naystack 1.8.2 → 1.8.4

package/dist/auth/google/get.esm.js

@@ -65,7 +65,9 @@ var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
 function generateRefreshToken(id) {
-  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */), {
+    expiresIn: "365d"
+  });
 }
 
 // src/auth/google/get.ts

package/dist/auth/google/index.cjs.js

@@ -91,7 +91,9 @@ var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
 function generateRefreshToken(id) {
-  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */), {
+    expiresIn: "365d"
+  });
 }
 
 // src/auth/google/get.ts

package/dist/auth/google/index.esm.js

@@ -65,7 +65,9 @@ var REFRESH_COOKIE_NAME = "refresh";
 
 // src/auth/email/token.ts
 function generateRefreshToken(id) {
-  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */), {
+    expiresIn: "365d"
+  });
 }
 
 // src/auth/google/get.ts

package/dist/auth/index.cjs.js

@@ -150,11 +150,13 @@ function getEnv(key, skipCheck) {
 // src/auth/email/token.ts
 function generateAccessToken(id) {
   return (0, import_jsonwebtoken.sign)({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
-    expiresIn: "2h"
+    expiresIn: "24h"
   });
 }
 function generateRefreshToken(id) {
-  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+  return (0, import_jsonwebtoken.sign)({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */), {
+    expiresIn: "365d"
+  });
 }
 function getTokenizedResponse(id) {
   const accessToken = id ? generateAccessToken(id) : void 0;

package/dist/auth/index.d.mts

@@ -13,4 +13,5 @@ import 'googleapis';
 import '../socials/instagram/types.mjs';
 import 'react';
 import './email/client.mjs';
+import './token-store.mjs';
 import '../graphql/types.mjs';

package/dist/auth/index.d.ts

@@ -13,4 +13,5 @@ import 'googleapis';
 import '../socials/instagram/types.js';
 import 'react';
 import './email/client.js';
+import './token-store.js';
 import '../graphql/types.js';

package/dist/auth/index.esm.js

@@ -104,11 +104,13 @@ function getEnv(key, skipCheck) {
 // src/auth/email/token.ts
 function generateAccessToken(id) {
   return sign({ id }, getEnv("SIGNING_KEY" /* SIGNING_KEY */), {
-    expiresIn: "2h"
+    expiresIn: "24h"
   });
 }
 function generateRefreshToken(id) {
-  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */));
+  return sign({ id }, getEnv("REFRESH_KEY" /* REFRESH_KEY */), {
+    expiresIn: "365d"
+  });
 }
 function getTokenizedResponse(id) {
   const accessToken = id ? generateAccessToken(id) : void 0;

