next-lite-auth 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 aminuddin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,219 @@
+# next-lite-auth
+
+Lightweight JWT auth for Next.js using static JSON users — no database required.
+
+> **Not for production.** Designed for demos, OSS projects, internal tools, and quick Vercel deployments.
+
+---
+
+## Requirements
+
+- Node.js >= 20
+- Next.js >= 13
+- React >= 18
+- TypeScript
+
+---
+
+## Installation
+
+```bash
+pnpm add next-lite-auth jose
+```
+
+---
+
+## Setup
+
+### 1. Create your auth instance
+
+```ts
+// lib/auth.ts
+import { createLiteAuth } from "next-lite-auth";
+
+export const auth = createLiteAuth({
+  users: [
+    { email: "admin@example.com", password: "secret", role: "admin", name: "Admin" },
+    { email: "user@example.com", password: "pass123", role: "user", name: "User" },
+  ],
+  jwtSecret: process.env.JWT_SECRET!,
+  cookieName: "lite-auth-token", // optional, this is the default
+});
+```
+
+### 2. Add route handlers
+
+```ts
+// app/api/auth/login/route.ts
+import { auth } from "@/lib/auth";
+export const POST = auth.handlers.login;
+
+// app/api/auth/logout/route.ts
+import { auth } from "@/lib/auth";
+export const POST = auth.handlers.logout;
+
+// app/api/auth/me/route.ts
+import { auth } from "@/lib/auth";
+export const GET = auth.handlers.me;
+```
+
+### 3. Add middleware
+
+```ts
+// middleware.ts
+import { auth } from "@/lib/auth";
+
+export default auth.middleware({
+  protect: ["/dashboard", "/settings"],
+  redirectTo: "/login", // optional, default is "/login"
+});
+
+export const config = {
+  matcher: ["/((?!_next|api/auth).*)"],
+};
+```
+
+### 4. Use on the client
+
+```tsx
+"use client";
+
+import { useLiteAuth } from "next-lite-auth/client";
+
+export default function LoginPage() {
+  const { user, loading, login, logout } = useLiteAuth();
+
+  if (loading) return <p>Loading...</p>;
+
+  if (user) {
+    return (
+      <div>
+        <p>Hello, {user.name ?? user.email}</p>
+        <button onClick={logout}>Logout</button>
+      </div>
+    );
+  }
+
+  return (
+    <form
+      onSubmit={async (e) => {
+        e.preventDefault();
+        const form = e.currentTarget;
+        const result = await login({
+          email: form.email.value,
+          password: form.password.value,
+        });
+        if (result.error) alert(result.error);
+      }}
+    >
+      <input name="email" type="email" placeholder="Email" />
+      <input name="password" type="password" placeholder="Password" />
+      <button type="submit">Login</button>
+    </form>
+  );
+}
+```
+
+### 5. Read user on the server
+
+```ts
+// app/dashboard/page.tsx
+import { cookies } from "next/headers";
+import { auth } from "@/lib/auth";
+
+export default async function DashboardPage() {
+  const user = await auth.getUserFromCookies(cookies());
+  return <p>Welcome, {user?.name}</p>;
+}
+```
+
+---
+
+## API Reference
+
+### `createLiteAuth(config)`
+
+| Option | Type | Required | Description |
+|---|---|---|---|
+| `users` | `User[]` | Yes | Hardcoded list of users |
+| `jwtSecret` | `string` | Yes | Secret used to sign JWTs |
+| `cookieName` | `string` | No | Cookie name (default: `"lite-auth-token"`) |
+
+Returns `{ handlers, middleware, getUserFromCookies }`.
+
+---
+
+### `User` type
+
+```ts
+type User = {
+  email: string;
+  password: string;
+  role?: string;
+  name?: string;
+};
+```
+
+---
+
+### `auth.handlers`
+
+| Handler | Method | Route |
+|---|---|---|
+| `login` | POST | `/api/auth/login` |
+| `logout` | POST | `/api/auth/logout` |
+| `me` | GET | `/api/auth/me` |
+
+---
+
+### `auth.middleware(options)`
+
+| Option | Type | Default | Description |
+|---|---|---|---|
+| `protect` | `string[]` | — | Route prefixes to protect |
+| `redirectTo` | `string` | `"/login"` | Where to redirect unauthenticated users |
+
+Appends `?from=<pathname>` to the redirect URL.
+
+---
+
+### `auth.getUserFromCookies(cookies)`
+
+Server-side helper. Accepts Next.js `cookies()` and returns the current `PublicUser` or `null`.
+
+---
+
+### `useLiteAuth(options?)`
+
+Client hook. Fetches `/api/auth/me` on mount.
+
+```ts
+const { user, loading, login, logout } = useLiteAuth({
+  loginPath: "/api/auth/login",   // optional
+  logoutPath: "/api/auth/logout", // optional
+  mePath: "/api/auth/me",         // optional
+});
+```
+
+| Return | Type | Description |
+|---|---|---|
+| `user` | `PublicUser \| null` | Current authenticated user |
+| `loading` | `boolean` | True while fetching session |
+| `login(creds)` | `Promise<{ error?: string }>` | Logs in and sets user state |
+| `logout()` | `Promise<void>` | Clears cookie and user state |
+
+---
+
+## Non-Goals
+
+- OAuth / social login
+- Signup / registration
+- Password reset
+- Role-based access control
+- Production-grade security
+
+---
+
+## License
+
+MIT

package/dist/client.d.mts

@@ -0,0 +1,30 @@
+type User = {
+    email: string;
+    password: string;
+    role?: string;
+    name?: string;
+};
+type PublicUser = Omit<User, "password">;
+
+type LiteAuthState = {
+    user: PublicUser | null;
+    loading: boolean;
+};
+type LoginCredentials = {
+    email: string;
+    password: string;
+};
+type UseLiteAuthReturn = LiteAuthState & {
+    login: (credentials: LoginCredentials) => Promise<{
+        error?: string;
+    }>;
+    logout: () => Promise<void>;
+};
+type UseLiteAuthOptions = {
+    loginPath?: string;
+    logoutPath?: string;
+    mePath?: string;
+};
+declare function useLiteAuth(options?: UseLiteAuthOptions): UseLiteAuthReturn;
+
+export { useLiteAuth };

