npm - naystack - Versions diffs - 1.8.7 → 1.8.8 - Mend

naystack 1.8.7 → 1.8.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (15) hide show

package/dist/auth/index.cjs.js +31 -5
package/dist/auth/index.d.mts +1 -1
package/dist/auth/index.d.ts +1 -1
package/dist/auth/index.esm.js +30 -5
package/dist/auth/instagram/index.cjs.js +31 -5
package/dist/auth/instagram/index.d.mts +3 -3
package/dist/auth/instagram/index.d.ts +3 -3
package/dist/auth/instagram/index.esm.js +30 -5
package/dist/auth/instagram/route.cjs.js +29 -5
package/dist/auth/instagram/route.esm.js +29 -5
package/dist/auth/instagram/utils.cjs.js +23 -0
package/dist/auth/instagram/utils.d.mts +19 -1
package/dist/auth/instagram/utils.d.ts +19 -1
package/dist/auth/instagram/utils.esm.js +24 -0
package/package.json +1 -1

package/dist/auth/index.cjs.js CHANGED Viewed

@@ -33,6 +33,7 @@ __export(auth_exports, {
   AuthFetch: () => AuthFetch,
   AuthWrapper: () => AuthWrapper,
   checkAuthStatus: () => checkAuthStatus,
+  getAuthorizationHandoff: () => getAuthorizationHandoff,
   getContext: () => getContext,
   getInstagramAuthorizationURL: () => getInstagramAuthorizationURL,
   getRefreshToken: () => getRefreshToken,
@@ -575,9 +576,30 @@ function setupGoogleAuth(props) {
 }
 // src/auth/instagram/route.ts
-var import_server8 = require("next/server");
+var import_server9 = require("next/server");
 // src/auth/instagram/utils.ts
+var import_server7 = require("next/server");
+var HANDOFF_DELAY_MS = 1500;
+function getAuthorizationHandoff(authorizationURL, providerName) {
+  const scriptSafeURL = JSON.stringify(authorizationURL).replace(
+    /</g,
+    "\\u003c"
+  );
+  const attributeSafeURL = authorizationURL.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;");
+  const safeProviderName = providerName.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return new import_server7.NextResponse(
+    `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>Redirecting to ${safeProviderName}\u2026</title><style>body{margin:0;min-height:100dvh;display:flex;align-items:center;justify-content:center;font:500 15px/1.5 system-ui,-apple-system,sans-serif;color:#111}</style><script>setTimeout(function(){location.replace(${scriptSafeURL})},${HANDOFF_DELAY_MS})</script><noscript><meta http-equiv="refresh" content="2;url=${attributeSafeURL}"></noscript></head><body><p>Redirecting to ${safeProviderName}\u2026</p></body></html>`,
+    {
+      headers: {
+        "content-type": "text/html; charset=utf-8",
+        "cache-control": "no-store",
+        // The token is in the URL; keep it off the provider's referer log.
+        "referrer-policy": "no-referrer"
+      }
+    }
+  );
+}
 async function getRefreshedInstagramAccessToken(token) {
   const request = await fetch(
     `https://graph.instagram.com/refresh_access_token?grant_type=ig_refresh_token&access_token=${token}`
@@ -640,7 +662,7 @@ var getInstagramUser = (token, id, fields) => {
 };
 // src/socials/meta-webhook.ts
-var import_server7 = require("next/server");
+var import_server8 = require("next/server");
 // src/auth/instagram/route.ts
 var getInstagramRoute = ({
@@ -648,7 +670,7 @@ var getInstagramRoute = ({
   errorRedirectURL,
   onUser
 }) => {
-  const handleError2 = (message) => import_server8.NextResponse.redirect(`${errorRedirectURL}?error=${message}`);
+  const handleError2 = (message) => import_server9.NextResponse.redirect(`${errorRedirectURL}?error=${message}`);
   return async (req) => {
     const accessCode = req.nextUrl.searchParams.get("code");
     const error = req.nextUrl.searchParams.get("error");
@@ -656,7 +678,10 @@ var getInstagramRoute = ({
     if (error) return handleError2(error);
     if (!accessCode) {
       if (!stateToken) return handleError2("Invalid request");
-      return import_server8.NextResponse.redirect(getInstagramAuthorizationURL(stateToken), 302);
+      return getAuthorizationHandoff(
+        getInstagramAuthorizationURL(stateToken),
+        "Instagram"
+      );
     }
     if (!stateToken) return handleError2("Invalid request");
     const instagramData = await getLongLivedToken(
@@ -676,7 +701,7 @@ var getInstagramRoute = ({
       instagramData.accessToken
     );
     if (errorMessage) return handleError2(errorMessage);
-    return import_server8.NextResponse.redirect(redirectURL);
+    return import_server9.NextResponse.redirect(redirectURL);
   };
 };
@@ -698,6 +723,7 @@ async function getRefreshToken() {
   AuthFetch,
   AuthWrapper,
   checkAuthStatus,
+  getAuthorizationHandoff,
   getContext,
   getInstagramAuthorizationURL,
   getRefreshToken,