package/dist/auth/token-store.cjs.js

@@ -0,0 +1,120 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth/token-store.ts
+var token_store_exports = {};
+__export(token_store_exports, {
+  getAccessToken: () => getAccessToken,
+  refreshAccessToken: () => refreshAccessToken,
+  setAccessToken: () => setAccessToken,
+  subscribeToAccessToken: () => subscribeToAccessToken
+});
+module.exports = __toCommonJS(token_store_exports);
+
+// src/env.ts
+var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
+var getEnvValue = (key) => {
+  switch (key) {
+    case "NEXT_PUBLIC_GRAPHQL_ENDPOINT" /* NEXT_PUBLIC_GRAPHQL_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_GRAPHQL_ENDPOINT || EXTRA_ENV.GRAPHQL_ENDPOINT;
+    case "NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT || EXTRA_ENV.EMAIL_AUTH_ENDPOINT;
+    case "NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT" /* NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT || EXTRA_ENV.GOOGLE_AUTH_ENDPOINT;
+    case "NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT || EXTRA_ENV.INSTAGRAM_AUTH_ENDPOINT;
+    case "NEXT_PUBLIC_FILE_ENDPOINT" /* NEXT_PUBLIC_FILE_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_FILE_ENDPOINT || EXTRA_ENV.FILE_ENDPOINT;
+    case "NEXT_PUBLIC_BASE_URL" /* NEXT_PUBLIC_BASE_URL */:
+      return process.env.NEXT_PUBLIC_BASE_URL || EXTRA_ENV.BASE_URL;
+    case "REFRESH_KEY" /* REFRESH_KEY */:
+      return process.env.REFRESH_KEY;
+    case "SIGNING_KEY" /* SIGNING_KEY */:
+      return process.env.SIGNING_KEY;
+    case "INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */:
+      return process.env.INSTAGRAM_CLIENT_SECRET;
+    case "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */:
+      return process.env.INSTAGRAM_CLIENT_ID;
+    case "GOOGLE_CLIENT_SECRET" /* GOOGLE_CLIENT_SECRET */:
+      return process.env.GOOGLE_CLIENT_SECRET;
+    case "GOOGLE_CLIENT_ID" /* GOOGLE_CLIENT_ID */:
+      return process.env.GOOGLE_CLIENT_ID;
+    case "TURNSTILE_KEY" /* TURNSTILE_KEY */:
+      return process.env.TURNSTILE_KEY;
+    case "S3_ACCESS_KEY_ID" /* S3_ACCESS_KEY_ID */:
+      return process.env.S3_ACCESS_KEY_ID;
+    case "S3_ACCESS_KEY_SECRET" /* S3_ACCESS_KEY_SECRET */:
+      return process.env.S3_ACCESS_KEY_SECRET;
+    case "S3_REGION" /* S3_REGION */:
+      return process.env.S3_REGION;
+    case "S3_BUCKET" /* S3_BUCKET */:
+      return process.env.S3_BUCKET;
+    case "NODE_ENV" /* NODE_ENV */:
+      return process.env.NODE_ENV;
+    default:
+      return process.env[key];
+  }
+};
+function getEnv(key, skipCheck) {
+  const value = getEnvValue(key);
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
+// src/auth/token-store.ts
+var currentToken;
+var listeners = /* @__PURE__ */ new Set();
+var inFlightRefresh = null;
+function getAccessToken() {
+  return currentToken;
+}
+function setAccessToken(token) {
+  if (token === currentToken) return;
+  currentToken = token;
+  listeners.forEach((listener) => listener(token));
+}
+function subscribeToAccessToken(listener) {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+}
+function refreshAccessToken() {
+  if (inFlightRefresh) return inFlightRefresh;
+  inFlightRefresh = (async () => {
+    const res = await fetch(
+      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
+      { credentials: "include" }
+    );
+    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
+    const token = await res.text() || null;
+    setAccessToken(token);
+    return token;
+  })().finally(() => {
+    inFlightRefresh = null;
+  });
+  return inFlightRefresh;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  getAccessToken,
+  refreshAccessToken,
+  setAccessToken,
+  subscribeToAccessToken
+});

package/dist/auth/token-store.d.mts

@@ -0,0 +1,42 @@
+/**
+ * Reads the current access token synchronously, outside React.
+ * Used by the Apollo auth link; components should use `useToken()`.
+ *
+ * @returns The access token, `null` when logged out, or `undefined` before the first fetch resolves.
+ * @category Auth
+ */
+declare function getAccessToken(): string | null | undefined;
+/**
+ * Writes the access token and notifies subscribers (which updates `TokenContext`).
+ *
+ * @param token - New token, or `null` to clear the session.
+ * @category Auth
+ */
+declare function setAccessToken(token: string | null | undefined): void;
+/**
+ * Subscribes to token changes. `AuthWrapper` uses this to mirror the store into React state.
+ *
+ * @param listener - Called with the new token on every change.
+ * @returns Unsubscribe function.
+ * @category Auth
+ */
+declare function subscribeToAccessToken(listener: (token: string | null | undefined) => void): () => void;
+/**
+ * Exchanges the httpOnly refresh cookie for a fresh access token via the auth endpoint,
+ * and stores the result. Concurrent callers share one request.
+ *
+ * The auth endpoint answers 200 in both directions, so the body is the signal:
+ * a token means the session is alive, an empty body means the refresh cookie is
+ * gone or expired and the user is logged out (which clears the token, and in turn
+ * trips `ClearStoreOnLogout`).
+ *
+ * A transport failure (offline, 5xx) rejects **without** clearing the token — a
+ * flaky network shouldn't end a valid session.
+ *
+ * @returns The new access token, or `null` if the session has ended.
+ * @throws If the request fails at the transport level or the endpoint returns non-2xx.
+ * @category Auth
+ */
+declare function refreshAccessToken(): Promise<string | null>;
+
+export { getAccessToken, refreshAccessToken, setAccessToken, subscribeToAccessToken };

