diff --git a/package.json b/package.json index e2d6951..a0ee324 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@propelauth/nextjs", - "version": "0.3.15", + "version": "0.3.16", "exports": { "./server": { "browser": "./dist/server/index.mjs", diff --git a/src/server/app-router.ts b/src/server/app-router.ts index 4eb471b..5bc23bf 100644 --- a/src/server/app-router.ts +++ b/src/server/app-router.ts @@ -556,25 +556,33 @@ export function getRouteHandlers(args?: RouteHandlerArgs) { } } - async function frontendApisRouteHandler(req: NextRequest, slug?: string) { + async function frontendApisRouteHandler(req: NextRequest, slug: string) { const refreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value + // Kept as a precaution + if (!slug) { + return new Response(null, { status: 404 }) + } + const authUrlOrigin = getAuthUrlOrigin() const url = `${authUrlOrigin}/api/fe/v3/${slug}` const xCsrfToken = req.headers.get('X-CSRF-Token') const contentType = req.headers.get('Content-Type') - if (!refreshToken || !slug || !xCsrfToken || !contentType) { - return new Response(null, { status: 401 }) + const headers: HeadersInit = {} + if (contentType) { + headers['Content-Type'] = contentType + } + if (xCsrfToken) { + headers['X-CSRF-Token'] = xCsrfToken + } + if (refreshToken) { + headers['cookie'] = `refresh_token=${refreshToken}` } const request: RequestInit = { method: req.method, - headers: { - 'Content-Type': contentType, - 'X-CSRF-Token': xCsrfToken, - cookie: `refresh_token=${refreshToken}`, - }, + headers, } if (req.body) {