXT_PUBLIC_FILE_ENDPOINT" /* NEXT_PUBLIC_FILE_ENDPOINT */:
-      return process.env.NEXT_PUBLIC_FILE_ENDPOINT || EXTRA_ENV.FILE_ENDPOINT;
-    case "NEXT_PUBLIC_BASE_URL" /* NEXT_PUBLIC_BASE_URL */:
-      return process.env.NEXT_PUBLIC_BASE_URL || EXTRA_ENV.BASE_URL;
-    case "REFRESH_KEY" /* REFRESH_KEY */:
-      return process.env.REFRESH_KEY;
-    case "SIGNING_KEY" /* SIGNING_KEY */:
-      return process.env.SIGNING_KEY;
-    case "INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */:
-      return process.env.INSTAGRAM_CLIENT_SECRET;
-    case "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */:
-      return process.env.INSTAGRAM_CLIENT_ID;
-    case "GOOGLE_CLIENT_SECRET" /* GOOGLE_CLIENT_SECRET */:
-      return process.env.GOOGLE_CLIENT_SECRET;
-    case "GOOGLE_CLIENT_ID" /* GOOGLE_CLIENT_ID */:
-      return process.env.GOOGLE_CLIENT_ID;
-    case "TURNSTILE_KEY" /* TURNSTILE_KEY */:
-      return process.env.TURNSTILE_KEY;
-    case "S3_ACCESS_KEY_ID" /* S3_ACCESS_KEY_ID */:
-      return process.env.S3_ACCESS_KEY_ID;
-    case "S3_ACCESS_KEY_SECRET" /* S3_ACCESS_KEY_SECRET */:
-      return process.env.S3_ACCESS_KEY_SECRET;
-    case "S3_REGION" /* S3_REGION */:
-      return process.env.S3_REGION;
-    case "S3_BUCKET" /* S3_BUCKET */:
-      return process.env.S3_BUCKET;
-    case "NODE_ENV" /* NODE_ENV */:
-      return process.env.NODE_ENV;
-    default:
-      return process.env[key];
-  }
-};
-function getEnv(key, skipCheck) {
-  const value = getEnvValue(key);
-  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
-  return value;
-}
-
-// src/auth/email/token.ts
-function getUserIdFromAccessToken(accessToken) {
-  if (accessToken)
-    try {
-      const decoded = verify(accessToken, getEnv("SIGNING_KEY" /* SIGNING_KEY */));
-      if (typeof decoded !== "string" && typeof decoded.id === "number")
-        return decoded.id;
-    } catch (e) {
-      if (!(e instanceof JsonWebTokenError)) console.error(e, "errors");
-      return null;
-    }
-  return null;
-}
-
-// src/auth/instagram/utils.ts
-async function getLongLivedToken(code, redirectURL, clientId, clientSecret) {
-  const formData = new FormData();
-  formData.set("client_id", clientId);
-  formData.set("client_secret", clientSecret);
-  formData.set("grant_type", "authorization_code");
-  formData.set("redirect_uri", redirectURL);
-  formData.set("code", code);
-  const shortRes = await fetch("https://api.instagram.com/oauth/access_token", {
-    method: "POST",
-    body: formData
-  });
-  if (shortRes.ok) {
-    const shortResData = await shortRes.json();
-    if (shortResData.access_token) {
-      const shortLivedToken = shortResData.access_token;
-      const longRes = await fetch(
-        `https://graph.instagram.com/access_token?grant_type=ig_exchange_token&access_token=${shortLivedToken}&client_secret=${getEnv("INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */)}`
-      );
-      if (longRes.ok) {
-        const longResData = await longRes.json();
-        return {
-          accessToken: longResData.access_token,
-          userId: shortResData.user_id
-        };
-      }
-    }
-  }
-}
-var getInstagramAuthorizationURL = (token, scopes = ["instagram_business_basic"]) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
-  "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */
-)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=${scopes.join(",")}&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
-
-// src/socials/meta/request.ts
-function createGraphClient(baseURL) {
-  const buildURL = (token, path, params = {}) => {
-    const search = new URLSearchParams();
-    for (const [key, value] of Object.entries(params)) {
-      if (value !== void 0) search.set(key, String(value));
-    }
-    search.set("access_token", token);
-    return `${baseURL}/${path}?${search.toString()}`;
-  };
-  const request = async (token, path, options = {}) => {