package/dist/auth/token-store.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Reads the current access token synchronously, outside React.
+ * Used by the Apollo auth link; components should use `useToken()`.
+ *
+ * @returns The access token, `null` when logged out, or `undefined` before the first fetch resolves.
+ * @category Auth
+ */
+declare function getAccessToken(): string | null | undefined;
+/**
+ * Writes the access token and notifies subscribers (which updates `TokenContext`).
+ *
+ * @param token - New token, or `null` to clear the session.
+ * @category Auth
+ */
+declare function setAccessToken(token: string | null | undefined): void;
+/**
+ * Subscribes to token changes. `AuthWrapper` uses this to mirror the store into React state.
+ *
+ * @param listener - Called with the new token on every change.
+ * @returns Unsubscribe function.
+ * @category Auth
+ */
+declare function subscribeToAccessToken(listener: (token: string | null | undefined) => void): () => void;
+/**
+ * Exchanges the httpOnly refresh cookie for a fresh access token via the auth endpoint,
+ * and stores the result. Concurrent callers share one request.
+ *
+ * The auth endpoint answers 200 in both directions, so the body is the signal:
+ * a token means the session is alive, an empty body means the refresh cookie is
+ * gone or expired and the user is logged out (which clears the token, and in turn
+ * trips `ClearStoreOnLogout`).
+ *
+ * A transport failure (offline, 5xx) rejects **without** clearing the token — a
+ * flaky network shouldn't end a valid session.
+ *
+ * @returns The new access token, or `null` if the session has ended.
+ * @throws If the request fails at the transport level or the endpoint returns non-2xx.
+ * @category Auth
+ */
+declare function refreshAccessToken(): Promise<string | null>;
+
+export { getAccessToken, refreshAccessToken, setAccessToken, subscribeToAccessToken };

package/dist/auth/token-store.esm.js

@@ -0,0 +1,90 @@
+// src/env.ts
+var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
+var getEnvValue = (key) => {
+  switch (key) {
+    case "NEXT_PUBLIC_GRAPHQL_ENDPOINT" /* NEXT_PUBLIC_GRAPHQL_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_GRAPHQL_ENDPOINT || EXTRA_ENV.GRAPHQL_ENDPOINT;
+    case "NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT || EXTRA_ENV.EMAIL_AUTH_ENDPOINT;
+    case "NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT" /* NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT || EXTRA_ENV.GOOGLE_AUTH_ENDPOINT;
+    case "NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT || EXTRA_ENV.INSTAGRAM_AUTH_ENDPOINT;
+    case "NEXT_PUBLIC_FILE_ENDPOINT" /* NEXT_PUBLIC_FILE_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_FILE_ENDPOINT || EXTRA_ENV.FILE_ENDPOINT;
+    case "NEXT_PUBLIC_BASE_URL" /* NEXT_PUBLIC_BASE_URL */:
+      return process.env.NEXT_PUBLIC_BASE_URL || EXTRA_ENV.BASE_URL;
+    case "REFRESH_KEY" /* REFRESH_KEY */:
+      return process.env.REFRESH_KEY;
+    case "SIGNING_KEY" /* SIGNING_KEY */:
+      return process.env.SIGNING_KEY;
+    case "INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */:
+      return process.env.INSTAGRAM_CLIENT_SECRET;
+    case "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */:
+      return process.env.INSTAGRAM_CLIENT_ID;
+    case "GOOGLE_CLIENT_SECRET" /* GOOGLE_CLIENT_SECRET */:
+      return process.env.GOOGLE_CLIENT_SECRET;
+    case "GOOGLE_CLIENT_ID" /* GOOGLE_CLIENT_ID */:
+      return process.env.GOOGLE_CLIENT_ID;
+    case "TURNSTILE_KEY" /* TURNSTILE_KEY */:
+      return process.env.TURNSTILE_KEY;
+    case "S3_ACCESS_KEY_ID" /* S3_ACCESS_KEY_ID */:
+      return process.env.S3_ACCESS_KEY_ID;
+    case "S3_ACCESS_KEY_SECRET" /* S3_ACCESS_KEY_SECRET */:
+      return process.env.S3_ACCESS_KEY_SECRET;
+    case "S3_REGION" /* S3_REGION */:
+      return process.env.S3_REGION;
+    case "S3_BUCKET" /* S3_BUCKET */:
+      return process.env.S3_BUCKET;
+    case "NODE_ENV" /* NODE_ENV */:
+      return process.env.NODE_ENV;
+    default:
+      return process.env[key];
+  }
+};
+function getEnv(key, skipCheck) {
+  const value = getEnvValue(key);
+  if (!skipCheck && !value) throw new Error(`${key} is not defined`);
+  return value;
+}
+
+// src/auth/token-store.ts
+var currentToken;
+var listeners = /* @__PURE__ */ new Set();
+var inFlightRefresh = null;
+function getAccessToken() {
+  return currentToken;
+}
+function setAccessToken(token) {
+  if (token === currentToken) return;
+  currentToken = token;
+  listeners.forEach((listener) => listener(token));
+}
+function subscribeToAccessToken(listener) {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+}
+function refreshAccessToken() {
+  if (inFlightRefresh) return inFlightRefresh;
+  inFlightRefresh = (async () => {
+    const res = await fetch(
+      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
+      { credentials: "include" }
+    );
+    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
+    const token = await res.text() || null;
+    setAccessToken(token);
+    return token;
+  })().finally(() => {
+    inFlightRefresh = null;
+  });
+  return inFlightRefresh;
+}
+export {
+  getAccessToken,
+  refreshAccessToken,
+  setAccessToken,
+  subscribeToAccessToken
+};