package/dist/client.d.ts

@@ -0,0 +1,30 @@
+type User = {
+    email: string;
+    password: string;
+    role?: string;
+    name?: string;
+};
+type PublicUser = Omit<User, "password">;
+
+type LiteAuthState = {
+    user: PublicUser | null;
+    loading: boolean;
+};
+type LoginCredentials = {
+    email: string;
+    password: string;
+};
+type UseLiteAuthReturn = LiteAuthState & {
+    login: (credentials: LoginCredentials) => Promise<{
+        error?: string;
+    }>;
+    logout: () => Promise<void>;
+};
+type UseLiteAuthOptions = {
+    loginPath?: string;
+    logoutPath?: string;
+    mePath?: string;
+};
+declare function useLiteAuth(options?: UseLiteAuthOptions): UseLiteAuthReturn;
+
+export { useLiteAuth };

package/dist/client.js

@@ -0,0 +1,63 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/client/index.ts
+var client_exports = {};
+__export(client_exports, {
+  useLiteAuth: () => useLiteAuth
+});
+module.exports = __toCommonJS(client_exports);
+
+// src/client/useLiteAuth.ts
+var import_react = require("react");
+function useLiteAuth(options = {}) {
+  const {
+    loginPath = "/api/auth/login",
+    logoutPath = "/api/auth/logout",
+    mePath = "/api/auth/me"
+  } = options;
+  const [state, setState] = (0, import_react.useState)({ user: null, loading: true });
+  (0, import_react.useEffect)(() => {
+    fetch(mePath).then((r) => r.json()).then(({ user }) => setState({ user: user ?? null, loading: false })).catch(() => setState({ user: null, loading: false }));
+  }, [mePath]);
+  const login = (0, import_react.useCallback)(
+    async ({ email, password }) => {
+      const res = await fetch(loginPath, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ email, password })
+      });
+      const data = await res.json();
+      if (!res.ok) return { error: data.error ?? "Login failed" };
+      setState({ user: data.user, loading: false });
+      return {};
+    },
+    [loginPath]
+  );
+  const logout = (0, import_react.useCallback)(async () => {
+    await fetch(logoutPath, { method: "POST" });
+    setState({ user: null, loading: false });
+  }, [logoutPath]);
+  return { ...state, login, logout };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  useLiteAuth
+});
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client/index.ts","../src/client/useLiteAuth.ts"],"sourcesContent":["export { useLiteAuth } from \"./useLiteAuth\";\n","\"use client\";\n\nimport { useState, useEffect, useCallback } from \"react\";\nimport { PublicUser } from \"../core/types\";\n\ntype LiteAuthState = {\n  user: PublicUser | null;\n  loading: boolean;\n};\n\ntype LoginCredentials = {\n  email: string;\n  password: string;\n};\n\ntype UseLiteAuthReturn = LiteAuthState & {\n  login: (credentials: LoginCredentials) => Promise<{ error?: string }>;\n  logout: () => Promise<void>;\n};\n\ntype UseLiteAuthOptions = {\n  loginPath?: string;\n  logoutPath?: string;\n  mePath?: string;\n};\n\nexport function useLiteAuth(options: UseLiteAuthOptions = {}): UseLiteAuthReturn {\n  const {\n    loginPath = \"/api/auth/login\",\n    logoutPath = \"/api/auth/logout\",\n    mePath = \"/api/auth/me\",\n  } = options;\n\n  const [state, setState] = useState<LiteAuthState>({ user: null, loading: true });\n\n  useEffect(() => {\n    fetch(mePath)\n      .then((r) => r.json())\n      .then(({ user }) => setState({ user: user ?? null, loading: false }))\n      .catch(() => setState({ user: null, loading: false }));\n  }, [mePath]);\n\n  const login = useCallback(\n    async ({ email, password }: LoginCredentials) => {\n      const res = await fetch(loginPath, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ email, password }),\n      });\n      const data = await res.json();\n      if (!res.ok) return { error: data.error ?? \"Login failed\" };\n      setState({ user: data.user, loading: false });\n      return {};\n    },\n    [loginPath]\n  );\n\n  const logout = useCallback(async () => {\n    await fetch(logoutPath, { method: \"POST\" });\n    setState({ user: null, loading: false });\n  }, [logoutPath]);\n\n  return { ...state, login, logout };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACEA,mBAAiD;AAwB1C,SAAS,YAAY,UAA8B,CAAC,GAAsB;AAC/E,QAAM;AAAA,IACJ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX,IAAI;AAEJ,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAwB,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAE/E,8BAAU,MAAM;AACd,UAAM,MAAM,EACT,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EACpB,KAAK,CAAC,EAAE,KAAK,MAAM,SAAS,EAAE,MAAM,QAAQ,MAAM,SAAS,MAAM,CAAC,CAAC,EACnE,MAAM,MAAM,SAAS,EAAE,MAAM,MAAM,SAAS,MAAM,CAAC,CAAC;AAAA,EACzD,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,YAAQ;AAAA,IACZ,OAAO,EAAE,OAAO,SAAS,MAAwB;AAC/C,YAAM,MAAM,MAAM,MAAM,WAAW;AAAA,QACjC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,SAAS,CAAC;AAAA,MAC1C,CAAC;AACD,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAI,CAAC,IAAI,GAAI,QAAO,EAAE,OAAO,KAAK,SAAS,eAAe;AAC1D,eAAS,EAAE,MAAM,KAAK,MAAM,SAAS,MAAM,CAAC;AAC5C,aAAO,CAAC;AAAA,IACV;AAAA,IACA,CAAC,SAAS;AAAA,EACZ;AAEA,QAAM,aAAS,0BAAY,YAAY;AACrC,UAAM,MAAM,YAAY,EAAE,QAAQ,OAAO,CAAC;AAC1C,aAAS,EAAE,MAAM,MAAM,SAAS,MAAM,CAAC;AAAA,EACzC,GAAG,CAAC,UAAU,CAAC;AAEf,SAAO,EAAE,GAAG,OAAO,OAAO,OAAO;AACnC;","names":[]}

package/dist/client.mjs

@@ -0,0 +1,36 @@
+// src/client/useLiteAuth.ts
+import { useState, useEffect, useCallback } from "react";
+function useLiteAuth(options = {}) {
+  const {
+    loginPath = "/api/auth/login",
+    logoutPath = "/api/auth/logout",
+    mePath = "/api/auth/me"
+  } = options;
+  const [state, setState] = useState({ user: null, loading: true });
+  useEffect(() => {
+    fetch(mePath).then((r) => r.json()).then(({ user }) => setState({ user: user ?? null, loading: false })).catch(() => setState({ user: null, loading: false }));
+  }, [mePath]);
+  const login = useCallback(
+    async ({ email, password }) => {
+      const res = await fetch(loginPath, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ email, password })
+      });
+      const data = await res.json();
+      if (!res.ok) return { error: data.error ?? "Login failed" };
+      setState({ user: data.user, loading: false });
+      return {};
+    },
+    [loginPath]
+  );
+  const logout = useCallback(async () => {
+    await fetch(logoutPath, { method: "POST" });
+    setState({ user: null, loading: false });
+  }, [logoutPath]);
+  return { ...state, login, logout };
+}
+export {
+  useLiteAuth
+};
+//# sourceMappingURL=client.mjs.map

