mirror of https://github.com/stack-auth/stack.git synced 2026-07-20 21:29:36 +08:00

开源的用户管理解决方案，自带前端组件和管理后台。

Go to file

Mantra ae09be9c66 refactor(backend): remove Next.js compat shims, use standard Web APIs (#1652 ) ## What Removes the Next.js compatibility shim layer that the ElysiaJS backend migration (#1630) introduced, replacing it with standard Web APIs and de-aliased local runtime helpers. Addresses N2D4's review note on #1630: > i think we should create a followup PR which cleans these up and uses the elysia methods directly — so we don't need a nextjs compat layer forever Stacked on `migrate-backend-to-elysiajs`. ## Changes `next/server` → standard Web APIs (eliminated) - `NextRequest` → `Request`, `NextResponse.json()` → `Response.json()`, `new NextResponse(...)` → `new Response(...)`, `req.nextUrl` → `new URL(req.url)` - Hot path (`smart-route-handler`) computes `const requestUrl = new URL(req.url)` once - Deleted `lib/next-compat/server.tsx`; rewrote `server/next-request-shim.ts` → `server/backend-request.ts` (`createBackendRequest`, returns a plain `Request`) `next/headers` + `next/navigation` → `lib/runtime/` (de-aliased) - `git mv`'d the real runtime helpers (`headers`, `navigation`, `request-context`) out of `lib/next-compat/` into `lib/runtime/`, repointing all consumers to `@/lib/runtime/` - The cookie/header/redirect mechanism (AsyncLocalStorage + thrown redirect errors, driven by `app.ts`) is unchanged — it was only named* after Next, never actually Next Config + cleanup - Dropped the `next/` path aliases from `tsconfig.json`, `vitest.config.ts`, `tsdown.config.ts` (removed `nextCompatPlugin`, the alias map, and the `next` bundling special-case) - Deleted `fetch.d.ts` and removed the no-op `next: { revalidate }` fetch option in `changelog/route.tsx` (caching never worked outside the Next runtime) - Converted the unreferenced `proxy.tsx` so it still compiles (it's dead code superseded by `server/middleware.ts` — deletion candidate, left out of this PR) No `next/` imports remain in the backend. ## Verification - `tsc --noEmit` — passes (exit 0) - `eslint` on all changed files — clean ## Notes / not in scope - This removes the *`next/` façade*. It keeps the underlying ALS-based request-context mechanism rather than threading Elysia's native context (`set.cookie`, `set.redirect`) into every handler — that's a much larger change touching handler signatures across the whole API surface. - One internal redirect digest string is still `"NEXT_REDIRECT"` (matched in both `navigation.tsx` and `app.ts`); renamable but cosmetic. <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Remove the `next/` compatibility layer and switch the backend to standard Web APIs. This simplifies handlers and config while keeping the ALS request context and redirect behavior unchanged. - Refactors - Replaced `NextRequest`/`NextResponse` and `req.nextUrl` with `Request`/`Response` and `new URL(req.url)` across handlers, proxies, health/unsubscribe routes, and IDP endpoints. - Moved runtime helpers to `@/lib/runtime/` (`headers`, `navigation`, `request-context`) and updated imports. - Added `server/backend-request.ts` to build backend `Request`s with merged headers; removed `server/next-request-shim.ts` and `lib/next-compat/server.tsx`. - Updated proxy rewrite to set `x-middleware-rewrite`; IDP routes now return `Response` directly with 307/308 mapping. - Removed the `next:{revalidate}` fetch option; deleted `lib/next-compat/fetch.d.ts`. - Dropped `next/` aliases from `tsconfig`, `tsdown`, and `vitest`; route registry/types now use `Request`. - Migration - Import from `@/lib/runtime/headers` and `@/lib/runtime/navigation` instead of `next/headers` and `next/navigation`. - Route handlers should accept `Request` and use `new URL(req.url)` for URL parsing. <sup>Written for commit `b4a534ff36`. Summary will update on new commits.</sup> <a href="https://cubic.dev/pr/hexclave/hexclave/pull/1652?utm_source=github" target="_blank" rel="noopener noreferrer" data-no-image-dialog="true"><picture><source media="(prefers-color-scheme: dark)" srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img alt="Review in cubic" src="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"></picture></a> <!-- End of auto-generated description by cubic. --> --------- Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: mantra <mantra@stack-auth.com> Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: Bilal Godil <bg2002@gmail.com>		2026-07-09 21:45:15 -07:00
.agents/skills	feat(hexclave): PR 2 — visible rebrand (Hexclave brand goes public) (#1481 )	2026-05-26 19:18:20 -07:00
.changeset	Disable changesets changelogs	2026-01-12 15:21:56 -08:00
.claude	refactor: migrate config parsing from Babel AST to jiti (#1661 )	2026-06-29 10:25:11 -07:00
.cursor	Update pre-push.md	2026-06-04 10:44:39 -07:00
.devcontainer	feat(hexclave): PR 2 — visible rebrand (Hexclave brand goes public) (#1481 )	2026-05-26 19:18:20 -07:00
.github	Migrate backend transport from Next.js to ElysiaJS (WIP) (#1630 )	2026-07-09 21:39:28 -07:00
.vscode	Make it clear there are more SDK packages	2026-06-16 10:37:58 -07:00
apps	refactor(backend): remove Next.js compat shims, use standard Web APIs (#1652 )	2026-07-09 21:45:15 -07:00
configs	Silence spurious import.meta CJS warning during pnpm run dev (#1751 )	2026-07-08 20:11:33 -07:00
docker	Migrate backend transport from Next.js to ElysiaJS (WIP) (#1630 )	2026-07-09 21:39:28 -07:00
docs	feat: add CLI Auth dashboard app (#1739 )	2026-07-08 12:34:34 -07:00
docs-mintlify	Add browser script/esm.sh no-bundler setup to the setup prompt (#1743 )	2026-07-08 12:04:34 -07:00
examples	chore: update package versions	2026-07-06 23:34:27 +00:00
packages	Migrate backend transport from Next.js to ElysiaJS (WIP) (#1630 )	2026-07-09 21:39:28 -07:00
patches	Fix MS OAuth (#457 )	2025-02-21 19:39:22 +01:00
scripts	Auto re-seed bulldozer-js from Postgres during restart-deps (#1745 )	2026-07-08 20:15:38 -07:00
sdks	chore: update package versions	2026-07-06 23:34:27 +00:00
skills/hexclave	feat(hexclave): PR 5 — internal symbol/path/package renames + brand strings (#1547 )	2026-06-03 18:57:09 -07:00
.dockerignore	feat(hexclave): PR 5 — internal symbol/path/package renames + brand strings (#1547 )	2026-06-03 18:57:09 -07:00
.gitignore	[Feat] [Refactor]: Implement Bulldozer JS (#1700 )	2026-07-02 10:09:46 -07:00
.gitmodules	Update GitHub URL	2026-05-19 10:27:53 -07:00
AGENTS.md	Update AGENTS.md	2026-06-30 11:06:32 -07:00
CHANGELOG.md	Add 6/19/26 changelog entry (#1629 )	2026-06-19 17:20:19 -07:00
CLAUDE.md	feat(hexclave): PR 2 — visible rebrand (Hexclave brand goes public) (#1481 )	2026-05-26 19:18:20 -07:00
CONTRIBUTING.md	Rename port prefix envvar	2026-05-27 18:09:52 -07:00
LICENSE	feat(hexclave): PR 2 — visible rebrand (Hexclave brand goes public) (#1481 )	2026-05-26 19:18:20 -07:00
package.json	Auto re-seed bulldozer-js from Postgres during restart-deps (#1745 )	2026-07-08 20:15:38 -07:00
pnpm-lock.yaml	Migrate backend transport from Next.js to ElysiaJS (WIP) (#1630 )	2026-07-09 21:39:28 -07:00
pnpm-workspace.yaml	[Feat] [Refactor]: Implement Bulldozer JS (#1700 )	2026-07-02 10:09:46 -07:00
README.md	Add "For AI agents" section to README (#1563 )	2026-06-05 17:01:13 -07:00
skills-lock.json	Auth app redesign (#1367 )	2026-05-19 23:03:46 -07:00
turbo.json	feat(cli): fetch RDE dashboard from GitHub Releases instead of bundling (#1682 )	2026-06-30 16:12:13 -07:00
vitest.shared.ts	Migrate backend transport from Next.js to ElysiaJS (WIP) (#1630 )	2026-07-09 21:39:28 -07:00
vitest.workspace.ts	Hosted components (#1229 )	2026-03-10 11:29:05 -07:00