package/dist/auth/index.d.mts CHANGED Viewed

@@ -5,7 +5,7 @@ export { getRefreshToken } from './utils/token.mjs';
 export { AuthFetch, AuthWrapper } from './email/next.mjs';
 export { checkAuthStatus, getTokenizedResponse } from './email/token.mjs';
 export { getContext } from './email/utils.mjs';
-export { getInstagramAuthorizationURL, getRefreshedInstagramAccessToken } from './instagram/utils.mjs';
+export { getAuthorizationHandoff, getInstagramAuthorizationURL, getRefreshedInstagramAccessToken } from './instagram/utils.mjs';
 import 'next/server';
 import './email/types.mjs';
 import './types.mjs';

package/dist/auth/index.d.ts CHANGED Viewed

@@ -5,7 +5,7 @@ export { getRefreshToken } from './utils/token.js';
 export { AuthFetch, AuthWrapper } from './email/next.js';
 export { checkAuthStatus, getTokenizedResponse } from './email/token.js';
 export { getContext } from './email/utils.js';
-export { getInstagramAuthorizationURL, getRefreshedInstagramAccessToken } from './instagram/utils.js';
+export { getAuthorizationHandoff, getInstagramAuthorizationURL, getRefreshedInstagramAccessToken } from './instagram/utils.js';
 import 'next/server';
 import './email/types.js';
 import './types.js';

package/dist/auth/index.esm.js CHANGED Viewed

@@ -533,9 +533,30 @@ function setupGoogleAuth(props) {
 }
 // src/auth/instagram/route.ts
-import { NextResponse as NextResponse7 } from "next/server";
+import { NextResponse as NextResponse8 } from "next/server";
 // src/auth/instagram/utils.ts
+import { NextResponse as NextResponse6 } from "next/server";
+var HANDOFF_DELAY_MS = 1500;
+function getAuthorizationHandoff(authorizationURL, providerName) {
+  const scriptSafeURL = JSON.stringify(authorizationURL).replace(
+    /</g,
+    "\\u003c"
+  );
+  const attributeSafeURL = authorizationURL.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;");
+  const safeProviderName = providerName.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return new NextResponse6(
+    `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>Redirecting to ${safeProviderName}\u2026</title><style>body{margin:0;min-height:100dvh;display:flex;align-items:center;justify-content:center;font:500 15px/1.5 system-ui,-apple-system,sans-serif;color:#111}</style><script>setTimeout(function(){location.replace(${scriptSafeURL})},${HANDOFF_DELAY_MS})</script><noscript><meta http-equiv="refresh" content="2;url=${attributeSafeURL}"></noscript></head><body><p>Redirecting to ${safeProviderName}\u2026</p></body></html>`,
+    {
+      headers: {
+        "content-type": "text/html; charset=utf-8",
+        "cache-control": "no-store",
+        // The token is in the URL; keep it off the provider's referer log.
+        "referrer-policy": "no-referrer"
+      }
+    }
+  );
+}
 async function getRefreshedInstagramAccessToken(token) {
   const request = await fetch(
     `https://graph.instagram.com/refresh_access_token?grant_type=ig_refresh_token&access_token=${token}`
@@ -598,7 +619,7 @@ var getInstagramUser = (token, id, fields) => {
 };
 // src/socials/meta-webhook.ts
-import { NextResponse as NextResponse6 } from "next/server";
+import { NextResponse as NextResponse7 } from "next/server";
 // src/auth/instagram/route.ts
 var getInstagramRoute = ({
@@ -606,7 +627,7 @@ var getInstagramRoute = ({
   errorRedirectURL,
   onUser
 }) => {
-  const handleError2 = (message) => NextResponse7.redirect(`${errorRedirectURL}?error=${message}`);
+  const handleError2 = (message) => NextResponse8.redirect(`${errorRedirectURL}?error=${message}`);
   return async (req) => {
     const accessCode = req.nextUrl.searchParams.get("code");
     const error = req.nextUrl.searchParams.get("error");
@@ -614,7 +635,10 @@ var getInstagramRoute = ({
     if (error) return handleError2(error);
     if (!accessCode) {
       if (!stateToken) return handleError2("Invalid request");
-      return NextResponse7.redirect(getInstagramAuthorizationURL(stateToken), 302);
+      return getAuthorizationHandoff(
+        getInstagramAuthorizationURL(stateToken),
+        "Instagram"
+      );
     }
     if (!stateToken) return handleError2("Invalid request");
     const instagramData = await getLongLivedToken(
@@ -634,7 +658,7 @@ var getInstagramRoute = ({
       instagramData.accessToken
     );
     if (errorMessage) return handleError2(errorMessage);
-    return NextResponse7.redirect(redirectURL);
+    return NextResponse8.redirect(redirectURL);
   };
 };
@@ -655,6 +679,7 @@ export {
   AuthFetch,
   AuthWrapper,
   checkAuthStatus,
+  getAuthorizationHandoff,
   getContext,
   getInstagramAuthorizationURL,
   getRefreshToken,

