50:I[707087,["/_next/static/immutable/chunks/3arlv5bvukoo2.js","/_next/static/immutable/chunks/39v64hmfyo-sr.js","/_next/static/immutable/chunks/2nvof3-29tvc3.js","/_next/static/immutable/chunks/3tjobt77z_9dj.js","/_next/static/immutable/chunks/04j_o97cgxn2x.js","/_next/static/immutable/chunks/3upr08c9vtj8w.js","/_next/static/immutable/chunks/1ww0328si-u8x.js","/_next/static/immutable/chunks/11mfl5ymqld9-.js","/_next/static/immutable/chunks/2xxcqy6ppds3l.js","/_next/static/immutable/chunks/1o6_421saitt-.js","/_next/static/immutable/chunks/31nn7jwsjvqii.js","/_next/static/immutable/chunks/43_s7jweyypoh.js","/_next/static/immutable/chunks/0p6vao205o1jc.js","/_next/static/immutable/chunks/1_kyvgkyokw92.js","/_next/static/immutable/chunks/1lo-zn37dolb5.js","/_next/static/immutable/chunks/1v8k6yxw1rg0u.js"],"RegistryDependencies"] 51:I[314491,["/_next/static/immutable/chunks/3arlv5bvukoo2.js","/_next/static/immutable/chunks/39v64hmfyo-sr.js","/_next/static/immutable/chunks/2nvof3-29tvc3.js","/_next/static/immutable/chunks/3tjobt77z_9dj.js","/_next/static/immutable/chunks/04j_o97cgxn2x.js","/_next/static/immutable/chunks/3upr08c9vtj8w.js","/_next/static/immutable/chunks/1ww0328si-u8x.js","/_next/static/immutable/chunks/11mfl5ymqld9-.js","/_next/static/immutable/chunks/2xxcqy6ppds3l.js","/_next/static/immutable/chunks/1o6_421saitt-.js","/_next/static/immutable/chunks/31nn7jwsjvqii.js","/_next/static/immutable/chunks/43_s7jweyypoh.js","/_next/static/immutable/chunks/0p6vao205o1jc.js","/_next/static/immutable/chunks/1_kyvgkyokw92.js","/_next/static/immutable/chunks/1lo-zn37dolb5.js","/_next/static/immutable/chunks/1v8k6yxw1rg0u.js"],"FilesView"] 52:T15fa,'use client' import { cn } from '@/lib/utils' import { useOAuthConsent, type OAuthConsentDecision, } from '@/registry/default/blocks/oauth-consent/hooks/use-oauth-consent' import { Button } from '@/registry/default/components/ui/button' import { Card, CardContent, CardDescription, CardHeader, CardTitle, } from '@/registry/default/components/ui/card' const getInitial = (value: string) => value.trim().charAt(0).toUpperCase() || '?' interface ConsentCardShellProps extends React.ComponentPropsWithoutRef<'div'> { clientName: string productName: string } function ConsentCardShell({ clientName, productName, className, children, ...props }: ConsentCardShellProps) { return (

{getInitial(clientName)}

Authorize {clientName} Review what this client gets access to.

{children}

) } export interface OAuthConsentCardProps extends React.ComponentPropsWithoutRef<'div'> { clientName: string productName?: string redirectUri: string email: string scopes?: string[] error?: string | null decision?: OAuthConsentDecision | null onApprove?: () => void onDeny?: () => void } export function OAuthConsentCard({ clientName, productName = 'Your product', redirectUri, email, scopes = [], error = null, decision = null, onApprove, onDeny, ...props }: OAuthConsentCardProps) { return (

Client: {clientName}
Redirects to: {redirectUri}
Signed in as: {email}
Scopes: {scopes.join(', ')}

Allow access only if you recognize this application. It can act on your behalf only within the requested permissions and the access you already have.

{error && (

{error}

)}

) } interface OAuthConsentProps extends React.ComponentPropsWithoutRef<'div'> { authorizationId?: string | null signInPath?: string productName?: string } export function OAuthConsent({ authorizationId, signInPath = '/auth/login', productName = 'Your product', ...props }: OAuthConsentProps) { const { details, email, error, isLoading, decision, approve, deny } = useOAuthConsent({ authorizationId, signInPath, }) if (isLoading || !details || !email) { return ( {isLoading ? (

Loading authorization request...

