Redirect if refresh failed (#143)

* Redirect if refresh failed

* version bump

* Put back to 302

* back to 307

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workos-inc/authkit-nextjs",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "Authentication and session helpers for using WorkOS & AuthKit with Next.js",
   "sideEffects": false,
   "type": "module",

src/session.ts

@@ -160,12 +160,22 @@ async function updateSession(
     return response;
   } catch (e) {
     if (debug) console.log('Failed to refresh. Deleting cookie and redirecting.', e);
-    const response = NextResponse.next({
-      request: { headers: newRequestHeaders },
-    });
-    response.cookies.delete(cookieName);
-    return response;
+
+    nextCookies.delete(cookieName);
   }
+
+  // If we get here, the session is invalid and the user needs to sign in again.
+  // We redirect to the current URL which will trigger the middleware again.
+  // This is outside of the above block because you cannot redirect in Next.js
+  // from inside a try/catch block.
+  return NextResponse?.redirect
+    ? NextResponse.redirect(request.url)
+    : new Response(null, {
+        status: 307,
+        headers: {
+          Location: request.url,
+        },
+      });
 }
 
 async function refreshSession(options: {

src/workos.ts

@@ -1,7 +1,7 @@
 import { WorkOS } from '@workos-inc/node';
 import { WORKOS_API_HOSTNAME, WORKOS_API_KEY, WORKOS_API_HTTPS, WORKOS_API_PORT } from './env-variables.js';
 
-export const VERSION = '0.16.0';
+export const VERSION = '0.16.1';
 
 const options = {
   apiHostname: WORKOS_API_HOSTNAME,