package/dist/graphql/clear-store.cjs.js

@@ -0,0 +1,47 @@
+"use strict";
+"use client";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/graphql/clear-store.tsx
+var clear_store_exports = {};
+__export(clear_store_exports, {
+  ClearStoreOnLogout: () => ClearStoreOnLogout
+});
+module.exports = __toCommonJS(clear_store_exports);
+var import_client = require("@apollo/client");
+var import_client2 = require("naystack/auth/client");
+var import_react = require("react");
+function ClearStoreOnLogout() {
+  const client = (0, import_client.useApolloClient)();
+  const token = (0, import_client2.useToken)();
+  const hadToken = (0, import_react.useRef)(false);
+  (0, import_react.useEffect)(() => {
+    if (token) {
+      hadToken.current = true;
+    } else if (token === null && hadToken.current) {
+      hadToken.current = false;
+      void client.clearStore();
+    }
+  }, [client, token]);
+  return null;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ClearStoreOnLogout
+});

package/dist/graphql/clear-store.d.mts

@@ -0,0 +1,16 @@
+/**
+ * Clears the Apollo cache on logout so a subsequent login can't read the
+ * previous user's cached data. Mount inside an `ApolloProvider` — both the
+ * native (`ApolloWrapper` in `graphql/client`) and Next (`graphql/next`)
+ * wrappers render it, so any query that opts into a cache-reading `fetchPolicy`
+ * is safe across account switches without per-call-site cleanup.
+ *
+ * Keyed on the token transitioning to `null` (logout / session loss). Same-user
+ * access-token refreshes go string→string and never pass through `null`, so the
+ * cache survives them; only a real logout empties the store. Renders nothing.
+ *
+ * @category GraphQL
+ */
+declare function ClearStoreOnLogout(): null;
+
+export { ClearStoreOnLogout };

package/dist/graphql/clear-store.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Clears the Apollo cache on logout so a subsequent login can't read the
+ * previous user's cached data. Mount inside an `ApolloProvider` — both the
+ * native (`ApolloWrapper` in `graphql/client`) and Next (`graphql/next`)
+ * wrappers render it, so any query that opts into a cache-reading `fetchPolicy`
+ * is safe across account switches without per-call-site cleanup.
+ *
+ * Keyed on the token transitioning to `null` (logout / session loss). Same-user
+ * access-token refreshes go string→string and never pass through `null`, so the
+ * cache survives them; only a real logout empties the store. Renders nothing.
+ *
+ * @category GraphQL
+ */
+declare function ClearStoreOnLogout(): null;
+
+export { ClearStoreOnLogout };

package/dist/graphql/clear-store.esm.js

@@ -0,0 +1,23 @@
+"use client";
+
+// src/graphql/clear-store.tsx
+import { useApolloClient } from "@apollo/client";
+import { useToken } from "naystack/auth/client";
+import { useEffect, useRef } from "react";
+function ClearStoreOnLogout() {
+  const client = useApolloClient();
+  const token = useToken();
+  const hadToken = useRef(false);
+  useEffect(() => {
+    if (token) {
+      hadToken.current = true;
+    } else if (token === null && hadToken.current) {
+      hadToken.current = false;
+      void client.clearStore();
+    }
+  }, [client, token]);
+  return null;
+}
+export {
+  ClearStoreOnLogout
+};