package/dist/client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client/useLiteAuth.ts"],"sourcesContent":["\"use client\";\n\nimport { useState, useEffect, useCallback } from \"react\";\nimport { PublicUser } from \"../core/types\";\n\ntype LiteAuthState = {\n  user: PublicUser | null;\n  loading: boolean;\n};\n\ntype LoginCredentials = {\n  email: string;\n  password: string;\n};\n\ntype UseLiteAuthReturn = LiteAuthState & {\n  login: (credentials: LoginCredentials) => Promise<{ error?: string }>;\n  logout: () => Promise<void>;\n};\n\ntype UseLiteAuthOptions = {\n  loginPath?: string;\n  logoutPath?: string;\n  mePath?: string;\n};\n\nexport function useLiteAuth(options: UseLiteAuthOptions = {}): UseLiteAuthReturn {\n  const {\n    loginPath = \"/api/auth/login\",\n    logoutPath = \"/api/auth/logout\",\n    mePath = \"/api/auth/me\",\n  } = options;\n\n  const [state, setState] = useState<LiteAuthState>({ user: null, loading: true });\n\n  useEffect(() => {\n    fetch(mePath)\n      .then((r) => r.json())\n      .then(({ user }) => setState({ user: user ?? null, loading: false }))\n      .catch(() => setState({ user: null, loading: false }));\n  }, [mePath]);\n\n  const login = useCallback(\n    async ({ email, password }: LoginCredentials) => {\n      const res = await fetch(loginPath, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ email, password }),\n      });\n      const data = await res.json();\n      if (!res.ok) return { error: data.error ?? \"Login failed\" };\n      setState({ user: data.user, loading: false });\n      return {};\n    },\n    [loginPath]\n  );\n\n  const logout = useCallback(async () => {\n    await fetch(logoutPath, { method: \"POST\" });\n    setState({ user: null, loading: false });\n  }, [logoutPath]);\n\n  return { ...state, login, logout };\n}\n"],"mappings":";AAEA,SAAS,UAAU,WAAW,mBAAmB;AAwB1C,SAAS,YAAY,UAA8B,CAAC,GAAsB;AAC/E,QAAM;AAAA,IACJ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX,IAAI;AAEJ,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAE/E,YAAU,MAAM;AACd,UAAM,MAAM,EACT,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EACpB,KAAK,CAAC,EAAE,KAAK,MAAM,SAAS,EAAE,MAAM,QAAQ,MAAM,SAAS,MAAM,CAAC,CAAC,EACnE,MAAM,MAAM,SAAS,EAAE,MAAM,MAAM,SAAS,MAAM,CAAC,CAAC;AAAA,EACzD,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,QAAQ;AAAA,IACZ,OAAO,EAAE,OAAO,SAAS,MAAwB;AAC/C,YAAM,MAAM,MAAM,MAAM,WAAW;AAAA,QACjC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,SAAS,CAAC;AAAA,MAC1C,CAAC;AACD,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAI,CAAC,IAAI,GAAI,QAAO,EAAE,OAAO,KAAK,SAAS,eAAe;AAC1D,eAAS,EAAE,MAAM,KAAK,MAAM,SAAS,MAAM,CAAC;AAC5C,aAAO,CAAC;AAAA,IACV;AAAA,IACA,CAAC,SAAS;AAAA,EACZ;AAEA,QAAM,SAAS,YAAY,YAAY;AACrC,UAAM,MAAM,YAAY,EAAE,QAAQ,OAAO,CAAC;AAC1C,aAAS,EAAE,MAAM,MAAM,SAAS,MAAM,CAAC;AAAA,EACzC,GAAG,CAAC,UAAU,CAAC;AAEf,SAAO,EAAE,GAAG,OAAO,OAAO,OAAO;AACnC;","names":[]}

package/dist/index.d.mts

@@ -0,0 +1,30 @@
+import * as next_dist_server_web_spec_extension_adapters_request_cookies from 'next/dist/server/web/spec-extension/adapters/request-cookies';
+import * as next_server from 'next/server';
+
+type User = {
+    email: string;
+    password: string;
+    role?: string;
+    name?: string;
+};
+type PublicUser = Omit<User, "password">;
+type LiteAuthConfig = {
+    users: User[];
+    jwtSecret: string;
+    cookieName?: string;
+};
+
+declare function createLiteAuth(config: LiteAuthConfig): {
+    handlers: {
+        login: (req: next_server.NextRequest) => Promise<next_server.NextResponse>;
+        logout: (_req: next_server.NextRequest) => Promise<next_server.NextResponse>;
+        me: (req: next_server.NextRequest) => Promise<next_server.NextResponse>;
+    };
+    middleware: (options: {
+        protect: string[];
+        redirectTo?: string;
+    }) => (req: next_server.NextRequest) => Promise<next_server.NextResponse>;
+    getUserFromCookies: (cookies: next_dist_server_web_spec_extension_adapters_request_cookies.ReadonlyRequestCookies) => Promise<PublicUser | null>;
+};
+
+export { type LiteAuthConfig, type PublicUser, type User, createLiteAuth };