-    const response = await fetch(buildURL(token, path, options.params), {
-      method: options.method || (options.body ? "POST" : "GET"),
-      headers: {
-        Authorization: `Bearer ${token}`,
-        ...options.body ? { "Content-Type": "application/json" } : {}
-      },
-      ...options.body ? { body: JSON.stringify(options.body) } : {}
-    });
-    return response.json().catch(() => null);
-  };
-  return { buildURL, request };
-}
-function readGraphID(label, result) {
-  if (result?.error) {
-    console.error(`[naystack] ${label} failed: ${result.error.message}`);
-    return null;
-  }
-  return result?.id || null;
-}
-
-// src/socials/instagram/utils.ts
-var client = createGraphClient("https://graph.instagram.com/v23.0");
-var getInstagramData = client.request;
-
-// src/socials/instagram/getters.ts
-var getInstagramUser = (token, id, fields) => {
-  return getInstagramData(token, id || "me", {
-    params: {
-      fields: fields ? fields.join(",") : "username,followers_count,media_count"
-    }
-  });
-};
-var getInstagramContainerStatus = async (token, id) => {
-  const result = await getInstagramData(token, id, { params: { fields: "status_code,status" } });
-  if (!result?.status_code) return null;
-  return {
-    status: result.status_code,
-    error: result.status_code === "ERROR" ? result.status : void 0
-  };
-};
-
-// src/socials/meta/container.ts
-var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-async function waitForContainer(getState, { intervalMS = 5e3, timeoutMS = 3e5 } = {}) {
-  const deadline = Date.now() + timeoutMS;
-  let state = await getState();
-  if (!state) {
-    await sleep(2e3);
-    return null;
-  }
-  while (state?.status === "IN_PROGRESS" && Date.now() < deadline) {
-    await sleep(intervalMS);
-    state = await getState();
-  }
-  return state;
-}
-function createPublisher(platform) {
-  const isReady = async (token, id, label, wait) => {
-    const state = await waitForContainer(
-      () => platform.getStatus(token, id),
-      wait
-    );
-    if (state && state.status !== "FINISHED" && state.status !== "PUBLISHED") {
-      console.error(
-        `[naystack] ${platform.name} ${label} ${id} is ${state.status}${state.error ? `: ${state.error}` : ""}`
-      );
-      return false;
-    }
-    return true;
-  };
-  const createReady = async (token, params, label, wait, retry) => {
-    const attempts = Math.max(1, retry?.attempts ?? 3);
-    const backoffMS = retry?.backoffMS ?? 2e3;
-    for (let attempt = 1; attempt <= attempts; attempt++) {
-      const id = await platform.createContainer(token, params);
-      if (id && await isReady(token, id, label, wait)) return id;
-      if (attempt < attempts) {
-        const delay = backoffMS * 2 ** (attempt - 1);
-        console.warn(
-          `[naystack] ${platform.name} ${label} attempt ${attempt}/${attempts} failed \u2014 retrying in ${delay}ms`
-        );
-        await sleep(delay);
-      }
-    }
-    return null;
-  };
-  return {
-    /** Creates a container, waits for it to finish processing, then publishes it. */
-    publish: async (token, params, wait, retry) => {
-      const containerID = await createReady(
-        token,
-        params,
-        "container",
-        wait,
-        retry
-      );
-      if (!containerID) return null;
-      return platform.publish(token, containerID);
-    },
-    /**
-     * Creates and awaits every carousel child **in parallel**, resolving to
-     * their ids in input order — or `null` if any failed.
-     *
-     * Parallel because each child is an independent create-then-poll and Meta
-     * spends ~5s accepting a single container, so ten sequential children cost
-     * ~50s of mostly waiting — past what a serverless caller can fit in its
-     * timeout. `Promise.all` preserves input order, which the carousel's slide
-     * order depends on.
