feat: frontend rework with stable /setup fetching and initial js-utils/@kinde-oss/kinde-auth-react impl.

package.json

@@ -103,8 +103,8 @@
     "react-dom": "^18 || ^19"
   },
   "dependencies": {
+    "@kinde-oss/kinde-auth-react": "^5.8.0",
     "@kinde-oss/kinde-typescript-sdk": "2.13.1",
-    "@kinde/js-utils": "^0.24.0",
     "@kinde/jwt-decoder": "^0.2.0",
     "@kinde/jwt-validator": "^0.4.0",
     "cookie": "^1.0.2",

src/authMiddleware/authMiddleware.ts

@@ -85,7 +85,10 @@ const handleMiddleware = async (req, options, onSuccess) => {
   const resp = NextResponse.next();
 
   // if accessToken is expired, refresh it
-  if (isTokenExpired(kindeAccessToken) || isTokenExpired(kindeIdToken)) {
+  if (
+    isTokenExpired(kindeAccessToken, 20) ||
+    isTokenExpired(kindeIdToken, 20)
+  ) {
     if (config.isDebugMode) {
       console.log("authMiddleware: access token expired, refreshing");
     }
@@ -241,17 +244,15 @@ const handleMiddleware = async (req, options, onSuccess) => {
           "authMiddleware: onSuccess callback returned a response, copying our cookies to it",
         );
       }
+
       // Copy our cookies to their response
       resp.cookies.getAll().forEach((cookie) => {
         callbackResult.cookies.set(cookie.name, cookie.value, {
           ...cookie,
         });
       });
 
-      // Copy any headers we set (if any) to their response
-      resp.headers.forEach((value, key) => {
-        callbackResult.headers.set(key, value);
-      });
+      copyCookiesToRequest(req, callbackResult);
 
       return callbackResult;
     }

src/components/PortalLink.tsx

@@ -1,6 +1,6 @@
 import React from "react";
 import { config, routes } from "../config/index";
-import { GeneratePortalUrlParams } from "@kinde/js-utils";
+import { GeneratePortalUrlParams } from "@kinde-oss/kinde-auth-react/utils";
 
 export interface PortalLinkProps
   extends React.AnchorHTMLAttributes<HTMLAnchorElement>,

src/config/index.ts

@@ -31,7 +31,9 @@ const initialState = {
 
 const SESSION_PREFIX = "pkce-verifier";
 
-const KINDE_SITE_URL = removeTrailingSlash(process.env.KINDE_SITE_URL);
+const KINDE_SITE_URL = removeTrailingSlash(
+  process.env.KINDE_SITE_URL || process.env.NEXT_PUBLIC_KINDE_SITE_URL,
+);
 
 const KINDE_POST_LOGIN_ALLOWED_URL_REGEX =
   process.env.KINDE_POST_LOGIN_ALLOWED_URL_REGEX;
@@ -49,8 +51,11 @@ const KINDE_POST_LOGOUT_REDIRECT_URL = removeTrailingSlash(
   process.env.KINDE_POST_LOGOUT_REDIRECT_URL,
 );
 
-const KINDE_ISSUER_URL = removeTrailingSlash(process.env.KINDE_ISSUER_URL);
-const KINDE_CLIENT_ID = process.env.KINDE_CLIENT_ID;
+const KINDE_ISSUER_URL = removeTrailingSlash(
+  process.env.KINDE_ISSUER_URL || process.env.NEXT_PUBLIC_KINDE_ISSUER_URL,
+);
+const KINDE_CLIENT_ID =
+  process.env.KINDE_CLIENT_ID || process.env.NEXT_PUBLIC_KINDE_CLIENT_ID;
 const KINDE_CLIENT_SECRET = process.env.KINDE_CLIENT_SECRET;
 const KINDE_AUDIENCE = process.env.KINDE_AUDIENCE;
 const KINDE_COOKIE_DOMAIN = removeTrailingSlash(