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+import * as next_dist_server_web_spec_extension_adapters_request_cookies from 'next/dist/server/web/spec-extension/adapters/request-cookies';
+import * as next_server from 'next/server';
+
+type User = {
+    email: string;
+    password: string;
+    role?: string;
+    name?: string;
+};
+type PublicUser = Omit<User, "password">;
+type LiteAuthConfig = {
+    users: User[];
+    jwtSecret: string;
+    cookieName?: string;
+};
+
+declare function createLiteAuth(config: LiteAuthConfig): {
+    handlers: {
+        login: (req: next_server.NextRequest) => Promise<next_server.NextResponse>;
+        logout: (_req: next_server.NextRequest) => Promise<next_server.NextResponse>;
+        me: (req: next_server.NextRequest) => Promise<next_server.NextResponse>;
+    };
+    middleware: (options: {
+        protect: string[];
+        redirectTo?: string;
+    }) => (req: next_server.NextRequest) => Promise<next_server.NextResponse>;
+    getUserFromCookies: (cookies: next_dist_server_web_spec_extension_adapters_request_cookies.ReadonlyRequestCookies) => Promise<PublicUser | null>;
+};
+
+export { type LiteAuthConfig, type PublicUser, type User, createLiteAuth };

package/dist/index.js

@@ -0,0 +1,158 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  createLiteAuth: () => createLiteAuth
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/server/handlers.ts
+var import_server = require("next/server");
+
+// src/server/jwt.ts
+var import_jose = require("jose");
+function getSecret(secret) {
+  return new TextEncoder().encode(secret);
+}
+async function signToken(user, secret) {
+  return new import_jose.SignJWT({ ...user }).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime("7d").sign(getSecret(secret));
+}
+async function verifyToken(token, secret) {
+  try {
+    const { payload } = await (0, import_jose.jwtVerify)(token, getSecret(secret));
+    return payload;
+  } catch {
+    return null;
+  }
+}
+
+// src/server/handlers.ts
+function makeLoginHandler(ctx) {
+  return async function loginHandler(req) {
+    let body;
+    try {
+      body = await req.json();
+    } catch {
+      return import_server.NextResponse.json({ error: "Invalid JSON" }, { status: 400 });
+    }
+    const { email, password } = body;
+    if (!email || !password) {
+      return import_server.NextResponse.json({ error: "Email and password are required" }, { status: 400 });
+    }
+    const user = ctx.users.find((u) => u.email === email && u.password === password);
+    if (!user) {
+      return import_server.NextResponse.json({ error: "Invalid credentials" }, { status: 401 });
+    }
+    const { password: _, ...publicUser } = user;
+    const token = await signToken(publicUser, ctx.jwtSecret);
+    const res = import_server.NextResponse.json({ user: publicUser });
+    res.cookies.set(ctx.cookieName, token, {
+      httpOnly: true,
+      path: "/",
+      sameSite: "lax",
+      secure: process.env.NODE_ENV === "production",
+      maxAge: 60 * 60 * 24 * 7
+      // 7 days
+    });
+    return res;
+  };
+}
+function makeLogoutHandler(ctx) {
+  return async function logoutHandler(_req) {
+    const res = import_server.NextResponse.json({ ok: true });
+    res.cookies.set(ctx.cookieName, "", {
+      httpOnly: true,
+      path: "/",
+      maxAge: 0
+    });
+    return res;
+  };
+}
+function makeMeHandler(ctx) {
+  return async function meHandler(req) {
+    const token = req.cookies.get(ctx.cookieName)?.value;
+    if (!token) {
+      return import_server.NextResponse.json({ user: null }, { status: 401 });
+    }
+    const user = await verifyToken(token, ctx.jwtSecret);
+    if (!user) {
+      return import_server.NextResponse.json({ user: null }, { status: 401 });
+    }
+    return import_server.NextResponse.json({ user });
+  };
+}
+
+// src/server/getUserFromCookies.ts
+function getUserFromCookies(ctx) {
+  return async function(cookies) {
+    const token = cookies.get(ctx.cookieName)?.value;
+    if (!token) return null;
+    return verifyToken(token, ctx.jwtSecret);
+  };
+}
+
+// src/middleware/index.ts
+var import_server2 = require("next/server");
+function makeMiddleware(ctx) {
+  return function middleware(options) {
+    return async function(req) {
+      const { protect, redirectTo = "/login" } = options;
+      const { pathname } = req.nextUrl;
+      const isProtected = protect.some(
+        (pattern) => pathname === pattern || pathname.startsWith(pattern + "/")
+      );
+      if (!isProtected) {
+        return import_server2.NextResponse.next();
+      }
+      const token = req.cookies.get(ctx.cookieName)?.value;