package/dist/auth/instagram/index.cjs.js CHANGED Viewed

@@ -20,6 +20,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/auth/instagram/index.ts
 var instagram_exports = {};
 __export(instagram_exports, {
+  getAuthorizationHandoff: () => getAuthorizationHandoff,
   getInstagramAuthorizationURL: () => getInstagramAuthorizationURL,
   getRefreshedInstagramAccessToken: () => getRefreshedInstagramAccessToken,
   setupInstagramAuth: () => setupInstagramAuth
@@ -27,7 +28,7 @@ __export(instagram_exports, {
 module.exports = __toCommonJS(instagram_exports);
 // src/auth/instagram/route.ts
-var import_server3 = require("next/server");
+var import_server4 = require("next/server");
 // src/auth/email/token.ts
 var import_bcryptjs = require("bcryptjs");
@@ -101,6 +102,27 @@ function getUserIdFromAccessToken(accessToken) {
 }
 // src/auth/instagram/utils.ts
+var import_server2 = require("next/server");
+var HANDOFF_DELAY_MS = 1500;
+function getAuthorizationHandoff(authorizationURL, providerName) {
+  const scriptSafeURL = JSON.stringify(authorizationURL).replace(
+    /</g,
+    "\\u003c"
+  );
+  const attributeSafeURL = authorizationURL.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;");
+  const safeProviderName = providerName.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return new import_server2.NextResponse(
+    `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>Redirecting to ${safeProviderName}\u2026</title><style>body{margin:0;min-height:100dvh;display:flex;align-items:center;justify-content:center;font:500 15px/1.5 system-ui,-apple-system,sans-serif;color:#111}</style><script>setTimeout(function(){location.replace(${scriptSafeURL})},${HANDOFF_DELAY_MS})</script><noscript><meta http-equiv="refresh" content="2;url=${attributeSafeURL}"></noscript></head><body><p>Redirecting to ${safeProviderName}\u2026</p></body></html>`,
+    {
+      headers: {
+        "content-type": "text/html; charset=utf-8",
+        "cache-control": "no-store",
+        // The token is in the URL; keep it off the provider's referer log.
+        "referrer-policy": "no-referrer"
+      }
+    }
+  );
+}
 async function getRefreshedInstagramAccessToken(token) {
   const request = await fetch(
     `https://graph.instagram.com/refresh_access_token?grant_type=ig_refresh_token&access_token=${token}`
@@ -163,7 +185,7 @@ var getInstagramUser = (token, id, fields) => {
 };
 // src/socials/meta-webhook.ts
-var import_server2 = require("next/server");
+var import_server3 = require("next/server");
 // src/auth/instagram/route.ts
 var getInstagramRoute = ({
@@ -171,7 +193,7 @@ var getInstagramRoute = ({
   errorRedirectURL,
   onUser
 }) => {
-  const handleError = (message) => import_server3.NextResponse.redirect(`${errorRedirectURL}?error=${message}`);
+  const handleError = (message) => import_server4.NextResponse.redirect(`${errorRedirectURL}?error=${message}`);
   return async (req) => {
     const accessCode = req.nextUrl.searchParams.get("code");
     const error = req.nextUrl.searchParams.get("error");
@@ -179,7 +201,10 @@ var getInstagramRoute = ({
     if (error) return handleError(error);
     if (!accessCode) {
       if (!stateToken) return handleError("Invalid request");
-      return import_server3.NextResponse.redirect(getInstagramAuthorizationURL(stateToken), 302);
+      return getAuthorizationHandoff(
+        getInstagramAuthorizationURL(stateToken),
+        "Instagram"
+      );
     }
     if (!stateToken) return handleError("Invalid request");
     const instagramData = await getLongLivedToken(
@@ -199,7 +224,7 @@ var getInstagramRoute = ({
       instagramData.accessToken
     );
     if (errorMessage) return handleError(errorMessage);
-    return import_server3.NextResponse.redirect(redirectURL);
+    return import_server4.NextResponse.redirect(redirectURL);
   };
 };
@@ -211,6 +236,7 @@ function setupInstagramAuth(props) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  getAuthorizationHandoff,
   getInstagramAuthorizationURL,
   getRefreshedInstagramAccessToken,
   setupInstagramAuth

