Rename MayRLabsAuthError to AuthError

Rename the legacy MayRLabsAuthError class to AuthError and update all usages across the repo. Propagated changes to errors, core/base, core/client, and tests to throw/check AuthError instead of the old name. Updated @mayrlabs/auth and @mayrlabs/auth-nextjs package versions to 0.5.1, adjusted auth-nextjs exports to re-export AuthError, related payload types, and utility functions (generateCodeChallenge, generateCodeVerifier, generateRandomString). Changelogs were updated to reflect the rename and the new patch release.

Author: YoungMayor

packages/auth-nextjs/CHANGELOG.md

@@ -1,12 +1,25 @@
 # Changelog
 
+## [0.5.1] - 2026-04-10
+
+### Breaking Changes
+
+- Exported `AuthError` from `@mayrlabs/auth`
+- Exported `generateCodeChallenge`, `generateCodeVerifier` and `generateRandomString` util functions from `@mayrlabs/auth`
+
+### Fixes
+
+Fixed exports of `AuthErrorPayload`, `AuthMachinePayload`, `AuthUserPayload` from `@mayrlabs/auth`
+
 ## [0.5.0] - 2026-04-10
 
 ### ⚠️ Breaking Changes
+
 - `redirectToLogin()` no longer requires the `NextRequest` parameter as it uses absolute URL redirection.
 - `getUserOrRedirect` and `AuthProvider` now redirect to the local `redirects.error` path (default `/login`) instead of absolute SSO URLs in server context.
 
 ### Features
+
 - **CSRF Protection**: Added robust state-parameter verification for all SSO flows using `httpOnly` cookies (5-minute expiry).
 - **Security Hardening**: The state cookie is now immediately deleted after consumption in `handleCallback` to maximize security.
 - **Configurable State Key**: Added `MAYRLABS_AUTH_STATE_KEY` env variable and `cookie.stateKey` option to customize the CSRF state cookie name.
@@ -19,6 +32,7 @@
 ## [0.4.2] - 2026-04-08
 
 ### Breaking Changes
+
 - Updated session key defaults to prevent collision between Client and Issuer sessions.
 - Default Client key: `mayrlabs-client-session`
 - Default Issuer key: `mayrlabs-issuer-session`

packages/auth-nextjs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mayrlabs/auth-nextjs",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "The official Next.js App Router integration for @mayrlabs/auth featuring Middleware guards, Server Actions utilities, and React Context bindings.",
   "keywords": [
     "nextjs",
@@ -116,7 +116,7 @@
     "react-dom": "^18.0.0 || ^19.0.0 || ^20.0.0"
   },
   "dependencies": {
-    "@mayrlabs/auth": "^0.5.0",
+    "@mayrlabs/auth": "^0.5.1",
     "@t3-oss/env-nextjs": "^0.12.0",
     "zod": "^3.24.2"
   },

packages/auth-nextjs/src/index.tsx

@@ -1,15 +1,18 @@
 export {
+  AuthError,
+  type AuthErrorPayload,
+  type AuthMachinePayload,
+  type AuthUserPayload,
   BaseAuthSetup,
   ClientAuthSetup,
   type ClientConfig,
   type ClientConfigInput,
+  generateCodeChallenge,
+  generateCodeVerifier,
+  generateRandomString,
   IssuerAuthSetup,
   type IssuerConfig,
   type IssuerConfigInput,
-  MayRLabsAuthError,
-  type MayRLabsAuthErrorPayload,
-  type MayRLabsAuthMachinePayload,
-  type MayRLabsAuthUserPayload,
   UnauthenticatedError,
 } from "@mayrlabs/auth";
 export * from "./client";

packages/auth/CHANGELOG.md

@@ -1,8 +1,15 @@
 # Changelog
 
+## [0.5.1] - 2026-04-10
+
+### Breaking Changes
+
+- Renamed `MayRLabsAuthError` -> `AuthError`
+
 ## [0.5.0] - 2026-04-10
 
 ### Features
+
 - **CSRF Protection**: Implemented state-parameter verification for SSO flows to prevent forgery.
 - **Node.js Compatibility**: Improved `b64url` encoding to utilize `Buffer` when available, ensuring compatibility with Next.js Server Actions and Middleware.
 - **User Model**: Renamed `MayRLabsUser` to `AuthUser` and aligned interface with the Account Center (`id`, `username`, nullable name fields).
@@ -14,6 +21,7 @@
 ## [0.4.2] - 2026-04-08
 
 ### Breaking Changes
+
 - Separated session cookie keys for client and issuer applications.
 - Updated default session key to `mayrlabs-client-session` (Client) and `mayrlabs-issuer-session` (Issuer).
 
@@ -63,7 +71,7 @@ Minor bump to ensure version sync
   - `IssuerAuthSetup`: For identity providers (signing tokens with Private JWK).
   - `ClientAuthSetup`: For consumer applications (verifying tokens with Public JWK and machine authentication).
 - **JWK Integration**: Switched to JSON Web Key (JWK) standard for key management with built-in caching for performance.
-- **Strict Typing**: Removed all `any` types and implemented exhaustive TypeScript interfaces for `MayRLabsAuthUserPayload`, `MayRLabsAuthMachinePayload`, and `MayRLabsAuthErrorPayload`.
+- **Strict Typing**: Removed all `any` types and implemented exhaustive TypeScript interfaces for `MayRLabsAuthUserPayload`, `MayRLabsAuthMachinePayload`, and `AuthErrorPayload`.
 - **Breaking Changes**: Fully removed legacy symmetric encryption utilities (`src/core/encryption.ts`).
 