+      if (token) {
+        const user = await verifyToken(token, ctx.jwtSecret);
+        if (user) return import_server2.NextResponse.next();
+      }
+      const loginUrl = new URL(redirectTo, req.url);
+      loginUrl.searchParams.set("from", pathname);
+      return import_server2.NextResponse.redirect(loginUrl);
+    };
+  };
+}
+
+// src/core/createLiteAuth.ts
+function createLiteAuth(config) {
+  const ctx = {
+    users: config.users,
+    jwtSecret: config.jwtSecret,
+    cookieName: config.cookieName ?? "lite-auth-token"
+  };
+  return {
+    handlers: {
+      login: makeLoginHandler(ctx),
+      logout: makeLogoutHandler(ctx),
+      me: makeMeHandler(ctx)
+    },
+    middleware: makeMiddleware(ctx),
+    getUserFromCookies: getUserFromCookies(ctx)
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createLiteAuth
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/server/handlers.ts","../src/server/jwt.ts","../src/server/getUserFromCookies.ts","../src/middleware/index.ts","../src/core/createLiteAuth.ts"],"sourcesContent":["export { createLiteAuth } from \"./core/createLiteAuth\";\nexport type { User, PublicUser, LiteAuthConfig } from \"./core/types\";\n","import { NextRequest, NextResponse } from \"next/server\";\nimport { LiteAuthContext } from \"../core/types\";\nimport { signToken, verifyToken } from \"./jwt\";\n\nexport function makeLoginHandler(ctx: LiteAuthContext) {\n  return async function loginHandler(req: NextRequest): Promise<NextResponse> {\n    let body: { email?: string; password?: string };\n    try {\n      body = await req.json();\n    } catch {\n      return NextResponse.json({ error: \"Invalid JSON\" }, { status: 400 });\n    }\n\n    const { email, password } = body;\n    if (!email || !password) {\n      return NextResponse.json({ error: \"Email and password are required\" }, { status: 400 });\n    }\n\n    const user = ctx.users.find((u) => u.email === email && u.password === password);\n    if (!user) {\n      return NextResponse.json({ error: \"Invalid credentials\" }, { status: 401 });\n    }\n\n    const { password: _, ...publicUser } = user;\n    const token = await signToken(publicUser, ctx.jwtSecret);\n\n    const res = NextResponse.json({ user: publicUser });\n    res.cookies.set(ctx.cookieName, token, {\n      httpOnly: true,\n      path: \"/\",\n      sameSite: \"lax\",\n      secure: process.env.NODE_ENV === \"production\",\n      maxAge: 60 * 60 * 24 * 7, // 7 days\n    });\n    return res;\n  };\n}\n\nexport function makeLogoutHandler(ctx: LiteAuthContext) {\n  return async function logoutHandler(_req: NextRequest): Promise<NextResponse> {\n    const res = NextResponse.json({ ok: true });\n    res.cookies.set(ctx.cookieName, \"\", {\n      httpOnly: true,\n      path: \"/\",\n      maxAge: 0,\n    });\n    return res;\n  };\n}\n\nexport function makeMeHandler(ctx: LiteAuthContext) {\n  return async function meHandler(req: NextRequest): Promise<NextResponse> {\n    const token = req.cookies.get(ctx.cookieName)?.value;\n    if (!token) {\n      return NextResponse.json({ user: null }, { status: 401 });\n    }\n\n    const user = await verifyToken(token, ctx.jwtSecret);\n    if (!user) {\n      return NextResponse.json({ user: null }, { status: 401 });\n    }\n\n    return NextResponse.json({ user });\n  };\n}\n","import { SignJWT, jwtVerify } from \"jose\";\nimport { PublicUser } from \"../core/types\";\n\nfunction getSecret(secret: string) {\n  return new TextEncoder().encode(secret);\n}\n\nexport async function signToken(user: PublicUser, secret: string): Promise<string> {\n  return new SignJWT({ ...user })\n    .setProtectedHeader({ alg: \"HS256\" })\n    .setIssuedAt()\n    .setExpirationTime(\"7d\")\n    .sign(getSecret(secret));\n}\n\nexport async function verifyToken(token: string, secret: string): Promise<PublicUser | null> {\n  try {\n    const { payload } = await jwtVerify(token, getSecret(secret));\n    return payload as unknown as PublicUser;\n  } catch {\n    return null;\n  }\n}\n","import { ReadonlyRequestCookies } from \"next/dist/server/web/spec-extension/adapters/request-cookies\";\nimport { LiteAuthContext, PublicUser } from \"../core/types\";\nimport { verifyToken } from \"./jwt\";\n\nexport function getUserFromCookies(ctx: LiteAuthContext) {\n  return async function (cookies: ReadonlyRequestCookies): Promise<PublicUser | null> {\n    const token = cookies.get(ctx.cookieName)?.value;\n    if (!token) return null;\n    return verifyToken(token, ctx.jwtSecret);\n  };\n}\n","import { NextRequest, NextResponse } from \"next/server\";\nimport { LiteAuthContext } from \"../core/types\";\nimport { verifyToken } from \"../server/jwt\";\n\ntype