package/dist/auth/instagram/index.d.mts CHANGED Viewed

@@ -1,5 +1,5 @@
 import * as next_server from 'next/server';
-export { getInstagramAuthorizationURL, getRefreshedInstagramAccessToken } from './utils.mjs';
+export { getAuthorizationHandoff, getInstagramAuthorizationURL, getRefreshedInstagramAccessToken } from './utils.mjs';
 import { InstagramUser } from '../../socials/instagram/types.mjs';
 /**
@@ -22,8 +22,8 @@ interface SetupInstagramAuthOptions {
  * Mount the GET handler on your Instagram auth route (e.g. `app/api/(auth)/instagram/route.ts`).
  *
  * The single GET handler serves both the OAuth callback (`?code`) and the connect
- * entry point (`?state` with no code → 302 to Instagram's authorize URL; see
- * {@link getInstagramAuthorizationURL} for why that URL is spelled the way it is).
+ * entry point (`?state` with no code → an interstitial page that waits, then jumps
+ * to Instagram's authorize URL; see {@link getAuthorizationHandoff}).
  *
  * Requires env vars: `INSTAGRAM_CLIENT_ID` (server-only), `INSTAGRAM_CLIENT_SECRET`, `NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT`.
  *

package/dist/auth/instagram/index.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 import * as next_server from 'next/server';
-export { getInstagramAuthorizationURL, getRefreshedInstagramAccessToken } from './utils.js';
+export { getAuthorizationHandoff, getInstagramAuthorizationURL, getRefreshedInstagramAccessToken } from './utils.js';
 import { InstagramUser } from '../../socials/instagram/types.js';
 /**
@@ -22,8 +22,8 @@ interface SetupInstagramAuthOptions {
  * Mount the GET handler on your Instagram auth route (e.g. `app/api/(auth)/instagram/route.ts`).
  *
  * The single GET handler serves both the OAuth callback (`?code`) and the connect
- * entry point (`?state` with no code → 302 to Instagram's authorize URL; see
- * {@link getInstagramAuthorizationURL} for why that URL is spelled the way it is).
+ * entry point (`?state` with no code → an interstitial page that waits, then jumps
+ * to Instagram's authorize URL; see {@link getAuthorizationHandoff}).
  *
  * Requires env vars: `INSTAGRAM_CLIENT_ID` (server-only), `INSTAGRAM_CLIENT_SECRET`, `NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT`.
  *

