@sigauth/next

SigAuth integration for Next.js applications. This package provides a wrapper around @sigauth/core to simplify authentication and authorization in Next.js Server Components, API Routes, and Middleware.

Configuration

First, define your SigAuth options. It is recommended to do this in a shared constants file or a configuration module.

// utils/constants.ts
import { SigAuthOptions } from '@sigauth/core';

export const SIGAUTH_OPTIONS: SigAuthOptions = {
    appId: 'your-app-id',
    authServerUrl: 'https://auth.yourdomain.com',
    clientId: 'your-client-id',
    // ... other options
};

Usage

Initialization

The SigAuthNextWrapper is a singleton. You should initialize it once (recommended in root layout), typically in a helper function or when you first use it.

// lib/auth.ts
import { SigAuthNextWrapper } from '@sigauth/next';

export async function checkAuth() {
    return await SigAuthNextWrapper.getInstance().checkAuthentication();
}

Server Components (App Router)

Protect your Server Components by calling the check function. This will handle token validation, refreshing, and redirection to the login page if necessary.

import { checkAuth } from '@/lib/auth'; // Your helper
import { PermissionBuilder } from '@sigauth/next';

export default async function ProtectedPage() {
    const { user, sigauth } = await checkAuth("<your route>");

    // Check permissions
    const hasPermission = await sigauth?.hasPermission(
        new PermissionBuilder('view', 'your-app-id').withAssetId(123).build()
    );

    return (
        <div>
            <h1>Welcome, {user?.name}</h1>
            {hasPermission && <p>You can view this content.</p>}
        </div>
    );
}

Auth Callback Route (App Router)

Set up a route handler to handle the OIDC callback code exchange.

// app/api/sigauth/oidc/auth/route.ts
import { SigAuthNextWrapper } from '@sigauth/next';
import { SIGAUTH_OPTIONS } from '@/utils/constants';
import { NextRequest } from 'next/server';

export async function GET(request: NextRequest) {
    const wrapper = SigAuthNextWrapper.getInstance(SIGAUTH_OPTIONS);
    return wrapper.sigAuthExchange(request.url);
}

API Routes

In the App Router they share the same logic meaning you can use the checkAuthenticate() method the same way as before.

import { SIGAUTH_OPTIONS } from '@/utils/constants';
import { SigAuthNextWrapper } from '@sigauth/next';
import { NextRequest, NextResponse } from 'next/server';

export async function GET(req: NextRequest) {
    const result = await SigAuthNextWrapper.getInstance(SIGAUTH_OPTIONS).checkAuthentication('/api/example');
    if (result.user) {
        return NextResponse.json({ message: `Hello, ${result.user.name}! You are authenticated.` });
    } else {
        return NextResponse.json({ message: 'Hello, guest! You are not authenticated.' }, { status: 401 });
    }
}

SigAuthNextWrapper

• static getInstance(opts?: SigAuthOptions): Returns the singleton instance. Options are required on the first call.
• checkAuthenticationFromServer(): Authenticates in Server Components. Handles redirects and cookie setting (via next/headers and next/cookies).
• checkAuthenticationFromApi(req, res): Authenticates in Pages Router API routes.
• sigAuthExchange(url): Helper to exchange an auth code for tokens and set cookies.
• getSigAuthVerifier(): Returns the underlying SigauthVerifier instance from @sigauth/core.