) : (

{error ?? 'Unable to load the authorization request. Start again from your OAuth client.'}

)} ) } return ( void approve()} onDeny={() => void deny()} {...props} /> ) } 53:T1015,import { isAuthSessionMissingError } from '@supabase/supabase-js' import type { OAuthAuthorizationDetails } from '@supabase/supabase-js' import { useCallback, useEffect, useRef, useState } from 'react' import { safeNextPath } from '@/registry/default/blocks/safe-next-path/lib/safe-next-path' import { createClient } from '@/registry/default/clients/nextjs/lib/supabase/client' export type OAuthConsentDecision = 'approve' | 'deny' export interface UseOAuthConsentOptions { authorizationId?: string | null signInPath?: string } const withNextParam = (path: string, next: string) => { const url = new URL(path, window.location.origin) const searchParams = new URLSearchParams(url.search) searchParams.set('next', next) url.search = searchParams.toString() return `${url.pathname}${url.search}${url.hash}` } const useOAuthConsent = ({ authorizationId, signInPath = '/auth/login', }: UseOAuthConsentOptions) => { const [details, setDetails] = useState(null) const [error, setError] = useState(null) const [isLoading, setIsLoading] = useState(true) const [decision, setDecision] = useState(null) const isDeciding = useRef(false) useEffect(() => { let active = true const loadAuthorization = async () => { setIsLoading(true) setError(null) setDetails(null) setDecision(null) if (!authorizationId) { setError('This page needs an authorization_id. Start again from your OAuth client.') setIsLoading(false) return } const supabase = createClient() const { data: { user }, error: userError, } = await supabase.auth.getUser() if (userError && !isAuthSessionMissingError(userError)) { if (active) { setError(userError.message) setIsLoading(false) } return } if (!user) { const next = `${window.location.pathname}${window.location.search}` if (active) { window.location.replace(withNextParam(safeNextPath(signInPath, '/auth/login'), next)) } return } const { data, error } = await supabase.auth.oauth.getAuthorizationDetails(authorizationId) if (error) { if (active) { setError(error.message) setIsLoading(false) } return } if (!('authorization_id' in data)) { if (active) { window.location.replace(data.redirect_url) } return } if (active) { setDetails(data) setIsLoading(false) } } void loadAuthorization() return () => { active = false } }, [authorizationId, signInPath]) const decide = useCallback( async (action: OAuthConsentDecision) => { if (!authorizationId || isDeciding.current) return isDeciding.current = true setDecision(action) setError(null) const supabase = createClient() const result = action === 'approve' ? await supabase.auth.oauth.approveAuthorization(authorizationId, { skipBrowserRedirect: true, }) : await supabase.auth.oauth.denyAuthorization(authorizationId, { skipBrowserRedirect: true, }) if (result.error) { setError(result.error.message) setDecision(null) isDeciding.current = false return } if (!result.data?.redirect_url) { setError('The server did not return a redirect. Start again from your OAuth client.') setDecision(null) isDeciding.current = false return } window.location.assign(result.data.redirect_url) }, [authorizationId] ) return { details, email: details?.user.email ?? null, error, isLoading, decision, approve: () => decide('approve'), deny: () => decide('deny'), } } type UseOAuthConsentReturn = ReturnType export { useOAuthConsent, type OAuthAuthorizationDetails, type UseOAuthConsentReturn } 54:Ta22,import { createServerClient } from '@supabase/ssr' import { NextResponse, type NextRequest } from 'next/server' export async function updateSession(request: NextRequest) { let supabaseResponse = NextResponse.next({ request, }) // With Fluid compute, don't put this client in a global environment // variable. Always create a new one on each request. const supabase = createServerClient( process.env.NEXT_PUBLIC_SUPABASE_URL!, process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY!, { cookies: { getAll() { return request.cookies.getAll() }, setAll(cookiesToSet) { cookiesToSet.forEach(({ name, value }) => request.cookies.set(name, value)) supabaseResponse = NextResponse.next({ request, }) cookiesToSet.forEach(({ name, value, options }) => supabaseResponse.cookies.set(name, value, options) ) }, }, } ) // Do not run code between createServerClient and // supabase.auth.getClaims(). A simple mistake could make it very hard to debug // issues with users being randomly logged out. // IMPORTANT: If you remove getClaims() and you use server-side rendering // with the Supabase client, your users may be randomly logged out. const { data } = await supabase.auth.getClaims() const user = data?.claims if ( !user && !request.nextUrl.pathname.startsWith('/login') && !request.nextUrl.pathname.startsWith('/auth') && // the OAuth consent route sends unauthenticated visitors to the login page // itself, so that it can preserve the authorization in the `next` parameter request.nextUrl.pathname !== '/oauth/consent' ) { // no user, potentially respond by redirecting the user to the login page const url = request.nextUrl.clone() url.pathname = '/auth/login' return NextResponse.redirect(url) } // IMPORTANT: You *must* return the supabaseResponse object as it is. // If you're creating a new response object with NextResponse.next() make sure to: // 1. Pass the request in it, like so: // const myNewResponse = NextResponse.next({ request }) // 2. Copy over the cookies, like so: // myNewResponse.cookies.setAll(supabaseResponse.cookies.getAll()) // 3. Change the myNewResponse object to fit your needs, but avoid changing // the cookies! // 4. Finally: // return myNewResponse // If this is not done, you may be causing the browser and server to go out // of sync and terminate the user's session prematurely! return supabaseResponse } 4f:["$","div",null,{"className":"mt-3 flex min-h-0 min-w-0 flex-1 flex-col gap-3","children":[["$","div",null,{"className":"flex shrink-0 items-start gap-3","children":[["$","div",null,{"className":"flex max-h-28 min-w-0 flex-1 flex-wrap items-center gap-2 overflow-y-auto","children":[["$","ul",null,{"className":"flex min-w-0 flex-wrap gap-2","aria-label":"Package dependencies","children":[["$","li","@supabase/ssr@latest",{"className":"min-w-0 max-w-full","children":["$","a",null,{"href":"https://www.npmjs.com/package/%40supabase%2Fssr","target":"_blank","rel":"noopener noreferrer","className":"flex max-w-full min-w-0 items-center gap-1.5 rounded-md border px-2 py-1.5 text-xs","children":[["$","svg",null,{"viewBox":"0 0 24 24","className":"size-3 shrink-0","children":["$","path",null,{"d":"M1.763 0C.786 0 0 .786 0 1.763v20.474C0 23.214.786 24 1.763 24h20.474c.977 0 1.763-.786 1.763-1.763V1.763C24 .786 23.214 0 22.237 0zM5.13 5.323l13.837.019-.009 13.836h-3.464l.01-10.382h-3.456L12.04 19.17H5.113z","fill":"currentColor"}]}],["$","span",null,{"className":"min-w-0 break-all text-xs font-medium","children":"@supabase/ssr@latest"}]]}]}],["$","li","@supabase/supabase-js@latest",{"className":"min-w-0 max-w-full","children":["$","a",null,{"href":"https://www.npmjs.com/package/%40supabase%2Fsupabase-js","target":"_blank","rel":"noopener noreferrer","className":"flex max-w-full min-w-0 items-center gap-1.5 rounded-md border px-2 py-1.5 text-xs","children":[["$","svg",null,{"viewBox":"0 0 24 24","className":"size-3 shrink-0","children":["$","path",null,{"d":"M1.763 0C.786 0 0 .786 0 1.763v20.474C0 23.214.786 24 1.763 24h20.474c.977 0 1.763-.786 1.763-1.763V1.763C24 .786 23.214 0 22.237 0zM5.13 5.323l13.837.019-.009 13.836h-3.464l.01-10.382h-3.456L12.04 19.17H5.113z","fill":"currentColor"}]}],["$","span",null,{"className":"min-w-0 break-all text-xs font-medium","children":"@supabase/supabase-js@latest"}]]}]}]]}],["$","$L50",null,{"namespace":"@supabase","registryDependencies":["button","card","https://supabase.com/library/r/safe-next-path.json"]}]]}],null]}],["$","$L51",null,{"files":[{"path":"registry/default/blocks/oauth-consent/components/oauth-consent.tsx","content":"$52","type":"registry:component"},{"path":"registry/default/blocks/oauth-consent/hooks/use-oauth-consent.ts","content":"$53","type":"registry:hook"},{"path":"registry/default/blocks/oauth-consent-nextjs/app/oauth/consent/page.tsx","content":"import { OAuthConsent } from '@/registry/default/blocks/oauth-consent/components/oauth-consent'\n\nexport default async function ConsentPage({\n searchParams,\n}: {\n searchParams: Promise<{ authorization_id?: string }>\n}) {\n const { authorization_id } = await searchParams\n\n return (\n