package/dist/auth/instagram/index.esm.js CHANGED Viewed

@@ -1,5 +1,5 @@
 // src/auth/instagram/route.ts
-import { NextResponse as NextResponse3 } from "next/server";
+import { NextResponse as NextResponse4 } from "next/server";
 // src/auth/email/token.ts
 import { compare } from "bcryptjs";
@@ -73,6 +73,27 @@ function getUserIdFromAccessToken(accessToken) {
 }
 // src/auth/instagram/utils.ts
+import { NextResponse as NextResponse2 } from "next/server";
+var HANDOFF_DELAY_MS = 1500;
+function getAuthorizationHandoff(authorizationURL, providerName) {
+  const scriptSafeURL = JSON.stringify(authorizationURL).replace(
+    /</g,
+    "\\u003c"
+  );
+  const attributeSafeURL = authorizationURL.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;");
+  const safeProviderName = providerName.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return new NextResponse2(
+    `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>Redirecting to ${safeProviderName}\u2026</title><style>body{margin:0;min-height:100dvh;display:flex;align-items:center;justify-content:center;font:500 15px/1.5 system-ui,-apple-system,sans-serif;color:#111}</style><script>setTimeout(function(){location.replace(${scriptSafeURL})},${HANDOFF_DELAY_MS})</script><noscript><meta http-equiv="refresh" content="2;url=${attributeSafeURL}"></noscript></head><body><p>Redirecting to ${safeProviderName}\u2026</p></body></html>`,
+    {
+      headers: {
+        "content-type": "text/html; charset=utf-8",
+        "cache-control": "no-store",
+        // The token is in the URL; keep it off the provider's referer log.
+        "referrer-policy": "no-referrer"
+      }
+    }
+  );
+}
 async function getRefreshedInstagramAccessToken(token) {
   const request = await fetch(
     `https://graph.instagram.com/refresh_access_token?grant_type=ig_refresh_token&access_token=${token}`
@@ -135,7 +156,7 @@ var getInstagramUser = (token, id, fields) => {
 };
 // src/socials/meta-webhook.ts
-import { NextResponse as NextResponse2 } from "next/server";
+import { NextResponse as NextResponse3 } from "next/server";
 // src/auth/instagram/route.ts
 var getInstagramRoute = ({
@@ -143,7 +164,7 @@ var getInstagramRoute = ({
   errorRedirectURL,
   onUser
 }) => {
-  const handleError = (message) => NextResponse3.redirect(`${errorRedirectURL}?error=${message}`);
+  const handleError = (message) => NextResponse4.redirect(`${errorRedirectURL}?error=${message}`);
   return async (req) => {
     const accessCode = req.nextUrl.searchParams.get("code");
     const error = req.nextUrl.searchParams.get("error");
@@ -151,7 +172,10 @@ var getInstagramRoute = ({
     if (error) return handleError(error);
     if (!accessCode) {
       if (!stateToken) return handleError("Invalid request");
-      return NextResponse3.redirect(getInstagramAuthorizationURL(stateToken), 302);
+      return getAuthorizationHandoff(
+        getInstagramAuthorizationURL(stateToken),
+        "Instagram"
+      );
     }
     if (!stateToken) return handleError("Invalid request");
     const instagramData = await getLongLivedToken(
@@ -171,7 +195,7 @@ var getInstagramRoute = ({
       instagramData.accessToken
     );
     if (errorMessage) return handleError(errorMessage);
-    return NextResponse3.redirect(redirectURL);
+    return NextResponse4.redirect(redirectURL);
   };
 };
@@ -182,6 +206,7 @@ function setupInstagramAuth(props) {
   };
 }
 export {
+  getAuthorizationHandoff,
   getInstagramAuthorizationURL,
   getRefreshedInstagramAccessToken,
   setupInstagramAuth

