Web App Integration

// Redirect mode (navigates to sign-in page)
<SignInButton mode="redirect" redirectUrl="/auth/sign-in">
  Sign in
</SignInButton>

// Modal mode (opens sign-in form in overlay)
<SignInButton
  mode="modal"
  afterSignInUrl="/dashboard"
  onSuccess={(user) => console.log('Signed in:', user)}
  appearance={{ variables: { colorPrimary: '#6366f1' } }}
>
  Sign in
</SignInButton>

<UserButton
  afterSignOutUrl="/"          // Where to go after sign-out
  appearance={{ variables: { colorPrimary: '#6366f1' } }}
/>

<SetPassword
  redirectTo="/dashboard"
  onSuccess={(user) => {}}
  onError={(error) => {}}
/>

const { checkAccess } = useRevnuAuth();

// Check single product
const hasPro = checkAccess("prod_abc123");

// Check multiple products (returns true if ANY match)
const hasAnyPlan = checkAccess(["prod_basic", "prod_pro"]);

import { useUser, useSession, useAccess, useAuthActions } from '@revnu/auth';

// Get just the user
const user = useUser();

// Get session state with loading
const { user, isLoading, isAuthenticated } = useSession();

// Check access directly (returns false while loading)
const hasPro = useAccess("prod_abc123");

// Get auth actions only
const { signIn, signOut, refreshSession } = useAuthActions();

// app/dashboard/page.tsx
import { getUser, checkAccess } from '@revnu/auth/server';
import { redirect } from 'next/navigation';

const PRODUCT_ID = "your-product-id";

export default async function Dashboard() {
  const user = await getUser();
  if (!user) redirect('/auth/sign-in');

  const hasPro = await checkAccess(PRODUCT_ID);

  return (
    <div>
      <h1>Welcome, {user.name || user.email}!</h1>
      {hasPro ? <ProFeatures /> : <UpgradePrompt />}
    </div>
  );
}

import { requireAuth, requireAccess } from '@revnu/auth/server';

// Redirects to /auth/sign-in if not authenticated
const user = await requireAuth();

// Redirects to /auth/sign-in if no access to product
const user = await requireAccess(PRODUCT_ID);

// Custom redirect URL
const user = await requireAuth('/login');
const user = await requireAccess(PRODUCT_ID, '/upgrade');

import { Hono } from 'hono';
import { revnuMiddleware, getAuth, requireAuth, requireProductAccess } from '@revnu/auth/hono';

const app = new Hono();
app.use('*', revnuMiddleware());

// Public — auth available but not required
app.get('/', (c) => {
  const auth = getAuth(c);
  return c.json({ user: auth?.user ?? null });
});

// Protected — 401 if not signed in
app.get('/api/profile', requireAuth(), (c) => {
  return c.json({ user: getAuth(c)!.user });
});

// Product-gated — 403 if no access
app.get('/api/premium', requireProductAccess("prod_abc123"), (c) => {
  return c.json({ data: 'Premium content' });
});

// app/api/webhooks/revnu/route.ts
import crypto from "crypto";
import { NextResponse } from "next/server";

function verifySignature(payload: string, signature: string, secret: string): boolean {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(payload)
    .digest("hex");
  return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
}

export async function POST(request: Request) {
  const payload = await request.text();
  const signature = request.headers.get("x-rev-signature") ?? "";

  if (!verifySignature(payload, signature, process.env.REV_WEBHOOK_SECRET!)) {
    return NextResponse.json({ error: "Invalid signature" }, { status: 401 });
  }

  const event = JSON.parse(payload);

  switch (event.event) {
    case "purchase.completed":
      // Sync to your database, send welcome email, etc.
      break;
    case "purchase.cancelled":
      // Update your records
      break;
    case "payment.failed":
      // Notify the user
      break;
  }

  return NextResponse.json({ received: true });
}

# For webhooks (optional - only if using webhooks)
REV_WEBHOOK_SECRET=whsec_your_webhook_secret