 ## 0.1.2

packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mayrlabs/auth",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "A strictly typed, universal JWT and M2M authentication core library powering the MayR Labs ecosystem.",
   "keywords": [
     "auth",

packages/auth/src/core/base.test.ts

@@ -1,6 +1,8 @@
 import { Buffer } from "node:buffer";
 import { exportJWK, generateKeyPair, importJWK, SignJWT } from "jose";
 import { beforeEach, describe, expect, it, vi } from "vitest";
+import { AuthError } from "../errors";
+import { BaseAuthSetup } from "./base";
 
 vi.mock("jose", async (importOriginal) => {
   // biome-ignore lint/suspicious/noExplicitAny: Test
@@ -13,9 +15,6 @@ vi.mock("jose", async (importOriginal) => {
   };
 });
 
-import { MayRLabsAuthError } from "../errors";
-import { BaseAuthSetup } from "./base";
-
 class MockAuthSetup extends BaseAuthSetup<{
   publicKey?: string;
   issuer: string;
@@ -52,9 +51,9 @@ describe("BaseAuthSetup", () => {
         await setup.testGetKey("invalid-json", "Public");
         expect.fail("Should have thrown");
       } catch (error) {
-        expect(error).toBeInstanceOf(MayRLabsAuthError);
-        expect((error as MayRLabsAuthError).code).toBe("INVALID_PUBLIC_KEY");
-        expect((error as MayRLabsAuthError).message).toContain(
+        expect(error).toBeInstanceOf(AuthError);
+        expect((error as AuthError).code).toBe("INVALID_PUBLIC_KEY");
+        expect((error as AuthError).message).toContain(
           "Failed to import Public JWK",
         );
       }
@@ -64,7 +63,7 @@ describe("BaseAuthSetup", () => {
       const setup = new MockAuthSetup({ publicKey: publicJWK, issuer: ISSUER });
       await expect(
         setup.testGetKey(JSON.stringify({ kty: "oct", k: "..." }), "Public"),
-      ).rejects.toThrow(MayRLabsAuthError);
+      ).rejects.toThrow(AuthError);
     });
   });
 

packages/auth/src/core/base.ts

@@ -5,7 +5,7 @@ import {
   type JWTVerifyGetKey,
   jwtVerify,
 } from "jose";
-import { MayRLabsAuthError } from "../errors";
+import { AuthError } from "../errors";
 import type {
   AuthErrorPayload,
   AuthMachinePayload,
@@ -37,7 +37,7 @@ export abstract class BaseAuthSetup<
     try {
       return (await importJWK(JSON.parse(keyString), "PS256")) as CryptoKey;
     } catch (error) {
-      throw new MayRLabsAuthError(
+      throw new AuthError(
         `Failed to import ${keyType} JWK: ${error instanceof Error ? error.message : "Unknown error"}`,
         `INVALID_${keyType.toUpperCase()}_KEY`,
       );
@@ -54,7 +54,7 @@ export abstract class BaseAuthSetup<
     }
 
     if (!this.config.publicKey) {
-      throw new MayRLabsAuthError(
+      throw new AuthError(
         "Local public key missing and remotePublicKey not enabled.",
         "MISSING_PUBLIC_KEY",
       );
@@ -84,7 +84,7 @@ export abstract class BaseAuthSetup<
 
       return payload as ResponseT;
     } catch (error) {
-      if (error instanceof MayRLabsAuthError) throw error;
+      if (error instanceof AuthError) throw error;
 
       return null;
     }

packages/auth/src/core/client.ts

@@ -1,4 +1,4 @@
-import { MayRLabsAuthError } from "../errors";
+import { AuthError } from "../errors";
 import type {
   AuthErrorPayload,
   AuthUserPayload,
@@ -48,7 +48,7 @@ export class ClientAuthSetup extends BaseAuthSetup<ClientConfig> {
    *
    * @returns A promise that resolves to the machine authentication token.
    *
-   * @throws {MayRLabsAuthError} If authentication fails or network error occurs.
+   * @throws {AuthError} If authentication fails or network error occurs.
    */
   async authenticateMachine(): Promise<string> {
     try {
@@ -70,7 +70,7 @@ export class ClientAuthSetup extends BaseAuthSetup<ClientConfig> {
           code?: string;
         };
 
-        throw new MayRLabsAuthError(
+        throw new AuthError(
           errorData.message || "Failed to authenticate machine",
           errorData.code || "MACHINE_AUTH_FAILED",
         );
@@ -80,9 +80,9 @@ export class ClientAuthSetup extends BaseAuthSetup<ClientConfig> {
 
       return data.token;
     } catch (error) {
-      if (error instanceof MayRLabsAuthError) throw error;
+      if (error instanceof AuthError) throw error;
 
-      throw new MayRLabsAuthError(
+      throw new AuthError(
         `Machine authentication network error: ${error instanceof Error ? error.message : "Unknown error"}`,
         "MACHINE_AUTH_NETWORK_ERROR",
       );

packages/auth/src/errors.ts

@@ -1,14 +1,14 @@
-export class MayRLabsAuthError extends Error {
+export class AuthError extends Error {
   constructor(
     message: string,
     public readonly code: string = "AUTH_ERROR",
   ) {
     super(message);
-    this.name = "MayRLabsAuthError";
+    this.name = "AuthError";
   }
 }
 
-export class UnauthenticatedError extends MayRLabsAuthError {
+export class UnauthenticatedError extends AuthError {
   constructor(message: string = "User is not authenticated.") {
     super(message, "UNAUTHENTICATED");
     this.name = "UnauthenticatedError";