package/dist/auth/instagram/route.cjs.js CHANGED Viewed

@@ -23,7 +23,7 @@ __export(route_exports, {
   getInstagramRoute: () => getInstagramRoute
 });
 module.exports = __toCommonJS(route_exports);
-var import_server3 = require("next/server");
+var import_server4 = require("next/server");
 // src/auth/email/token.ts
 var import_bcryptjs = require("bcryptjs");
@@ -97,6 +97,27 @@ function getUserIdFromAccessToken(accessToken) {
 }
 // src/auth/instagram/utils.ts
+var import_server2 = require("next/server");
+var HANDOFF_DELAY_MS = 1500;
+function getAuthorizationHandoff(authorizationURL, providerName) {
+  const scriptSafeURL = JSON.stringify(authorizationURL).replace(
+    /</g,
+    "\\u003c"
+  );
+  const attributeSafeURL = authorizationURL.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;");
+  const safeProviderName = providerName.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return new import_server2.NextResponse(
+    `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>Redirecting to ${safeProviderName}\u2026</title><style>body{margin:0;min-height:100dvh;display:flex;align-items:center;justify-content:center;font:500 15px/1.5 system-ui,-apple-system,sans-serif;color:#111}</style><script>setTimeout(function(){location.replace(${scriptSafeURL})},${HANDOFF_DELAY_MS})</script><noscript><meta http-equiv="refresh" content="2;url=${attributeSafeURL}"></noscript></head><body><p>Redirecting to ${safeProviderName}\u2026</p></body></html>`,
+    {
+      headers: {
+        "content-type": "text/html; charset=utf-8",
+        "cache-control": "no-store",
+        // The token is in the URL; keep it off the provider's referer log.
+        "referrer-policy": "no-referrer"
+      }
+    }
+  );
+}
 async function getLongLivedToken(code, redirectURL, clientId, clientSecret) {
   const formData = new FormData();
   formData.set("client_id", clientId);
@@ -152,7 +173,7 @@ var getInstagramUser = (token, id, fields) => {
 };
 // src/socials/meta-webhook.ts
-var import_server2 = require("next/server");
+var import_server3 = require("next/server");
 // src/auth/instagram/route.ts
 var getInstagramRoute = ({
@@ -160,7 +181,7 @@ var getInstagramRoute = ({
   errorRedirectURL,
   onUser
 }) => {
-  const handleError = (message) => import_server3.NextResponse.redirect(`${errorRedirectURL}?error=${message}`);
+  const handleError = (message) => import_server4.NextResponse.redirect(`${errorRedirectURL}?error=${message}`);
   return async (req) => {
     const accessCode = req.nextUrl.searchParams.get("code");
     const error = req.nextUrl.searchParams.get("error");
@@ -168,7 +189,10 @@ var getInstagramRoute = ({
     if (error) return handleError(error);
     if (!accessCode) {
       if (!stateToken) return handleError("Invalid request");
-      return import_server3.NextResponse.redirect(getInstagramAuthorizationURL(stateToken), 302);
+      return getAuthorizationHandoff(
+        getInstagramAuthorizationURL(stateToken),
+        "Instagram"
+      );
     }
     if (!stateToken) return handleError("Invalid request");
     const instagramData = await getLongLivedToken(
@@ -188,7 +212,7 @@ var getInstagramRoute = ({
       instagramData.accessToken
     );
     if (errorMessage) return handleError(errorMessage);
-    return import_server3.NextResponse.redirect(redirectURL);
+    return import_server4.NextResponse.redirect(redirectURL);
   };
 };
 // Annotate the CommonJS export names for ESM import in node:

package/dist/auth/instagram/route.esm.js CHANGED Viewed

@@ -1,5 +1,5 @@
 // src/auth/instagram/route.ts
-import { NextResponse as NextResponse3 } from "next/server";
+import { NextResponse as NextResponse4 } from "next/server";
 // src/auth/email/token.ts
 import { compare } from "bcryptjs";
@@ -73,6 +73,27 @@ function getUserIdFromAccessToken(accessToken) {
 }
 // src/auth/instagram/utils.ts
+import { NextResponse as NextResponse2 } from "next/server";
+var HANDOFF_DELAY_MS = 1500;
+function getAuthorizationHandoff(authorizationURL, providerName) {
+  const scriptSafeURL = JSON.stringify(authorizationURL).replace(
+    /</g,
+    "\\u003c"
+  );
+  const attributeSafeURL = authorizationURL.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;");
+  const safeProviderName = providerName.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return new NextResponse2(
+    `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>Redirecting to ${safeProviderName}\u2026</title><style>body{margin:0;min-height:100dvh;display:flex;align-items:center;justify-content:center;font:500 15px/1.5 system-ui,-apple-system,sans-serif;color:#111}</style><script>setTimeout(function(){location.replace(${scriptSafeURL})},${HANDOFF_DELAY_MS})</script><noscript><meta http-equiv="refresh" content="2;url=${attributeSafeURL}"></noscript></head><body><p>Redirecting to ${safeProviderName}\u2026</p></body></html>`,
+    {
+      headers: {
+        "content-type": "text/html; charset=utf-8",
+        "cache-control": "no-store",
+        // The token is in the URL; keep it off the provider's referer log.
+        "referrer-policy": "no-referrer"
+      }
+    }
+  );
+}
 async function getLongLivedToken(code, redirectURL, clientId, clientSecret) {
   const formData = new FormData();
   formData.set("client_id", clientId);
@@ -128,7 +149,7 @@ var getInstagramUser = (token, id, fields) => {
 };
 // src/socials/meta-webhook.ts
-import { NextResponse as NextResponse2 } from "next/server";
+import { NextResponse as NextResponse3 } from "next/server";
 // src/auth/instagram/route.ts
 var getInstagramRoute = ({
@@ -136,7 +157,7 @@ var getInstagramRoute = ({
   errorRedirectURL,
   onUser
 }) => {
-  const handleError = (message) => NextResponse3.redirect(`${errorRedirectURL}?error=${message}`);
+  const handleError = (message) => NextResponse4.redirect(`${errorRedirectURL}?error=${message}`);
   return async (req) => {
     const accessCode = req.nextUrl.searchParams.get("code");
     const error = req.nextUrl.searchParams.get("error");
@@ -144,7 +165,10 @@ var getInstagramRoute = ({
     if (error) return handleError(error);
     if (!accessCode) {
       if (!stateToken) return handleError("Invalid request");
-      return NextResponse3.redirect(getInstagramAuthorizationURL(stateToken), 302);
+      return getAuthorizationHandoff(
+        getInstagramAuthorizationURL(stateToken),
+        "Instagram"
+      );
     }
     if (!stateToken) return handleError("Invalid request");
     const instagramData = await getLongLivedToken(
@@ -164,7 +188,7 @@ var getInstagramRoute = ({
       instagramData.accessToken
     );
     if (errorMessage) return handleError(errorMessage);
-    return NextResponse3.redirect(redirectURL);
+    return NextResponse4.redirect(redirectURL);
   };
 };
 export {