-     */
-    createChildren: async (token, items, wait, retry) => {
-      const children = await Promise.all(
-        items.map(
-          (item) => createReady(
-            token,
-            { ...item, is_carousel_item: true },
-            "carousel item",
-            wait,
-            retry
-          )
-        )
-      );
-      const created = children.filter((childID) => childID !== null);
-      return created.length === children.length ? created : null;
-    }
-  };
-}
-
-// src/socials/instagram/setters.ts
-var publisher = createPublisher({
-  name: "Instagram",
-  getStatus: getInstagramContainerStatus,
-  createContainer: async (token, params) => readGraphID(
-    "Instagram media container",
-    await getInstagramData(token, "me/media", {
-      params,
-      method: "POST"
-    })
-  ),
-  publish: async (token, creationID) => readGraphID(
-    "Instagram publish",
-    await getInstagramData(token, "me/media_publish", {
-      params: { creation_id: creationID },
-      method: "POST"
-    })
-  )
-});
-
-// src/socials/meta/webhook.ts
-import { NextResponse as NextResponse2 } from "next/server";
-
-// src/socials/threads/utils.ts
-var client2 = createGraphClient("https://graph.threads.net/v1.0");
-var getThreadsData = client2.request;
-
-// src/socials/threads/getters.ts
-var getThreadsContainerStatus = async (token, id) => {
-  const result = await getThreadsData(token, id, { params: { fields: "status,error_message" } });
-  if (!result?.status) return null;
-  return { status: result.status, error: result.error_message };
-};
-
-// src/socials/threads/setters.ts
-var publisher2 = createPublisher({
-  name: "Threads",
-  getStatus: getThreadsContainerStatus,
-  createContainer: async (token, params) => readGraphID(
-    "Threads container",
-    await getThreadsData(token, "me/threads", {
-      params,
-      method: "POST"
-    })
-  ),
-  publish: async (token, creationID) => readGraphID(
-    "Threads publish",
-    await getThreadsData(token, "me/threads_publish", {
-      params: { creation_id: creationID },
-      method: "POST"
-    })
-  )
-});
-
-// src/auth/instagram/route.ts
-var getInstagramRoute = ({
-  redirectURL,
-  errorRedirectURL,
-  onUser,
-  scopes
-}) => {
-  const handleError = (message) => NextResponse3.redirect(`${errorRedirectURL}?error=${message}`);
-  return async (req) => {
-    const accessCode = req.nextUrl.searchParams.get("code");
-    const error = req.nextUrl.searchParams.get("error");
-    const stateToken = req.nextUrl.searchParams.get("state");
-    if (error) return handleError(error);
-    if (!accessCode) {
-      if (!stateToken) return handleError("Invalid request");
-      return NextResponse3.redirect(
-        getInstagramAuthorizationURL(stateToken, scopes),
-        302
-      );
-    }
-    if (!stateToken) return handleError("Invalid request");
-    const instagramData = await getLongLivedToken(
-      accessCode,
-      getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */),
-      getEnv("INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */),
-      getEnv("INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */)
-    );
-    if (!instagramData?.accessToken)
-      return handleError("Unable to reach Instagram");
-    const personalInfo = await getInstagramUser(instagramData.accessToken);
-    if (!personalInfo?.username) return handleError("You are not logged in");
-    const loggedInUserID = getUserIdFromAccessToken(stateToken);
-    const errorMessage = await onUser(
-      personalInfo,
-      loggedInUserID,
-      instagramData.accessToken
-    );
-    if (errorMessage) return handleError(errorMessage);
-    return NextResponse3.redirect(redirectURL);
-  };
-};
-export {
-  getInstagramRoute
-};

package/dist/auth/instagram/utils.d.mts

@@ -1,57 +0,0 @@
-/**
- * Permissions requestable during Instagram Login OAuth. `instagram_business_basic`
- * is enough to read a profile; publishing needs `instagram_business_content_publish`.
- *
- * Widening the scopes only affects users who authorize afterwards — tokens already
- * stored keep the permissions they were granted, so existing users must reconnect.
- *
- * @category Auth
- */
-type InstagramScope = "instagram_business_basic" | "instagram_business_content_publish" | "instagram_business_manage_messages" | "instagram_business_manage_comments" | "instagram_business_manage_insights";
-/**
- * Exchanges a long-lived Instagram token for a refreshed token.
- * @param token - Current long-lived access token
- * @returns New access token or undefined
- */
-declare function getRefreshedInstagramAccessToken(token: string): Promise<string | undefined>;
-/**
- * Exchanges an OAuth code for a long-lived Instagram access token.