MiddlewareOptions = {\n  protect: string[];\n  redirectTo?: string;\n};\n\nexport function makeMiddleware(ctx: LiteAuthContext) {\n  return function middleware(options: MiddlewareOptions) {\n    return async function (req: NextRequest): Promise<NextResponse> {\n      const { protect, redirectTo = \"/login\" } = options;\n      const { pathname } = req.nextUrl;\n\n      const isProtected = protect.some(\n        (pattern) => pathname === pattern || pathname.startsWith(pattern + \"/\")\n      );\n\n      if (!isProtected) {\n        return NextResponse.next();\n      }\n\n      const token = req.cookies.get(ctx.cookieName)?.value;\n      if (token) {\n        const user = await verifyToken(token, ctx.jwtSecret);\n        if (user) return NextResponse.next();\n      }\n\n      const loginUrl = new URL(redirectTo, req.url);\n      loginUrl.searchParams.set(\"from\", pathname);\n      return NextResponse.redirect(loginUrl);\n    };\n  };\n}\n","import { LiteAuthConfig, LiteAuthContext } from \"./types\";\nimport { makeLoginHandler, makeLogoutHandler, makeMeHandler, getUserFromCookies } from \"../server\";\nimport { makeMiddleware } from \"../middleware\";\n\nexport function createLiteAuth(config: LiteAuthConfig) {\n  const ctx: LiteAuthContext = {\n    users: config.users,\n    jwtSecret: config.jwtSecret,\n    cookieName: config.cookieName ?? \"lite-auth-token\",\n  };\n\n  return {\n    handlers: {\n      login: makeLoginHandler(ctx),\n      logout: makeLogoutHandler(ctx),\n      me: makeMeHandler(ctx),\n    },\n    middleware: makeMiddleware(ctx),\n    getUserFromCookies: getUserFromCookies(ctx),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAA0C;;;ACA1C,kBAAmC;AAGnC,SAAS,UAAU,QAAgB;AACjC,SAAO,IAAI,YAAY,EAAE,OAAO,MAAM;AACxC;AAEA,eAAsB,UAAU,MAAkB,QAAiC;AACjF,SAAO,IAAI,oBAAQ,EAAE,GAAG,KAAK,CAAC,EAC3B,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,YAAY,EACZ,kBAAkB,IAAI,EACtB,KAAK,UAAU,MAAM,CAAC;AAC3B;AAEA,eAAsB,YAAY,OAAe,QAA4C;AAC3F,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,UAAM,uBAAU,OAAO,UAAU,MAAM,CAAC;AAC5D,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ADlBO,SAAS,iBAAiB,KAAsB;AACrD,SAAO,eAAe,aAAa,KAAyC;AAC1E,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,aAAO,2BAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,EAAE,OAAO,SAAS,IAAI;AAC5B,QAAI,CAAC,SAAS,CAAC,UAAU;AACvB,aAAO,2BAAa,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxF;AAEA,UAAM,OAAO,IAAI,MAAM,KAAK,CAAC,MAAM,EAAE,UAAU,SAAS,EAAE,aAAa,QAAQ;AAC/E,QAAI,CAAC,MAAM;AACT,aAAO,2BAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC5E;AAEA,UAAM,EAAE,UAAU,GAAG,GAAG,WAAW,IAAI;AACvC,UAAM,QAAQ,MAAM,UAAU,YAAY,IAAI,SAAS;AAEvD,UAAM,MAAM,2BAAa,KAAK,EAAE,MAAM,WAAW,CAAC;AAClD,QAAI,QAAQ,IAAI,IAAI,YAAY,OAAO;AAAA,MACrC,UAAU;AAAA,MACV,MAAM;AAAA,MACN,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,IACzB,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEO,SAAS,kBAAkB,KAAsB;AACtD,SAAO,eAAe,cAAc,MAA0C;AAC5E,UAAM,MAAM,2BAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAC1C,QAAI,QAAQ,IAAI,IAAI,YAAY,IAAI;AAAA,MAClC,UAAU;AAAA,MACV,MAAM;AAAA,MACN,QAAQ;AAAA,IACV,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEO,SAAS,cAAc,KAAsB;AAClD,SAAO,eAAe,UAAU,KAAyC;AACvE,UAAM,QAAQ,IAAI,QAAQ,IAAI,IAAI,UAAU,GAAG;AAC/C,QAAI,CAAC,OAAO;AACV,aAAO,2BAAa,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1D;AAEA,UAAM,OAAO,MAAM,YAAY,OAAO,IAAI,SAAS;AACnD,QAAI,CAAC,MAAM;AACT,aAAO,2BAAa,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1D;AAEA,WAAO,2BAAa,KAAK,EAAE,KAAK,CAAC;AAAA,EACnC;AACF;;;AE5DO,SAAS,mBAAmB,KAAsB;AACvD,SAAO,eAAgB,SAA6D;AAClF,UAAM,QAAQ,QAAQ,IAAI,IAAI,UAAU,GAAG;AAC3C,QAAI,CAAC,MAAO,QAAO;AACnB,WAAO,YAAY,OAAO,IAAI,SAAS;AAAA,EACzC;AACF;;;ACVA,IAAAA,iBAA0C;AASnC,SAAS,eAAe,KAAsB;AACnD,SAAO,SAAS,WAAW,SAA4B;AACrD,WAAO,eAAgB,KAAyC;AAC9D,YAAM,EAAE,SAAS,aAAa,SAAS,IAAI;AAC3C,YAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,YAAM,cAAc,QAAQ;AAAA,QAC1B,CAAC,YAAY,aAAa,WAAW,SAAS,WAAW,UAAU,GAAG;AAAA,MACxE;AAEA,UAAI,CAAC,aAAa;AAChB,eAAO,4BAAa,KAAK;AAAA,MAC3B;AAEA,YAAM,QAAQ,IAAI,QAAQ,IAAI,IAAI,UAAU,GAAG;AAC/C,UAAI,OAAO;AACT,cAAM,OAAO,MAAM,YAAY,OAAO,IAAI,SAAS;AACnD,YAAI,KAAM,QAAO,4BAAa,KAAK;AAAA,MACrC;AAEA,YAAM,WAAW,IAAI,IAAI,YAAY,IAAI,GAAG;AAC5C,eAAS,aAAa,IAAI,QAAQ,QAAQ;AAC1C,aAAO,4BAAa,SAAS,QAAQ;AAAA,IACvC;AAAA,EACF;AACF;;;AC9BO,SAAS,eAAe,QAAwB;AACrD,QAAM,MAAuB;AAAA,IAC3B,OAAO,OAAO;AAAA,IACd,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO,cAAc;AAAA,EACnC;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,MACR,OAAO,iBAAiB,GAAG;AAAA,MAC3B,QAAQ,kBAAkB,GAAG;AAAA,MAC7B,IAAI,cAAc,GAAG;AAAA,IACvB;AAAA,IACA,YAAY,eAAe,GAAG;AAAA,IAC9B,oBAAoB,mBAAmB,GAAG;AAAA,EAC5C;AACF;","names":["import_server"]}