package/dist/auth/instagram/utils.cjs.js CHANGED Viewed

@@ -20,11 +20,13 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/auth/instagram/utils.ts
 var utils_exports = {};
 __export(utils_exports, {
+  getAuthorizationHandoff: () => getAuthorizationHandoff,
   getInstagramAuthorizationURL: () => getInstagramAuthorizationURL,
   getLongLivedToken: () => getLongLivedToken,
   getRefreshedInstagramAccessToken: () => getRefreshedInstagramAccessToken
 });
 module.exports = __toCommonJS(utils_exports);
+var import_server = require("next/server");
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
@@ -77,6 +79,26 @@ function getEnv(key, skipCheck) {
 }
 // src/auth/instagram/utils.ts
+var HANDOFF_DELAY_MS = 1500;
+function getAuthorizationHandoff(authorizationURL, providerName) {
+  const scriptSafeURL = JSON.stringify(authorizationURL).replace(
+    /</g,
+    "\\u003c"
+  );
+  const attributeSafeURL = authorizationURL.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;");
+  const safeProviderName = providerName.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return new import_server.NextResponse(
+    `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>Redirecting to ${safeProviderName}\u2026</title><style>body{margin:0;min-height:100dvh;display:flex;align-items:center;justify-content:center;font:500 15px/1.5 system-ui,-apple-system,sans-serif;color:#111}</style><script>setTimeout(function(){location.replace(${scriptSafeURL})},${HANDOFF_DELAY_MS})</script><noscript><meta http-equiv="refresh" content="2;url=${attributeSafeURL}"></noscript></head><body><p>Redirecting to ${safeProviderName}\u2026</p></body></html>`,
+    {
+      headers: {
+        "content-type": "text/html; charset=utf-8",
+        "cache-control": "no-store",
+        // The token is in the URL; keep it off the provider's referer log.
+        "referrer-policy": "no-referrer"
+      }
+    }
+  );
+}
 async function getRefreshedInstagramAccessToken(token) {
   const request = await fetch(
     `https://graph.instagram.com/refresh_access_token?grant_type=ig_refresh_token&access_token=${token}`
@@ -117,6 +139,7 @@ var getInstagramAuthorizationURL = (token) => `https://www.instagram.com/oauth/a
 )}&response_type=code&enable_fb_login=0&force_authentication=1&scope=instagram_business_basic&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}`;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  getAuthorizationHandoff,
   getInstagramAuthorizationURL,
   getLongLivedToken,
   getRefreshedInstagramAccessToken

package/dist/auth/instagram/utils.d.mts CHANGED Viewed

@@ -1,3 +1,21 @@
+import { NextResponse } from 'next/server';
+/**
+ * Builds the interstitial document that carries the browser from our origin to a
+ * provider's authorization page: it renders, waits {@link HANDOFF_DELAY_MS}, then
+ * replaces itself with `authorizationURL`.
+ *
+ * `location.replace` keeps the interstitial out of session history, so Back from
+ * the provider returns to the page that started the flow. The `noscript` meta
+ * refresh is a fallback, not the primary path.
+ *
+ * @param authorizationURL - Provider authorization URL to hand the browser off to
+ * @param providerName - Shown to the user while waiting, e.g. `"Instagram"`
+ * @returns HTML response that redirects client-side after a delay
+ *
+ * @category Auth
+ */
+declare function getAuthorizationHandoff(authorizationURL: string, providerName: string): NextResponse<unknown>;
 /**
  * Exchanges a long-lived Instagram token for a refreshed token.
  * @param token - Current long-lived access token
@@ -43,4 +61,4 @@ declare function getLongLivedToken(code: string, redirectURL: string, clientId:
  */
 declare const getInstagramAuthorizationURL: (token: string) => string;
-export { getInstagramAuthorizationURL, getLongLivedToken, getRefreshedInstagramAccessToken };
+export { getAuthorizationHandoff, getInstagramAuthorizationURL, getLongLivedToken, getRefreshedInstagramAccessToken };