- * @param code - OAuth authorization code from redirect
- * @param redirectURL - Registered redirect URI
- * @param clientId - Instagram app client id
- * @param clientSecret - Instagram app client secret
- * @returns Object with accessToken and userId, or undefined
- */
-declare function getLongLivedToken(code: string, redirectURL: string, clientId: string, clientSecret: string): Promise<{
-    accessToken: string;
-    userId: string;
-} | undefined>;
-/**
- * Builds the Instagram OAuth authorization URL for the given state token.
- * The state token is passed back by Instagram after authorization and is used to link
- * the Instagram account to the logged-in user.
- *
- * Reads `INSTAGRAM_CLIENT_ID` and `NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT` from the environment.
- *
- * **Server-only** — reads the non-public `INSTAGRAM_CLIENT_ID`, so it must be
- * called from server code (e.g. the Instagram auth route), not the client. The
- * OAuth `client_id` still ends up in the redirect URL the browser follows; it is
- * simply built on the server instead of shipped in the client bundle.
- *
- * @param token - The state token to embed in the authorization URL (typically the user's session or access token).
- * @param scopes - Permissions to request. Default: `["instagram_business_basic"]`.
- * @returns The full Instagram OAuth authorization URL.
- *
- * @example
- * ```ts
- * // In a server route handler:
- * import { getInstagramAuthorizationURL } from "naystack/auth";
- *
- * return NextResponse.redirect(getInstagramAuthorizationURL(state), 302);
- * ```
- *
- * @category Auth
- */
-declare const getInstagramAuthorizationURL: (token: string, scopes?: InstagramScope[]) => string;
-
-export { type InstagramScope, getInstagramAuthorizationURL, getLongLivedToken, getRefreshedInstagramAccessToken };

package/dist/auth/instagram/utils.d.ts

@@ -1,57 +0,0 @@
-/**
- * Permissions requestable during Instagram Login OAuth. `instagram_business_basic`
- * is enough to read a profile; publishing needs `instagram_business_content_publish`.
- *
- * Widening the scopes only affects users who authorize afterwards — tokens already
- * stored keep the permissions they were granted, so existing users must reconnect.
- *
- * @category Auth
- */
-type InstagramScope = "instagram_business_basic" | "instagram_business_content_publish" | "instagram_business_manage_messages" | "instagram_business_manage_comments" | "instagram_business_manage_insights";
-/**
- * Exchanges a long-lived Instagram token for a refreshed token.
- * @param token - Current long-lived access token
- * @returns New access token or undefined
- */
-declare function getRefreshedInstagramAccessToken(token: string): Promise<string | undefined>;
-/**
- * Exchanges an OAuth code for a long-lived Instagram access token.
- * @param code - OAuth authorization code from redirect
- * @param redirectURL - Registered redirect URI
- * @param clientId - Instagram app client id
- * @param clientSecret - Instagram app client secret
- * @returns Object with accessToken and userId, or undefined
- */
-declare function getLongLivedToken(code: string, redirectURL: string, clientId: string, clientSecret: string): Promise<{
-    accessToken: string;
-    userId: string;
-} | undefined>;
-/**
- * Builds the Instagram OAuth authorization URL for the given state token.
- * The state token is passed back by Instagram after authorization and is used to link
- * the Instagram account to the logged-in user.
- *
- * Reads `INSTAGRAM_CLIENT_ID` and `NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT` from the environment.
- *
- * **Server-only** — reads the non-public `INSTAGRAM_CLIENT_ID`, so it must be
- * called from server code (e.g. the Instagram auth route), not the client. The
- * OAuth `client_id` still ends up in the redirect URL the browser follows; it is
- * simply built on the server instead of shipped in the client bundle.
- *
- * @param token - The state token to embed in the authorization URL (typically the user's session or access token).
- * @param scopes - Permissions to request. Default: `["instagram_business_basic"]`.
- * @returns The full Instagram OAuth authorization URL.
- *
- * @example
- * ```ts
- * // In a server route handler:
- * import { getInstagramAuthorizationURL } from "naystack/auth";
- *
- * return NextResponse.redirect(getInstagramAuthorizationURL(state), 302);
- * ```
- *
- * @category Auth
- */
-declare const getInstagramAuthorizationURL: (token: string, scopes?: InstagramScope[]) => string;
-
-export { type InstagramScope, getInstagramAuthorizationURL, getLongLivedToken, getRefreshedInstagramAccessToken };