README.md

Hexclave

The user infrastructure platform.

Hexclave handles everything around your users: authentication, teams, payments, emails, analytics, and much more. Start in minutes on the hosted cloud. Your data is always yours to export and self-host.

Website · Docs · Dashboard · Discord

Where Hexclave fits in the infrastructure stack

Get started

Setting up Hexclave is one prompt. Paste this into your coding agent of choice:

Read skill.hexclave.com and help me setup hexclave in this project

For AI agents

If you're an AI coding agent, use your web fetch tool or curl the skill documentation for up-to-date integration instructions:

curl -sSL "https://skill.hexclave.com?question=<your-question>&context=<your-context>"

What's included

Hexclave ships as a catalog of apps you switch on as your product needs them. Each one is built on the same user model, and new apps land regularly.

Authentication

Authentication that just works with passkeys, OAuth, and CLI auth. Drop in one component and ship the whole flow; auth methods toggle from the dashboard with no code changes needed.

Teams

Build for teams, not just users, with workspaces, email invites, and roles that actually gate the work. The workspace switcher remembers selection, invites auto sign up new users, and permissions hold up under audit.

RBAC

Permissions, sorted: roles that nest and one permission check that works the same on server or client. Define them in the dashboard, check them anywhere in your code.

API Keys

API keys without the footguns: leaked keys get auto-revoked, work for users and teams, and show the full secret only once. We never keep the plaintext after creation.

Payments

Payments without the plumbing for subscriptions, one-time charges, and usage metering with credits. Bill a person or a whole team with one model, no separate codepath.

Emails

Email that delivers and tells you so, handling transactional and marketing sends from one API. Edit templates with an AI editor, theme once, and track every open and click.

Analytics

Know your users with no data stack required, with live active user counts and session replays out of the box. Ask in plain English to build dashboards or write SQL to save queries, all with one flag enabled.

Webhooks

React to every user event in real time with signed, tamper-proof webhooks. Retries and backoff are handled for you; verify in five lines and manage endpoints from the dashboard.

Data Vault

A safe for the secrets your users hand you, locked with your secret so we never see the plaintext. Store and retrieve tokens in two lines each, server-only by design.

Launch Checklist

Run through the must-do checks before flipping to production: domain setup, callbacks locked, secrets rotated. The progress tracker keeps your team aligned so nothing critical slips through on launch day.

Contributing

Hexclave is open source, and contributions are welcome. Read CONTRIBUTING.md to get started, and say hello in Discord before picking up anything large. Found a security issue? Email security@hexclave.com.