package/dist/auth/instagram/utils.d.ts CHANGED Viewed

@@ -1,3 +1,21 @@
+import { NextResponse } from 'next/server';
+/**
+ * Builds the interstitial document that carries the browser from our origin to a
+ * provider's authorization page: it renders, waits {@link HANDOFF_DELAY_MS}, then
+ * replaces itself with `authorizationURL`.
+ *
+ * `location.replace` keeps the interstitial out of session history, so Back from
+ * the provider returns to the page that started the flow. The `noscript` meta
+ * refresh is a fallback, not the primary path.
+ *
+ * @param authorizationURL - Provider authorization URL to hand the browser off to
+ * @param providerName - Shown to the user while waiting, e.g. `"Instagram"`
+ * @returns HTML response that redirects client-side after a delay
+ *
+ * @category Auth
+ */
+declare function getAuthorizationHandoff(authorizationURL: string, providerName: string): NextResponse<unknown>;
 /**
  * Exchanges a long-lived Instagram token for a refreshed token.
  * @param token - Current long-lived access token
@@ -43,4 +61,4 @@ declare function getLongLivedToken(code: string, redirectURL: string, clientId:
  */
 declare const getInstagramAuthorizationURL: (token: string) => string;
-export { getInstagramAuthorizationURL, getLongLivedToken, getRefreshedInstagramAccessToken };
+export { getAuthorizationHandoff, getInstagramAuthorizationURL, getLongLivedToken, getRefreshedInstagramAccessToken };

package/dist/auth/instagram/utils.esm.js CHANGED Viewed

@@ -1,3 +1,6 @@
+// src/auth/instagram/utils.ts
+import { NextResponse } from "next/server";
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
 var getEnvValue = (key) => {
@@ -49,6 +52,26 @@ function getEnv(key, skipCheck) {
 }
 // src/auth/instagram/utils.ts
+var HANDOFF_DELAY_MS = 1500;
+function getAuthorizationHandoff(authorizationURL, providerName) {
+  const scriptSafeURL = JSON.stringify(authorizationURL).replace(
+    /</g,
+    "\\u003c"
+  );
+  const attributeSafeURL = authorizationURL.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;");
+  const safeProviderName = providerName.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return new NextResponse(
+    `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>Redirecting to ${safeProviderName}\u2026</title><style>body{margin:0;min-height:100dvh;display:flex;align-items:center;justify-content:center;font:500 15px/1.5 system-ui,-apple-system,sans-serif;color:#111}</style><script>setTimeout(function(){location.replace(${scriptSafeURL})},${HANDOFF_DELAY_MS})</script><noscript><meta http-equiv="refresh" content="2;url=${attributeSafeURL}"></noscript></head><body><p>Redirecting to ${safeProviderName}\u2026</p></body></html>`,
+    {
+      headers: {
+        "content-type": "text/html; charset=utf-8",
+        "cache-control": "no-store",
+        // The token is in the URL; keep it off the provider's referer log.
+        "referrer-policy": "no-referrer"
+      }
+    }
+  );
+}
 async function getRefreshedInstagramAccessToken(token) {
   const request = await fetch(
     `https://graph.instagram.com/refresh_access_token?grant_type=ig_refresh_token&access_token=${token}`
@@ -88,6 +111,7 @@ var getInstagramAuthorizationURL = (token) => `https://www.instagram.com/oauth/a
   "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */
 )}&response_type=code&enable_fb_login=0&force_authentication=1&scope=instagram_business_basic&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}`;
 export {
+  getAuthorizationHandoff,
   getInstagramAuthorizationURL,
   getLongLivedToken,
   getRefreshedInstagramAccessToken

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "naystack",
-  "version": "1.8.7",
+  "version": "1.8.8",
   "description": "A stack built with Next + GraphQL + S3 + Auth",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",