\n \n

\n )\n}\n","type":"registry:page","target":"app/oauth/consent/page.tsx"},{"path":"registry/default/clients/nextjs/lib/supabase/client.ts","content":"import { createBrowserClient } from '@supabase/ssr'\n\nexport function createClient() {\n return createBrowserClient(\n process.env.NEXT_PUBLIC_SUPABASE_URL!,\n process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY!\n )\n}\n","type":"registry:lib"},{"path":"registry/default/clients/nextjs/lib/supabase/middleware.ts","content":"$54","type":"registry:lib"},{"path":"registry/default/clients/nextjs/lib/supabase/server.ts","content":"import { createServerClient } from '@supabase/ssr'\nimport { cookies } from 'next/headers'\n\n/**\n * If using Fluid compute: Don't put this client in a global variable. Always create a new client within each\n * function when using it.\n */\nexport async function createClient() {\n const cookieStore = await cookies()\n\n return createServerClient(\n process.env.NEXT_PUBLIC_SUPABASE_URL!,\n process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY!,\n {\n cookies: {\n getAll() {\n return cookieStore.getAll()\n },\n setAll(cookiesToSet) {\n try {\n cookiesToSet.forEach(({ name, value, options }) =>\n cookieStore.set(name, value, options)\n )\n } catch {\n // The `setAll` method was called from a Server Component.\n // This can be ignored if you have middleware refreshing\n // user sessions.\n }\n },\n },\n }\n )\n}\n","type":"registry:lib"}],"className":"h-[70svh] min-h-80"}]]}]