package/dist/index.mjs

@@ -0,0 +1,131 @@
+// src/server/handlers.ts
+import { NextResponse } from "next/server";
+
+// src/server/jwt.ts
+import { SignJWT, jwtVerify } from "jose";
+function getSecret(secret) {
+  return new TextEncoder().encode(secret);
+}
+async function signToken(user, secret) {
+  return new SignJWT({ ...user }).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime("7d").sign(getSecret(secret));
+}
+async function verifyToken(token, secret) {
+  try {
+    const { payload } = await jwtVerify(token, getSecret(secret));
+    return payload;
+  } catch {
+    return null;
+  }
+}
+
+// src/server/handlers.ts
+function makeLoginHandler(ctx) {
+  return async function loginHandler(req) {
+    let body;
+    try {
+      body = await req.json();
+    } catch {
+      return NextResponse.json({ error: "Invalid JSON" }, { status: 400 });
+    }
+    const { email, password } = body;
+    if (!email || !password) {
+      return NextResponse.json({ error: "Email and password are required" }, { status: 400 });
+    }
+    const user = ctx.users.find((u) => u.email === email && u.password === password);
+    if (!user) {
+      return NextResponse.json({ error: "Invalid credentials" }, { status: 401 });
+    }
+    const { password: _, ...publicUser } = user;
+    const token = await signToken(publicUser, ctx.jwtSecret);
+    const res = NextResponse.json({ user: publicUser });
+    res.cookies.set(ctx.cookieName, token, {
+      httpOnly: true,
+      path: "/",
+      sameSite: "lax",
+      secure: process.env.NODE_ENV === "production",
+      maxAge: 60 * 60 * 24 * 7
+      // 7 days
+    });
+    return res;
+  };
+}
+function makeLogoutHandler(ctx) {
+  return async function logoutHandler(_req) {
+    const res = NextResponse.json({ ok: true });
+    res.cookies.set(ctx.cookieName, "", {
+      httpOnly: true,
+      path: "/",
+      maxAge: 0
+    });
+    return res;
+  };
+}
+function makeMeHandler(ctx) {
+  return async function meHandler(req) {
+    const token = req.cookies.get(ctx.cookieName)?.value;
+    if (!token) {
+      return NextResponse.json({ user: null }, { status: 401 });
+    }
+    const user = await verifyToken(token, ctx.jwtSecret);
+    if (!user) {
+      return NextResponse.json({ user: null }, { status: 401 });
+    }
+    return NextResponse.json({ user });
+  };
+}
+
+// src/server/getUserFromCookies.ts
+function getUserFromCookies(ctx) {
+  return async function(cookies) {
+    const token = cookies.get(ctx.cookieName)?.value;
+    if (!token) return null;
+    return verifyToken(token, ctx.jwtSecret);
+  };
+}
+
+// src/middleware/index.ts
+import { NextResponse as NextResponse2 } from "next/server";
+function makeMiddleware(ctx) {
+  return function middleware(options) {
+    return async function(req) {
+      const { protect, redirectTo = "/login" } = options;
+      const { pathname } = req.nextUrl;
+      const isProtected = protect.some(
+        (pattern) => pathname === pattern || pathname.startsWith(pattern + "/")
+      );
+      if (!isProtected) {
+        return NextResponse2.next();
+      }
+      const token = req.cookies.get(ctx.cookieName)?.value;
+      if (token) {
+        const user = await verifyToken(token, ctx.jwtSecret);
+        if (user) return NextResponse2.next();
+      }
+      const loginUrl = new URL(redirectTo, req.url);
+      loginUrl.searchParams.set("from", pathname);
+      return NextResponse2.redirect(loginUrl);
+    };
+  };
+}
+
+// src/core/createLiteAuth.ts
+function createLiteAuth(config) {
+  const ctx = {
+    users: config.users,
+    jwtSecret: config.jwtSecret,
+    cookieName: config.cookieName ?? "lite-auth-token"
+  };
+  return {
+    handlers: {
+      login: makeLoginHandler(ctx),
+      logout: makeLogoutHandler(ctx),
+      me: makeMeHandler(ctx)
+    },
+    middleware: makeMiddleware(ctx),
+    getUserFromCookies: getUserFromCookies(ctx)
+  };
+}
+export {
+  createLiteAuth
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/handlers.ts","../src/server/jwt.ts","../src/server/getUserFromCookies.ts","../src/middleware/index.ts","../src/core/createLiteAuth.ts"],"sourcesContent":["import { NextRequest, NextResponse } from \"next/server\";\nimport { LiteAuthContext } from \"../core/types\";\nimport { signToken, verifyToken } from \"./jwt\";\n\nexport function makeLoginHandler(ctx: LiteAuthContext) {\n  return async function loginHandler(req: NextRequest): Promise<NextResponse> {\n    let body: { email?: string; password?: string };\n    try {\n      body = await req.json();\n    } catch {\n      return NextResponse.json({ error: \"Invalid JSON\" }, { status: 400 });\n    }\n\n    const { email, password } = body;\n    if (!email || !password) {\n      return NextResponse.json({ error: \"Email and password are required\" }, { status: 400 });\n    }\n\n    const user = ctx.users.find((u) => u.email === email && u.password === password);\n    if (!user) {\n      return NextResponse.json({ error: \"Invalid credentials\" }, { status: 401 });\n    }\n\n    const { password: _, ...publicUser } = user;\n    const token = await signToken(publicUser, ctx.jwtSecret);\n\n    const res = NextResponse.json({ user: publicUser });\n    res.cookies.set(ctx.cookieName, token, {\n      httpOnly: true,\n      path: \"/\",\n      sameSite: \"lax\",\n      secure: process.env.NODE_ENV === \"production\",\n      maxAge: 60 * 60 * 24 * 7, // 7 days\n    });\n    return res;\n  };\n}\n\nexport function makeLogoutHandler(ctx: LiteAuthContext) {\n  return async function logoutHandler(_req: NextRequest): Promise<NextResponse> {\n    const res = NextResponse.json({ ok: true });\n    res.cookies.set(ctx.cookieName, \"\", {\n      httpOnly: true,\n      path: \"/\",\n      maxAge: 0,\n    });\n    return res;\n  };\n}\n\nexport function makeMeHandler(ctx: LiteAuthContext) {\n  return async function meHandler(req: NextRequest): Promise<NextResponse> {\n    const token = req.cookies.get(ctx.cookieName)?.value;\n    if (!token) {\n      return NextResponse.json({ user: null }, { status: 401 });\n    }\n\n    const user = await verifyToken(token, ctx.jwtSecret);\n    if (!user) {\n      return NextResponse.json({ user: null }, { status: 401 });\n    }\n\n    return NextResponse.json({ user });\n  };\n}\n","import { SignJWT, jwtVerify } from \"jose\";\nimport { PublicUser } from \"../core/types\";\n\nfunction getSecret(secret: string) {\n  return new TextEncoder().encode(secret);\n}\n\nexport async function signToken(user: PublicUser, secret: string): Promise<string> {\n  return new SignJWT({ ...user })\n    .setProtectedHeader({ alg: \"HS256\" })\n    .setIssuedAt()\n    .setExpirationTime(\"7d\")\n    .sign(getSecret(secret));\n}\n\nexport async function verifyToken(token: string, secret: string): Promise<PublicUser | null> {\n  try {\n    const { payload } = await jwtVerify(token, getSecret(secret));\n    return payload as unknown as PublicUser;\n  } catch {\n    return null;\n  }\n}\n","import { ReadonlyRequestCookies } from \"next/dist/server/web/spec-extension/adapters/request-cookies\";\nimport { LiteAuthContext, PublicUser } from \"../core/types\";\nimport { verifyToken } from \"./jwt\";\n\nexport function getUserFromCookies(ctx: LiteAuthContext) {\n  return async function (cookies: ReadonlyRequestCookies): Promise<PublicUser | null> {\n    const token = cookies.get(ctx.cookieName)?.value;\n    if (!token) return null;\n    return verifyToken(token, ctx.jwtSecret);\n  };\n}\n","import { NextRequest, NextResponse } from \"next/server\";\nimport { LiteAuthContext } from \"../core/types\";\nimport { verifyToken } from \"../server/jwt\";\n\ntype MiddlewareOptions = {\n  protect: string[];\n  redirectTo?: string;\n};\n\nexport function makeMiddleware(ctx: LiteAuthContext) {\n  return function middleware(options: MiddlewareOptions) {\n    return async function (req: NextRequest): Promise<NextResponse> {\n      const { protect, redirectTo = \"/login\" } = options;\n      const { pathname } = req.nextUrl;\n\n      const isProtected = protect.some(\n        (pattern) => pathname === pattern || pathname.startsWith(pattern + \"/\")\n      );\n\n      if (!isProtected) {\n        return NextResponse.next();\n      }\n\n      const token = req.cookies.get(ctx.cookieName)?.value;\n      if (token) {\n        const user = await verifyToken(token, ctx.jwtSecret);\n        if (user) return NextResponse.next();\n      }\n\n      const loginUrl = new URL(redirectTo, req.url);\n      loginUrl.searchParams.set(\"from\", pathname);\n      return NextResponse.redirect(loginUrl);\n    };\n  };\n}\n","import { LiteAuthConfig, LiteAuthContext } from \"./types\";\nimport { makeLoginHandler, makeLogoutHandler, makeMeHandler, getUserFromCookies } from \"../server\";\nimport { makeMiddleware } from \"../middleware\";\n\nexport function createLiteAuth(config: LiteAuthConfig) {\n  const ctx: LiteAuthContext = {\n    users: config.users,\n    jwtSecret: config.jwtSecret,\n    cookieName: config.cookieName ?? \"lite-auth-token\",\n  };\n\n  return {\n    handlers: {\n      login: makeLoginHandler(ctx),\n      logout: makeLogoutHandler(ctx),\n      me: makeMeHandler(ctx),\n    },\n    middleware: makeMiddleware(ctx),\n    getUserFromCookies: getUserFromCookies(ctx),\n  };\n}\n"],"mappings":";AAAA,SAAsB,oBAAoB;;;ACA1C,SAAS,SAAS,iBAAiB;AAGnC,SAAS,UAAU,QAAgB;AACjC,SAAO,IAAI,YAAY,EAAE,OAAO,MAAM;AACxC;AAEA,eAAsB,UAAU,MAAkB,QAAiC;AACjF,SAAO,IAAI,QAAQ,EAAE,GAAG,KAAK,CAAC,EAC3B,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,YAAY,EACZ,kBAAkB,IAAI,EACtB,KAAK,UAAU,MAAM,CAAC;AAC3B;AAEA,eAAsB,YAAY,OAAe,QAA4C;AAC3F,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,UAAU,OAAO,UAAU,MAAM,CAAC;AAC5D,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ADlBO,SAAS,iBAAiB,KAAsB;AACrD,SAAO,eAAe,aAAa,KAAyC;AAC1E,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,EAAE,OAAO,SAAS,IAAI;AAC5B,QAAI,CAAC,SAAS,CAAC,UAAU;AACvB,aAAO,aAAa,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxF;AAEA,UAAM,OAAO,IAAI,MAAM,KAAK,CAAC,MAAM,EAAE,UAAU,SAAS,EAAE,aAAa,QAAQ;AAC/E,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC5E;AAEA,UAAM,EAAE,UAAU,GAAG,GAAG,WAAW,IAAI;AACvC,UAAM,QAAQ,MAAM,UAAU,YAAY,IAAI,SAAS;AAEvD,UAAM,MAAM,aAAa,KAAK,EAAE,MAAM,WAAW,CAAC;AAClD,QAAI,QAAQ,IAAI,IAAI,YAAY,OAAO;AAAA,MACrC,UAAU;AAAA,MACV,MAAM;AAAA,MACN,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,IACzB,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEO,SAAS,kBAAkB,KAAsB;AACtD,SAAO,eAAe,cAAc,MAA0C;AAC5E,UAAM,MAAM,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAC1C,QAAI,QAAQ,IAAI,IAAI,YAAY,IAAI;AAAA,MAClC,UAAU;AAAA,MACV,MAAM;AAAA,MACN,QAAQ;AAAA,IACV,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEO,SAAS,cAAc,KAAsB;AAClD,SAAO,eAAe,UAAU,KAAyC;AACvE,UAAM,QAAQ,IAAI,QAAQ,IAAI,IAAI,UAAU,GAAG;AAC/C,QAAI,CAAC,OAAO;AACV,aAAO,aAAa,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1D;AAEA,UAAM,OAAO,MAAM,YAAY,OAAO,IAAI,SAAS;AACnD,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1D;AAEA,WAAO,aAAa,KAAK,EAAE,KAAK,CAAC;AAAA,EACnC;AACF;;;AE5DO,SAAS,mBAAmB,KAAsB;AACvD,SAAO,eAAgB,SAA6D;AAClF,UAAM,QAAQ,QAAQ,IAAI,IAAI,UAAU,GAAG;AAC3C,QAAI,CAAC,MAAO,QAAO;AACnB,WAAO,YAAY,OAAO,IAAI,SAAS;AAAA,EACzC;AACF;;;ACVA,SAAsB,gBAAAA,qBAAoB;AASnC,SAAS,eAAe,KAAsB;AACnD,SAAO,SAAS,WAAW,SAA4B;AACrD,WAAO,eAAgB,KAAyC;AAC9D,YAAM,EAAE,SAAS,aAAa,SAAS,IAAI;AAC3C,YAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,YAAM,cAAc,QAAQ;AAAA,QAC1B,CAAC,YAAY,aAAa,WAAW,SAAS,WAAW,UAAU,GAAG;AAAA,MACxE;AAEA,UAAI,CAAC,aAAa;AAChB,eAAOC,cAAa,KAAK;AAAA,MAC3B;AAEA,YAAM,QAAQ,IAAI,QAAQ,IAAI,IAAI,UAAU,GAAG;AAC/C,UAAI,OAAO;AACT,cAAM,OAAO,MAAM,YAAY,OAAO,IAAI,SAAS;AACnD,YAAI,KAAM,QAAOA,cAAa,KAAK;AAAA,MACrC;AAEA,YAAM,WAAW,IAAI,IAAI,YAAY,IAAI,GAAG;AAC5C,eAAS,aAAa,IAAI,QAAQ,QAAQ;AAC1C,aAAOA,cAAa,SAAS,QAAQ;AAAA,IACvC;AAAA,EACF;AACF;;;AC9BO,SAAS,eAAe,QAAwB;AACrD,QAAM,MAAuB;AAAA,IAC3B,OAAO,OAAO;AAAA,IACd,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO,cAAc;AAAA,EACnC;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,MACR,OAAO,iBAAiB,GAAG;AAAA,MAC3B,QAAQ,kBAAkB,GAAG;AAAA,MAC7B,IAAI,cAAc,GAAG;AAAA,IACvB;AAAA,IACA,YAAY,eAAe,GAAG;AAAA,IAC9B,oBAAoB,mBAAmB,GAAG;AAAA,EAC5C;AACF;","names":["NextResponse","NextResponse"]}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "next-lite-auth",
+  "version": "0.1.0",
+  "description": "Lightweight JWT auth for Next.js using static JSON users (no database)",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.mjs",
+      "require": "./dist/client.js"
+    }
+  },
+  "files": ["dist"],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "pnpm build",
+    "docs:dev": "vitepress dev docs",
+    "docs:build": "vitepress build docs",
+    "docs:preview": "vitepress preview docs"
+  },
+  "peerDependencies": {
+    "next": ">=13.0.0",
+    "react": ">=18.0.0"
+  },
+  "dependencies": {
+    "jose": "^5.0.0"
+  },
+  "devDependencies": {
+    "@types/react": "^18.0.0",
+    "next": "^14.0.0",
+    "react": "^18.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.0.0",
+    "vitepress": "^1.0.0"
+  },
+  "engines": {
+    "node": ">=20.0.0",
+    "pnpm": ">=9.0.0"
+  },
+  "packageManager": "pnpm@9.0.0",
+  "author": "amide-init",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/amide-init/next-lite-auth.git"
+  },
+  "homepage": "https://github.com/amide-init/next-lite-auth#readme",
+  "bugs": {
+    "url": "https://github.com/amide-init/next-lite-auth/issues"
+  },
+  "keywords": ["nextjs", "auth", "jwt", "lightweight"],
+  "license": "MIT"
+}